Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
File: f1Eig3R0LfVEqpMFjFo709FkIZk.mft (raw, json)
Hash identifier: bvj6CgFC5yJL0atrd3IjMBkIUt8gnoXlYadHxxCf7cQ=
Subject key identifier: E8:A8:53:1C:34:13:48:71:3A:A4:DE:1B:46:0B:95:47:B2:AA:F1:E6
Authority key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
Certificate issuer: /CN=7f51228374742df544aa93058c5a3bd3d1642199
Certificate serial: 0194BC04A2A6AD84857AFC4C72886449F756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
Manifest number: 0B9A
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: f1Eig3R0LfVEqpMFjFo709FkIZk.crl (hash: JcucNgIu7BUjbbKzhIeZK8635DVhjlzFSlI97xRPSVs=)
2: uNHn3nGofmcHl4lM7HkivQe_5zI.roa (hash: P5wPJ1eLs+Pe8c3zQ6YiOWLNnnfuv2xAEXiikikIGBQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a2:a6:ad:84:85:7a:fc:4c:72:88:64:49:f7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f51228374742df544aa93058c5a3bd3d1642199
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=e8a8531c341348713aa4de1b460b9547b2aaf1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:7d:de:50:44:0b:f3:72:20:69:71:d9:6a:
96:5b:9e:db:0d:83:a2:24:33:1a:f9:a6:9e:01:70:
18:84:e9:92:74:d0:33:91:f7:fe:7b:15:08:14:5b:
fd:b1:df:01:14:5a:b7:60:6b:a1:3d:f8:02:d7:2e:
25:16:d6:96:92:98:4d:63:6e:df:5f:91:9a:28:27:
16:3e:24:3d:90:7d:27:0f:96:9c:08:9c:d8:1c:67:
b9:c2:50:ff:96:6f:ec:21:a9:7d:fe:94:2c:95:69:
9f:3b:8a:ea:d6:37:77:f0:ed:64:88:45:d2:67:ae:
ca:20:23:f9:62:ee:b9:d8:65:30:cc:d7:c7:e2:a4:
b2:06:78:24:62:ed:75:f7:cc:ea:f0:2e:60:bd:2c:
ea:37:67:11:51:2c:fa:a6:f1:7a:42:c0:56:36:0a:
64:ee:ad:1a:79:bc:46:b8:99:3a:4c:d5:56:a4:7d:
c2:46:07:e2:5e:e6:55:2c:39:73:ce:cc:64:cc:a5:
d8:7a:a0:3a:af:89:3e:ec:46:e6:5b:3e:8a:19:89:
ad:53:18:5a:6e:c0:41:ba:82:1b:d5:0c:c8:30:1c:
7e:18:fc:0a:d1:f0:95:00:19:4b:93:4a:da:61:ea:
2f:97:eb:cb:8b:4e:a8:4a:7b:4e:8f:9a:20:25:5e:
da:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A8:53:1C:34:13:48:71:3A:A4:DE:1B:46:0B:95:47:B2:AA:F1:E6
X509v3 Authority Key Identifier:
keyid:7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f9:db:a4:00:41:00:ac:39:ff:5f:ed:45:50:2d:87:e5:7a:
ea:e8:35:ad:fc:70:0a:9c:7c:f4:47:10:f0:11:30:dc:75:1e:
3d:00:35:5c:cc:9d:67:aa:69:97:d8:b7:4d:93:9c:4b:18:98:
2f:a8:5f:97:50:d1:d8:f3:81:cf:bf:f9:96:75:9a:e4:9a:89:
bf:3b:fe:0c:05:9b:1e:6a:5f:2f:dd:c8:30:dd:da:06:7c:67:
93:b4:9e:e1:fe:7f:e6:f0:d2:2b:23:70:5b:56:71:a3:e3:11:
b1:c9:e2:9a:b1:23:e4:c8:6e:29:0a:8a:15:bf:94:6a:fb:2c:
ba:e8:99:a4:50:5a:c7:46:4c:75:ab:af:4c:42:4d:fa:bf:e6:
0d:ff:3c:47:3e:79:e1:22:93:83:d5:78:70:63:78:03:d2:2a:
c7:84:cd:06:c2:b2:f3:4f:b6:4e:a6:4a:65:12:1b:b8:16:b9:
89:1a:e4:1c:22:d4:34:96:7e:20:8c:a8:9b:a0:63:de:cd:f8:
e6:8f:92:62:dc:b0:84:d7:27:a6:e0:b3:fd:38:32:75:64:12:
14:6c:42:db:9f:d4:ed:e4:8a:a6:08:98:2a:54:5f:6e:2b:bb:
ab:3d:96:e1:c8:7b:0a:e5:f4:73:6a:df:c9:44:f9:0f:45:b4:
65:cb:e7:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BKKmrYSFevxMcohkSfdWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTEyMjgzNzQ3NDJkZjU0NGFhOTMwNThjNWEzYmQzZDE2
NDIxOTkwHhcNMjUwMTMxMTEwMDA3WhcNMjUwMjAxMTEwMDA3WjAzMTEwLwYDVQQD
EyhlOGE4NTMxYzM0MTM0ODcxM2FhNGRlMWI0NjBiOTU0N2IyYWFmMWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlJ93lBEC/NyIGlx2WqWW57bDYOi
JDMa+aaeAXAYhOmSdNAzkff+exUIFFv9sd8BFFq3YGuhPfgC1y4lFtaWkphNY27f
X5GaKCcWPiQ9kH0nD5acCJzYHGe5wlD/lm/sIal9/pQslWmfO4rq1jd38O1kiEXS
Z67KICP5Yu652GUwzNfH4qSyBngkYu1198zq8C5gvSzqN2cRUSz6pvF6QsBWNgpk
7q0aebxGuJk6TNVWpH3CRgfiXuZVLDlzzsxkzKXYeqA6r4k+7EbmWz6KGYmtUxha
bsBBuoIb1QzIMBx+GPwK0fCVABlLk0raYeovl+vLi06oSntOj5ogJV7aPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOioUxw0E0hxOqTeG0YLlUeyqvHmMB8GA1UdIwQY
MBaAFH9RIoN0dC31RKqTBYxaO9PRZCGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFFaWczUjBMZlZFcXBNRmpGbzcwOUZrSVprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85Mzg1YWEtMWI3OS00YTAyLWEwOTIt
MDFlYjAzNjg0ZjA5LzEvZjFFaWczUjBMZlZFcXBNRmpGbzcwOUZrSVprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS85Mzg1YWEtMWI3OS00YTAyLWEwOTItMDFlYjAzNjg0ZjA5
LzEvZjFFaWczUjBMZlZFcXBNRmpGbzcwOUZrSVprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfnbpABB
AKw5/1/tRVAth+V66ug1rfxwCpx89EcQ8BEw3HUePQA1XMydZ6ppl9i3TZOcSxiY
L6hfl1DR2POBz7/5lnWa5JqJvzv+DAWbHmpfL93IMN3aBnxnk7Se4f5/5vDSKyNw
W1Zxo+MRscnimrEj5MhuKQqKFb+UavssuuiZpFBax0ZMdauvTEJN+r/mDf88Rz55
4SKTg9V4cGN4A9Iqx4TNBsKy80+2TqZKZRIbuBa5iRrkHCLUNJZ+IIyom6Bj3s34
5o+SYtywhNcnpuCz/TgydWQSFGxC25/U7eSKpgiYKlRfbiu7qz2W4ch7CuX0c2rf
yUT5D0W0ZcvnqQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:36 2025 by rpki-client