Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/50538c-059b-41e3-ac6e-433a458a2d53/1/cfd9LuRDoI0OBswvkxAKT7c3HdI.mft
File: cfd9LuRDoI0OBswvkxAKT7c3HdI.mft (raw, json)
Hash identifier: EYmU/hZtTMeBCGiGb3dtLdpZClDQ5k2Y108y+IaOCds=
Subject key identifier: 91:E8:C1:F5:F8:57:8C:A4:D8:1A:B7:BC:FC:09:91:7C:11:58:15:07
Authority key identifier: 71:F7:7D:2E:E4:43:A0:8D:0E:06:CC:2F:93:10:0A:4F:B7:37:1D:D2
Certificate issuer: /CN=71f77d2ee443a08d0e06cc2f93100a4fb7371dd2
Certificate serial: 18C6B601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfd9LuRDoI0OBswvkxAKT7c3HdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/50538c-059b-41e3-ac6e-433a458a2d53/1/cfd9LuRDoI0OBswvkxAKT7c3HdI.mft
Manifest number: 08B5
Signing time: Tue 22 Mar 2022 11:00:14 +0000
Manifest this update: Tue 22 Mar 2022 11:00:14 +0000
Manifest next update: Wed 23 Mar 2022 11:00:14 +0000
Files and hashes: 1: cfd9LuRDoI0OBswvkxAKT7c3HdI.crl (hash: 5Nn+c9jaO5hl7sHsC+WARm91Kv50ayhtDkJU54spwHs=)
2: xwWsQPjw6iKMHHp36iVj_cICuVk.roa (hash: mLjd587s+rJ6CexhdNZfbdExobxSH88DJjBDMVphx5w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415675905 (0x18c6b601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f77d2ee443a08d0e06cc2f93100a4fb7371dd2
Validity
Not Before: Mar 22 11:00:14 2022 GMT
Not After : Mar 23 11:00:14 2022 GMT
Subject: CN=91e8c1f5f8578ca4d81ab7bcfc09917c11581507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:d7:6b:2e:d8:0f:7f:d1:3a:0c:c5:f9:79:
39:e6:a5:eb:94:c4:11:84:cf:93:8c:b5:97:cb:9e:
b7:61:96:7c:4d:9b:a7:a4:fe:69:91:95:be:7a:1b:
49:fd:99:c1:13:35:25:e4:2b:29:0b:7b:68:23:b1:
8e:8e:e3:80:7f:6f:f7:06:04:f0:a8:12:11:dd:3c:
20:7a:c4:f6:60:56:14:3d:76:50:af:8d:c4:3d:a5:
84:86:e4:2e:65:28:2c:29:d3:96:6a:53:93:2c:7e:
61:a6:ea:96:b4:8d:b7:74:9a:36:aa:07:b4:f8:ce:
83:c8:1b:7f:a4:31:aa:cb:6e:c0:64:79:52:ec:2e:
c1:6d:7c:d7:10:f4:a8:4f:1c:d5:4f:20:fd:59:6c:
30:48:50:0c:b0:cb:cc:ff:5b:84:b7:17:ae:e4:6c:
ff:6c:d3:90:10:c8:ec:60:f6:b1:00:67:de:c1:78:
36:da:ea:cb:2f:36:c3:cb:cf:46:3c:4f:4f:ff:e0:
ad:52:3c:0a:d2:81:4a:00:2c:ad:c1:26:c1:b0:5c:
e3:69:3e:fc:14:12:85:b4:30:ba:15:10:d8:e6:e3:
02:f1:53:00:ea:40:fa:42:fc:13:8c:c7:0f:df:f1:
c1:92:7c:dd:95:c2:46:d5:33:9a:11:3b:2a:7b:91:
79:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E8:C1:F5:F8:57:8C:A4:D8:1A:B7:BC:FC:09:91:7C:11:58:15:07
X509v3 Authority Key Identifier:
keyid:71:F7:7D:2E:E4:43:A0:8D:0E:06:CC:2F:93:10:0A:4F:B7:37:1D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfd9LuRDoI0OBswvkxAKT7c3HdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/50538c-059b-41e3-ac6e-433a458a2d53/1/cfd9LuRDoI0OBswvkxAKT7c3HdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/50538c-059b-41e3-ac6e-433a458a2d53/1/cfd9LuRDoI0OBswvkxAKT7c3HdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:88:20:df:a0:78:d2:21:5b:71:07:ce:86:ba:75:71:4e:1d:
93:dd:9a:16:a5:09:4d:88:c9:ac:9c:7e:f5:f8:0d:be:fb:47:
f6:d3:06:92:32:50:0a:28:a6:5d:94:95:39:82:02:91:52:e8:
b4:5f:34:af:f5:d0:eb:c9:c7:9e:24:3f:77:1a:5a:1d:33:03:
80:e7:a7:28:25:0d:a4:0a:5b:89:1c:9a:28:73:5e:d7:39:c0:
ec:ed:c1:04:68:6f:a1:fb:35:17:c1:2e:a4:54:ce:96:06:70:
4b:13:61:3c:c5:e3:11:33:58:fa:aa:b4:50:5b:41:5e:80:79:
45:37:a7:b3:a7:4c:46:88:9b:81:ad:38:a6:4c:55:99:da:5a:
ce:ab:20:a2:39:09:b1:42:80:a4:2d:ce:54:53:e1:f6:3a:86:
26:36:de:ae:71:e5:2f:e9:7f:d8:4b:e6:71:53:37:55:16:1b:
d1:f1:0f:16:f8:c5:a3:08:a3:a4:2a:f1:29:71:a4:e1:10:56:
6d:6f:a0:85:c4:7a:24:de:9f:b5:88:0b:e0:7b:87:f5:e2:74:
dd:52:24:18:02:3a:7e:6f:b0:b9:fe:78:17:d1:07:73:2a:70:
6e:33:af:97:a9:d7:48:c7:d8:3a:68:2d:81:24:41:bc:73:48:
81:62:42:17
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEGMa2ATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MWY3N2QyZWU0NDNhMDhkMGUwNmNjMmY5MzEwMGE0ZmI3MzcxZGQyMB4XDTIyMDMy
MjExMDAxNFoXDTIyMDMyMzExMDAxNFowMzExMC8GA1UEAxMoOTFlOGMxZjVmODU3
OGNhNGQ4MWFiN2JjZmMwOTkxN2MxMTU4MTUwNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKd312su2A9/0ToMxfl5Oeal65TEEYTPk4y1l8uet2GWfE2b
p6T+aZGVvnobSf2ZwRM1JeQrKQt7aCOxjo7jgH9v9wYE8KgSEd08IHrE9mBWFD12
UK+NxD2lhIbkLmUoLCnTlmpTkyx+YabqlrSNt3SaNqoHtPjOg8gbf6QxqstuwGR5
UuwuwW181xD0qE8c1U8g/VlsMEhQDLDLzP9bhLcXruRs/2zTkBDI7GD2sQBn3sF4
Ntrqyy82w8vPRjxPT//grVI8CtKBSgAsrcEmwbBc42k+/BQShbQwuhUQ2ObjAvFT
AOpA+kL8E4zHD9/xwZJ83ZXCRtUzmhE7KnuReXsCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBSR6MH1+FeMpNgat7z8CZF8EVgVBzAfBgNVHSMEGDAWgBRx930u5EOgjQ4G
zC+TEApPtzcd0jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NmZDlMdVJEb0kwT0Jzd3ZreEFLVDdjM0hkSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjcvNTA1MzhjLTA1OWItNDFlMy1hYzZlLTQzM2E0NThhMmQ1My8x
L2NmZDlMdVJEb0kwT0Jzd3ZreEFLVDdjM0hkSS5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcv
NTA1MzhjLTA1OWItNDFlMy1hYzZlLTQzM2E0NThhMmQ1My8xL2NmZDlMdVJEb0kw
T0Jzd3ZreEFLVDdjM0hkSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK+IIN+geNIhW3EHzoa6dXFOHZPd
mhalCU2IyaycfvX4Db77R/bTBpIyUAoopl2UlTmCApFS6LRfNK/10OvJx54kP3ca
Wh0zA4DnpyglDaQKW4kcmihzXtc5wOztwQRob6H7NRfBLqRUzpYGcEsTYTzF4xEz
WPqqtFBbQV6AeUU3p7OnTEaIm4GtOKZMVZnaWs6rIKI5CbFCgKQtzlRT4fY6hiY2
3q5x5S/pf9hL5nFTN1UWG9HxDxb4xaMIo6Qq8SlxpOEQVm1voIXEeiTen7WIC+B7
h/XidN1SJBgCOn5vsLn+eBfRB3MqcG4zr5ep10jH2DpoLYEkQbxzSIFiQhc=
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:49:22 2025 by rpki-client