Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json)
Hash identifier: DYrmMpu8MmsT0MooY5ogKILDzTR6ZyYYbH+w/PAGSxM=
Subject key identifier: 93:6D:9E:32:FA:90:BD:7B:AC:3F:F1:1C:8D:AD:4B:74:E3:94:DB:11
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial: 0194BD1766E58B31C5A361464738E2022A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: 4n5I80Muh8DkyxOgHIyPVbPwgWQeumKX7j80bbQEEm0=)
2: lEn451-XXHlherUNQr8Rc0JmU5c.roa (hash: kIpdRfZGgcVE/RkoYxVB/7zTwiZiv41Cisi6L8BZjv8=)
3: z-VHazRi4J3dfaKu9uPEdEUaUxE.roa (hash: d/YBGA/H3W0HjGNcA5bYsjIVUAEfDekBGnTdNyMczFg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:66:e5:8b:31:c5:a3:61:46:47:38:e2:02:2a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=936d9e32fa90bd7bac3ff11c8dad4b74e394db11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:04:b3:4c:4e:36:6f:a6:b7:7b:c6:42:d9:
f7:d2:bc:7d:7a:52:f5:9f:96:aa:b0:09:d2:e0:12:
e0:57:bf:92:5b:1f:a6:83:19:db:51:25:81:c5:8a:
0b:b7:6d:3a:c9:78:ca:a4:6f:01:32:6c:39:d4:92:
a6:72:3a:43:4d:be:82:0a:ea:c8:4a:80:e9:07:fe:
94:97:02:74:9e:97:1d:bd:88:6b:6b:2d:06:87:ed:
05:b3:18:f7:ff:e1:3f:b5:2f:22:21:c5:f5:fc:55:
d5:24:d1:57:3a:49:e2:fb:19:6c:c9:79:d8:ff:b0:
54:47:f9:b0:51:21:28:be:0b:49:fb:a9:0a:82:df:
a9:2b:de:d2:2b:b7:5b:78:85:b5:48:84:01:da:06:
55:86:7a:e2:4b:40:09:52:d1:4d:7c:ef:46:50:9a:
79:69:19:2a:8b:81:5c:db:7e:8b:71:26:79:59:1c:
6c:b1:e5:1b:68:24:ab:dd:56:6f:a7:e8:e9:96:6f:
d1:d4:68:92:b8:b9:56:cf:51:cf:90:78:f3:84:9a:
04:f8:8c:9d:98:65:7f:8e:0a:07:f9:4b:b0:ae:38:
8e:6d:5b:e6:1d:8f:7b:75:c4:ca:01:8b:5a:0f:cf:
d2:32:e2:1d:66:4d:26:b7:22:1e:26:3f:37:3c:2f:
db:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6D:9E:32:FA:90:BD:7B:AC:3F:F1:1C:8D:AD:4B:74:E3:94:DB:11
X509v3 Authority Key Identifier:
keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:cc:06:58:01:0a:d1:d5:b0:35:d9:70:ca:33:c8:1d:f7:d2:
d6:68:38:49:a4:c8:59:54:d1:b1:b8:61:c6:17:fe:a3:03:a0:
c0:ad:a1:c5:44:fd:37:84:b9:db:48:fb:dc:75:3e:a8:27:b8:
60:e9:96:94:27:57:2b:72:2a:5b:29:a7:52:6d:5a:b1:60:ba:
c9:0b:90:63:88:ee:79:5b:35:ab:e5:5c:65:c4:f2:c4:50:76:
79:e0:c6:9d:bf:05:a6:af:cd:e7:a9:38:dd:c6:e8:6b:fa:7f:
b1:83:db:b8:af:d7:64:22:ad:7f:e7:76:f5:e3:b2:6e:f0:8e:
f2:01:1e:e3:a2:3c:1d:9e:ff:b0:71:bf:09:94:2f:1c:13:a5:
25:ee:55:4b:33:46:33:8f:fc:01:71:b6:06:c3:85:6c:eb:c9:
95:1b:48:b6:8d:ec:be:e3:e2:ae:59:5d:b2:38:3e:fc:04:42:
64:9f:89:aa:8c:95:6a:e4:a4:1e:80:41:38:b1:19:89:db:3d:
ff:19:ad:2a:9c:15:a7:9f:e0:75:ab:76:23:a1:66:a2:da:1d:
a3:75:0c:d6:f2:e0:fe:25:e1:82:97:06:0c:56:44:68:1d:ae:
e3:3b:ba:b3:86:5d:1d:19:59:dc:e8:85:69:50:62:58:07:3c:
9f:c4:76:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2blizHFo2FGRzjiAio7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjODM1NDk4ZjM1MTk5YTE1NzE5NjRkODU1YzM4Nzc3NTE2
ODFhYjkwHhcNMjUwMTMxMTYwMDE0WhcNMjUwMjAxMTYwMDE0WjAzMTEwLwYDVQQD
Eyg5MzZkOWUzMmZhOTBiZDdiYWMzZmYxMWM4ZGFkNGI3NGUzOTRkYjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1EEs0xONm+mt3vGQtn30rx9elL1
n5aqsAnS4BLgV7+SWx+mgxnbUSWBxYoLt206yXjKpG8BMmw51JKmcjpDTb6CCurI
SoDpB/6UlwJ0npcdvYhray0Gh+0Fsxj3/+E/tS8iIcX1/FXVJNFXOkni+xlsyXnY
/7BUR/mwUSEovgtJ+6kKgt+pK97SK7dbeIW1SIQB2gZVhnriS0AJUtFNfO9GUJp5
aRkqi4Fc236LcSZ5WRxsseUbaCSr3VZvp+jplm/R1GiSuLlWz1HPkHjzhJoE+Iyd
mGV/jgoH+UuwrjiObVvmHY97dcTKAYtaD8/SMuIdZk0mtyIeJj83PC/b2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNtnjL6kL17rD/xHI2tS3TjlNsRMB8GA1UdIwQY
MBaAFHyDVJjzUZmhVxlk2FXDh3dRaBq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMt
NGNlNDc3ZGJiNDA3LzEvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMtNGNlNDc3ZGJiNDA3
LzEvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8wGWAEK
0dWwNdlwyjPIHffS1mg4SaTIWVTRsbhhxhf+owOgwK2hxUT9N4S520j73HU+qCe4
YOmWlCdXK3IqWymnUm1asWC6yQuQY4jueVs1q+VcZcTyxFB2eeDGnb8Fpq/N56k4
3cboa/p/sYPbuK/XZCKtf+d29eOybvCO8gEe46I8HZ7/sHG/CZQvHBOlJe5VSzNG
M4/8AXG2BsOFbOvJlRtIto3svuPirlldsjg+/ARCZJ+JqoyVauSkHoBBOLEZids9
/xmtKpwVp5/gdat2I6Fmotodo3UM1vLg/iXhgpcGDFZEaB2u4zu6s4ZdHRlZ3OiF
aVBiWAc8n8R2og==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:44:13 2025 by rpki-client