Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier: btWHyopSCRqJtxlcjY9jKdx/nNuus1sJy8OwppVDKwc=
Subject key identifier: 84:3A:43:34:BA:17:66:1B:2D:DE:DE:E9:E3:94:42:0B:76:A8:9A:AC
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial: 0194BD8557DB432FAC49B5A814291EC29C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: N00KVc0CS+t1BfW3dXzESHDvgGO6/Ww5ABh9fkU/UKE=)
2: Qv45l9CC_OtB7OS_57aAR1sJyvc.roa (hash: Mv6sqdxR24sbzw3gEqGiuaVF1p5QjBnxJTiW3StRP2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:57:db:43:2f:ac:49:b5:a8:14:29:1e:c2:9c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=843a4334ba17661b2ddedee9e394420b76a89aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:ab:76:2b:66:44:76:c2:28:02:22:d6:30:
4f:38:18:b8:26:e0:45:b9:dd:c5:62:ff:67:87:a9:
ee:d3:aa:ae:26:fc:d2:0d:10:22:30:f9:1c:5b:f0:
8b:1e:ea:f8:1e:1b:54:97:c8:5a:9d:4b:5c:4f:30:
f6:af:72:4a:b7:63:60:55:ec:32:98:fa:28:6d:64:
b2:0a:5e:16:96:e5:f2:e1:37:1c:d7:3c:1e:0d:0e:
2d:4a:fc:51:a0:6b:77:c7:29:93:45:37:f3:dd:f8:
97:0c:72:d3:5f:fc:76:6b:55:dd:57:da:5d:81:99:
15:3f:4e:4f:28:43:86:bb:05:28:44:0f:8d:55:7b:
6d:d8:13:d4:06:57:15:78:23:32:b9:64:5a:7a:60:
36:42:44:7f:5e:3b:96:1a:7e:33:14:d4:95:4c:58:
92:d8:26:ed:d4:fb:84:49:69:e8:1c:28:dd:2e:7f:
9d:c3:5d:62:22:d8:63:d7:4d:ac:66:22:59:8f:37:
05:a6:30:30:60:3c:40:f9:15:64:65:c2:c0:f2:24:
0e:46:54:88:94:07:5f:cf:c4:cd:fd:26:06:be:75:
21:e3:c8:81:51:ca:ad:cf:11:32:91:ac:2f:68:c2:
68:2e:e6:e2:c3:18:80:9e:ab:69:fe:99:a6:69:a3:
69:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3A:43:34:BA:17:66:1B:2D:DE:DE:E9:E3:94:42:0B:76:A8:9A:AC
X509v3 Authority Key Identifier:
keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:63:96:d8:bd:e0:d2:80:a8:bf:b1:79:a7:f9:9f:8d:c6:68:
d3:49:b5:7f:f3:5c:99:80:57:05:e0:61:87:31:58:8c:26:02:
ec:4b:b0:d9:ee:be:fd:3f:7c:c3:43:51:42:e6:51:43:6a:d9:
b9:d5:5a:47:60:fe:f2:b1:d9:02:78:6a:2c:4e:5e:4c:66:e8:
e3:99:76:82:87:6e:ae:15:3e:d3:76:54:6e:89:d1:7e:ee:4d:
0a:6f:ab:9b:66:ff:20:6b:41:0a:60:0b:84:52:ae:c7:2b:27:
d9:65:aa:7e:83:eb:eb:3f:f2:d8:5f:6e:94:b1:e0:d9:4e:6b:
25:59:cd:04:03:f6:c4:80:9d:cc:43:d6:9d:bc:2b:2f:18:c2:
73:7d:6f:8e:b4:9c:b1:72:13:60:2d:4c:e3:ed:0b:f4:bb:ad:
83:6e:6c:71:b6:61:37:fe:70:0f:34:97:af:1a:8b:3c:00:ae:
c7:b7:67:0c:cb:7d:7e:92:f2:45:8e:8f:60:12:5a:bb:cc:fa:
31:3f:86:fe:54:5f:c2:af:3e:90:f3:44:fa:03:95:fb:1a:41:
2e:ef:61:f9:41:4a:ec:25:bc:46:12:8a:0a:02:bb:e5:a4:b6:
7c:c0:68:c7:69:8f:91:10:73:cf:34:51:17:7a:14:cd:c3:23:
8f:46:76:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVfbQy+sSbWoFCkewpycMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmVkYzE3MDU1NzZkOTdmZTRhZDIwMjkxZGUxOTg0NzNk
ODE1NmYwHhcNMjUwMTMxMTgwMDE5WhcNMjUwMjAxMTgwMDE5WjAzMTEwLwYDVQQD
Eyg4NDNhNDMzNGJhMTc2NjFiMmRkZWRlZTllMzk0NDIwYjc2YTg5YWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxCrditmRHbCKAIi1jBPOBi4JuBF
ud3FYv9nh6nu06quJvzSDRAiMPkcW/CLHur4HhtUl8hanUtcTzD2r3JKt2NgVewy
mPoobWSyCl4WluXy4Tcc1zweDQ4tSvxRoGt3xymTRTfz3fiXDHLTX/x2a1XdV9pd
gZkVP05PKEOGuwUoRA+NVXtt2BPUBlcVeCMyuWRaemA2QkR/XjuWGn4zFNSVTFiS
2Cbt1PuESWnoHCjdLn+dw11iIthj102sZiJZjzcFpjAwYDxA+RVkZcLA8iQORlSI
lAdfz8TN/SYGvnUh48iBUcqtzxEykawvaMJoLubiwxiAnqtp/pmmaaNpAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQ6QzS6F2YbLd7e6eOUQgt2qJqsMB8GA1UdIwQY
MBaAFBX+3BcFV22X/krSApHeGYRz2BVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9lMjdlYjgtYWY2NC00NDZlLTg4ZWMt
ZDQ3MmU0OWY1OTFlLzEvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9lMjdlYjgtYWY2NC00NDZlLTg4ZWMtZDQ3MmU0OWY1OTFl
LzEvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtGOW2L3g
0oCov7F5p/mfjcZo00m1f/NcmYBXBeBhhzFYjCYC7Euw2e6+/T98w0NRQuZRQ2rZ
udVaR2D+8rHZAnhqLE5eTGbo45l2godurhU+03ZUbonRfu5NCm+rm2b/IGtBCmAL
hFKuxysn2WWqfoPr6z/y2F9ulLHg2U5rJVnNBAP2xICdzEPWnbwrLxjCc31vjrSc
sXITYC1M4+0L9Lutg25scbZhN/5wDzSXrxqLPACux7dnDMt9fpLyRY6PYBJau8z6
MT+G/lRfwq8+kPNE+gOV+xpBLu9h+UFK7CW8RhKKCgK75aS2fMBox2mPkRBzzzRR
F3oUzcMjj0Z2Iw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:03 2025 by rpki-client