Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.mft
File: s7vFnmf3BQj_HoGmtTWmrVJh7Ik.mft (raw, json)
Hash identifier: AOUm/7YFA7gSWzdWq1VLSizeAZLKlXJT8+MaLa1joMY=
Subject key identifier: 19:FC:9A:32:2A:5B:AC:89:CF:E6:30:7B:83:7F:89:14:F3:A1:F9:1C
Authority key identifier: B3:BB:C5:9E:67:F7:05:08:FF:1E:81:A6:B5:35:A6:AD:52:61:EC:89
Certificate issuer: /CN=b3bbc59e67f70508ff1e81a6b535a6ad5261ec89
Certificate serial: 018D63AEF42711123972405A7276342D17D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.mft
Manifest number: 08F9
Signing time: Thu 01 Feb 2024 08:00:26 +0000
Manifest this update: Thu 01 Feb 2024 08:00:26 +0000
Manifest next update: Fri 02 Feb 2024 08:00:26 +0000
Files and hashes: 1: s7vFnmf3BQj_HoGmtTWmrVJh7Ik.crl (hash: wTH7wXtcnh50pbIcBbI84lSBlk5I8hssxq75k8K6TGY=)
2: svK-rLhs0cUJ0UncTDbyyB22WF0.roa (hash: nq0Bh/VUjpwderNgkdt6Tw9oNOwIfo3Riekojrk/1is=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:63:ae:f4:27:11:12:39:72:40:5a:72:76:34:2d:17:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3bbc59e67f70508ff1e81a6b535a6ad5261ec89
Validity
Not Before: Feb 1 08:00:26 2024 GMT
Not After : Feb 2 08:00:26 2024 GMT
Subject: CN=19fc9a322a5bac89cfe6307b837f8914f3a1f91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:16:c0:4d:1d:71:e0:b7:f9:23:ce:e6:2d:51:
f4:de:0f:34:3a:3f:9d:c0:85:aa:62:cb:1a:70:4d:
1e:b3:f9:13:6d:65:6a:92:c9:bb:cc:8b:c0:ec:da:
d6:bb:b5:ff:5b:fc:91:e9:e6:95:1e:b7:fb:05:65:
b9:52:27:5b:e9:c2:b0:55:f0:ee:07:f9:d6:2e:5e:
35:81:9a:84:f9:0b:70:3a:6c:f2:3e:95:63:06:38:
0c:e3:3f:d4:1c:a7:85:71:b2:32:04:7a:0e:02:97:
1b:d5:3c:c8:ee:38:7b:dd:32:00:d4:b8:f1:b1:e1:
ba:97:ca:ac:fa:8a:b3:fd:60:4f:bf:bf:0a:2d:15:
a0:08:0a:32:b4:11:9e:46:2e:cf:da:3f:66:88:fa:
88:b5:b9:1c:92:da:98:76:5d:13:db:74:94:3d:82:
c6:65:db:9e:ba:45:78:1b:30:8e:6e:a6:7a:68:07:
6a:84:35:8f:fa:9a:62:04:d9:9b:96:f5:09:43:57:
09:ec:f8:20:d8:b8:bc:fc:10:d6:bc:a0:e5:95:b0:
37:3c:14:79:a2:ca:6f:51:6c:e1:bd:d6:1a:85:7b:
be:e6:47:2d:4f:e7:9e:f6:25:19:50:25:d8:c3:83:
42:85:23:51:3d:20:82:e4:73:86:ec:4f:66:fc:ec:
24:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FC:9A:32:2A:5B:AC:89:CF:E6:30:7B:83:7F:89:14:F3:A1:F9:1C
X509v3 Authority Key Identifier:
keyid:B3:BB:C5:9E:67:F7:05:08:FF:1E:81:A6:B5:35:A6:AD:52:61:EC:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8d:0c:23:4d:8e:e9:45:fa:0b:b2:d2:bb:e5:89:3c:e0:31:
