
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
File: 8fGG6XCXyEF9lDfXDP38UnMxtag.mft (raw, json)
Hash identifier: QNVq708kJ3+FnISEeDqWZqoxLOVbINlrwRLWr/LJE/M=
Subject key identifier: AC:4D:E6:11:9A:F9:9B:48:C8:36:EE:5A:B5:4A:C4:F8:0A:4C:4F:2C
Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
Certificate issuer: /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Certificate serial: 0194BCE0BBB24BBDE8FD340D199E44DD6AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
Manifest number: 08AF
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: 8fGG6XCXyEF9lDfXDP38UnMxtag.crl (hash: AgRYXYDtrlhRI6WUCiB+2qh0Jog9Z3AOb3xZZ7nPJx8=)
2: Bb-dCG0MYANSL8Bk5tQCjYBHu7I.roa (hash: 0dT55FR6gYNAR7wtBsJy+EY1xVBw/famE9UI3Od2H8A=)
3: K5Oof9CYQW5Wc9ghK1PUdN-aFTY.roa (hash: 2dlcOZzL+Eim7W+NTEiKqnv/Tt9OOEdX1RMt+wWQD9U=)
4: hwiO597jiOerCy1jD6kKNf_z4mE.roa (hash: At2Ig8rywEMbpAnMXYd8IjR4QLHdmR+nptBnEkQohjg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bb:b2:4b:bd:e8:fd:34:0d:19:9e:44:dd:6a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=ac4de6119af99b48c836ee5ab54ac4f80a4c4f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:99:43:dc:0c:8f:fc:c5:30:fa:da:49:d4:
8e:a1:46:53:a6:dc:a4:57:00:c7:7b:52:67:8b:89:
56:05:4c:2d:8d:e6:e3:a2:8d:3a:b7:8b:70:08:d9:
17:96:fe:b9:08:fe:af:ec:00:fd:ab:21:d8:97:5f:
2f:16:01:53:8b:5d:32:a1:2b:86:b9:5e:60:b2:28:
b0:22:88:b1:37:be:96:57:23:a8:5d:e6:6b:4d:d0:
97:f8:a5:f2:d2:66:38:0f:6e:fc:22:ee:1a:ab:9e:
52:1b:1c:bd:1d:43:80:32:ae:36:0b:7d:7c:11:fb:
f8:df:12:94:23:4d:71:a9:9e:ee:f8:be:09:50:c9:
e1:1b:98:e1:6a:7f:a4:62:7a:1a:41:6e:38:71:27:
fb:33:59:0d:77:cf:eb:64:95:7e:51:04:1b:45:21:
89:f9:53:fd:92:62:96:81:97:68:e8:f1:97:75:1b:
2c:60:1f:53:4a:13:40:bf:18:8a:8a:d2:19:ab:42:
6c:b6:48:5f:c7:81:5f:8b:1a:ca:5c:27:fc:b0:14:
aa:d0:a4:15:70:76:d1:59:b7:9f:e3:14:a0:7f:1b:
d9:04:31:0d:17:48:6e:fb:17:e3:ab:5b:00:9a:45:
7c:f2:b0:74:30:8d:ea:f4:bc:16:b4:37:ff:2d:e1:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4D:E6:11:9A:F9:9B:48:C8:36:EE:5A:B5:4A:C4:F8:0A:4C:4F:2C
X509v3 Authority Key Identifier:
keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:24:83:19:9f:93:79:37:a3:ab:bc:3c:cc:96:e0:5d:0f:ba:
4d:eb:db:f7:01:57:98:6d:58:38:14:59:82:d1:02:7d:ef:ed:
18:88:a9:d3:a3:e1:5a:d0:28:b2:d4:c1:00:63:6d:98:87:41:
