Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b078e-908a-41a9-b637-3db4a1d4b42c/1/rot8zxC7hJ_4SOKEG7fAUoEqUB0.mft
File: rot8zxC7hJ_4SOKEG7fAUoEqUB0.mft (raw, json)
Hash identifier: WSRV7PYFxdwrZKopKAk66Maw8qTipPBix2t5iWmXCoo=
Subject key identifier: F2:EE:A3:7B:51:2A:5C:ED:22:E5:49:91:21:3E:8D:7E:7C:67:24:DC
Authority key identifier: AE:8B:7C:CF:10:BB:84:9F:F8:48:E2:84:1B:B7:C0:52:81:2A:50:1D
Certificate issuer: /CN=ae8b7ccf10bb849ff848e2841bb7c052812a501d
Certificate serial: 0193531A20AE7BE35F4FDB404527B1D5100B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rot8zxC7hJ_4SOKEG7fAUoEqUB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b078e-908a-41a9-b637-3db4a1d4b42c/1/rot8zxC7hJ_4SOKEG7fAUoEqUB0.mft
Manifest number: 076D
Signing time: Fri 22 Nov 2024 09:00:41 +0000
Manifest this update: Fri 22 Nov 2024 09:00:41 +0000
Manifest next update: Sat 23 Nov 2024 09:00:41 +0000
Files and hashes: 1: rot8zxC7hJ_4SOKEG7fAUoEqUB0.crl (hash: BrHINQkMBwF+iqRrAjzK0eV0JWKXqtff5iQ3tAVlDgw=)
2: xsK_sWYdobF5qj_3szm1gfdQSIQ.roa (hash: y3SlLTWJx7ugPfunlAa/sngHlHXp0folMIJv3FeFxpc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:1a:20:ae:7b:e3:5f:4f:db:40:45:27:b1:d5:10:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8b7ccf10bb849ff848e2841bb7c052812a501d
Validity
Not Before: Nov 22 09:00:41 2024 GMT
Not After : Nov 23 09:00:41 2024 GMT
Subject: CN=f2eea37b512a5ced22e54991213e8d7e7c6724dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:7b:12:ac:a5:03:d8:d8:b6:f1:a4:92:4a:
59:62:13:f3:b8:e4:6d:05:ba:c9:f0:ae:d4:b1:e5:
fb:27:ca:c1:dc:11:d2:e0:06:2e:a0:46:33:39:34:
ad:f2:ae:44:04:3b:0d:15:85:a9:41:2f:b1:65:e3:
a1:76:92:6f:b6:e2:7a:b1:e0:95:92:7f:e6:67:90:
23:bf:1f:86:88:43:af:b1:b0:1b:0e:64:6c:e7:3b:
bb:4b:63:3d:66:2e:aa:0a:00:f7:05:33:45:6b:85:
fa:ac:1d:5b:4e:82:62:4d:70:2b:ec:6f:8f:5a:14:
9c:49:db:72:02:38:8f:6e:1d:cb:f3:13:8a:87:01:
9d:b0:1e:35:d4:90:d2:4f:c9:e1:da:ce:2b:30:1a:
10:c5:54:8b:62:20:12:e9:7b:c5:34:e8:57:4f:5c:
d6:17:30:31:f9:d4:e8:67:0c:16:72:e1:02:0f:18:
21:10:cf:23:f2:e1:25:1b:28:8d:7f:8e:80:ff:b1:
7c:ad:e3:9b:fd:d3:ad:35:4a:40:b0:cf:e3:a7:48:
31:10:f3:11:df:0f:93:0a:d4:d9:91:04:f4:c3:db:
43:c5:7f:d4:9d:ea:3e:b0:e4:a3:82:27:f1:2c:01:
7a:ab:5a:01:00:1a:d6:23:2e:ae:90:6e:1a:62:66:
5c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EE:A3:7B:51:2A:5C:ED:22:E5:49:91:21:3E:8D:7E:7C:67:24:DC
X509v3 Authority Key Identifier:
