Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
File: 8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json)
Hash identifier: mSTT6eOvmMLXiUg0J8VlAp/IjTcra1+QlmMjjwlqviE=
Subject key identifier: 40:DA:61:00:0B:FA:79:1A:4F:EE:E8:FF:BB:66:8C:D9:10:2B:73:1B
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 0194BD856C06E1BE1CE2B50D9D7C68E10270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
Manifest number: 0B20
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: a/aCbzOyAMaM+Ig4En4EXo7pPUoKl0wryJhTw8sDxMM=)
2: pGdvSW9NlY7ggpWYdQxsgPpUkIc.roa (hash: +D8etcwAhuaAWN3gXHXLkRiaN5uUVNnmE3FwZNf0dCU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6c:06:e1:be:1c:e2:b5:0d:9d:7c:68:e1:02:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=40da61000bfa791a4feee8ffbb668cd9102b731b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:29:ab:ac:94:25:f7:43:82:5c:06:ef:b3:e8:
98:44:19:7b:6e:ee:15:5b:42:ba:ec:3c:95:ee:bd:
b1:a7:80:45:d1:98:d7:c7:71:79:2e:35:d2:ff:d1:
7c:53:45:ad:ab:86:7c:7e:70:78:ac:56:b1:e2:4b:
cb:84:aa:1a:ab:b5:37:ba:85:43:df:c2:da:7f:b8:
ca:d1:54:a2:17:cb:fd:21:47:74:68:46:0b:2a:a3:
18:2c:ed:d3:2b:44:a6:e2:df:16:ce:75:57:40:b5:
d6:9d:0b:07:e8:41:18:9b:7d:06:53:08:9f:3c:9c:
91:2e:2f:cf:01:0d:31:a2:8a:c3:03:4c:ed:fb:ba:
bf:6a:b7:00:41:9f:87:b5:0e:96:9e:e3:b3:05:ec:
31:92:aa:0f:bd:36:f8:01:04:14:22:59:49:0c:55:
aa:a4:f9:14:49:f9:bb:d4:55:5e:16:b4:99:a0:c2:
c8:d3:6b:6b:68:cb:ae:76:0f:80:c2:64:2a:3e:0d:
5b:d1:5c:d4:a1:43:56:11:05:32:2b:a1:87:9e:db:
c6:0f:41:b4:d9:35:f9:f6:64:f6:a6:1c:18:de:73:
1f:7e:3f:e3:2e:00:0e:b3:53:e6:e2:10:74:02:8a:
d5:01:12:e8:ed:b8:7b:21:d0:4d:35:e4:84:7c:cd:
6f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DA:61:00:0B:FA:79:1A:4F:EE:E8:FF:BB:66:8C:D9:10:2B:73:1B
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0d:36:cc:e8:b5:a7:25:bb:2b:d5:90:82:95:e9:71:ab:17:
cf:c9:28:c5:82:c7:9a:ca:db:42:3d:62:e5:d0:c8:64:10:2c:
4c:67:2d:95:9a:c0:b0:91:2b:5c:93:90:15:1b:56:32:23:60:
71:5e:bf:be:34:2d:1c:c6:bc:4f:47:55:cd:ae:bd:38:fd:cd:
1f:b6:92:5b:b9:07:e6:c1:e0:e1:54:7d:fd:11:1e:be:34:13:
1c:80:22:a8:d8:41:1f:1d:19:23:04:da:c6:0e:5d:b2:d6:b2:
2d:47:c1:18:50:0a:62:ec:2f:65:44:e4:11:f7:1f:f5:53:8a:
97:b3:05:ca:b3:57:55:64:8d:84:bf:96:60:9c:3f:65:b1:6d:
a7:f2:31:4d:cd:5e:67:38:8e:86:6b:73:c2:5f:53:41:2b:65:
08:6a:98:67:6b:26:de:b2:e7:5a:1d:e5:10:ff:52:88:a9:4f:
f8:89:a8:de:4e:c9:4c:f8:31:72:c8:4c:31:5a:cf:a9:bf:b1:
19:82:aa:07:6a:b9:a9:5b:89:3e:5f:c3:91:21:02:2f:17:62:
6e:c7:9a:ec:0f:72:37:43:04:a3:65:ea:fc:3f:36:18:2a:27:
f6:92:9f:04:d6:d5:0d:29:81:50:8a:34:51:60:5e:46:5d:22:
cc:a6:be:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hWwG4b4c4rUNnXxo4QJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYTExNWM3MTdlNTg5MTM0YTU1MzY3MGYzZTJiNWI5Y2Rh
MTJkODMwHhcNMjUwMTMxMTgwMDI1WhcNMjUwMjAxMTgwMDI1WjAzMTEwLwYDVQQD
Eyg0MGRhNjEwMDBiZmE3OTFhNGZlZWU4ZmZiYjY2OGNkOTEwMmI3MzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjymrrJQl90OCXAbvs+iYRBl7bu4V
W0K67DyV7r2xp4BF0ZjXx3F5LjXS/9F8U0Wtq4Z8fnB4rFax4kvLhKoaq7U3uoVD
38Laf7jK0VSiF8v9IUd0aEYLKqMYLO3TK0Sm4t8WznVXQLXWnQsH6EEYm30GUwif
PJyRLi/PAQ0xoorDA0zt+7q/arcAQZ+HtQ6WnuOzBewxkqoPvTb4AQQUIllJDFWq
pPkUSfm71FVeFrSZoMLI02traMuudg+AwmQqPg1b0VzUoUNWEQUyK6GHntvGD0G0
2TX59mT2phwY3nMffj/jLgAOs1Pm4hB0AorVARLo7bh7IdBNNeSEfM1vgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDaYQAL+nkaT+7o/7tmjNkQK3MbMB8GA1UdIwQY
MBaAFPChFccX5YkTSlU2cPPitbnNoS2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jNTIyZDctYTQ4OS00Yjc2LTkzNDgt
Mzc2MjRmNmE1MzExLzEvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jNTIyZDctYTQ4OS00Yjc2LTkzNDgtMzc2MjRmNmE1MzEx
LzEvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABw02zOi1
pyW7K9WQgpXpcasXz8koxYLHmsrbQj1i5dDIZBAsTGctlZrAsJErXJOQFRtWMiNg
cV6/vjQtHMa8T0dVza69OP3NH7aSW7kH5sHg4VR9/REevjQTHIAiqNhBHx0ZIwTa
xg5dstayLUfBGFAKYuwvZUTkEfcf9VOKl7MFyrNXVWSNhL+WYJw/ZbFtp/IxTc1e
ZziOhmtzwl9TQStlCGqYZ2sm3rLnWh3lEP9SiKlP+Imo3k7JTPgxcshMMVrPqb+x
GYKqB2q5qVuJPl/DkSECLxdibsea7A9yN0MEo2Xq/D82GCon9pKfBNbVDSmBUIo0
UWBeRl0izKa+nQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:28 2025 by rpki-client