Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.mft
File: x8_M1olXoPcEOajWD_PIuNkRowg.mft (raw, json)
Hash identifier: Go7KMb/zihkKk+sp9D1RC7i8rJAYv1fewNkzYS36vRk=
Subject key identifier: CA:77:61:AD:B3:9A:57:B1:09:A3:1D:FD:0A:0A:4B:65:B8:7E:2B:57
Authority key identifier: C7:CF:CC:D6:89:57:A0:F7:04:39:A8:D6:0F:F3:C8:B8:D9:11:A3:08
Certificate issuer: /CN=c7cfccd68957a0f70439a8d60ff3c8b8d911a308
Certificate serial: 0195E0B49E1DB9754C684E77B3CD909799C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8_M1olXoPcEOajWD_PIuNkRowg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.mft
Manifest number: 0C44
Signing time: Sat 29 Mar 2025 07:01:28 +0000
Manifest this update: Sat 29 Mar 2025 07:01:28 +0000
Manifest next update: Sun 30 Mar 2025 07:01:28 +0000
Files and hashes: 1: YIZxa7cJn8DAxFe_bq6gP-moAuc.roa (hash: aP/jGcxACW28RpvaLI/m2V4NPNIHiL114dmzUPqAu9I=)
2: x8_M1olXoPcEOajWD_PIuNkRowg.crl (hash: +MO/hpL+zhdUBIHBBsGoTNfV35iRtXch1QkEju2Sxog=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:9e:1d:b9:75:4c:68:4e:77:b3:cd:90:97:99:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7cfccd68957a0f70439a8d60ff3c8b8d911a308
Validity
Not Before: Mar 29 07:01:28 2025 GMT
Not After : Mar 30 07:01:28 2025 GMT
Subject: CN=ca7761adb39a57b109a31dfd0a0a4b65b87e2b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:70:4b:73:52:24:be:91:6c:05:19:6a:79:
85:fe:a3:53:1e:44:d9:53:79:8d:e0:90:41:00:90:
7b:91:f2:d8:93:5a:70:41:f6:4e:ef:2a:57:a7:28:
f5:c6:38:52:25:20:ec:ea:07:ca:2a:df:87:43:1f:
d7:52:49:3c:ef:bf:f7:22:ee:89:90:b3:90:e9:c2:
c7:41:08:48:6b:b9:26:86:e2:34:c5:52:55:8b:d0:
4c:3a:32:4f:c2:65:c7:4e:4f:a0:d0:31:ce:5f:97:
16:91:74:d9:e2:15:20:c6:34:41:5e:d3:16:35:e2:
09:d6:dc:1b:a8:59:3a:dc:fb:c5:9e:35:c0:6a:09:
78:c8:4f:a1:cf:72:5e:87:e1:38:42:26:89:93:04:
56:4e:c9:3e:3a:f0:93:c2:73:cf:3b:d0:7c:7e:44:
de:35:11:ec:cb:fc:2f:51:db:65:a5:cb:33:a1:39:
81:da:a5:31:90:af:d9:46:db:10:9b:cf:48:6c:43:
0f:f5:c9:13:82:58:b4:2b:1a:0c:da:c2:7c:ea:29:
ec:44:06:a8:da:2b:b3:56:72:07:c9:b9:02:3b:0c:
9c:10:bc:86:f8:7e:2c:4b:07:0f:ab:c6:80:01:e4:
98:3f:73:44:df:87:6b:01:41:07:8b:ff:d0:fb:fd:
fb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:77:61:AD:B3:9A:57:B1:09:A3:1D:FD:0A:0A:4B:65:B8:7E:2B:57
X509v3 Authority Key Identifier:
keyid:C7:CF:CC:D6:89:57:A0:F7:04:39:A8:D6:0F:F3:C8:B8:D9:11:A3:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8_M1olXoPcEOajWD_PIuNkRowg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c5:84:08:0d:3e:6e:65:01:94:c8:d5:9a:06:98:52:83:65:
