Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/R8bfanwj5tVZfqlB4qu9FqqCOdI.mft
File: R8bfanwj5tVZfqlB4qu9FqqCOdI.mft (raw, json)
Hash identifier: mMGZZ+flYgnRx60AExdNZZ6SlFZA73y4KXEJyegLfEE=
Subject key identifier: 10:D2:F4:A6:4A:BE:9A:B0:18:AB:37:0A:9B:4C:B1:90:5F:5A:B3:84
Authority key identifier: 47:C6:DF:6A:7C:23:E6:D5:59:7E:A9:41:E2:AB:BD:16:AA:82:39:D2
Certificate issuer: /CN=47c6df6a7c23e6d5597ea941e2abbd16aa8239d2
Certificate serial: 01932E689F69AB2F65CC29A40F914AF66807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8bfanwj5tVZfqlB4qu9FqqCOdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/R8bfanwj5tVZfqlB4qu9FqqCOdI.mft
Manifest number: 135B
Signing time: Fri 15 Nov 2024 06:00:28 +0000
Manifest this update: Fri 15 Nov 2024 06:00:28 +0000
Manifest next update: Sat 16 Nov 2024 06:00:28 +0000
Files and hashes: 1: R8bfanwj5tVZfqlB4qu9FqqCOdI.crl (hash: R7F56EOj5I8v7ai8ajBMdVOf9e7VhY2HUxefJyB1mdA=)
2: tHY2dsgEX9XrSp0yFRWqbui8MZc.roa (hash: LQMv+lCdGkaS5WhQctP23ck+HaxLN0CesKcS9TDl41w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2e:68:9f:69:ab:2f:65:cc:29:a4:0f:91:4a:f6:68:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c6df6a7c23e6d5597ea941e2abbd16aa8239d2
Validity
Not Before: Nov 15 06:00:28 2024 GMT
Not After : Nov 16 06:00:28 2024 GMT
Subject: CN=10d2f4a64abe9ab018ab370a9b4cb1905f5ab384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:f5:48:7f:0e:fb:e6:b4:51:29:9f:58:76:
b5:e3:5a:b6:b0:81:6a:57:06:b2:04:08:52:84:c0:
e2:fb:fa:20:e0:f6:96:88:d2:42:f7:34:7f:6e:7b:
ed:53:ff:3a:ab:8f:79:7f:c8:62:87:32:a1:6d:88:
f6:d8:eb:6b:bb:2d:0e:39:e8:b1:9c:7b:16:73:3c:
4d:af:df:a4:58:37:10:2e:ba:43:5d:c8:77:f7:9f:
6a:bf:bb:d7:e5:47:23:e3:2c:84:f2:fa:fa:63:e3:
e4:7c:f1:0a:05:e3:5d:f5:b1:1d:de:2c:26:e5:a0:
ac:c7:0d:5a:42:b2:66:46:7c:65:c7:17:02:ab:d0:
2c:cc:d5:47:a2:22:59:fb:78:af:a8:a3:80:37:d7:
9d:19:03:f1:82:25:a8:fe:b9:b4:87:8f:df:a3:85:
44:9a:a1:ec:9a:2d:ab:d7:4a:c7:6c:46:5d:55:ce:
17:cd:0a:40:a7:ad:52:d5:1b:18:8b:f0:a2:07:29:
da:b7:23:91:22:cc:0c:d5:f6:2b:c4:65:90:b2:84:
07:2c:53:00:75:a1:dd:e5:cf:ea:19:10:59:91:80:
19:ce:d6:01:cb:e3:7b:7d:90:1e:9f:43:6e:59:5c:
06:2a:68:d2:08:51:20:71:68:bd:fa:6f:3c:46:2f:
d7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D2:F4:A6:4A:BE:9A:B0:18:AB:37:0A:9B:4C:B1:90:5F:5A:B3:84
X509v3 Authority Key Identifier:
keyid:47:C6:DF:6A:7C:23:E6:D5:59:7E:A9:41:E2:AB:BD:16:AA:82:39:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8bfanwj5tVZfqlB4qu9FqqCOdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/R8bfanwj5tVZfqlB4qu9FqqCOdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/R8bfanwj5tVZfqlB4qu9FqqCOdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:fd:49:97:20:9f:71:3e:01:a3:2f:37:d5:e7:3a:45:27:70:
b7:3d:05:16:2f:b1:ab:9c:68:0f:9e:7e:45:a8:26:84:b6:a6:
e2:c8:2c:c4:7f:8a:1f:48:ef:06:5e:03:0a:da:27:b3:5d:55:
df:b3:36:ce:86:fc:cf:dc:79:c6:4b:32:72:20:eb:52:98:20:
79:30:7c:d5:6f:ff:4c:1d:7d:7b:28:bf:c5:fe:4d:ee:bc:80:
c6:a7:d8:0c:a7:2f:d4:a3:53:ba:68:a1:4a:03:6f:6c:d5:47:
9e:fd:e8:30:c7:bb:aa:43:83:59:c4:4b:41:d5:14:cd:37:4c:
02:f1:e2:a9:1a:e9:0a:4c:d7:96:77:19:4e:04:99:c4:8a:ed:
66:5b:14:2d:c2:a7:70:4a:d5:76:e2:a9:02:d1:3e:84:06:f5:
74:dc:21:aa:c0:41:e3:fb:ba:85:3b:12:82:88:55:c7:c3:3d:
42:40:88:90:17:74:79:91:35:7f:21:4a:fd:d5:2f:56:22:86:
26:9c:0d:8e:ba:1e:94:15:6f:c1:b1:7a:ca:28:7e:2e:86:d8:
85:d0:ae:d8:bf:6c:86:bc:42:51:b9:2f:94:03:d7:e9:36:8e:
8c:e5:e5:62:1f:5f:7e:c2:05:3d:77:cb:41:9e:0b:3f:29:64:
03:f8:19:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMuaJ9pqy9lzCmkD5FK9mgHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YzZkZjZhN2MyM2U2ZDU1OTdlYTk0MWUyYWJiZDE2YWE4
MjM5ZDIwHhcNMjQxMTE1MDYwMDI4WhcNMjQxMTE2MDYwMDI4WjAzMTEwLwYDVQQD
EygxMGQyZjRhNjRhYmU5YWIwMThhYjM3MGE5YjRjYjE5MDVmNWFiMzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTn1SH8O++a0USmfWHa141q2sIFq
VwayBAhShMDi+/og4PaWiNJC9zR/bnvtU/86q495f8hihzKhbYj22Otruy0OOeix
nHsWczxNr9+kWDcQLrpDXch3959qv7vX5Ucj4yyE8vr6Y+PkfPEKBeNd9bEd3iwm
5aCsxw1aQrJmRnxlxxcCq9AszNVHoiJZ+3ivqKOAN9edGQPxgiWo/rm0h4/fo4VE
mqHsmi2r10rHbEZdVc4XzQpAp61S1RsYi/CiBynatyORIswM1fYrxGWQsoQHLFMA
daHd5c/qGRBZkYAZztYBy+N7fZAen0NuWVwGKmjSCFEgcWi9+m88Ri/XzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDS9KZKvpqwGKs3CptMsZBfWrOEMB8GA1UdIwQY
MBaAFEfG32p8I+bVWX6pQeKrvRaqgjnSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjhiZmFud2o1dFZaZnFsQjRxdTlGcXFDT2RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81OTMwNjUtYmFiNC00YjZkLTk1OWEt
NDVkYWU2ZmVkYzMzLzEvUjhiZmFud2o1dFZaZnFsQjRxdTlGcXFDT2RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81OTMwNjUtYmFiNC00YjZkLTk1OWEtNDVkYWU2ZmVkYzMz
LzEvUjhiZmFud2o1dFZaZnFsQjRxdTlGcXFDT2RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsP1JlyCf
cT4Boy831ec6RSdwtz0FFi+xq5xoD55+RagmhLam4sgsxH+KH0jvBl4DCtons11V
37M2zob8z9x5xksyciDrUpggeTB81W//TB19eyi/xf5N7ryAxqfYDKcv1KNTumih
SgNvbNVHnv3oMMe7qkODWcRLQdUUzTdMAvHiqRrpCkzXlncZTgSZxIrtZlsULcKn
cErVduKpAtE+hAb1dNwhqsBB4/u6hTsSgohVx8M9QkCIkBd0eZE1fyFK/dUvViKG
JpwNjroelBVvwbF6yih+LobYhdCu2L9shrxCUbkvlAPX6TaOjOXlYh9ffsIFPXfL
QZ4LPylkA/gZOQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:40:55 2025 by rpki-client