Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
File: x8H9uvmsDlre7GCgkjxN1KAektw.mft (raw, json)
Hash identifier: pw09eZecA25EFeFSV1EpGFwP/ly+Wi+Eqd6Z0r9leYc=
Subject key identifier: FF:41:FE:02:8A:1F:5F:A9:D7:7C:2A:00:A4:44:A8:92:22:D6:60:D1
Authority key identifier: C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
Certificate issuer: /CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Certificate serial: 0195E1906133ECFD59A4DAA816618F9E516A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
Manifest number: 14C5
Signing time: Sat 29 Mar 2025 11:01:30 +0000
Manifest this update: Sat 29 Mar 2025 11:01:30 +0000
Manifest next update: Sun 30 Mar 2025 11:01:30 +0000
Files and hashes: 1: KuITA8F2JpisQKF630WYOsFc4wk.roa (hash: bB2rOvgz8hjIMe852Fv1qtbwAzNh+J9BjKdpPYjEPmg=)
2: x8H9uvmsDlre7GCgkjxN1KAektw.crl (hash: 0Iu+P6LtI/Fy+uJS5OGfy2L8HrKlinGPTRKzjtT3fhs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:61:33:ec:fd:59:a4:da:a8:16:61:8f:9e:51:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Validity
Not Before: Mar 29 11:01:30 2025 GMT
Not After : Mar 30 11:01:30 2025 GMT
Subject: CN=ff41fe028a1f5fa9d77c2a00a444a89222d660d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:d4:37:45:1f:1b:a2:fe:d2:0c:b4:83:b9:
d8:b9:59:cb:8d:e9:82:3b:56:ae:d7:31:3b:a7:e3:
1a:b6:a0:93:99:58:d4:ec:9d:b8:63:66:5c:98:e8:
30:2f:df:96:72:49:31:d9:c9:73:aa:72:44:7d:3f:
99:8c:12:d4:97:b4:41:94:84:f1:f4:8e:87:7d:e5:
ed:77:56:57:4e:f1:ed:d1:0f:fe:06:83:3e:63:53:
00:33:99:77:67:87:db:a4:3f:25:d0:bb:2c:60:f2:
ef:76:d3:ad:f6:f8:07:fc:13:1f:0a:cc:68:25:18:
a4:31:f6:47:e8:96:29:59:77:9d:c1:33:f8:f7:71:
d5:93:b6:4a:de:da:9b:9f:0f:33:44:f2:76:f3:49:
31:ee:4f:50:db:b0:ac:5c:c2:30:73:9e:a7:bc:df:
28:75:34:82:02:01:ae:56:d9:9a:35:af:ff:c7:8e:
df:31:59:48:00:db:65:e7:56:39:55:80:9f:47:a8:
df:79:a7:7f:0d:d2:a2:ed:87:ed:a5:ec:92:a8:fe:
c5:88:04:cd:64:bf:0c:14:2d:82:7f:71:d8:5e:cb:
41:03:5b:63:6c:ae:40:30:45:15:62:60:ad:d9:31:
46:37:12:38:77:f2:c4:c8:d4:98:fd:cd:ae:3c:5d:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:41:FE:02:8A:1F:5F:A9:D7:7C:2A:00:A4:44:A8:92:22:D6:60:D1
X509v3 Authority Key Identifier:
keyid:C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:95:2c:6a:79:16:af:01:d6:82:19:f9:c3:15:c5:ec:6d:f0:
cf:70:0f:f6:fd:86:e9:4c:e0:af:57:6c:00:f3:2d:5c:43:75:
bf:b5:8c:ac:6d:9d:13:58:92:93:0e:75:04:10:9f:d0:df:64:
c5:77:98:eb:e1:fc:01:e8:cd:c5:03:10:a9:3b:18:12:78:72:
cb:b9:1a:8e:8c:91:48:8f:22:c1:86:19:b3:48:e3:32:c9:a8:
e2:d4:d8:c2:70:57:6b:c3:e1:6c:c9:59:fa:5f:a3:8a:7f:ab:
41:cd:fd:f9:10:70:47:83:ea:a3:29:63:ef:f3:82:a0:34:e4:
f1:83:b1:d8:55:69:ce:46:13:83:97:d2:c4:92:5e:9e:91:c0:
16:35:e6:e6:3d:f8:f4:2c:46:82:1e:d9:de:59:03:c5:09:08:
88:d5:bd:28:48:a3:f3:1f:79:e4:be:57:2d:a3:6d:64:df:30:
63:d0:66:29:2f:99:20:af:fc:fe:df:94:a2:e8:5e:63:13:cc:
16:56:46:f2:0f:dc:c1:00:87:6f:b0:d3:8a:3e:7e:8c:c6:78:
3d:33:d9:00:77:39:b0:bb:24:73:d0:b3:b4:92:05:38:2f:85:
80:2d:6d:64:ba:4a:fd:47:c4:27:4a:c6:f0:11:19:a5:7a:3d:
ba:34:85:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhkGEz7P1ZpNqoFmGPnlFqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YzFmZGJhZjlhYzBlNWFkZWVjNjBhMDkyM2M0ZGQ0YTAx
ZTkyZGMwHhcNMjUwMzI5MTEwMTMwWhcNMjUwMzMwMTEwMTMwWjAzMTEwLwYDVQQD
EyhmZjQxZmUwMjhhMWY1ZmE5ZDc3YzJhMDBhNDQ0YTg5MjIyZDY2MGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFLUN0UfG6L+0gy0g7nYuVnLjemC
O1au1zE7p+MatqCTmVjU7J24Y2ZcmOgwL9+Wckkx2clzqnJEfT+ZjBLUl7RBlITx
9I6HfeXtd1ZXTvHt0Q/+BoM+Y1MAM5l3Z4fbpD8l0LssYPLvdtOt9vgH/BMfCsxo
JRikMfZH6JYpWXedwTP493HVk7ZK3tqbnw8zRPJ280kx7k9Q27CsXMIwc56nvN8o
dTSCAgGuVtmaNa//x47fMVlIANtl51Y5VYCfR6jfead/DdKi7YftpeySqP7FiATN
ZL8MFC2Cf3HYXstBA1tjbK5AMEUVYmCt2TFGNxI4d/LEyNSY/c2uPF0noQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9B/gKKH1+p13wqAKREqJIi1mDRMB8GA1UdIwQY
MBaAFMfB/br5rA5a3uxgoJI8TdSgHpLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82YTI3MmItOGI2Zi00ZmUzLThmMjkt
ZjAwMjk4MTYwOTdlLzEveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi82YTI3MmItOGI2Zi00ZmUzLThmMjktZjAwMjk4MTYwOTdl
LzEveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpUsankW
rwHWghn5wxXF7G3wz3AP9v2G6Uzgr1dsAPMtXEN1v7WMrG2dE1iSkw51BBCf0N9k
xXeY6+H8AejNxQMQqTsYEnhyy7kajoyRSI8iwYYZs0jjMsmo4tTYwnBXa8PhbMlZ
+l+jin+rQc39+RBwR4Pqoylj7/OCoDTk8YOx2FVpzkYTg5fSxJJenpHAFjXm5j34
9CxGgh7Z3lkDxQkIiNW9KEij8x955L5XLaNtZN8wY9BmKS+ZIK/8/t+UouheYxPM
FlZG8g/cwQCHb7DTij5+jMZ4PTPZAHc5sLskc9CztJIFOC+FgC1tZLpK/UfEJ0rG
8BEZpXo9ujSFJQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:44:56 2025 by rpki-client