a1:2e:fe:fe:dc:fa:81:0d:92:7e:95:d0:bd:4f:63:c2:0e:51:
f7:f4:03:fa:75:09:36:5a:4a:eb:fa:38:47:ae:b9:a8:a3:6a:
a7:bd:31:9c:b3:70:90:fd:0c:3e:dd:15:f3:83:9b:d8:d2:ca:
0a:53:ad:9b:38:9e:30:67:e1:55:64:b2:7b:1b:fc:d2:fe:d6:
d9:6a:2c:9c:51:c8:69:6b:76:30:fb:85:bf:24:1f:ce:24:cb:
42:71:a2:63:76:3d:c3:46:44:69:f2:ea:6b:9a:56:ac:fd:b6:
28:52:a2:20:81:bc:41:a6:e2:d4:ab:da:84:c4:de:5e:0a:aa:
25:b4:cd:a4:68:ae:89:e1:b1:9d:a0:9c:c6:c6:0c:b8:98:0b:
fb:33:85:ba:ce:2e:f9:75:95:d0:61:cd:e8:d9:ed:1a:9a:b6:
02:6e:82:a5:e5:25:f4:0e:c1:5e:d3:82:4b:8b:a3:43:7c:bd:
4c:33:e3:a0:3c:6b:e5:98:13:a7:ec:83:d4:ad:e4:6d:c4:cc:
c8:3f:58:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84LuyS73o/TQNGZ5E3WqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjE4NmU5NzA5N2M4NDE3ZDk0MzdkNzBjZmRmYzUyNzMz
MWI1YTgwHhcNMjUwMTMxMTUwMDMyWhcNMjUwMjAxMTUwMDMyWjAzMTEwLwYDVQQD
EyhhYzRkZTYxMTlhZjk5YjQ4YzgzNmVlNWFiNTRhYzRmODBhNGM0ZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kOZQ9wMj/zFMPraSdSOoUZTptyk
VwDHe1Jni4lWBUwtjebjoo06t4twCNkXlv65CP6v7AD9qyHYl18vFgFTi10yoSuG
uV5gsiiwIoixN76WVyOoXeZrTdCX+KXy0mY4D278Iu4aq55SGxy9HUOAMq42C318
Efv43xKUI01xqZ7u+L4JUMnhG5jhan+kYnoaQW44cSf7M1kNd8/rZJV+UQQbRSGJ
+VP9kmKWgZdo6PGXdRssYB9TShNAvxiKitIZq0Jstkhfx4FfixrKXCf8sBSq0KQV
cHbRWbef4xSgfxvZBDENF0hu+xfjq1sAmkV88rB0MI3q9LwWtDf/LeFn7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxN5hGa+ZtIyDbuWrVKxPgKTE8sMB8GA1UdIwQY
MBaAFPHxhulwl8hBfZQ31wz9/FJzMbWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZHRzZYQ1h5RUY5bERmWERQMzhVbk14dGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81YzNiOTktYjhlZi00ZWQxLTg1N2Mt
YjY1Y2QxMzYyNjJlLzEvOGZHRzZYQ1h5RUY5bERmWERQMzhVbk14dGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81YzNiOTktYjhlZi00ZWQxLTg1N2MtYjY1Y2QxMzYyNjJl
LzEvOGZHRzZYQ1h5RUY5bERmWERQMzhVbk14dGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiSDGZ+T
eTejq7w8zJbgXQ+6Tevb9wFXmG1YOBRZgtECfe/tGIip06PhWtAostTBAGNtmIdB
oS7+/tz6gQ2SfpXQvU9jwg5R9/QD+nUJNlpK6/o4R665qKNqp70xnLNwkP0MPt0V
84Ob2NLKClOtmzieMGfhVWSyexv80v7W2WosnFHIaWt2MPuFvyQfziTLQnGiY3Y9
w0ZEafLqa5pWrP22KFKiIIG8Qabi1KvahMTeXgqqJbTNpGiuieGxnaCcxsYMuJgL
+zOFus4u+XWV0GHN6NntGpq2Am6CpeUl9A7BXtOCS4ujQ3y9TDPjoDxr5ZgTp+yD
1K3kbcTMyD9Ytg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:23 2025 by rpki-client