Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4891c4-53bd-4ad6-bade-e4b23f768957/1/2Rd8_ThRpdUeRXKfUVZ0kkh4SIU.mft
File: 2Rd8_ThRpdUeRXKfUVZ0kkh4SIU.mft (raw, json)
Hash identifier: 4h2Fh2onzKL6Z3E5+eQOSq+Q4WUIen7QlmT30hsPmFY=
Subject key identifier: DC:AF:EA:73:12:1F:B5:28:92:1F:27:80:82:EA:FA:BF:A3:19:3F:D9
Authority key identifier: D9:17:7C:FD:38:51:A5:D5:1E:45:72:9F:51:56:74:92:48:78:48:85
Certificate issuer: /CN=d9177cfd3851a5d51e45729f5156749248784885
Certificate serial: 018CAA4AE359EDCD3A65270A74D560999C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Rd8_ThRpdUeRXKfUVZ0kkh4SIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4891c4-53bd-4ad6-bade-e4b23f768957/1/2Rd8_ThRpdUeRXKfUVZ0kkh4SIU.mft
Manifest number: D0
Signing time: Wed 27 Dec 2023 08:01:23 +0000
Manifest this update: Wed 27 Dec 2023 08:01:23 +0000
Manifest next update: Thu 28 Dec 2023 08:01:23 +0000
Files and hashes: 1: 2Rd8_ThRpdUeRXKfUVZ0kkh4SIU.crl (hash: bEllkbPEXNZjliuWvve6dpa7s85KXTGIDiLy4ps59Dk=)
2: rqoLnZge1IdofSuKjEp1P28fzG4.roa (hash: 87MDZuhxq98g342/UicsxWyg+eE2e9uEBU1wIUgVNIY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:aa:4a:e3:59:ed:cd:3a:65:27:0a:74:d5:60:99:9c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9177cfd3851a5d51e45729f5156749248784885
Validity
Not Before: Dec 27 08:01:23 2023 GMT
Not After : Dec 28 08:01:23 2023 GMT
Subject: CN=dcafea73121fb528921f278082eafabfa3193fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:22:eb:16:bf:c0:7c:35:ec:86:98:b2:48:dc:
fb:cb:7c:c1:93:6b:b7:83:37:2a:43:62:d0:9f:2d:
56:3c:aa:8b:a0:d8:04:bb:dd:9a:91:86:57:f3:7c:
8d:09:1a:8d:d7:82:90:a9:e9:06:f5:69:c1:d4:6a:
00:7e:fe:db:af:21:7f:30:e2:9e:b5:3f:cf:c6:37:
8f:fd:4a:94:bc:1c:a3:b1:a1:03:14:e2:3b:51:74:
4c:10:32:02:21:6e:cc:83:ff:9c:56:04:3a:df:11:
dc:e8:d3:a2:7e:93:cb:fb:97:3e:d6:58:05:95:07:
ef:16:3a:91:c2:fe:7a:20:b6:ac:90:f9:d6:72:b9:
99:a2:26:0c:eb:1a:f8:52:77:21:15:e2:58:d6:ed:
41:ba:22:32:fd:d7:38:fa:80:75:9d:df:89:a9:68:
94:6b:3a:c3:6a:f3:f2:3b:7b:85:1e:33:b8:20:21:
3c:dd:4c:30:be:1d:af:99:96:0b:c4:98:bc:b8:7c:
8a:22:6d:37:63:bc:7a:00:7d:9f:83:a6:2e:bc:f3:
60:ba:22:40:24:c6:62:cc:35:6c:65:b5:f1:bd:57:
e4:e6:c2:9b:db:6d:87:8c:8d:f9:bf:43:0d:13:9a:
fc:e3:92:42:62:f0:37:6c:dd:90:72:96:a8:60:7e:
50:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AF:EA:73:12:1F:B5:28:92:1F:27:80:82:EA:FA:BF:A3:19:3F:D9
X509v3 Authority Key Identifier:
