Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: Gv6EsYBHfPo/U9Lvc0HYlw/6uE55/kVBkqF9hSwzHn8=
Subject key identifier: C1:0E:42:C4:85:ED:EC:F0:06:AD:B1:46:D6:30:B9:7F:FF:64:D8:52
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 0194BD85AEC360B3E78B22E267DFB4791728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: 4ZFII5c609csszaMHNq6jhBoFRo.roa (hash: pyQ/SEzC2Sk5tb7Z3BNDW4O2mEDe4VqfOm/kuVxquBQ=)
2: 7XoxbsiH0tvuamwOaZJkHsbncU8.roa (hash: eOLDYEBs+ePiFOo04IA8xxSpoLseLj4knNzwy/AuO7c=)
3: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: vcRsV1m3V8Zqhj9jeu8ur819P3ptUSZi4u+0dPojs9c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ae:c3:60:b3:e7:8b:22:e2:67:df:b4:79:17:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=c10e42c485edecf006adb146d630b97fff64d852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:23:c2:c3:ad:da:19:9b:e7:c0:87:d7:13:
36:f5:d0:c6:22:4b:4a:1a:38:0e:8c:d3:45:1f:23:
ca:9f:a9:cb:8b:fa:22:b7:f7:cc:2b:c0:e4:20:9e:
d9:b3:a3:91:a5:bf:1d:85:e8:e4:70:a2:5d:62:0f:
54:9e:3c:26:bc:26:86:8d:a3:02:38:d1:a0:43:36:
28:3c:9e:56:68:02:4e:8d:bc:78:97:63:71:ac:18:
7d:c5:32:c7:ce:6a:3b:bb:ba:bd:ec:a3:02:51:7b:
9b:2e:d9:27:f2:f1:ba:22:16:7e:80:c8:8c:96:67:
dc:4a:e3:23:4d:9a:28:89:4f:d2:1e:b7:bd:dc:a5:
42:b7:33:63:fa:bf:b5:2a:8a:7e:06:52:7e:d0:6a:
63:b4:e2:5a:b3:8a:aa:73:7f:0e:9f:2c:0a:05:03:
fc:8b:de:93:06:07:17:6f:25:38:c9:65:bf:63:c4:
a5:91:61:27:e0:20:dd:a3:93:77:fe:4b:9d:98:e7:
3e:7f:83:d2:67:43:cb:0a:ef:95:ee:57:64:65:bc:
ba:22:30:22:f1:e6:13:15:e2:39:e3:a6:7b:79:4c:
a7:c1:f2:d6:6c:56:04:9a:5a:e0:01:72:8f:e6:5f:
cb:2e:0c:9e:9d:a6:fd:37:ea:f6:11:f7:b0:c7:99:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0E:42:C4:85:ED:EC:F0:06:AD:B1:46:D6:30:B9:7F:FF:64:D8:52
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:22:70:41:53:67:8b:2b:aa:57:9a:c9:a8:bb:3a:25:11:ce:
19:23:44:71:2a:bb:f6:d1:8e:75:5b:45:c9:16:73:78:cf:dd:
67:5e:ef:e9:22:23:50:a2:20:e5:e5:bf:6e:58:14:ab:79:cb:
51:75:2a:b9:6b:f0:51:47:33:b0:c6:66:76:7b:a3:4d:ca:a6:
cd:e4:66:68:f2:46:5c:fb:b8:f7:50:44:b1:47:91:5c:81:57:
14:48:12:d0:e6:85:fa:d8:2b:ab:f9:91:8c:3c:fa:c7:48:07:
7e:3d:11:4c:1f:82:6f:a5:96:de:f4:d3:39:3d:54:02:e4:ae:
f1:d7:28:97:e5:63:ae:e2:12:95:c3:07:9a:37:3c:45:9d:af:
f0:bc:2a:ae:ef:86:57:0f:e1:66:06:6d:4e:09:9e:f0:51:35:
43:de:6d:dd:d4:03:ef:1b:7f:d7:39:a6:88:b4:c4:35:3b:83:
4d:99:04:94:db:56:64:e0:58:07:a7:88:5f:d4:7d:9a:21:25:
b3:cd:f1:8f:40:cb:ff:4a:fc:5b:9c:fc:cb:84:04:3c:30:c9:
59:81:17:5a:10:ba:46:ac:2c:87:56:97:32:d8:6b:77:e2:4a:
4b:e6:9f:b6:da:90:f0:e8:f9:13:aa:c2:af:67:9f:95:08:20:
62:69:86:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ha7DYLPniyLiZ9+0eRcoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYjE1ZTc3YWY0ZWRkZTExMTkyYzZmZWNkNTBiMjFjZDM3
OWQ0MjEwHhcNMjUwMTMxMTgwMDQyWhcNMjUwMjAxMTgwMDQyWjAzMTEwLwYDVQQD
EyhjMTBlNDJjNDg1ZWRlY2YwMDZhZGIxNDZkNjMwYjk3ZmZmNjRkODUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQkjwsOt2hmb58CH1xM29dDGIktK
GjgOjNNFHyPKn6nLi/oit/fMK8DkIJ7Zs6ORpb8dhejkcKJdYg9UnjwmvCaGjaMC
ONGgQzYoPJ5WaAJOjbx4l2NxrBh9xTLHzmo7u7q97KMCUXubLtkn8vG6IhZ+gMiM
lmfcSuMjTZooiU/SHre93KVCtzNj+r+1Kop+BlJ+0GpjtOJas4qqc38OnywKBQP8
i96TBgcXbyU4yWW/Y8SlkWEn4CDdo5N3/kudmOc+f4PSZ0PLCu+V7ldkZby6IjAi
8eYTFeI546Z7eUynwfLWbFYEmlrgAXKP5l/LLgyenab9N+r2Efewx5lkFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEOQsSF7ezwBq2xRtYwuX//ZNhSMB8GA1UdIwQY
MBaAFPGxXnevTt3hEZLG/s1QshzTedQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUt
MTM0MGNjNWIzZDU3LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUtMTM0MGNjNWIzZDU3
LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSJwQVNn
iyuqV5rJqLs6JRHOGSNEcSq79tGOdVtFyRZzeM/dZ17v6SIjUKIg5eW/blgUq3nL
UXUquWvwUUczsMZmdnujTcqmzeRmaPJGXPu491BEsUeRXIFXFEgS0OaF+tgrq/mR
jDz6x0gHfj0RTB+Cb6WW3vTTOT1UAuSu8dcol+VjruISlcMHmjc8RZ2v8Lwqru+G
Vw/hZgZtTgme8FE1Q95t3dQD7xt/1zmmiLTENTuDTZkElNtWZOBYB6eIX9R9miEl
s83xj0DL/0r8W5z8y4QEPDDJWYEXWhC6Rqwsh1aXMthrd+JKS+afttqQ8Oj5E6rC
r2eflQggYmmG2A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:41 2025 by rpki-client