Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
File: dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft (raw, json)
Hash identifier: pTemPQMpoz9oseS3DEln+i5xAwwGXCt3+iQP21Hz9ss=
Subject key identifier: 08:B8:3C:4D:03:49:0C:85:F9:54:06:BE:1B:8E:A4:67:35:E8:E9:C5
Authority key identifier: 75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
Certificate issuer: /CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Certificate serial: 0194BD8578FE8DFAF7286A4992EBD0537B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
Manifest number: 0145
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: 9pwkvVGUxZHUtwNlu3Y83Nxaz_8.roa (hash: wGfSTyvkpA3QffCb7EADqonJa2uikcNI7XZWM9G88mE=)
2: dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl (hash: UKc8G8OnN95YsQYXq1SiwCzDwzKLBm02R21ZMdDkqt4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:78:fe:8d:fa:f7:28:6a:49:92:eb:d0:53:7b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=08b83c4d03490c85f95406be1b8ea46735e8e9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:c5:bb:13:f4:9e:a6:67:9b:89:7d:60:a8:
0a:6d:ab:2a:d3:45:a4:ff:b0:e6:76:3d:24:a4:d4:
e6:a6:3c:84:d9:be:41:07:d0:80:74:45:3a:d5:a6:
a6:ac:05:63:d9:7a:fd:dc:d1:06:e5:7b:d4:e0:01:
46:19:b7:14:83:84:8e:33:1f:a6:d0:2e:21:33:01:
d2:86:f6:c4:43:88:d3:e4:fe:1c:3c:18:97:d9:08:
ee:cb:7b:98:28:df:4f:c4:63:75:1d:59:72:f3:ef:
48:94:07:fc:53:c4:c1:1d:c4:c2:e6:68:29:eb:ea:
d5:46:ad:e8:db:ba:3c:34:fb:f2:9d:fb:c4:53:3d:
d6:8e:59:29:86:93:77:37:fb:06:1d:ec:6c:a6:f2:
4b:25:f1:b2:b8:bf:63:e0:d5:4d:a3:b9:a7:4b:41:
89:a6:6f:3d:cc:ae:b8:64:62:0f:5c:1b:0c:4e:c2:
d9:d1:13:8d:5f:e3:15:b3:38:1c:f5:1e:2a:49:ae:
0e:61:0a:88:bd:c8:a0:de:8a:8b:01:66:56:d8:77:
0d:48:69:54:0d:93:28:73:a3:ed:11:5c:84:a8:b2:
80:bf:ed:86:75:10:59:a2:17:6b:9e:f6:09:dc:38:
59:39:1e:79:2c:e5:ab:f4:c9:68:f5:27:c0:f7:13:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B8:3C:4D:03:49:0C:85:F9:54:06:BE:1B:8E:A4:67:35:E8:E9:C5
X509v3 Authority Key Identifier:
keyid:75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:64:ff:4f:eb:d3:ee:e0:aa:d9:05:cc:a5:57:f8:ff:05:7c:
d1:28:8d:84:85:93:31:4e:99:07:2f:4f:73:33:a0:2b:11:9e:
7e:c0:fc:ee:b9:92:12:cd:68:07:11:77:7a:1b:fb:71:b1:3e:
77:e1:67:64:d9:d3:63:7f:1a:87:44:71:9c:1d:2a:d9:9c:32:
6b:56:48:f3:ee:8b:c7:91:0d:7a:2b:63:1e:d6:77:2c:0d:78:
8e:ae:01:63:40:cd:73:1d:a6:d5:d7:44:9a:f7:a1:bd:e9:b8:
82:82:46:37:48:8a:d3:63:95:f9:b0:3e:6e:5f:54:aa:16:d2:
6b:01:e2:51:d9:94:7b:10:58:5e:e4:9e:ff:6d:91:56:a9:85:
c9:bf:e7:80:ce:43:ed:15:2b:2d:b7:41:e1:d7:07:80:1f:9e:
03:7d:20:8c:80:03:90:6e:86:1d:d7:a9:9b:d3:93:b1:82:ad:
1c:90:39:72:f4:62:62:75:ed:13:05:4f:61:df:16:69:cf:20:
47:ce:2d:b6:bc:24:60:74:39:87:e9:7e:8f:87:0c:ad:87:97:
85:98:47:0b:51:fe:1e:23:70:fc:62:bc:8e:76:82:e9:c9:19:
5b:50:af:fe:99:e1:57:74:4a:9d:e8:57:af:9a:7a:a9:5b:ec:
f2:44:a8:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXj+jfr3KGpJkuvQU3udMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YjE4ZWYyYzRiNGY4MjQ5ZjlhNmVkYTBiMzNmMGU1N2Rh
OGE5ZGMwHhcNMjUwMTMxMTgwMDI4WhcNMjUwMjAxMTgwMDI4WjAzMTEwLwYDVQQD
EygwOGI4M2M0ZDAzNDkwYzg1Zjk1NDA2YmUxYjhlYTQ2NzM1ZThlOWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArujFuxP0nqZnm4l9YKgKbasq00Wk
/7Dmdj0kpNTmpjyE2b5BB9CAdEU61aamrAVj2Xr93NEG5XvU4AFGGbcUg4SOMx+m
0C4hMwHShvbEQ4jT5P4cPBiX2Qjuy3uYKN9PxGN1HVly8+9IlAf8U8TBHcTC5mgp
6+rVRq3o27o8NPvynfvEUz3WjlkphpN3N/sGHexspvJLJfGyuL9j4NVNo7mnS0GJ
pm89zK64ZGIPXBsMTsLZ0RONX+MVszgc9R4qSa4OYQqIvcig3oqLAWZW2HcNSGlU
DZMoc6PtEVyEqLKAv+2GdRBZohdrnvYJ3DhZOR55LOWr9Mlo9SfA9xORCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAi4PE0DSQyF+VQGvhuOpGc16OnFMB8GA1UdIwQY
MBaAFHWxjvLEtPgkn5pu2gsz8OV9qKncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84NWY4OTQtMWU1NS00YWQyLTk2MTUt
YjVlNTZlMGVjY2RlLzEvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84NWY4OTQtMWU1NS00YWQyLTk2MTUtYjVlNTZlMGVjY2Rl
LzEvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2T/T+vT
7uCq2QXMpVf4/wV80SiNhIWTMU6ZBy9PczOgKxGefsD87rmSEs1oBxF3ehv7cbE+
d+FnZNnTY38ah0RxnB0q2Zwya1ZI8+6Lx5ENeitjHtZ3LA14jq4BY0DNcx2m1ddE
mvehvem4goJGN0iK02OV+bA+bl9UqhbSawHiUdmUexBYXuSe/22RVqmFyb/ngM5D
7RUrLbdB4dcHgB+eA30gjIADkG6GHdepm9OTsYKtHJA5cvRiYnXtEwVPYd8Wac8g
R84ttrwkYHQ5h+l+j4cMrYeXhZhHC1H+HiNw/GK8jnaC6ckZW1Cv/pnhV3RKnehX
r5p6qVvs8kSoAg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:27 2025 by rpki-client