
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
File: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json)
Hash identifier: yEheiCRIqGFN5hLJJ7BSq3txvdvylWLcVhNz/Ap7/Y4=
Subject key identifier: 42:CD:E4:C5:DD:F3:DE:B4:8D:32:B9:EC:35:7C:E3:47:B6:5E:52:5B
Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
Certificate issuer: /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Certificate serial: 0194BD85AE8893CB35FB05EDA83994C6BA7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: RwwhxsPczeZnlbnX3iQGj3F045Wug2+Cnt7ZxxcdcRQ=)
2: uSVVlqHZvV5YEhwqY0z-9BTB1zI.roa (hash: AWa2RaP+hTglbbgDdOdlnFQ+mgvTTY8nknDwYB/qQE8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ae:88:93:cb:35:fb:05:ed:a8:39:94:c6:ba:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=42cde4c5ddf3deb48d32b9ec357ce347b65e525b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ab:68:d5:65:29:fb:51:df:01:78:7b:9c:fc:
45:b9:fe:92:56:28:09:88:df:fa:e2:a9:7d:3e:a1:
87:dd:72:9a:3e:eb:14:c6:21:13:cf:2d:fd:df:e8:
09:48:12:04:00:9d:d8:7b:6a:6f:63:3b:62:d9:3a:
8d:07:de:67:1b:17:f6:54:0d:a0:c8:8d:18:7a:04:
d6:d6:3d:14:f5:45:33:5a:14:01:aa:c8:c8:a7:e6:
4e:49:00:81:a5:c2:12:60:00:02:01:87:fb:4a:e6:
d0:a9:25:d7:71:2c:07:32:6d:e9:25:95:02:2d:00:
23:7c:d4:5c:35:fa:90:93:61:96:64:89:ee:27:c9:
19:fa:1c:44:b4:65:9e:81:ce:d3:25:0a:26:2a:5f:
da:bc:3c:ee:22:64:f9:99:51:3c:7e:1c:ec:51:37:
22:e2:dd:0c:6b:40:8b:77:a1:a7:22:c5:8f:5f:8a:
6c:c8:fb:75:32:a6:92:15:48:0d:73:fe:eb:8c:4f:
a2:3f:53:7c:74:22:53:22:75:b2:58:54:f7:30:0c:
96:d2:5f:95:01:96:f4:05:70:24:fc:33:2d:e7:04:
59:69:e2:db:a3:f2:ea:01:d5:7d:89:5b:26:6a:08:
e1:bc:5e:8b:39:eb:69:ac:cf:04:6f:e3:c7:db:80:
1a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CD:E4:C5:DD:F3:DE:B4:8D:32:B9:EC:35:7C:E3:47:B6:5E:52:5B
X509v3 Authority Key Identifier:
keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d2:64:31:14:2a:14:26:ae:89:11:43:c7:2d:0d:5c:e0:65:
d1:b7:07:b7:f0:8a:80:a7:e0:51:c5:e7:99:9f:a7:f0:d5:42:
74:24:eb:c1:6b:ad:7a:da:4d:ee:aa:46:47:a2:eb:00:09:a5:
20:ef:9b:67:35:7f:dd:89:27:f2:67:5d:9a:dc:cc:7e:64:22:
01:45:5e:7b:cf:8e:ba:20:2c:52:93:00:a5:ad:ec:4b:c1:8a:
52:8f:49:32:5a:46:98:4c:8e:0d:3d:e8:8b:58:69:28:f9:ed:
d7:dc:11:a0:4a:07:a3:cf:e6:d6:d4:83:b8:05:e7:26:4a:91:
f3:35:be:6a:96:ef:ca:6b:36:10:67:d9:99:a8:6c:da:fa:f5:
98:60:5e:18:45:6c:bb:65:71:ad:9a:89:a5:1a:c5:b3:ea:ce:
b8:db:24:7a:5e:df:1a:e3:57:0a:e6:79:dd:97:5e:0b:38:45:
fe:11:37:08:25:39:c0:59:c6:e3:68:2c:01:a3:46:58:63:31:
01:43:83:07:de:55:0d:d8:a6:6d:31:83:2a:cd:31:2e:2a:2f:
d9:87:f4:fd:c4:d8:11:46:85:a0:aa:0a:50:40:27:1a:88:bc:
dc:9d:ac:67:81:7b:a3:ba:dc:21:16:64:08:39:5a:07:b6:4d:
62:33:1a:31
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS9ha6Ik8s1+wXtqDmUxrp7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYmI0OWU2ODgzMzVhYjE1OTNmOWQxMGUwMDZlZjVlOWJj
OGJkNTYwHhcNMjUwMTMxMTgwMDQyWhcNMjUwMjAxMTgwMDQyWjAzMTEwLwYDVQQD
Eyg0MmNkZTRjNWRkZjNkZWI0OGQzMmI5ZWMzNTdjZTM0N2I2NWU1MjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiato1WUp+1HfAXh7nPxFuf6SVigJ
iN/64ql9PqGH3XKaPusUxiETzy393+gJSBIEAJ3Ye2pvYzti2TqNB95nGxf2VA2g
yI0YegTW1j0U9UUzWhQBqsjIp+ZOSQCBpcISYAACAYf7SubQqSXXcSwHMm3pJZUC
LQAjfNRcNfqQk2GWZInuJ8kZ+hxEtGWegc7TJQomKl/avDzuImT5mVE8fhzsUTci
4t0Ma0CLd6GnIsWPX4psyPt1MqaSFUgNc/7rjE+iP1N8dCJTInWyWFT3MAyW0l+V
AZb0BXAk/DMt5wRZaeLbo/LqAdV9iVsmagjhvF6LOetprM8Eb+PH24AaAwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFELN5MXd8960jTK57DV840e2XlJbMB8GA1UdIwQY
MBaAFPq7SeaIM1qxWT+dEOAG716byL1WMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ydEo1b2d6V3JGWlA1MFE0QWJ2WHB2SXZWWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZDdhM2JhLTA3ZTUtNDFkNi04YzM5
LTU2YTU1YzQyZGU4OC8xLzEtcnRKNW9neldyRlpQNTBRNEFidlhwdkl2VlkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBmL2Q3YTNiYS0wN2U1LTQxZDYtOGMzOS01NmE1NWM0MmRl
ODgvMS8xLXJ0SjVvZ3pXckZaUDUwUTRBYnZYcHZJdlZZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNJk
MRQqFCauiRFDxy0NXOBl0bcHt/CKgKfgUcXnmZ+n8NVCdCTrwWutetpN7qpGR6Lr
AAmlIO+bZzV/3Ykn8mddmtzMfmQiAUVee8+OuiAsUpMApa3sS8GKUo9JMlpGmEyO
DT3oi1hpKPnt19wRoEoHo8/m1tSDuAXnJkqR8zW+apbvyms2EGfZmahs2vr1mGBe
GEVsu2VxrZqJpRrFs+rOuNskel7fGuNXCuZ53ZdeCzhF/hE3CCU5wFnG42gsAaNG
WGMxAUODB95VDdimbTGDKs0xLiov2Yf0/cTYEUaFoKoKUEAnGoi83J2sZ4F7o7rc
IRZkCDlaB7ZNYjMaMQ==
-----END CERTIFICATE-----
Generated at Thu May 1 15:37:02 2025 by rpki-client