Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/F-MCgK4iRDQG9rY89eDY4GHWu8o.mft
File: F-MCgK4iRDQG9rY89eDY4GHWu8o.mft (raw, json)
Hash identifier: wXiYSMQqns2sjkBkmdX5W6WTPtpE5HXl/40N26vy5Lg=
Subject key identifier: 05:AB:52:CE:FA:5D:F5:FD:C6:8B:F4:42:78:21:6C:46:03:9C:F4:AD
Authority key identifier: 17:E3:02:80:AE:22:44:34:06:F6:B6:3C:F5:E0:D8:E0:61:D6:BB:CA
Certificate issuer: /CN=17e30280ae22443406f6b63cf5e0d8e061d6bbca
Certificate serial: 018B894154454E12372F81B0E869DD6CA971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-MCgK4iRDQG9rY89eDY4GHWu8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/F-MCgK4iRDQG9rY89eDY4GHWu8o.mft
Manifest number: 08CE
Signing time: Wed 01 Nov 2023 05:00:41 +0000
Manifest this update: Wed 01 Nov 2023 05:00:41 +0000
Manifest next update: Thu 02 Nov 2023 05:00:41 +0000
Files and hashes: 1: F-MCgK4iRDQG9rY89eDY4GHWu8o.crl (hash: o4JwyMp8xGOJrt80+aMK4CgkE1+aCoLWfTvlQfH4BJU=)
2: _kE_49-gVfncdUnnfu-p_okPQwI.roa (hash: x551WImK7PgpaVcDQu+yAdrMhQblgXTSV08+OvbLKv8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:41:54:45:4e:12:37:2f:81:b0:e8:69:dd:6c:a9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17e30280ae22443406f6b63cf5e0d8e061d6bbca
Validity
Not Before: Nov 1 05:00:41 2023 GMT
Not After : Nov 2 05:00:41 2023 GMT
Subject: CN=05ab52cefa5df5fdc68bf44278216c46039cf4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:aa:e6:10:cd:c2:6c:7d:f3:1f:a5:e5:82:86:
da:b2:09:8b:4f:09:33:ca:df:a3:54:f6:5c:e3:e0:
65:b9:41:67:79:ba:b9:14:28:4e:98:d6:94:d9:ac:
d4:00:73:9c:df:62:3d:3b:96:4c:24:8f:93:e4:63:
70:a0:ac:24:84:03:0c:c0:7d:10:54:d4:3c:be:b7:
02:22:f1:ef:8a:e7:4b:72:ab:2f:df:92:2c:5f:2a:
2f:11:41:63:94:26:9d:37:72:af:93:a4:d9:68:75:
ac:2d:24:54:32:6f:99:ee:23:95:4f:66:19:63:b4:
f9:9d:9a:1b:ae:95:ca:e5:97:10:e9:00:d3:b0:e9:
c1:87:30:f4:ac:04:14:6e:a0:78:e6:23:95:9b:42:
f7:f4:5c:df:5d:20:06:c0:cb:ca:c7:6f:e3:e6:a6:
86:94:95:b2:f7:88:b4:62:ec:b5:50:b9:73:74:80:
ef:93:07:0d:f9:ba:ca:0e:49:1d:23:dc:6d:8c:a9:
e6:81:d4:10:7e:40:be:46:bd:a5:56:7b:a4:d0:b1:
14:27:e4:21:a4:cc:17:7f:c4:b5:65:0c:97:42:de:
04:70:73:b7:d4:a7:85:87:c6:80:71:c6:c8:07:ab:
6b:d5:54:3e:fa:55:7c:5d:e0:a5:41:e3:c5:12:cf:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AB:52:CE:FA:5D:F5:FD:C6:8B:F4:42:78:21:6C:46:03:9C:F4:AD
X509v3 Authority Key Identifier:
keyid:17:E3:02:80:AE:22:44:34:06:F6:B6:3C:F5:E0:D8:E0:61:D6:BB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-MCgK4iRDQG9rY89eDY4GHWu8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/F-MCgK4iRDQG9rY89eDY4GHWu8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/F-MCgK4iRDQG9rY89eDY4GHWu8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:3d:65:9c:13:6f:49:6e:2b:ab:1c:87:5f:67:5b:37:38:43:
