Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
File: R88nFPKduANS6fMJ6i6MUoyUa9k.mft (raw, json)
Hash identifier: HScbM0yiYWWKhlRVSRVhiZ6gSVcCedACNpw9wHrllzo=
Subject key identifier: 15:8A:9D:16:5E:71:6C:6A:29:A5:5E:8E:EF:74:B7:EA:97:73:03:DB
Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Certificate serial: 0194BC3C74F8F28AAC76F6954DD7C0D476BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
Manifest number: 13EB
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: R88nFPKduANS6fMJ6i6MUoyUa9k.crl (hash: 1B/bH0SD2D9wS/d1LUR3mP3SxJhugg6LtmyMiqG2Y5E=)
2: jHbOO-v3l--J7LgIxP9_M8wQbrA.roa (hash: FeF1DOYHjXY3CVPpoNeujItbqTAw7Wp1ChNuqHrFnss=)
3: zmA_4zxXMcTORxmCgPEyljXw27c.roa (hash: 566gwzLgN6mZch94CNNtXeQSmmj7Ao7jmOLhB0MgKkk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:74:f8:f2:8a:ac:76:f6:95:4d:d7:c0:d4:76:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=158a9d165e716c6a29a55e8eef74b7ea977303db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:2d:57:ab:65:64:97:47:dc:8c:fe:e6:2a:
a1:ae:e2:f6:f9:e0:53:f3:3e:ba:0e:ee:f4:d2:0d:
29:1b:d7:60:0a:3c:c2:02:78:d0:3e:9c:ac:25:42:
44:0e:09:f9:fa:3d:40:2e:22:87:72:6a:e3:cb:e1:
7f:cc:ed:b3:1f:b2:6f:84:74:1a:b8:8b:d3:e6:ed:
15:43:e1:e9:10:6a:38:24:1b:a7:19:53:79:39:8c:
1c:6f:60:dd:9a:20:f1:43:04:2f:f5:7a:0b:99:01:
71:31:4b:58:fe:6d:3f:b8:20:ef:45:b1:90:9a:58:
0f:46:02:a8:31:44:b0:78:9c:1c:08:65:c3:01:65:
56:e7:a1:4c:27:36:a2:29:71:a0:96:91:97:9f:11:
41:59:3d:48:5d:0c:c1:b3:e3:94:ad:91:2c:a6:f8:
05:20:e0:50:ee:d8:ee:ca:59:2d:39:2d:86:c4:d5:
4e:1b:37:e8:6c:00:6a:3a:f0:8e:06:0e:3f:4e:a0:
b1:53:85:ef:1d:19:0c:4d:48:fd:6b:39:81:a8:1f:
6c:d2:bc:90:6a:6d:83:52:6d:fd:fe:ed:ec:f0:c3:
f6:bf:d2:01:3c:07:58:60:87:db:fb:72:8e:c3:ee:
c8:63:f3:24:a4:a6:ec:a8:12:74:73:1e:aa:38:58:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8A:9D:16:5E:71:6C:6A:29:A5:5E:8E:EF:74:B7:EA:97:73:03:DB
X509v3 Authority Key Identifier:
keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a3:c1:f4:06:eb:54:2d:67:e6:18:a9:ad:94:fa:56:c5:d5:
08:cc:c2:d5:7f:ad:1e:d6:d2:8e:4c:2e:d4:11:54:f9:2b:16:
43:4a:54:ff:2b:0a:a6:4b:95:18:12:4f:7f:df:91:01:41:49:
a6:c7:9b:29:4b:58:12:4d:1e:93:e8:55:37:21:5e:03:2f:1a:
93:5b:71:f5:1b:2f:fb:81:ed:ac:a1:4e:37:af:16:5a:e3:20:
aa:6e:74:2a:e6:09:4d:1d:63:21:f5:8c:44:9b:c8:0a:76:de:
1a:2f:c7:f3:37:52:8f:3e:73:df:83:7b:c1:c2:b5:68:77:f3:
62:45:e7:b0:f7:e0:bd:31:ed:65:fd:99:9e:58:9c:08:43:5f:
67:4d:c8:88:e2:f6:d8:b6:8a:aa:b3:cf:f1:27:40:d8:bf:d6:
11:81:7f:31:b2:bd:4a:27:39:54:b1:82:d9:24:b5:10:4c:1d:
bd:4b:52:9e:39:58:02:8d:71:d8:8c:4f:ad:c2:ff:63:a9:00:
c4:1a:1e:e9:c4:04:65:68:39:d7:e3:85:1e:a7:01:a8:b9:f6:
b8:e8:7f:1b:9f:d1:6f:92:e4:a5:9b:2f:a0:0b:16:af:6d:63:
88:ef:b9:9c:53:b8:ed:1e:11:4f:56:f0:ce:bf:73:5c:f7:dd:
eb:60:b5:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PHT48oqsdvaVTdfA1Ha/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Y2YyNzE0ZjI5ZGI4MDM1MmU5ZjMwOWVhMmU4YzUyOGM5
NDZiZDkwHhcNMjUwMTMxMTIwMTA2WhcNMjUwMjAxMTIwMTA2WjAzMTEwLwYDVQQD
EygxNThhOWQxNjVlNzE2YzZhMjlhNTVlOGVlZjc0YjdlYTk3NzMwM2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0QtV6tlZJdH3Iz+5iqhruL2+eBT
8z66Du700g0pG9dgCjzCAnjQPpysJUJEDgn5+j1ALiKHcmrjy+F/zO2zH7JvhHQa
uIvT5u0VQ+HpEGo4JBunGVN5OYwcb2DdmiDxQwQv9XoLmQFxMUtY/m0/uCDvRbGQ
mlgPRgKoMUSweJwcCGXDAWVW56FMJzaiKXGglpGXnxFBWT1IXQzBs+OUrZEspvgF
IOBQ7tjuylktOS2GxNVOGzfobABqOvCOBg4/TqCxU4XvHRkMTUj9azmBqB9s0ryQ
am2DUm39/u3s8MP2v9IBPAdYYIfb+3KOw+7IY/MkpKbsqBJ0cx6qOFhrOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWKnRZecWxqKaVeju90t+qXcwPbMB8GA1UdIwQY
MBaAFEfPJxTynbgDUunzCeoujFKMlGvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUt
NThhZGY3OGQ4Mjc4LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUtNThhZGY3OGQ4Mjc4
LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqPB9Abr
VC1n5hiprZT6VsXVCMzC1X+tHtbSjkwu1BFU+SsWQ0pU/ysKpkuVGBJPf9+RAUFJ
psebKUtYEk0ek+hVNyFeAy8ak1tx9Rsv+4HtrKFON68WWuMgqm50KuYJTR1jIfWM
RJvICnbeGi/H8zdSjz5z34N7wcK1aHfzYkXnsPfgvTHtZf2ZnlicCENfZ03IiOL2
2LaKqrPP8SdA2L/WEYF/MbK9Sic5VLGC2SS1EEwdvUtSnjlYAo1x2IxPrcL/Y6kA
xBoe6cQEZWg51+OFHqcBqLn2uOh/G5/Rb5LkpZsvoAsWr21jiO+5nFO47R4RT1bw
zr9zXPfd62C1tg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:53 2025 by rpki-client