Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
File: d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft (raw, json)
Hash identifier: pfcvliKBHojWYCzstdjCofrP3hQOfrAWNbmo2LP+7aE=
Subject key identifier: 8C:49:BA:8C:EA:0A:41:C1:C7:E6:02:70:F4:07:65:18:96:E6:32:C2
Authority key identifier: 77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
Certificate issuer: /CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Certificate serial: 0195E07D1F61370A6C05AA5667B6D3E5A4ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
Manifest number: 0E2B
Signing time: Sat 29 Mar 2025 06:00:51 +0000
Manifest this update: Sat 29 Mar 2025 06:00:51 +0000
Manifest next update: Sun 30 Mar 2025 06:00:51 +0000
Files and hashes: 1: 1-CTcDUEdN5WfEm_rs3o0JHhk5XU.roa (hash: lk5WrQW7f4eLUx+kxUxuWVLfFLTkEmxU4/4R6+50tjM=)
2: QsI91EQU0FfuQWtPM8GSqH3JUGY.roa (hash: E3wsAexKJr8HQY5TnjV1zhmCkOPgMph7WKoFlQ4Vnzc=)
3: d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl (hash: i9N9rChflAqU0jDWC+E1TetCuy+UdGUTdJzX0U3cAT4=)
4: g7sPwfEyrg2GU6nX9GnEZI5ry6U.roa (hash: gvrZns7JDU/MxjbK6KJTEHNI6mOo43rYah4+1PHu7cs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:1f:61:37:0a:6c:05:aa:56:67:b6:d3:e5:a4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Validity
Not Before: Mar 29 06:00:51 2025 GMT
Not After : Mar 30 06:00:51 2025 GMT
Subject: CN=8c49ba8cea0a41c1c7e60270f407651896e632c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:84:c1:93:86:3a:15:29:09:2b:32:c3:4b:
08:38:b0:ed:36:1d:5c:17:72:b2:e3:f5:b2:b8:fc:
43:be:df:0c:fe:df:c5:db:f4:3a:92:8d:95:0e:54:
b9:21:b7:ae:22:7a:1b:a1:c6:27:84:a7:83:0a:2b:
38:21:a2:43:3e:15:00:9a:5f:cd:7e:d0:d9:fd:e2:
c2:a3:55:bc:3c:1a:ce:9d:30:14:30:00:0a:b9:ef:
b6:4c:ef:57:9f:55:91:7b:b4:df:34:98:07:bd:2a:
c1:0b:ac:6a:0c:51:ed:97:be:87:39:52:bc:b5:67:
00:fd:ce:55:d8:a7:da:97:47:1e:36:37:e7:6a:d3:
ff:09:6e:51:22:69:6b:7c:8d:d3:ce:f3:06:8f:6b:
ee:e8:38:7a:0f:15:d6:7e:3a:1a:85:93:17:59:58:
88:ec:41:84:69:8d:3d:e8:2f:19:8a:25:37:ec:63:
29:2e:1a:0e:2c:25:87:46:81:93:c3:a9:14:43:c2:
ce:1e:66:98:36:a0:ed:f5:de:f4:49:62:28:ea:d0:
dc:3c:9c:46:a9:2f:6f:48:a4:19:ad:a0:01:d3:ad:
cf:52:80:47:df:a2:7e:2a:02:7a:02:6d:d8:81:15:
3c:3a:ea:cf:a2:26:fa:75:e6:29:93:8e:82:e5:e9:
72:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:49:BA:8C:EA:0A:41:C1:C7:E6:02:70:F4:07:65:18:96:E6:32:C2
X509v3 Authority Key Identifier:
keyid:77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b3:1a:e1:78:a9:9c:5f:9b:08:e3:13:a8:9d:ec:7f:a5:0d:
2d:a6:a5:ef:3b:8b:12:e5:a4:ec:ed:a1:68:cf:4d:79:c4:1d:
5f:a2:ce:30:1a:8f:4e:a6:a6:0a:d5:7c:da:38:23:38:5c:b3:
81:cd:1f:14:8a:c0:06:c2:52:1c:fc:a8:02:09:24:53:a1:59:
6d:07:34:9a:ac:04:bc:39:62:59:c6:ba:f0:4c:eb:f8:06:36:
da:f9:a0:23:8c:25:97:25:bb:55:cd:b9:d7:fd:d7:fc:f8:85:
66:dd:69:69:40:5c:75:81:a5:bf:af:19:c0:8e:f1:db:51:c7:
e5:6c:95:1d:b8:cd:30:4c:69:66:e7:d3:10:46:bc:c3:cd:83:
ec:c7:62:df:1a:89:36:9d:ff:8f:0b:5f:39:4f:e4:c9:8a:3b:
4e:96:51:2f:5b:0e:81:39:b6:dd:b0:40:64:41:ac:ad:44:ec:
e2:9c:ed:ae:92:42:a7:79:c7:3b:b5:be:76:eb:8c:08:04:18:
19:de:46:6a:13:ad:19:f7:b5:8f:d2:17:5d:63:88:94:85:b6:
55:bb:fe:14:d4:0c:87:4b:5a:d3:55:ee:53:41:bc:ea:91:54:
01:c5:df:22:d4:ef:7e:04:8c:54:d0:27:bf:f4:b6:f3:75:d8:
3e:45:06:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgfR9hNwpsBapWZ7bT5aTtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YmM1MzRiYTQ0ZTlkM2NiYTJmMjQ0NmQ0YTNkZDZlZWE5
YjhmNjEwHhcNMjUwMzI5MDYwMDUxWhcNMjUwMzMwMDYwMDUxWjAzMTEwLwYDVQQD
Eyg4YzQ5YmE4Y2VhMGE0MWMxYzdlNjAyNzBmNDA3NjUxODk2ZTYzMmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/KEwZOGOhUpCSsyw0sIOLDtNh1c
F3Ky4/WyuPxDvt8M/t/F2/Q6ko2VDlS5IbeuInobocYnhKeDCis4IaJDPhUAml/N
ftDZ/eLCo1W8PBrOnTAUMAAKue+2TO9Xn1WRe7TfNJgHvSrBC6xqDFHtl76HOVK8
tWcA/c5V2Kfal0ceNjfnatP/CW5RImlrfI3TzvMGj2vu6Dh6DxXWfjoahZMXWViI
7EGEaY096C8ZiiU37GMpLhoOLCWHRoGTw6kUQ8LOHmaYNqDt9d70SWIo6tDcPJxG
qS9vSKQZraAB063PUoBH36J+KgJ6Am3YgRU8OurPoib6deYpk46C5elyWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxJuozqCkHBx+YCcPQHZRiW5jLCMB8GA1UdIwQY
MBaAFHe8U0ukTp08ui8kRtSj3W7qm49hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDd4VFM2Uk9uVHk2THlSRzFLUGRidXFiajJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8yZmRkNTYtYmEyYy00NmZiLTk4ODIt
OWIyNTdmNGZlYThkLzEvZDd4VFM2Uk9uVHk2THlSRzFLUGRidXFiajJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8yZmRkNTYtYmEyYy00NmZiLTk4ODItOWIyNTdmNGZlYThk
LzEvZDd4VFM2Uk9uVHk2THlSRzFLUGRidXFiajJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLMa4Xip
nF+bCOMTqJ3sf6UNLaal7zuLEuWk7O2haM9NecQdX6LOMBqPTqamCtV82jgjOFyz
gc0fFIrABsJSHPyoAgkkU6FZbQc0mqwEvDliWca68Ezr+AY22vmgI4wllyW7Vc25
1/3X/PiFZt1paUBcdYGlv68ZwI7x21HH5WyVHbjNMExpZufTEEa8w82D7Mdi3xqJ
Np3/jwtfOU/kyYo7TpZRL1sOgTm23bBAZEGsrUTs4pztrpJCp3nHO7W+duuMCAQY
Gd5GahOtGfe1j9IXXWOIlIW2Vbv+FNQMh0ta01XuU0G86pFUAcXfItTvfgSMVNAn
v/S283XYPkUGqQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:09:33 2025 by rpki-client