Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: a8QVLrkARuVnTpPJ40oyebZXif6HcAosMwCSwLjzj54=
Subject key identifier: 2D:67:72:17:A0:99:E0:CE:20:5F:F3:E9:58:AF:B9:9E:17:22:58:74
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 0194BC052D661DE2ED51F2769426DB5B9A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 03D5
Signing time: Fri 31 Jan 2025 11:00:43 +0000
Manifest this update: Fri 31 Jan 2025 11:00:43 +0000
Manifest next update: Sat 01 Feb 2025 11:00:43 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: JAQNGe03GP/rwj7BtAZrITH+KuCiT/ghExfGRydOJps=)
2: Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa (hash: uihaqn4cl1EUm9BC8+JYEwJFvxEP94e45YDqvyFRac4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2d:66:1d:e2:ed:51:f2:76:94:26:db:5b:9a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Jan 31 11:00:43 2025 GMT
Not After : Feb 1 11:00:43 2025 GMT
Subject: CN=2d677217a099e0ce205ff3e958afb99e17225874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:70:78:2f:18:de:6c:bb:fc:e5:b2:7a:a6:
cf:c1:0b:96:9b:b1:ee:22:37:b7:ff:79:00:dd:dd:
b6:fb:36:d3:9b:b2:43:b0:52:95:fd:b3:17:0c:d3:
62:ad:97:dc:37:dd:72:b8:4e:26:74:98:60:17:b0:
d5:1e:c1:ad:14:25:2e:2d:d9:a8:b0:b8:48:0f:1f:
41:a7:2b:4e:4f:59:db:79:7a:3b:d7:86:da:2b:9e:
e4:67:63:2c:6f:04:09:1f:d2:c9:89:7c:ad:5b:6d:
9b:fc:44:02:9c:ee:05:35:19:ce:30:fb:0c:fc:45:
8e:1a:ca:21:54:38:f2:f6:a6:7b:20:84:35:e5:c6:
77:3a:f1:18:f7:d4:6f:c1:d5:2f:c6:b1:c6:16:f8:
b0:ca:4b:2d:51:bc:d5:1a:ef:73:98:f4:8d:03:db:
f8:ee:71:7b:2f:c3:90:06:48:f0:6a:2c:3a:31:f3:
3b:68:eb:b7:79:90:e6:e0:50:9b:c1:31:b6:2e:c2:
4f:48:62:ad:2a:94:af:ce:89:97:7d:db:d0:85:a1:
b6:d7:a8:67:36:89:31:8b:da:22:a3:08:88:48:5d:
56:48:d9:21:e2:3f:e5:16:ef:b0:05:16:67:ad:7e:
8a:2a:6c:32:6e:17:95:5a:10:ae:ff:97:af:c4:f4:
de:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:67:72:17:A0:99:E0:CE:20:5F:F3:E9:58:AF:B9:9E:17:22:58:74
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b8:5c:37:bb:38:8e:a8:85:ee:6b:11:62:7e:21:79:3b:38:
9d:6f:24:b6:6f:6d:68:16:86:f1:71:4d:6d:ec:0a:b7:53:cd:
41:31:9d:09:27:26:14:ee:16:1d:c2:e7:6c:3b:08:f9:16:03:
c9:ef:18:95:f7:3c:da:02:27:b7:75:07:fc:f7:da:16:b1:c3:
59:75:f1:61:c4:31:7e:80:fc:db:25:a7:39:c5:b1:ec:6b:db:
7e:ea:b7:0f:50:8a:c7:93:05:c0:b1:19:e3:67:84:3d:0a:29:
5f:5c:45:26:8f:ae:ee:4e:b4:fc:53:db:ac:93:b6:aa:50:3d:
98:f3:cb:91:e6:fc:c3:72:1a:25:05:4e:c7:02:45:10:da:28:
41:54:33:ea:d7:df:1f:7f:21:d8:50:11:e4:40:e1:02:32:16:
1e:e2:d7:0b:a7:8b:86:51:a7:75:44:98:02:72:e3:87:d5:28:
de:d7:6d:a3:b0:87:ba:4b:a2:21:fe:f0:d4:52:79:5e:07:6a:
45:22:44:47:f4:ff:55:d4:44:ab:f0:84:61:f3:33:d6:09:56:
73:d8:a4:b3:42:e5:59:77:9f:74:5e:63:34:94:5c:a3:09:92:
c0:1e:09:f4:8d:72:a3:bc:45:56:62:db:0b:9d:2b:11:75:b3:
bf:4f:ad:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BS1mHeLtUfJ2lCbbW5pFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMmQ1ZjE3NjM2YTFmMTRlZmE4YTBlNDA5OWIzZDMzNWZm
ODRkZDMwHhcNMjUwMTMxMTEwMDQzWhcNMjUwMjAxMTEwMDQzWjAzMTEwLwYDVQQD
EygyZDY3NzIxN2EwOTllMGNlMjA1ZmYzZTk1OGFmYjk5ZTE3MjI1ODc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6NweC8Y3my7/OWyeqbPwQuWm7Hu
Ije3/3kA3d22+zbTm7JDsFKV/bMXDNNirZfcN91yuE4mdJhgF7DVHsGtFCUuLdmo
sLhIDx9BpytOT1nbeXo714baK57kZ2MsbwQJH9LJiXytW22b/EQCnO4FNRnOMPsM
/EWOGsohVDjy9qZ7IIQ15cZ3OvEY99RvwdUvxrHGFviwykstUbzVGu9zmPSNA9v4
7nF7L8OQBkjwaiw6MfM7aOu3eZDm4FCbwTG2LsJPSGKtKpSvzomXfdvQhaG216hn
Nokxi9oiowiISF1WSNkh4j/lFu+wBRZnrX6KKmwybheVWhCu/5evxPTemQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1nchegmeDOIF/z6VivuZ4XIlh0MB8GA1UdIwQY
MBaAFPItXxdjah8U76ig5AmbPTNf+E3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAt
NjExYTJhMWI4MjI0LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAtNjExYTJhMWI4MjI0
LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7hcN7s4
jqiF7msRYn4heTs4nW8ktm9taBaG8XFNbewKt1PNQTGdCScmFO4WHcLnbDsI+RYD
ye8Ylfc82gInt3UH/PfaFrHDWXXxYcQxfoD82yWnOcWx7Gvbfuq3D1CKx5MFwLEZ
42eEPQopX1xFJo+u7k60/FPbrJO2qlA9mPPLkeb8w3IaJQVOxwJFENooQVQz6tff
H38h2FAR5EDhAjIWHuLXC6eLhlGndUSYAnLjh9Uo3tdto7CHukuiIf7w1FJ5Xgdq
RSJER/T/VdREq/CEYfMz1glWc9iks0LlWXefdF5jNJRcowmSwB4J9I1yo7xFVmLb
C50rEXWzv0+tOg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:37 2025 by rpki-client