55:b3:08:27:63:da:80:91:2c:ff:75:9a:8a:b4:a0:18:16:99:
14:88:10:33:c4:81:a0:22:33:fb:ab:61:e6:a2:6b:78:1d:57:
f2:80:d1:6d:84:70:f0:e4:32:d6:e5:38:c7:d3:e6:93:15:af:
f6:52:55:42:d0:4c:eb:32:b7:a5:8f:b7:ff:14:9a:b8:b3:0d:
ab:76:8c:43:cc:45:44:94:37:e3:c7:91:b8:8e:55:be:91:1a:
b8:c2:37:ae:82:6e:df:00:53:15:1d:ae:2d:03:3d:a1:4d:23:
a2:63:1e:89:9b:a7:ff:de:40:8e:f1:93:11:e7:6a:1f:82:a3:
43:1a:47:ea:28:e4:6b:50:0f:d1:8b:8f:3a:9b:a1:f9:70:e7:
36:df:c7:d1:cf:4c:21:d0:26:92:d4:18:eb:07:61:64:1d:a7:
b9:fc:f3:3c:3d:0f:be:07:1a:0b:ec:10:9a:f6:99:4c:2e:c6:
5d:e5:4b:9d:7f:5b:5f:dd:28:3f:14:a1:3e:5c:9f:9f:62:6e:
74:24:b5:23:24:c2:4f:cb:68:3f:fa:2a:7f:61:36:4a:d9:c9:
21:1f:59:86:a7:9c:fc:dd:81:4c:0a:a1:94:5b:1c:e1:47:c6:
87:d4:c1:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtJ4duXVMaE53s82Ql5nIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3Y2ZjY2Q2ODk1N2EwZjcwNDM5YThkNjBmZjNjOGI4ZDkx
MWEzMDgwHhcNMjUwMzI5MDcwMTI4WhcNMjUwMzMwMDcwMTI4WjAzMTEwLwYDVQQD
EyhjYTc3NjFhZGIzOWE1N2IxMDlhMzFkZmQwYTBhNGI2NWI4N2UyYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz51wS3NSJL6RbAUZanmF/qNTHkTZ
U3mN4JBBAJB7kfLYk1pwQfZO7ypXpyj1xjhSJSDs6gfKKt+HQx/XUkk877/3Iu6J
kLOQ6cLHQQhIa7kmhuI0xVJVi9BMOjJPwmXHTk+g0DHOX5cWkXTZ4hUgxjRBXtMW
NeIJ1twbqFk63PvFnjXAagl4yE+hz3Jeh+E4QiaJkwRWTsk+OvCTwnPPO9B8fkTe
NRHsy/wvUdtlpcszoTmB2qUxkK/ZRtsQm89IbEMP9ckTgli0KxoM2sJ86insRAao
2iuzVnIHybkCOwycELyG+H4sSwcPq8aAAeSYP3NE34drAUEHi//Q+/37+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMp3Ya2zmlexCaMd/QoKS2W4fitXMB8GA1UdIwQY
MBaAFMfPzNaJV6D3BDmo1g/zyLjZEaMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDhfTTFvbFhvUGNFT2FqV0RfUEl1TmtSb3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81YjczODctM2FhZS00OTdkLWFhYmQt
YWJiNzQzOGJjOGE1LzEveDhfTTFvbFhvUGNFT2FqV0RfUEl1TmtSb3dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi81YjczODctM2FhZS00OTdkLWFhYmQtYWJiNzQzOGJjOGE1
LzEveDhfTTFvbFhvUGNFT2FqV0RfUEl1TmtSb3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8WECA0+
bmUBlMjVmgaYUoNlVbMIJ2PagJEs/3WairSgGBaZFIgQM8SBoCIz+6th5qJreB1X
8oDRbYRw8OQy1uU4x9PmkxWv9lJVQtBM6zK3pY+3/xSauLMNq3aMQ8xFRJQ348eR
uI5VvpEauMI3roJu3wBTFR2uLQM9oU0jomMeiZun/95AjvGTEedqH4KjQxpH6ijk
a1AP0YuPOpuh+XDnNt/H0c9MIdAmktQY6wdhZB2nufzzPD0PvgcaC+wQmvaZTC7G
XeVLnX9bX90oPxShPlyfn2JudCS1IyTCT8toP/oqf2E2StnJIR9Zhqec/N2BTAqh
lFsc4UfGh9TBgg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:45 2025 by rpki-client