Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: CpNd2faqJLrS1JHUjcsUUzuaiKFHFlG6yyU/3ar9TM4=
Subject key identifier: 1A:3C:60:3F:94:70:B2:65:B1:2D:6F:7B:8E:33:18:69:D2:9E:2B:1D
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 0194BC04C971C0C9D6EA638D5E110DC8FF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 0CEC
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: wtBNLme2ld2N5i0d4KKzb+v/vO+5OCV49mjcyhepCYk=)
2: FSVMQ4pJCPFoKLSJXQ6SN5sd20I.roa (hash: fn+/BnxEhFcy9tBiYyHkUVxuspdk8dmiFltXF8v88aI=)
3: z4737EJ_3ChDTvC0f3ZWE0bflis.roa (hash: b8FARaIW24zG8VRRXjW12ArVyNrviLVmKsPNNCxuSlI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c9:71:c0:c9:d6:ea:63:8d:5e:11:0d:c8:ff:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=1a3c603f9470b265b12d6f7b8e331869d29e2b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:e4:60:82:ed:26:24:05:13:85:2c:84:b1:
3c:7e:05:0c:4c:6a:b0:4c:a2:26:f9:d2:88:c7:8e:
72:92:a0:d7:ef:a7:8c:69:3d:ce:a6:19:d3:cf:62:
ec:e9:9e:52:1e:6f:0a:60:ad:00:a4:bb:d4:7c:82:
da:63:20:ce:c8:17:59:ac:79:11:39:51:4d:28:c8:
c9:bf:3b:69:d5:c0:95:77:c8:27:f8:ee:4f:34:95:
b2:ee:28:3c:ac:ad:68:2e:83:88:3b:a0:cc:4c:d1:
4b:7e:ac:65:93:67:11:a5:ef:19:2e:44:6c:97:e5:
44:d9:88:c5:c6:90:2e:d0:40:e7:2f:7c:08:e3:12:
23:f8:7f:26:f3:12:4d:64:72:64:8f:d6:30:e2:33:
0a:a6:5e:d0:42:52:90:16:0a:0b:b8:f5:b0:81:c6:
df:91:dc:00:17:82:15:77:0d:d6:c6:fb:a3:27:e3:
c3:66:9c:c7:cc:5d:cf:bb:e0:0e:4a:ee:09:e4:e7:
16:e1:e7:94:d8:64:28:3c:72:89:d5:23:e6:f1:9c:
4a:f9:c0:b7:21:dc:76:e9:01:a9:1a:40:96:57:48:
84:b6:43:7f:28:4f:b2:a6:c0:ff:b3:cf:89:9c:29:
68:e6:40:df:35:9e:8d:72:27:03:c3:10:76:8f:92:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3C:60:3F:94:70:B2:65:B1:2D:6F:7B:8E:33:18:69:D2:9E:2B:1D
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:44:57:ed:5f:f4:a3:9a:53:a5:1b:a5:07:6c:f4:10:ba:15:
5f:4b:b9:98:68:9b:5b:2e:73:7c:84:1c:49:be:cd:0d:a5:2c:
b2:99:b7:bf:e5:b0:94:56:53:c3:31:fe:33:14:38:dd:3b:48:
07:f1:26:07:5d:2a:1c:db:24:89:0f:e7:fb:04:08:21:04:9a:
59:f2:05:16:90:40:72:4c:bd:b8:76:08:2a:74:8f:7e:ef:a9:
e4:13:dd:e7:10:46:3f:71:36:51:78:46:b0:88:f2:ce:c7:72:
68:b1:9e:97:72:7b:e6:6d:cd:02:d8:45:8c:15:72:cb:36:b5:
7a:5f:3a:a1:74:0b:20:a1:55:91:ca:4e:60:45:ce:02:ad:c9:
ee:ae:86:fa:16:04:88:7f:41:0d:4b:75:84:f2:e6:88:bc:e8:
2f:2a:af:8b:1a:d3:fe:81:23:1b:c7:38:83:f4:57:da:e6:b7:
c2:0f:b2:b8:bf:ff:dc:4f:b9:03:85:b2:a2:86:6c:d8:61:16:
26:32:0d:17:24:ea:bf:f8:2a:64:2d:1a:48:f5:ec:df:9f:52:
03:14:29:a1:9f:7e:39:d0:91:90:c9:c6:01:a1:6a:8e:70:f3:
29:92:bc:65:cb:1c:1a:3b:ec:d4:3e:1e:c4:e9:a8:b5:d2:43:
b1:f0:31:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BMlxwMnW6mONXhENyP9BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOGZiYTUyNjM1MTliN2MzYTIxNTVjNjk4NzgyMTc3NzZk
ZWZiYTAwHhcNMjUwMTMxMTEwMDE3WhcNMjUwMjAxMTEwMDE3WjAzMTEwLwYDVQQD
EygxYTNjNjAzZjk0NzBiMjY1YjEyZDZmN2I4ZTMzMTg2OWQyOWUyYjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCLkYILtJiQFE4UshLE8fgUMTGqw
TKIm+dKIx45ykqDX76eMaT3OphnTz2Ls6Z5SHm8KYK0ApLvUfILaYyDOyBdZrHkR
OVFNKMjJvztp1cCVd8gn+O5PNJWy7ig8rK1oLoOIO6DMTNFLfqxlk2cRpe8ZLkRs
l+VE2YjFxpAu0EDnL3wI4xIj+H8m8xJNZHJkj9Yw4jMKpl7QQlKQFgoLuPWwgcbf
kdwAF4IVdw3WxvujJ+PDZpzHzF3Pu+AOSu4J5OcW4eeU2GQoPHKJ1SPm8ZxK+cC3
Idx26QGpGkCWV0iEtkN/KE+ypsD/s8+JnClo5kDfNZ6NcicDwxB2j5LoywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBo8YD+UcLJlsS1ve44zGGnSnisdMB8GA1UdIwQY
MBaAFPCPulJjUZt8OiFVxph4IXd23vugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgt
MDY0MTNjZWVmY2UwLzEvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgtMDY0MTNjZWVmY2Uw
LzEvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0RX7V/0
o5pTpRulB2z0ELoVX0u5mGibWy5zfIQcSb7NDaUsspm3v+WwlFZTwzH+MxQ43TtI
B/EmB10qHNskiQ/n+wQIIQSaWfIFFpBAcky9uHYIKnSPfu+p5BPd5xBGP3E2UXhG
sIjyzsdyaLGel3J75m3NAthFjBVyyza1el86oXQLIKFVkcpOYEXOAq3J7q6G+hYE
iH9BDUt1hPLmiLzoLyqvixrT/oEjG8c4g/RX2ua3wg+yuL//3E+5A4WyooZs2GEW
JjINFyTqv/gqZC0aSPXs359SAxQpoZ9+OdCRkMnGAaFqjnDzKZK8ZcscGjvs1D4e
xOmotdJDsfAxzw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:10 2025 by rpki-client