Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
File: CRzF2QybaBpstOdyzK6-w0L7mwU.mft (raw, json)
Hash identifier: SPWWCNJjCFOcDd577UUHUZ31UlgZNAe4OsbLKFx+fv4=
Subject key identifier: 8F:88:90:8F:70:4B:C6:BF:B0:29:71:26:1E:EC:BD:AB:43:E5:89:1C
Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Certificate serial: 0195E0B48761B7C9F7826386DD0D009E2A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
Manifest number: 0871
Signing time: Sat 29 Mar 2025 07:01:22 +0000
Manifest this update: Sat 29 Mar 2025 07:01:22 +0000
Manifest next update: Sun 30 Mar 2025 07:01:22 +0000
Files and hashes: 1: CRzF2QybaBpstOdyzK6-w0L7mwU.crl (hash: mrgLRWYNDWjQLFK5QEVKsg+O5TBaU+6ipWMcMGbBqoo=)
2: JFMyA-XTfzJ98LwUaDo6uCal6eE.roa (hash: 53iyOJ7/FikpZ4x6oYvSunvmMxLDuiMuvaZO1jcps9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:87:61:b7:c9:f7:82:63:86:dd:0d:00:9e:2a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Validity
Not Before: Mar 29 07:01:22 2025 GMT
Not After : Mar 30 07:01:22 2025 GMT
Subject: CN=8f88908f704bc6bfb02971261eecbdab43e5891c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9d:22:76:69:84:3c:02:6e:fb:72:4c:bf:ad:
e6:18:6a:bb:52:34:79:67:f4:72:cb:dc:fa:31:9e:
d6:41:76:8a:37:63:39:06:77:5e:cf:0d:e5:4f:de:
b2:33:8c:21:8d:39:c3:3a:5a:ec:3f:59:7d:42:94:
b6:b2:02:2b:c8:0f:76:f7:38:2d:08:09:2e:b5:6e:
a8:24:77:eb:87:57:de:1b:fc:d6:24:b0:a4:7b:17:
ad:56:ba:d7:a2:53:b5:9a:2c:5d:0c:4a:cf:3f:c2:
49:a3:89:85:c0:c1:f2:88:7a:c7:07:24:b7:2d:c9:
c4:b1:66:34:42:00:4c:bb:b8:72:97:99:a3:a3:a2:
a8:40:94:d0:d5:59:53:20:a0:5d:62:2d:2f:86:b2:
f5:be:4f:f2:f8:ef:29:ad:46:08:d8:d1:c5:3a:b6:
16:8a:e0:9d:37:54:b8:f9:3f:22:22:02:f8:f5:22:
af:a6:dd:4b:e9:f2:69:49:a9:ca:34:92:f5:8d:2a:
76:9a:27:6d:c8:ee:1f:42:b1:9a:51:7f:20:cc:de:
3f:2f:57:08:7d:6a:77:f2:52:dc:c8:4b:13:c9:4d:
b2:45:14:c5:de:a2:2e:87:c0:f4:15:4a:24:2b:28:
e1:38:8d:5b:f2:26:bb:90:0c:18:81:b1:7e:f0:82:
7d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:88:90:8F:70:4B:C6:BF:B0:29:71:26:1E:EC:BD:AB:43:E5:89:1C
X509v3 Authority Key Identifier:
keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0a:2f:5c:8e:9e:cb:b0:d6:e4:a9:05:52:1b:e5:09:d7:9b:
35:8e:8e:20:c3:2e:0e:c1:82:05:17:bd:a0:c7:7c:4e:96:80:
28:e1:de:b3:66:a7:66:75:09:f3:3c:f8:0f:12:8f:f4:91:5d:
60:01:e2:b3:58:f5:bb:e2:0f:86:7e:70:30:2d:5c:2c:1f:f1:
c9:7f:72:45:c0:06:5a:3e:d0:0f:cf:05:e7:6f:81:27:62:2d:
b8:e4:83:27:49:0c:f9:37:c6:d0:0a:fc:49:6f:1b:e7:f6:93:
25:2c:f0:91:c6:70:74:29:ae:e9:44:cc:78:7c:25:42:c1:a9:
97:17:df:f0:ea:c7:d5:81:58:a1:c5:d6:36:a1:01:b7:dd:5f:
fa:e7:39:47:b7:4f:e6:5e:79:65:8f:2d:11:83:31:be:59:fa:
2f:6c:bb:40:fc:28:70:29:9d:ff:29:a9:1c:57:ed:18:5d:ba:
54:f6:58:ac:06:dd:49:97:71:57:fc:e5:c4:a6:72:79:0f:1d:
33:21:a5:72:f3:9b:fb:06:f0:40:04:46:8e:d3:16:f9:74:59:
8e:82:39:71:23:7a:ec:dd:71:f9:db:49:ba:a7:cf:23:4f:f1:
06:83:f6:a4:6e:12:57:f6:52:87:25:cd:15:a8:e8:fb:87:ce:
da:06:32:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtIdht8n3gmOG3Q0AnioIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWNjNWQ5MGM5YjY4MWE2Y2I0ZTc3MmNjYWViZWMzNDJm
YjliMDUwHhcNMjUwMzI5MDcwMTIyWhcNMjUwMzMwMDcwMTIyWjAzMTEwLwYDVQQD
Eyg4Zjg4OTA4ZjcwNGJjNmJmYjAyOTcxMjYxZWVjYmRhYjQzZTU4OTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ0idmmEPAJu+3JMv63mGGq7UjR5
Z/Ryy9z6MZ7WQXaKN2M5Bndezw3lT96yM4whjTnDOlrsP1l9QpS2sgIryA929zgt
CAkutW6oJHfrh1feG/zWJLCkexetVrrXolO1mixdDErPP8JJo4mFwMHyiHrHByS3
LcnEsWY0QgBMu7hyl5mjo6KoQJTQ1VlTIKBdYi0vhrL1vk/y+O8prUYI2NHFOrYW
iuCdN1S4+T8iIgL49SKvpt1L6fJpSanKNJL1jSp2midtyO4fQrGaUX8gzN4/L1cI
fWp38lLcyEsTyU2yRRTF3qIuh8D0FUokKyjhOI1b8ia7kAwYgbF+8IJ95QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+IkI9wS8a/sClxJh7svatD5YkcMB8GA1UdIwQY
MBaAFAkcxdkMm2gabLTncsyuvsNC+5sFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83MzhmNzgtNDM4Yy00YmZkLTgwNmIt
NzNiZmFkODMyZDJkLzEvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny83MzhmNzgtNDM4Yy00YmZkLTgwNmItNzNiZmFkODMyZDJk
LzEvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngovXI6e
y7DW5KkFUhvlCdebNY6OIMMuDsGCBRe9oMd8TpaAKOHes2anZnUJ8zz4DxKP9JFd
YAHis1j1u+IPhn5wMC1cLB/xyX9yRcAGWj7QD88F52+BJ2ItuOSDJ0kM+TfG0Ar8
SW8b5/aTJSzwkcZwdCmu6UTMeHwlQsGplxff8OrH1YFYocXWNqEBt91f+uc5R7dP
5l55ZY8tEYMxvln6L2y7QPwocCmd/ympHFftGF26VPZYrAbdSZdxV/zlxKZyeQ8d
MyGlcvOb+wbwQARGjtMW+XRZjoI5cSN67N1x+dtJuqfPI0/xBoP2pG4SV/ZShyXN
Fajo+4fO2gYyhA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:22 2025 by rpki-client