Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
File: jH8yX5quuTqDw554FFxBk31Ya3c.mft (raw, json)
Hash identifier: nPOgHZWAQidejeWH1gcruiWLkA/MBmbbwuC1P3jNEKM=
Subject key identifier: F2:12:0E:F9:A8:A5:56:5A:75:40:07:CF:23:98:F7:F3:55:E5:8E:D1
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 0194BC3CABAB855E328A5DB759264E4B65D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 12:01:20 +0000
Manifest this update: Fri 31 Jan 2025 12:01:20 +0000
Manifest next update: Sat 01 Feb 2025 12:01:20 +0000
Files and hashes: 1: A8xcoz0CxVsQV59nDwDYQFIr0lo.roa (hash: DYANfqFgGBJIwz26B4ECCOb3ofMn4dBZTXHVwjQaWQ0=)
2: ihKky7iErFMr7G88FOVCnj74bps.roa (hash: j7P5G19jRMsSzlS7Lh1Jjj17xJpONrJFrA53mphipiw=)
3: jH8yX5quuTqDw554FFxBk31Ya3c.crl (hash: jeqE2kuBdh0IQQnfab/zuVJQuaWv2QZm/vd2d5Cyi1I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:ab:ab:85:5e:32:8a:5d:b7:59:26:4e:4b:65:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Jan 31 12:01:20 2025 GMT
Not After : Feb 1 12:01:20 2025 GMT
Subject: CN=f2120ef9a8a5565a754007cf2398f7f355e58ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:40:f6:78:5f:6a:d1:52:b0:5f:3b:41:0d:75:
3a:c4:5c:bd:cf:3d:69:af:49:d5:67:a7:b4:f3:5a:
42:23:9e:ba:1d:ea:2a:c8:16:ee:37:a8:3d:49:aa:
4c:ee:55:aa:03:47:46:1a:1f:82:e3:32:48:0b:5a:
05:1c:50:9c:94:37:3b:06:c0:13:7a:8e:71:ff:13:
df:a2:28:72:db:40:6f:b8:e4:c5:6b:c6:4d:df:03:
e0:28:13:ef:1e:fe:52:c4:ea:d3:84:cd:ab:b5:43:
0a:06:e9:47:98:6d:c8:9b:4b:0b:5a:fc:c2:cd:f4:
6e:ae:1e:e0:c7:52:7e:d2:14:da:07:f7:e2:63:03:
3e:bd:90:47:bd:06:3d:04:5c:f3:ae:f5:f4:ee:d8:
5c:45:97:1a:0d:73:7b:65:a4:65:4e:28:83:cc:fb:
6f:fd:dd:55:79:af:29:dc:a6:fb:a7:3f:bc:2f:4e:
f5:45:1f:c1:e1:0c:a9:23:43:2c:ac:13:77:61:e3:
72:0d:5f:31:2c:7e:3a:2a:8b:bb:f8:4d:dc:a8:d2:
7b:5f:54:b0:36:5e:be:f7:0d:75:c8:03:a5:3c:42:
cb:89:e4:c8:aa:0f:e4:b5:64:82:00:c2:52:1f:a3:
87:88:32:f6:89:9c:2d:d1:97:26:76:af:c9:48:d5:
fc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:12:0E:F9:A8:A5:56:5A:75:40:07:CF:23:98:F7:F3:55:E5:8E:D1
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e4:56:15:82:cd:51:db:8a:29:ef:56:90:42:47:a5:cc:bf:
35:43:ee:a7:8c:5c:be:c1:ba:24:f0:1c:a5:e6:ee:eb:cc:d9:
b4:bf:e0:79:d0:c5:61:a1:d3:7e:60:cc:0f:f7:88:9d:9e:a6:
35:82:c1:69:31:5b:f4:f1:0b:b7:27:c1:d0:8d:b7:ef:6e:6b:
36:99:63:01:d6:e2:49:e2:58:37:62:e0:6e:56:5f:b2:89:e3:
5a:79:53:1d:7c:aa:05:08:77:01:c8:5a:ab:95:38:11:89:1c:
7b:44:0c:2a:08:77:03:0b:3b:02:74:4e:48:ba:5f:bb:d8:ec:
e4:f8:1d:2b:91:b9:f7:2e:df:f1:13:c8:19:58:b9:33:b5:02:
a0:43:61:d7:c5:77:6b:89:82:87:f3:3a:3b:f7:b7:9a:84:cf:
4f:93:e1:04:91:42:22:72:6d:0c:be:26:bf:f2:8f:08:55:6d:
28:1f:57:9b:df:3a:b0:d4:c8:7d:c9:4c:cc:4f:98:d5:4b:85:
a4:3b:c3:6b:df:72:df:ae:f6:a1:72:21:6f:a9:62:21:a8:c0:
dc:f8:15:28:6c:98:fd:0b:04:ff:a0:a7:45:0a:15:3d:8e:b7:
84:22:5e:ac:81:b0:07:3a:2a:22:7a:46:ee:68:81:e0:38:d4:
61:bd:29:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PKurhV4yil23WSZOS2XUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjN2YzMjVmOWFhZWI5M2E4M2MzOWU3ODE0NWM0MTkzN2Q1
ODZiNzcwHhcNMjUwMTMxMTIwMTIwWhcNMjUwMjAxMTIwMTIwWjAzMTEwLwYDVQQD
EyhmMjEyMGVmOWE4YTU1NjVhNzU0MDA3Y2YyMzk4ZjdmMzU1ZTU4ZWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0D2eF9q0VKwXztBDXU6xFy9zz1p
r0nVZ6e081pCI566HeoqyBbuN6g9SapM7lWqA0dGGh+C4zJIC1oFHFCclDc7BsAT
eo5x/xPfoihy20BvuOTFa8ZN3wPgKBPvHv5SxOrThM2rtUMKBulHmG3Im0sLWvzC
zfRurh7gx1J+0hTaB/fiYwM+vZBHvQY9BFzzrvX07thcRZcaDXN7ZaRlTiiDzPtv
/d1Vea8p3Kb7pz+8L071RR/B4QypI0MsrBN3YeNyDV8xLH46Kou7+E3cqNJ7X1Sw
Nl6+9w11yAOlPELLieTIqg/ktWSCAMJSH6OHiDL2iZwt0Zcmdq/JSNX89wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPISDvmopVZadUAHzyOY9/NV5Y7RMB8GA1UdIwQY
MBaAFIx/Ml+arrk6g8OeeBRcQZN9WGt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUt
ZmMyZjVmYTc3NTU1LzEvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUtZmMyZjVmYTc3NTU1
LzEvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+RWFYLN
UduKKe9WkEJHpcy/NUPup4xcvsG6JPAcpebu68zZtL/gedDFYaHTfmDMD/eInZ6m
NYLBaTFb9PELtyfB0I23725rNpljAdbiSeJYN2LgblZfsonjWnlTHXyqBQh3Acha
q5U4EYkce0QMKgh3Aws7AnROSLpfu9js5PgdK5G59y7f8RPIGVi5M7UCoENh18V3
a4mCh/M6O/e3moTPT5PhBJFCInJtDL4mv/KPCFVtKB9Xm986sNTIfclMzE+Y1UuF
pDvDa99y3672oXIhb6liIajA3PgVKGyY/QsE/6CnRQoVPY63hCJerIGwBzoqInpG
7miB4DjUYb0p8A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:12:39 2025 by rpki-client