Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: RRI6r9v42W3CgCTqNh0B2xmjWfvHxM8Aa+nugptqwXA=
Subject key identifier: 32:C9:0E:12:C9:56:41:C5:E8:6B:25:3B:FB:7F:9C:51:15:1C:E6:39
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 0194BCAA253F010688F17D94ABB5443A0609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 0250
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: hBSbPtEx/WExnpOPnFK9qLYZSznznKftSmz+TCN+99Y=)
2: L9TmHTRJ4KmbROihaZqVw4CH0R4.roa (hash: fJF5ITsoVPcI+16TtpbepHN9ZUSlaxu/fL62paN4YkU=)
3: epS9uhPYBS4XHgZYHUSjyRaPT-8.roa (hash: yIRFJuAs5Q1gEW1rNp50YuIW1vM7yb2oOp7wzJTUTIc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:25:3f:01:06:88:f1:7d:94:ab:b5:44:3a:06:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=32c90e12c95641c5e86b253bfb7f9c51151ce639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:38:22:5f:d7:12:2f:63:66:d9:00:0b:1f:d9:
fb:fd:09:91:68:35:4d:59:95:72:ba:18:39:3d:90:
3b:43:b0:24:ff:d6:55:54:9e:41:31:89:b7:70:23:
14:de:4f:20:b1:db:0d:de:32:cc:5b:f1:ca:2a:e8:
43:c0:45:cd:f4:70:29:8f:bc:f4:3f:52:4a:0e:bf:
1c:3e:f5:cd:56:41:a1:04:ef:78:f5:c5:fd:3c:a3:
05:ab:01:18:86:12:2d:74:7e:68:0f:fd:c1:4e:56:
05:80:f4:31:a3:58:73:09:b2:14:f1:69:6a:e4:be:
4c:7e:74:e1:da:ae:83:07:14:29:04:df:36:a7:6e:
9d:48:29:17:9e:93:a8:fe:c7:bc:df:a7:c3:37:11:
36:99:04:ad:ee:3b:43:60:08:8e:2b:23:e3:f2:08:
6b:68:f9:d3:1d:be:e3:5a:66:9c:cd:ef:16:fe:70:
27:84:d8:fb:bf:8e:17:5d:54:38:a2:3b:60:b5:bb:
f9:fe:f0:fc:54:16:09:5e:65:cb:f0:cb:81:80:6e:
77:bd:79:05:00:30:c5:24:33:5c:14:41:47:a2:3a:
a0:12:91:79:4c:7f:61:5e:6f:42:d5:2d:c7:e3:45:
cd:a3:e9:bc:b9:2b:89:0a:13:f1:56:a1:31:2e:75:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C9:0E:12:C9:56:41:C5:E8:6B:25:3B:FB:7F:9C:51:15:1C:E6:39
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b5:4b:20:06:9a:4f:0a:50:e0:ce:c1:4a:cc:03:f4:bf:e2:
94:c0:01:a4:39:2a:ff:03:5e:2a:0e:11:dd:33:c4:07:4e:f7:
1d:2e:90:9d:0e:ea:fe:a3:d1:7f:0c:50:24:a6:b3:5d:26:ad:
9f:68:7a:74:25:58:35:f9:9d:ec:69:5c:b5:10:60:b4:6d:25:
e2:b1:15:ed:9a:1e:ad:92:e6:da:2f:02:fe:ef:21:9c:c6:70:
ff:67:cc:ab:49:43:53:60:ee:a6:bd:e5:90:65:fe:83:25:e8:
ee:7f:00:85:0f:67:ed:82:ff:50:62:06:34:9a:20:e6:bb:d6:
d0:0d:fd:cf:19:df:63:6d:db:a6:ed:d5:47:13:cd:c3:b4:26:
0f:fc:19:bf:93:29:fe:fa:3d:81:3c:aa:c0:c8:b8:62:c1:e4:
0b:eb:a6:b3:6d:49:32:26:de:d4:38:4e:7f:1f:07:9e:33:20:
d0:ca:b5:9c:54:33:d0:df:05:52:64:3a:17:33:71:dd:16:9c:
0c:36:05:e7:88:47:3b:b2:b9:c2:00:de:de:28:82:c8:84:b4:
30:12:6c:29:7c:a6:0c:73:b8:f0:b0:8c:34:8a:b3:ce:dd:62:
62:85:0b:75:17:73:0e:2f:ee:aa:35:47:d5:25:15:11:35:8e:
0b:8a:4e:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qiU/AQaI8X2Uq7VEOgYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDJiYzNlMzk3Mjg5Y2U5YzNhYTAyZTE1NmUyMGMwM2Q0
ZDczNDIwHhcNMjUwMTMxMTQwMDU0WhcNMjUwMjAxMTQwMDU0WjAzMTEwLwYDVQQD
EygzMmM5MGUxMmM5NTY0MWM1ZTg2YjI1M2JmYjdmOWM1MTE1MWNlNjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjgiX9cSL2Nm2QALH9n7/QmRaDVN
WZVyuhg5PZA7Q7Ak/9ZVVJ5BMYm3cCMU3k8gsdsN3jLMW/HKKuhDwEXN9HApj7z0
P1JKDr8cPvXNVkGhBO949cX9PKMFqwEYhhItdH5oD/3BTlYFgPQxo1hzCbIU8Wlq
5L5MfnTh2q6DBxQpBN82p26dSCkXnpOo/se836fDNxE2mQSt7jtDYAiOKyPj8ghr
aPnTHb7jWmacze8W/nAnhNj7v44XXVQ4ojtgtbv5/vD8VBYJXmXL8MuBgG53vXkF
ADDFJDNcFEFHojqgEpF5TH9hXm9C1S3H40XNo+m8uSuJChPxVqExLnVziwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLJDhLJVkHF6GslO/t/nFEVHOY5MB8GA1UdIwQY
MBaAFAjSvD45conOnDqgLhVuIMA9TXNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUt
MmUwZWI0ZjQ2ZmE0LzEvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUtMmUwZWI0ZjQ2ZmE0
LzEvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7VLIAaa
TwpQ4M7BSswD9L/ilMABpDkq/wNeKg4R3TPEB073HS6QnQ7q/qPRfwxQJKazXSat
n2h6dCVYNfmd7GlctRBgtG0l4rEV7ZoerZLm2i8C/u8hnMZw/2fMq0lDU2Dupr3l
kGX+gyXo7n8AhQ9n7YL/UGIGNJog5rvW0A39zxnfY23bpu3VRxPNw7QmD/wZv5Mp
/vo9gTyqwMi4YsHkC+ums21JMibe1DhOfx8HnjMg0Mq1nFQz0N8FUmQ6FzNx3Rac
DDYF54hHO7K5wgDe3iiCyIS0MBJsKXymDHO48LCMNIqzzt1iYoULdRdzDi/uqjVH
1SUVETWOC4pOyA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:29 2025 by rpki-client