Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
File: 8VCW_jOQRJyTboVwYdSmll1AijE.mft (raw, json)
Hash identifier: w77Kxwc1GMSJBKaIxTAgxAP4ZvqXXeCML4SU1LK6DSQ=
Subject key identifier: 23:15:24:20:7C:35:B3:DA:07:9A:63:B6:11:33:02:CD:F3:C2:EC:F9
Authority key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
Certificate issuer: /CN=f15096fe3390449c936e857061d4a6965d408a31
Certificate serial: 0194BD4E9943EA8A9FD65B01FDD39FC9FE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
Manifest number: 0A30
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: 8VCW_jOQRJyTboVwYdSmll1AijE.crl (hash: 9nd+6VEpopO6EhMUoTUwbSJ+u40g2X61mHq1vh7rzUk=)
2: rMoZ83VQ7iYFtJcAmlmBDs25c0s.roa (hash: 5UVFXIRMFFdYenUl6z+JEcUUQ5VhSSfJAeVRB/Ej+fc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:99:43:ea:8a:9f:d6:5b:01:fd:d3:9f:c9:fe:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15096fe3390449c936e857061d4a6965d408a31
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=231524207c35b3da079a63b6113302cdf3c2ecf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:07:5a:d2:39:1f:ee:bb:79:26:35:2d:e4:
05:73:13:bd:99:a1:63:32:51:62:c1:a8:c7:de:ec:
da:d1:99:27:5d:4a:bb:04:75:d5:43:4e:e6:e2:40:
0d:84:84:d7:95:2b:b8:32:bd:68:15:0f:4e:4f:ef:
ff:d3:8f:bf:09:1b:ea:63:46:e2:56:64:c2:9f:1f:
9b:70:e8:01:2d:7b:2e:1a:7c:48:32:04:b8:39:c2:
bb:f2:03:fb:84:24:63:b7:54:23:7f:25:68:ff:40:
a8:dd:22:69:fd:ae:61:53:0a:1b:b2:f0:9c:61:b0:
4c:27:7a:8b:7b:a8:ee:ba:86:e9:6a:ec:cf:04:fb:
3f:f3:3d:e6:2f:7a:95:35:c8:e8:96:75:ea:f1:07:
27:a7:ff:e7:d7:af:4f:0c:d1:ff:97:cc:1d:d3:43:
61:9d:69:ad:af:7d:88:ec:67:e7:6b:15:3b:c0:03:
22:25:0a:5f:a5:95:2e:25:5b:01:3e:bd:23:8a:ea:
fc:cc:e9:8d:2e:82:00:d5:ea:41:96:11:91:b3:47:
cf:94:45:88:94:cc:6a:38:5e:d0:80:44:b3:49:6b:
a6:36:ef:de:b6:a5:b2:29:80:70:72:42:54:13:cf:
20:55:ab:15:3d:b3:1a:bc:3d:9c:c5:8d:80:84:08:
49:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:15:24:20:7C:35:B3:DA:07:9A:63:B6:11:33:02:CD:F3:C2:EC:F9
X509v3 Authority Key Identifier:
keyid:F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1a:ff:cf:47:85:38:f2:72:b4:00:dd:f5:28:0f:65:ee:f6:
a5:8b:2b:10:ce:a8:d7:af:0b:31:66:3d:3b:3b:8f:04:ae:08:
8f:11:59:dc:fe:04:65:47:f7:a2:f0:9d:ed:3e:a1:17:e2:e2:
8c:3f:01:6b:21:4c:46:4e:17:00:a9:86:d7:de:41:a5:68:1f:
2d:64:6d:a9:fa:43:44:4a:de:c9:48:e0:ed:81:4a:f2:cd:47:
ef:bb:2c:38:d1:fb:02:fc:3c:ec:32:18:1a:03:ab:b3:c0:d7:
ab:e1:a2:4d:ed:88:93:54:46:08:54:e9:fa:23:07:20:f3:6c:
ba:73:25:c0:5c:8e:8f:92:c7:95:f3:31:b2:9c:db:66:4c:23:
42:f1:37:73:a6:08:c8:b7:46:ef:7e:d6:2d:dc:d7:a5:7e:fa:
3f:77:27:65:9c:58:90:c0:db:a3:72:92:46:3c:5a:e0:ad:b3:
22:d8:2f:4b:0d:31:68:1b:92:eb:33:3e:cd:8b:79:63:c5:49:
06:3a:b1:a7:d9:f6:89:05:4c:9e:d7:90:f3:58:43:5b:1c:c1:
0a:6b:a1:7c:73:6a:73:7d:00:5c:51:a0:52:c1:45:2d:23:d9:
a0:5a:88:d8:02:8c:c8:e1:45:5e:2e:aa:40:90:25:f6:73:ab:
f9:74:62:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TplD6oqf1lsB/dOfyf49MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNTA5NmZlMzM5MDQ0OWM5MzZlODU3MDYxZDRhNjk2NWQ0
MDhhMzEwHhcNMjUwMTMxMTcwMDMyWhcNMjUwMjAxMTcwMDMyWjAzMTEwLwYDVQQD
EygyMzE1MjQyMDdjMzViM2RhMDc5YTYzYjYxMTMzMDJjZGYzYzJlY2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArroHWtI5H+67eSY1LeQFcxO9maFj
MlFiwajH3uza0ZknXUq7BHXVQ07m4kANhITXlSu4Mr1oFQ9OT+//04+/CRvqY0bi
VmTCnx+bcOgBLXsuGnxIMgS4OcK78gP7hCRjt1QjfyVo/0Co3SJp/a5hUwobsvCc
YbBMJ3qLe6juuobpauzPBPs/8z3mL3qVNcjolnXq8Qcnp//n169PDNH/l8wd00Nh
nWmtr32I7GfnaxU7wAMiJQpfpZUuJVsBPr0jiur8zOmNLoIA1epBlhGRs0fPlEWI
lMxqOF7QgESzSWumNu/etqWyKYBwckJUE88gVasVPbMavD2cxY2AhAhJywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMVJCB8NbPaB5pjthEzAs3zwuz5MB8GA1UdIwQY
MBaAFPFQlv4zkESck26FcGHUppZdQIoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZDV19qT1FSSnlUYm9Wd1lkU21sbDFBaWpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC81ZDZkNjktODg4MC00YTkyLTg3NTYt
NTgxNWZkM2RhMjk3LzEvOFZDV19qT1FSSnlUYm9Wd1lkU21sbDFBaWpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC81ZDZkNjktODg4MC00YTkyLTg3NTYtNTgxNWZkM2RhMjk3
LzEvOFZDV19qT1FSSnlUYm9Wd1lkU21sbDFBaWpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxr/z0eF
OPJytADd9SgPZe72pYsrEM6o168LMWY9OzuPBK4IjxFZ3P4EZUf3ovCd7T6hF+Li
jD8BayFMRk4XAKmG195BpWgfLWRtqfpDREreyUjg7YFK8s1H77ssONH7Avw87DIY
GgOrs8DXq+GiTe2Ik1RGCFTp+iMHIPNsunMlwFyOj5LHlfMxspzbZkwjQvE3c6YI
yLdG737WLdzXpX76P3cnZZxYkMDbo3KSRjxa4K2zItgvSw0xaBuS6zM+zYt5Y8VJ
Bjqxp9n2iQVMnteQ81hDWxzBCmuhfHNqc30AXFGgUsFFLSPZoFqI2AKMyOFFXi6q
QJAl9nOr+XRi5Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:23 2025 by rpki-client