Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
File: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft (raw, json)
Hash identifier: tJVd2wZM3IQqaPDUDjKjBCHihyK9NW0aAOcZL/Y/Hvk=
Subject key identifier: 7E:77:49:AB:39:28:DD:83:BA:D4:9E:03:FD:08:2A:BC:C3:0D:BF:D6
Authority key identifier: 16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
Certificate issuer: /CN=166fed8bb6449b1cec6b665e930718b858a2b694
Certificate serial: 0194BC730D9BACBA6E343B58036F7EAD56A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
Manifest number: 0A67
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl (hash: OthY+M0X84RGkq5w05gwNth2iiy4Kg0orOr7q9Ij/Yo=)
2: krakPppfz7flLx069ZARtir4dzE.roa (hash: rc01bvPv/5+vfBCkfObVuaLV/O1M46ZYkYO5PLG/3iM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0d:9b:ac:ba:6e:34:3b:58:03:6f:7e:ad:56:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166fed8bb6449b1cec6b665e930718b858a2b694
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=7e7749ab3928dd83bad49e03fd082abcc30dbfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:1c:a1:1c:73:17:af:8e:69:8e:c6:d2:7c:
5b:27:88:4b:ab:48:50:47:71:53:3e:b4:29:9a:3a:
40:1e:67:06:fb:a6:9e:c6:1a:64:b2:55:46:16:b4:
59:8f:7d:40:99:4a:b8:5f:39:04:70:60:64:f3:d4:
5e:be:21:f0:7c:7d:c8:9f:ff:88:65:2a:9e:c9:66:
e7:ea:b6:5b:0c:ec:f9:6f:b1:47:5f:83:b2:5b:5d:
bf:cf:db:53:67:5e:16:fc:bd:a0:73:32:b9:2b:46:
a8:99:be:80:fc:84:57:cf:5d:6b:f2:73:20:2e:1e:
7e:e7:c3:01:93:63:30:69:f7:ee:28:20:8d:0d:36:
25:09:f8:c7:d9:20:4c:ba:63:a4:92:31:9d:ed:ec:
bf:0a:d9:dc:12:02:0c:dd:c2:e1:ef:43:20:2f:f3:
77:03:65:2d:24:57:80:52:19:45:c1:ad:50:b0:ac:
4d:4f:92:9b:28:67:bb:de:9b:bb:43:c9:56:79:ce:
e5:56:d1:90:34:b1:06:15:43:6c:bd:50:04:56:da:
19:a0:b2:39:61:71:5a:6b:6c:70:35:44:b5:1c:19:
50:80:25:d7:49:ad:88:d2:85:4e:c1:d8:4a:c8:1c:
48:26:09:c2:52:d9:9f:52:00:b6:4a:02:ce:01:d1:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:77:49:AB:39:28:DD:83:BA:D4:9E:03:FD:08:2A:BC:C3:0D:BF:D6
X509v3 Authority Key Identifier:
keyid:16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:43:e5:4f:d5:c2:50:e5:db:fc:17:81:25:b9:25:26:7c:f5:
fb:6b:42:c3:c6:f0:f8:90:11:59:0e:18:ae:9d:04:f4:5d:39:
5c:25:77:d7:ed:44:47:44:bf:58:ef:62:f8:91:f1:44:ce:5f:
0c:4d:af:89:1c:83:d4:a5:62:97:5c:44:55:c0:f4:46:08:c5:
fc:15:1c:b6:b5:0c:80:d6:ce:40:f6:30:3c:59:b6:fe:42:7b:
ae:e0:74:c2:c8:58:b7:18:0d:0f:79:9b:dd:54:6e:1f:dd:44:
5f:81:a1:ca:6b:63:71:cd:4c:8f:51:56:28:61:55:ef:9a:59:
6a:42:2c:d4:cc:b4:ce:b4:0c:95:4e:e6:1f:a1:df:5f:61:19:
e6:0b:04:c3:58:b9:33:68:80:8b:36:15:c2:42:59:5e:44:96:
fc:0e:d1:84:4f:cd:21:a8:e2:77:d2:81:b2:6d:f7:58:58:b9:
dd:72:95:da:99:52:de:1f:4d:10:c0:02:35:a3:f8:7b:3f:ad:
4f:af:32:c0:31:23:6e:68:45:9e:17:f3:5e:8a:e1:d0:ec:95:
a4:4a:b0:69:24:1e:6f:10:d9:7e:8d:fe:b1:1f:43:42:73:5b:
52:c3:6a:90:3b:0e:c4:83:59:0d:96:99:89:6d:cf:62:22:ba:
81:59:42:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cw2brLpuNDtYA29+rVagMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmZlZDhiYjY0NDliMWNlYzZiNjY1ZTkzMDcxOGI4NThh
MmI2OTQwHhcNMjUwMTMxMTMwMDQ0WhcNMjUwMjAxMTMwMDQ0WjAzMTEwLwYDVQQD
Eyg3ZTc3NDlhYjM5MjhkZDgzYmFkNDllMDNmZDA4MmFiY2MzMGRiZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEwcoRxzF6+OaY7G0nxbJ4hLq0hQ
R3FTPrQpmjpAHmcG+6aexhpkslVGFrRZj31AmUq4XzkEcGBk89ReviHwfH3In/+I
ZSqeyWbn6rZbDOz5b7FHX4OyW12/z9tTZ14W/L2gczK5K0aomb6A/IRXz11r8nMg
Lh5+58MBk2MwaffuKCCNDTYlCfjH2SBMumOkkjGd7ey/CtncEgIM3cLh70MgL/N3
A2UtJFeAUhlFwa1QsKxNT5KbKGe73pu7Q8lWec7lVtGQNLEGFUNsvVAEVtoZoLI5
YXFaa2xwNUS1HBlQgCXXSa2I0oVOwdhKyBxIJgnCUtmfUgC2SgLOAdGvXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH53Sas5KN2DutSeA/0IKrzDDb/WMB8GA1UdIwQY
MBaAFBZv7Yu2RJsc7GtmXpMHGLhYoraUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1fdGk3WkVteHpzYTJaZWt3Y1l1RmlpdHBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82NTgxZjQtMTQ4My00NTcxLWI3ZDEt
NmRlYTYwM2NjYzdiLzEvRm1fdGk3WkVteHpzYTJaZWt3Y1l1RmlpdHBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi82NTgxZjQtMTQ4My00NTcxLWI3ZDEtNmRlYTYwM2NjYzdi
LzEvRm1fdGk3WkVteHpzYTJaZWt3Y1l1RmlpdHBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEPlT9XC
UOXb/BeBJbklJnz1+2tCw8bw+JARWQ4Yrp0E9F05XCV31+1ER0S/WO9i+JHxRM5f
DE2viRyD1KVil1xEVcD0RgjF/BUctrUMgNbOQPYwPFm2/kJ7ruB0wshYtxgND3mb
3VRuH91EX4Ghymtjcc1Mj1FWKGFV75pZakIs1My0zrQMlU7mH6HfX2EZ5gsEw1i5
M2iAizYVwkJZXkSW/A7RhE/NIajid9KBsm33WFi53XKV2plS3h9NEMACNaP4ez+t
T68ywDEjbmhFnhfzXorh0OyVpEqwaSQebxDZfo3+sR9DQnNbUsNqkDsOxINZDZaZ
iW3PYiK6gVlChA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:30 2025 by rpki-client