b2:13:40:9c:a0:c8:33:a3:f8:aa:4f:f5:f0:1a:4a:ea:02:e4:
a5:ef:91:2a:56:71:b0:9e:1a:2b:1f:fb:bb:ed:c7:f6:26:54:
fb:de:27:c6:1b:5e:53:4f:bd:e2:01:c6:bb:e3:f7:45:4d:08:
0a:67:fd:f8:f1:d1:2b:48:88:72:dc:97:ce:78:8c:f0:d7:58:
c4:bd:db:72:18:16:fa:05:43:6d:e3:72:49:7b:df:06:ed:5a:
05:2f:70:22:c8:73:48:30:60:b3:bf:1e:89:68:17:dc:3b:f3:
7e:11:ab:77:89:4d:af:f1:1d:87:1c:a0:79:67:f9:e6:e3:36:
27:65:5b:61:e1:24:a5:3d:fe:bd:83:bc:c7:29:f4:e0:2b:ca:
83:1d:dd:ab:53:18:98:67:3a:65:d4:7f:c0:7b:2d:34:a4:2a:
f2:78:b5:22:8b:a2:98:a8:d7:68:39:82:0e:dc:cf:55:38:71:
0f:ea:df:05:cb:39:66:b2:42:e1:e0:1e:ca:81:91:4c:ec:65:
42:a7:30:8b:5b:dd:d5:3f:c6:f8:2e:71:d1:fd:a6:b0:6d:96:
72:e2:69:c7:e3:77:5a:62:bc:43:d0:66:0a:a4:09:f2:ee:5d:
d3:66:e4:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY1jrvQnERI5ckBacnY0LRfQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYmJjNTllNjdmNzA1MDhmZjFlODFhNmI1MzVhNmFkNTI2
MWVjODkwHhcNMjQwMjAxMDgwMDI2WhcNMjQwMjAyMDgwMDI2WjAzMTEwLwYDVQQD
EygxOWZjOWEzMjJhNWJhYzg5Y2ZlNjMwN2I4MzdmODkxNGYzYTFmOTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hbATR1x4Lf5I87mLVH03g80Oj+d
wIWqYssacE0es/kTbWVqksm7zIvA7NrWu7X/W/yR6eaVHrf7BWW5Uidb6cKwVfDu
B/nWLl41gZqE+QtwOmzyPpVjBjgM4z/UHKeFcbIyBHoOApcb1TzI7jh73TIA1Ljx
seG6l8qs+oqz/WBPv78KLRWgCAoytBGeRi7P2j9miPqItbkcktqYdl0T23SUPYLG
ZdueukV4GzCObqZ6aAdqhDWP+ppiBNmblvUJQ1cJ7Pgg2Li8/BDWvKDllbA3PBR5
ospvUWzhvdYahXu+5kctT+ee9iUZUCXYw4NChSNRPSCC5HOG7E9m/OwkFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBn8mjIqW6yJz+Ywe4N/iRTzofkcMB8GA1UdIwQY
MBaAFLO7xZ5n9wUI/x6BprU1pq1SYeyJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczd2Rm5tZjNCUWpfSG9HbXRUV21yVkpoN0lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iZDRmMzAtZDI0Yi00ZTVlLTllMWIt
NzBhOWNhMjdhZjY2LzEvczd2Rm5tZjNCUWpfSG9HbXRUV21yVkpoN0lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iZDRmMzAtZDI0Yi00ZTVlLTllMWItNzBhOWNhMjdhZjY2
LzEvczd2Rm5tZjNCUWpfSG9HbXRUV21yVkpoN0lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlI0MI02O
6UX6C7LSu+WJPOAxshNAnKDIM6P4qk/18BpK6gLkpe+RKlZxsJ4aKx/7u+3H9iZU
+94nxhteU0+94gHGu+P3RU0ICmf9+PHRK0iIctyXzniM8NdYxL3bchgW+gVDbeNy
SXvfBu1aBS9wIshzSDBgs78eiWgX3DvzfhGrd4lNr/EdhxygeWf55uM2J2VbYeEk
pT3+vYO8xyn04CvKgx3dq1MYmGc6ZdR/wHstNKQq8ni1IouimKjXaDmCDtzPVThx
D+rfBcs5ZrJC4eAeyoGRTOxlQqcwi1vd1T/G+C5x0f2msG2WcuJpx+N3WmK8Q9Bm
CqQJ8u5d02bkYg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:26:27 2025 by rpki-client