keyid:D9:17:7C:FD:38:51:A5:D5:1E:45:72:9F:51:56:74:92:48:78:48:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rd8_ThRpdUeRXKfUVZ0kkh4SIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4891c4-53bd-4ad6-bade-e4b23f768957/1/2Rd8_ThRpdUeRXKfUVZ0kkh4SIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4891c4-53bd-4ad6-bade-e4b23f768957/1/2Rd8_ThRpdUeRXKfUVZ0kkh4SIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:72:08:dc:ab:3b:98:98:fc:4f:8f:77:75:4e:ff:c6:cd:fd:
45:1d:54:bd:2a:95:ef:fc:c0:83:f7:f1:c2:0d:c1:0a:f2:6a:
67:8e:ff:ef:ad:88:22:55:b7:88:71:10:5a:00:23:d3:6b:d7:
2d:57:26:e0:fc:68:98:61:ca:3d:d5:74:47:fa:20:36:b0:bf:
5f:9e:5f:45:47:c4:a0:27:1a:64:62:77:1d:74:2c:2c:20:1a:
91:62:fd:d2:dc:98:83:c4:08:f1:5e:05:da:a6:ad:14:a0:c3:
a9:e6:40:61:1a:37:c0:cc:0e:9d:87:a2:e8:ad:a2:d4:e1:44:
e7:31:b9:dc:7f:11:4c:b9:13:c8:26:b8:65:75:51:f5:1e:6b:
ad:ed:2f:70:5e:a1:7f:6e:e9:8e:15:fe:92:48:77:b7:de:6c:
94:2d:93:1f:d3:45:f6:ee:75:c1:26:64:d9:74:f1:c5:dc:3c:
63:8f:60:be:0c:01:6b:b7:7b:b2:f9:f9:f1:ce:85:88:5e:68:
9c:05:fb:d3:89:fe:b7:c5:15:3f:fd:7c:68:3d:00:1d:48:90:
22:d0:b4:90:2b:0d:46:25:5b:07:3e:f9:90:6d:11:3a:13:ae:
9f:f3:b4:28:5e:ad:68:f7:46:4d:b4:f8:97:2f:20:90:6d:39:
84:36:92:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYyqSuNZ7c06ZScKdNVgmZyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTc3Y2ZkMzg1MWE1ZDUxZTQ1NzI5ZjUxNTY3NDkyNDg3
ODQ4ODUwHhcNMjMxMjI3MDgwMTIzWhcNMjMxMjI4MDgwMTIzWjAzMTEwLwYDVQQD
EyhkY2FmZWE3MzEyMWZiNTI4OTIxZjI3ODA4MmVhZmFiZmEzMTkzZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCLrFr/AfDXshpiySNz7y3zBk2u3
gzcqQ2LQny1WPKqLoNgEu92akYZX83yNCRqN14KQqekG9WnB1GoAfv7bryF/MOKe
tT/PxjeP/UqUvByjsaEDFOI7UXRMEDICIW7Mg/+cVgQ63xHc6NOifpPL+5c+1lgF
lQfvFjqRwv56ILaskPnWcrmZoiYM6xr4UnchFeJY1u1BuiIy/dc4+oB1nd+JqWiU
azrDavPyO3uFHjO4ICE83Uwwvh2vmZYLxJi8uHyKIm03Y7x6AH2fg6YuvPNguiJA
JMZizDVsZbXxvVfk5sKb222HjI35v0MNE5r845JCYvA3bN2QcpaoYH5Q5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyv6nMSH7Uokh8ngILq+r+jGT/ZMB8GA1UdIwQY
MBaAFNkXfP04UaXVHkVyn1FWdJJIeEiFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJkOF9UaFJwZFVlUlhLZlVWWjBra2g0U0lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS80ODkxYzQtNTNiZC00YWQ2LWJhZGUt
ZTRiMjNmNzY4OTU3LzEvMlJkOF9UaFJwZFVlUlhLZlVWWjBra2g0U0lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS80ODkxYzQtNTNiZC00YWQ2LWJhZGUtZTRiMjNmNzY4OTU3
LzEvMlJkOF9UaFJwZFVlUlhLZlVWWjBra2g0U0lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHII3Ks7
mJj8T493dU7/xs39RR1UvSqV7/zAg/fxwg3BCvJqZ47/762IIlW3iHEQWgAj02vX
LVcm4PxomGHKPdV0R/ogNrC/X55fRUfEoCcaZGJ3HXQsLCAakWL90tyYg8QI8V4F
2qatFKDDqeZAYRo3wMwOnYei6K2i1OFE5zG53H8RTLkTyCa4ZXVR9R5rre0vcF6h
f27pjhX+kkh3t95slC2TH9NF9u51wSZk2XTxxdw8Y49gvgwBa7d7svn58c6FiF5o
nAX704n+t8UVP/18aD0AHUiQItC0kCsNRiVbBz75kG0ROhOun/O0KF6taPdGTbT4
ly8gkG05hDaSMw==
-----END CERTIFICATE-----
Generated at Wed Mar 12 12:06:28 2025 by rpki-client