Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
File: ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft (raw, json)
Hash identifier: a47w1o4kJdr6Sl/WBcnIfLZJjy8OtTM8j3C9mj+8bcg=
Subject key identifier: A1:E7:AD:DF:DF:23:F1:4B:39:33:1B:8E:5C:25:B6:B4:B4:0E:DE:66
Authority key identifier: 7D:F0:C2:31:B8:02:EC:57:5A:DA:F6:51:8C:1C:0A:E1:3F:3F:1B:C1
Certificate issuer: /CN=7df0c231b802ec575adaf6518c1c0ae13f3f1bc1
Certificate serial: 0194BBCECB7D6386B279418CAFD0C81D7823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: W5t6K8mhaeB1jcBRnZnKCObRLXo.roa (hash: vlPvYnrh67Sac6G89vl74L5sy1jyV/vOZ0tMCXQKGc4=)
2: ffDCMbgC7Fda2vZRjBwK4T8_G8E.crl (hash: TaeGA+UejJqam2lAwJDQpkRxrPSMot24mP0DrvY9/d8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cb:7d:63:86:b2:79:41:8c:af:d0:c8:1d:78:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0c231b802ec575adaf6518c1c0ae13f3f1bc1
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=a1e7addfdf23f14b39331b8e5c25b6b4b40ede66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:29:cf:c1:17:57:88:a6:6f:60:c2:03:6f:
c8:09:4c:33:4a:05:b0:40:38:e5:a1:e1:c4:83:07:
80:91:5f:88:28:19:59:b5:6e:7f:26:ab:97:63:c5:
e6:45:b9:b7:a7:b0:d6:29:e5:8a:36:13:69:b1:6e:
e2:21:5e:bf:eb:87:74:64:62:ea:04:22:71:bf:b9:
03:9c:61:29:b0:6e:c5:79:3f:8c:fe:6e:9c:e0:5e:
2e:af:bb:4b:22:6e:3f:72:33:f8:b9:96:e8:80:7d:
48:96:01:14:f8:bb:ba:71:bd:90:e3:73:d3:ff:4b:
b8:a8:94:9a:43:7b:e2:ed:14:33:45:eb:58:af:cc:
de:cf:3b:2d:ac:df:86:dd:4c:70:38:27:72:d8:a4:
58:50:cb:72:de:ea:2b:b8:48:24:64:75:01:d2:7a:
4d:1b:91:9f:50:d3:de:03:17:5c:54:b6:f4:d7:d5:
50:db:b7:bd:57:30:ff:cb:57:9c:26:9a:6e:e3:fb:
c5:1e:1a:2a:bb:56:82:fe:14:c6:84:42:c8:84:ab:
37:ea:fa:54:fb:1b:b0:f3:05:c9:dd:41:f9:34:fb:
14:fd:c4:a8:e4:e6:b9:3d:d3:eb:de:df:b3:b6:a1:
85:d5:f2:91:56:6b:2e:99:ce:b5:41:c1:9a:47:10:
45:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E7:AD:DF:DF:23:F1:4B:39:33:1B:8E:5C:25:B6:B4:B4:0E:DE:66
X509v3 Authority Key Identifier:
keyid:7D:F0:C2:31:B8:02:EC:57:5A:DA:F6:51:8C:1C:0A:E1:3F:3F:1B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3d:b4:c8:26:8b:22:e6:d4:a2:95:ad:8f:43:b3:2a:94:37:
ca:56:d5:6f:e9:47:79:9f:8f:68:dc:5a:6a:59:0e:37:bf:32:
69:08:26:1e:61:db:57:2c:25:77:ed:da:38:48:f7:aa:b4:75:
