Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d217d2-571e-4467-a225-6f9179ea997e/1/D8oMitEt3CBbFaieRTA7LWPwRYg.mft
File: D8oMitEt3CBbFaieRTA7LWPwRYg.mft (raw, json)
Hash identifier: cbL4jUxQ0kgkLrmLS1m6Lat3f9LzriEW9JSRF7dBSY0=
Subject key identifier: 85:73:46:80:0B:44:E6:2E:E4:50:C4:38:EC:E2:3E:26:EC:83:3B:F6
Authority key identifier: 0F:CA:0C:8A:D1:2D:DC:20:5B:15:A8:9E:45:30:3B:2D:63:F0:45:88
Certificate issuer: /CN=0fca0c8ad12ddc205b15a89e45303b2d63f04588
Certificate serial: 018B14195197BF700657172B2D70F81DB553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8oMitEt3CBbFaieRTA7LWPwRYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d217d2-571e-4467-a225-6f9179ea997e/1/D8oMitEt3CBbFaieRTA7LWPwRYg.mft
Manifest number: 08
Signing time: Mon 09 Oct 2023 11:01:25 +0000
Manifest this update: Mon 09 Oct 2023 11:01:25 +0000
Manifest next update: Tue 10 Oct 2023 11:01:25 +0000
Files and hashes: 1: CrNtGhwM3kUFOIgFmPQyMMhBGgI.roa (hash: ksfxLYkYtnicGUqMWotMAKVgaDRHI8fa1c8tS5JjcEo=)
2: D8oMitEt3CBbFaieRTA7LWPwRYg.crl (hash: io8LEPmlyL7lWCIu7fXdcu0oaGJDYAzj7Zbr/XPI1ts=)
3: SP4gpIFpIsoOCDud9jsawfLCElw.roa (hash: aqQ8yOLvDwdN1Nv65aT1J6qJ5pCb2n4x6l2kYOeoFqo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:19:51:97:bf:70:06:57:17:2b:2d:70:f8:1d:b5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fca0c8ad12ddc205b15a89e45303b2d63f04588
Validity
Not Before: Oct 9 11:01:25 2023 GMT
Not After : Oct 10 11:01:25 2023 GMT
Subject: CN=857346800b44e62ee450c438ece23e26ec833bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:18:fc:2b:0c:b3:b9:1a:d3:80:b3:7d:4d:
6a:6e:a0:11:96:94:08:bd:a7:c9:5a:6d:60:1a:dc:
c5:48:32:04:37:e4:4e:71:c5:02:5c:cf:ed:63:47:
4f:bf:8d:cd:85:da:49:45:1b:bf:a0:41:d1:d5:5b:
a9:78:7b:f7:9c:09:c4:4b:5a:27:e2:69:0a:12:f3:
1a:c8:ee:95:32:42:4e:b7:9f:73:05:46:8f:c8:6c:
94:35:56:4c:02:ac:a9:61:8a:07:4f:e3:be:4c:da:
da:75:12:2f:5e:e1:f3:18:0a:c1:6a:f8:4a:1d:92:
af:13:07:b9:bd:99:c2:09:d1:5c:2f:a7:02:1d:7b:
79:d8:ab:21:3d:dd:1f:5e:bd:04:57:55:be:96:8f:
23:cc:5f:f6:bb:2a:ca:38:4f:76:f6:89:d1:9b:23:
92:91:5d:e8:95:a7:ac:9a:12:e4:6f:33:27:19:ce:
ed:3c:87:6d:1f:28:72:3c:89:64:8b:bc:f2:68:71:
9f:bc:e0:ab:fe:29:45:96:a8:88:84:47:54:96:aa:
b9:f6:e4:86:a5:b4:37:64:ff:2a:f0:50:78:33:93:
8e:ca:89:67:a9:c0:a9:67:ae:65:95:53:f5:16:4f:
7a:08:a9:ea:be:8c:29:40:7f:0d:b0:a2:50:cc:37:
51:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:73:46:80:0B:44:E6:2E:E4:50:C4:38:EC:E2:3E:26:EC:83:3B:F6
X509v3 Authority Key Identifier:
keyid:0F:CA:0C:8A:D1:2D:DC:20:5B:15:A8:9E:45:30:3B:2D:63:F0:45:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8oMitEt3CBbFaieRTA7LWPwRYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d217d2-571e-4467-a225-6f9179ea997e/1/D8oMitEt3CBbFaieRTA7LWPwRYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d217d2-571e-4467-a225-6f9179ea997e/1/D8oMitEt3CBbFaieRTA7LWPwRYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:18:68:b5:92:ff:d1:37:b4:e6:ab:a7:b6:22:a4:cd:cb:3e:
dd:32:a3:2e:5f:09:b0:04:77:ed:aa:c9:6c:85:56:7f:0f:10:
b9:45:63:96:46:e5:7c:e8:aa:dc:5a:f6:9d:de:34:e7:51:8f:
63:49:16:79:5a:6b:ca:ec:8b:b7:6a:8d:54:48:61:5d:36:ab:
42:83:ef:85:df:1f:c0:30:91:08:67:01:8b:50:13:99:9a:9b:
1c:f9:aa:81:8e:3b:46:e7:18:e8:70:26:98:0f:12:42:b7:93:
4f:cf:46:cd:a9:83:62:89:3b:0c:71:9a:60:e8:c5:ee:c9:2b:
79:72:4a:b5:f9:40:fe:6d:f7:db:60:45:b7:6f:d2:3b:72:ea:
cf:86:3a:7a:6b:82:5e:1b:60:a5:b2:ef:ef:f0:81:0e:44:55:
ef:6f:d0:a6:57:aa:af:ca:d0:c5:79:87:5d:27:a6:41:02:63:
6c:f8:c8:33:64:d8:6b:f3:a7:b0:59:76:99:8b:33:51:49:56:
fb:e3:7a:43:de:cf:b3:b0:4e:aa:95:e5:0a:10:91:f2:8c:d0:
98:9b:09:a8:6f:91:08:86:95:14:1b:99:a6:bf:71:a7:2a:05:
d3:16:1d:18:78:f5:ae:41:3d:26:6c:4f:dd:63:31:84:0c:26:
e5:e0:a9:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYsUGVGXv3AGVxcrLXD4HbVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmY2EwYzhhZDEyZGRjMjA1YjE1YTg5ZTQ1MzAzYjJkNjNm
MDQ1ODgwHhcNMjMxMDA5MTEwMTI1WhcNMjMxMDEwMTEwMTI1WjAzMTEwLwYDVQQD
Eyg4NTczNDY4MDBiNDRlNjJlZTQ1MGM0MzhlY2UyM2UyNmVjODMzYmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzQY/CsMs7ka04CzfU1qbqARlpQI
vafJWm1gGtzFSDIEN+ROccUCXM/tY0dPv43NhdpJRRu/oEHR1VupeHv3nAnES1on
4mkKEvMayO6VMkJOt59zBUaPyGyUNVZMAqypYYoHT+O+TNradRIvXuHzGArBavhK
HZKvEwe5vZnCCdFcL6cCHXt52KshPd0fXr0EV1W+lo8jzF/2uyrKOE929onRmyOS
kV3olaesmhLkbzMnGc7tPIdtHyhyPIlki7zyaHGfvOCr/ilFlqiIhEdUlqq59uSG
pbQ3ZP8q8FB4M5OOyolnqcCpZ65llVP1Fk96CKnqvowpQH8NsKJQzDdRxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVzRoALROYu5FDEOOziPibsgzv2MB8GA1UdIwQY
MBaAFA/KDIrRLdwgWxWonkUwOy1j8EWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDhvTWl0RXQzQ0JiRmFpZVJUQTdMV1B3UllnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kMjE3ZDItNTcxZS00NDY3LWEyMjUt
NmY5MTc5ZWE5OTdlLzEvRDhvTWl0RXQzQ0JiRmFpZVJUQTdMV1B3UllnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kMjE3ZDItNTcxZS00NDY3LWEyMjUtNmY5MTc5ZWE5OTdl
LzEvRDhvTWl0RXQzQ0JiRmFpZVJUQTdMV1B3UllnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxhotZL/
0Te05quntiKkzcs+3TKjLl8JsAR37arJbIVWfw8QuUVjlkblfOiq3Fr2nd4051GP
Y0kWeVpryuyLt2qNVEhhXTarQoPvhd8fwDCRCGcBi1ATmZqbHPmqgY47RucY6HAm
mA8SQreTT89GzamDYok7DHGaYOjF7skreXJKtflA/m3322BFt2/SO3Lqz4Y6emuC
XhtgpbLv7/CBDkRV72/Qpleqr8rQxXmHXSemQQJjbPjIM2TYa/OnsFl2mYszUUlW
++N6Q97Ps7BOqpXlChCR8ozQmJsJqG+RCIaVFBuZpr9xpyoF0xYdGHj1rkE9JmxP
3WMxhAwm5eCpEA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:52:56 2025 by rpki-client