keyid:AE:8B:7C:CF:10:BB:84:9F:F8:48:E2:84:1B:B7:C0:52:81:2A:50:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rot8zxC7hJ_4SOKEG7fAUoEqUB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b078e-908a-41a9-b637-3db4a1d4b42c/1/rot8zxC7hJ_4SOKEG7fAUoEqUB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b078e-908a-41a9-b637-3db4a1d4b42c/1/rot8zxC7hJ_4SOKEG7fAUoEqUB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2d:54:6f:0b:48:70:46:41:1f:c2:16:25:14:04:71:4d:21:
9b:8a:b2:d4:6f:3c:d6:5d:52:7b:c7:4b:60:3a:59:27:07:4e:
be:d6:a5:22:7d:57:5e:7e:60:0e:c3:a2:f1:91:1e:72:2d:ca:
63:43:cd:e3:e4:a8:e8:30:27:ac:01:1e:92:49:db:ee:e5:9c:
03:d4:1d:af:8e:d8:49:2a:c6:4e:9e:2e:5d:c6:0e:2f:13:e1:
0e:74:a4:d4:d1:20:bf:a7:52:6c:f3:a9:fc:fa:16:68:af:c7:
ee:7b:74:aa:a9:e8:64:e2:22:2e:08:66:d3:91:02:6d:1d:7a:
ac:ca:a8:56:bc:b7:a1:44:e8:24:0a:54:28:b8:74:89:56:44:
75:31:16:70:67:29:6b:e3:38:28:af:39:39:16:31:a7:ed:35:
2b:87:f1:f5:8f:74:9a:61:36:70:10:8d:fe:ac:5c:88:af:83:
05:b9:1a:9b:b8:3e:b2:68:81:20:b4:61:74:c5:a6:29:8e:dc:
fe:9f:3f:4a:9c:3b:8a:54:96:62:31:ee:99:2b:98:a3:d8:86:
d2:9d:79:64:c9:6c:d0:40:1b:af:1d:cb:06:58:1f:59:02:57:
95:ba:2e:86:8c:9f:76:08:bc:2c:1e:5a:49:1b:be:2d:56:f0:
d3:80:fd:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNTGiCue+NfT9tARSex1RALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlOGI3Y2NmMTBiYjg0OWZmODQ4ZTI4NDFiYjdjMDUyODEy
YTUwMWQwHhcNMjQxMTIyMDkwMDQxWhcNMjQxMTIzMDkwMDQxWjAzMTEwLwYDVQQD
EyhmMmVlYTM3YjUxMmE1Y2VkMjJlNTQ5OTEyMTNlOGQ3ZTdjNjcyNGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCt7EqylA9jYtvGkkkpZYhPzuORt
BbrJ8K7UseX7J8rB3BHS4AYuoEYzOTSt8q5EBDsNFYWpQS+xZeOhdpJvtuJ6seCV
kn/mZ5Ajvx+GiEOvsbAbDmRs5zu7S2M9Zi6qCgD3BTNFa4X6rB1bToJiTXAr7G+P
WhScSdtyAjiPbh3L8xOKhwGdsB411JDST8nh2s4rMBoQxVSLYiAS6XvFNOhXT1zW
FzAx+dToZwwWcuECDxghEM8j8uElGyiNf46A/7F8reOb/dOtNUpAsM/jp0gxEPMR
3w+TCtTZkQT0w9tDxX/Uneo+sOSjgifxLAF6q1oBABrWIy6ukG4aYmZcXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLuo3tRKlztIuVJkSE+jX58ZyTcMB8GA1UdIwQY
MBaAFK6LfM8Qu4Sf+EjihBu3wFKBKlAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm90OHp4QzdoSl80U09LRUc3ZkFVb0VxVUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yYjA3OGUtOTA4YS00MWE5LWI2Mzct
M2RiNGExZDRiNDJjLzEvcm90OHp4QzdoSl80U09LRUc3ZkFVb0VxVUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8yYjA3OGUtOTA4YS00MWE5LWI2MzctM2RiNGExZDRiNDJj
LzEvcm90OHp4QzdoSl80U09LRUc3ZkFVb0VxVUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJS1UbwtI
cEZBH8IWJRQEcU0hm4qy1G881l1Se8dLYDpZJwdOvtalIn1XXn5gDsOi8ZEeci3K
Y0PN4+So6DAnrAEekknb7uWcA9Qdr47YSSrGTp4uXcYOLxPhDnSk1NEgv6dSbPOp
/PoWaK/H7nt0qqnoZOIiLghm05ECbR16rMqoVry3oUToJApUKLh0iVZEdTEWcGcp
a+M4KK85ORYxp+01K4fx9Y90mmE2cBCN/qxciK+DBbkam7g+smiBILRhdMWmKY7c
/p8/Spw7ilSWYjHumSuYo9iG0p15ZMls0EAbrx3LBlgfWQJXlbouhoyfdgi8LB5a
SRu+LVbw04D9hg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:59:25 2025 by rpki-client