68:0b:4a:f8:4c:32:bb:cf:4f:97:28:1d:41:05:3d:35:cf:a9:
2d:12:05:88:08:bb:13:a3:ba:9c:26:f5:27:74:5d:a6:33:f6:
a3:98:34:ee:3a:82:ff:de:c5:47:ee:11:e7:a8:a9:86:ff:f0:
1a:f9:06:29:db:31:0f:de:2d:67:6f:f8:3a:c4:21:98:43:64:
35:1f:b0:39:f2:b8:d3:f3:58:9c:19:4c:12:d5:43:3e:f8:9b:
6a:b1:49:61:e5:93:ea:4c:c2:2d:34:be:36:60:56:4e:e5:fc:
88:39:88:9a:27:b5:13:a6:5e:fc:d2:92:a9:27:e7:10:9d:0b:
6f:1f:fd:ca:2b:88:83:2e:cb:ea:d3:e0:8c:d5:85:5b:24:2d:
48:e2:5a:43:6b:ed:eb:3f:f2:8e:77:72:30:ea:e9:a7:f2:7a:
4f:d1:ca:fb:c5:2e:df:5d:1d:4c:08:79:4d:2a:4e:cb:85:15:
4b:46:ea:14:fa:e8:f2:ea:30:04:3a:92:38:cd:64:d1:a0:3c:
0c:a8:a2:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zst9Y4ayeUGMr9DIHXgjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjBjMjMxYjgwMmVjNTc1YWRhZjY1MThjMWMwYWUxM2Yz
ZjFiYzEwHhcNMjUwMTMxMTAwMTE5WhcNMjUwMjAxMTAwMTE5WjAzMTEwLwYDVQQD
EyhhMWU3YWRkZmRmMjNmMTRiMzkzMzFiOGU1YzI1YjZiNGI0MGVkZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiMpz8EXV4imb2DCA2/ICUwzSgWw
QDjloeHEgweAkV+IKBlZtW5/JquXY8XmRbm3p7DWKeWKNhNpsW7iIV6/64d0ZGLq
BCJxv7kDnGEpsG7FeT+M/m6c4F4ur7tLIm4/cjP4uZbogH1IlgEU+Lu6cb2Q43PT
/0u4qJSaQ3vi7RQzRetYr8zezzstrN+G3UxwOCdy2KRYUMty3uoruEgkZHUB0npN
G5GfUNPeAxdcVLb019VQ27e9VzD/y1ecJppu4/vFHhoqu1aC/hTGhELIhKs36vpU
+xuw8wXJ3UH5NPsU/cSo5Oa5PdPr3t+ztqGF1fKRVmsumc61QcGaRxBFWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHnrd/fI/FLOTMbjlwltrS0Dt5mMB8GA1UdIwQY
MBaAFH3wwjG4AuxXWtr2UYwcCuE/PxvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZEQ01iZ0M3RmRhMnZaUmpCd0s0VDhfRzhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lYzMwOTItMTE0OS00OGQ5LWIyZmYt
ZDI3YWVjYzJiNzQ0LzEvZmZEQ01iZ0M3RmRhMnZaUmpCd0s0VDhfRzhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lYzMwOTItMTE0OS00OGQ5LWIyZmYtZDI3YWVjYzJiNzQ0
LzEvZmZEQ01iZ0M3RmRhMnZaUmpCd0s0VDhfRzhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKz20yCaL
IubUopWtj0OzKpQ3ylbVb+lHeZ+PaNxaalkON78yaQgmHmHbVywld+3aOEj3qrR1
aAtK+Ewyu89PlygdQQU9Nc+pLRIFiAi7E6O6nCb1J3RdpjP2o5g07jqC/97FR+4R
56iphv/wGvkGKdsxD94tZ2/4OsQhmENkNR+wOfK40/NYnBlMEtVDPvibarFJYeWT
6kzCLTS+NmBWTuX8iDmImie1E6Ze/NKSqSfnEJ0Lbx/9yiuIgy7L6tPgjNWFWyQt
SOJaQ2vt6z/yjndyMOrpp/J6T9HK+8Uu310dTAh5TSpOy4UVS0bqFPro8uowBDqS
OM1k0aA8DKiibQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:47 2025 by rpki-client