72:c8:e1:5d:b2:8f:b8:06:ab:f1:5b:bc:58:b4:dd:6c:a0:3c:
66:7e:ff:fd:e1:7e:72:48:ba:7d:0f:ac:39:ba:92:13:22:3a:
43:d1:d6:58:6e:57:97:f7:f7:bc:de:56:b7:25:ad:40:31:e3:
13:86:ad:bb:56:6f:2b:19:21:22:9d:df:c3:41:ab:59:1a:52:
b7:d8:59:81:48:c8:d7:70:52:f1:e4:07:df:ea:55:ab:4c:08:
6f:61:a3:b3:9a:b5:ca:5e:9d:98:3e:84:98:32:90:ac:f5:14:
2c:ec:4e:e4:4b:90:43:ec:dc:2d:d2:db:e1:80:00:d3:f5:a8:
d7:cd:18:b0:5a:45:e7:17:9a:18:8c:dc:de:32:25:8e:dc:b9:
fd:86:0a:3c:a8:57:f7:3b:ae:25:6e:4b:9a:48:bd:04:c7:b9:
b1:a0:b3:bf:e3:99:9b:2d:12:5b:bd:19:30:aa:d9:dd:ca:c0:
5e:45:12:c2:87:d9:f1:32:04:93:50:c9:44:60:bc:93:25:47:
7b:06:bd:57:bc:e0:04:3b:83:8c:49:bb:5c:a0:a3:d8:17:25:
1d:02:25:b9:99:f9:08:6f:34:5d:ed:bd:99:d0:df:54:ae:1a:
74:c4:58:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuJQVRFThI3L4Gw6GndbKlxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZTMwMjgwYWUyMjQ0MzQwNmY2YjYzY2Y1ZTBkOGUwNjFk
NmJiY2EwHhcNMjMxMTAxMDUwMDQxWhcNMjMxMTAyMDUwMDQxWjAzMTEwLwYDVQQD
EygwNWFiNTJjZWZhNWRmNWZkYzY4YmY0NDI3ODIxNmM0NjAzOWNmNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKrmEM3CbH3zH6XlgobasgmLTwkz
yt+jVPZc4+BluUFnebq5FChOmNaU2azUAHOc32I9O5ZMJI+T5GNwoKwkhAMMwH0Q
VNQ8vrcCIvHviudLcqsv35IsXyovEUFjlCadN3Kvk6TZaHWsLSRUMm+Z7iOVT2YZ
Y7T5nZobrpXK5ZcQ6QDTsOnBhzD0rAQUbqB45iOVm0L39FzfXSAGwMvKx2/j5qaG
lJWy94i0Yuy1ULlzdIDvkwcN+brKDkkdI9xtjKnmgdQQfkC+Rr2lVnuk0LEUJ+Qh
pMwXf8S1ZQyXQt4EcHO31KeFh8aAccbIB6tr1VQ++lV8XeClQePFEs/nRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWrUs76XfX9xov0QnghbEYDnPStMB8GA1UdIwQY
MBaAFBfjAoCuIkQ0Bva2PPXg2OBh1rvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRi1NQ2dLNGlSRFFHOXJZODllRFk0R0hXdThvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9hNmNkOTktODVjYi00MTUzLWJiZjkt
Y2Y0MjcwYzY5NTNkLzEvRi1NQ2dLNGlSRFFHOXJZODllRFk0R0hXdThvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9hNmNkOTktODVjYi00MTUzLWJiZjktY2Y0MjcwYzY5NTNk
LzEvRi1NQ2dLNGlSRFFHOXJZODllRFk0R0hXdThvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABT1lnBNv
SW4rqxyHX2dbNzhDcsjhXbKPuAar8Vu8WLTdbKA8Zn7//eF+cki6fQ+sObqSEyI6
Q9HWWG5Xl/f3vN5WtyWtQDHjE4atu1ZvKxkhIp3fw0GrWRpSt9hZgUjI13BS8eQH
3+pVq0wIb2Gjs5q1yl6dmD6EmDKQrPUULOxO5EuQQ+zcLdLb4YAA0/Wo180YsFpF
5xeaGIzc3jIljty5/YYKPKhX9zuuJW5Lmki9BMe5saCzv+OZmy0SW70ZMKrZ3crA
XkUSwofZ8TIEk1DJRGC8kyVHewa9V7zgBDuDjEm7XKCj2BclHQIluZn5CG80Xe29
mdDfVK4adMRYTA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 08:01:15 2025 by rpki-client