Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
File: fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft (raw, json)
Hash identifier: gHgA3bf9qdElo6AwQB0rYLUPFIPgrMS1/aYnJzNyRuQ=
Subject key identifier: CF:4B:B3:40:30:5C:C3:DD:68:FF:DA:E3:11:3D:9B:0D:E9:88:80:73
Authority key identifier: 7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
Certificate issuer: /CN=7e058377510a3a9245ce72cbe88e0efa19719204
Certificate serial: 0194BCE0BE2DDC8A5204227A29ABE74ADDEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
Manifest number: 0E73
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: _J2QkiOT3wZXiv-kIeQ1vzDjGQI.roa (hash: ieQbUeSA/ZnjcXq9UchtsLIMyHxTCALoQIa6C87a8+U=)
2: fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl (hash: VgIttmv1h0FcqbCuUC46r7t4/6Oc4aNjRAIwhys/eno=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:be:2d:dc:8a:52:04:22:7a:29:ab:e7:4a:dd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e058377510a3a9245ce72cbe88e0efa19719204
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=cf4bb340305cc3dd68ffdae3113d9b0de9888073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:0b:ed:e2:b3:2c:6e:82:f0:ea:d8:a3:7c:
51:c0:1b:bf:57:59:f5:30:37:dc:a4:6f:8d:de:d9:
ad:3a:f7:04:bb:1b:52:4e:59:b0:15:5e:a9:6f:db:
ea:3a:29:3c:cd:41:d5:1e:2f:f3:1e:2e:fa:d9:b9:
1a:d7:c0:7e:e1:d5:ce:25:ef:44:73:93:49:f2:d0:
62:89:d3:a1:d5:d5:bd:2e:44:bc:25:79:99:39:13:
d4:32:b9:4e:b8:fe:08:7a:d3:03:21:a1:1b:01:06:
dd:80:60:61:ec:3c:45:24:54:29:d6:3c:29:82:a1:
d9:71:00:fa:f5:3a:7c:41:94:ed:49:a5:6f:7b:dc:
11:3b:af:3e:fa:03:6f:49:0c:1c:de:d5:68:5f:60:
6d:d0:30:b1:96:16:93:1d:c0:5d:c9:b8:69:dc:96:
11:d7:99:1b:08:39:b3:7a:06:32:d9:e5:4f:11:cd:
ca:af:1f:93:25:d4:b9:e1:a5:52:63:ad:ff:61:3a:
fa:ca:87:6e:0c:b6:29:ec:6c:12:00:bf:17:71:e2:
d5:a7:e5:89:f8:d9:61:94:3f:e1:1d:31:24:d6:41:
8f:df:7f:66:be:d6:7d:03:28:61:3f:be:42:e7:fa:
5d:59:3b:c1:7d:0b:ca:10:11:5e:63:07:d1:00:10:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4B:B3:40:30:5C:C3:DD:68:FF:DA:E3:11:3D:9B:0D:E9:88:80:73
X509v3 Authority Key Identifier:
keyid:7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:96:50:05:27:ee:71:c4:51:f1:d3:ee:a8:3c:c3:e5:5f:4f:
fe:9e:2e:3a:63:4b:ef:30:e5:97:bf:22:0e:c0:4b:77:c5:0a:
41:c3:1a:ca:59:81:e6:e3:1c:25:92:b1:0e:b7:e1:c2:c3:03:
91:a7:e1:dd:08:40:a1:15:f8:bc:de:28:c4:48:40:27:35:c2:
c0:35:a9:a8:e5:02:e0:be:6c:b7:7f:0d:40:36:76:79:61:93:
c8:4b:a5:6d:3a:7c:85:10:37:ca:b0:c9:e3:5e:8c:d2:25:76:
f0:88:e5:8f:29:94:24:5e:8a:e0:64:c1:80:e5:5c:b2:83:d7:
34:88:7b:ee:f2:31:eb:4a:f1:d8:d3:73:59:5d:e1:8d:9e:91:
bd:71:6a:43:a8:ed:6f:46:d4:c5:8c:81:ef:57:51:ba:6c:18:
23:04:d8:7c:18:2a:11:01:23:f8:88:4c:f3:a4:d8:68:c7:e1:
d7:10:68:9d:12:2b:76:8f:78:77:5a:84:5b:2b:fa:83:73:71:
3e:c3:a3:18:a1:9d:23:7e:3a:aa:d6:53:35:29:7b:52:3a:86:
6f:e1:28:c6:5f:50:d2:0e:f8:ea:f3:41:1d:fd:f2:38:43:fd:
a4:fb:4c:e1:4b:e2:da:dc:98:cb:03:b4:e9:f5:9d:80:f9:66:
fa:9e:74:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84L4t3IpSBCJ6KavnSt3qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDU4Mzc3NTEwYTNhOTI0NWNlNzJjYmU4OGUwZWZhMTk3
MTkyMDQwHhcNMjUwMTMxMTUwMDMyWhcNMjUwMjAxMTUwMDMyWjAzMTEwLwYDVQQD
EyhjZjRiYjM0MDMwNWNjM2RkNjhmZmRhZTMxMTNkOWIwZGU5ODg4MDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSYL7eKzLG6C8OrYo3xRwBu/V1n1
MDfcpG+N3tmtOvcEuxtSTlmwFV6pb9vqOik8zUHVHi/zHi762bka18B+4dXOJe9E
c5NJ8tBiidOh1dW9LkS8JXmZORPUMrlOuP4IetMDIaEbAQbdgGBh7DxFJFQp1jwp
gqHZcQD69Tp8QZTtSaVve9wRO68++gNvSQwc3tVoX2Bt0DCxlhaTHcBdybhp3JYR
15kbCDmzegYy2eVPEc3Krx+TJdS54aVSY63/YTr6yoduDLYp7GwSAL8XceLVp+WJ
+NlhlD/hHTEk1kGP339mvtZ9AyhhP75C5/pdWTvBfQvKEBFeYwfRABBgvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9Ls0AwXMPdaP/a4xE9mw3piIBzMB8GA1UdIwQY
MBaAFH4Fg3dRCjqSRc5yy+iODvoZcZIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdXRGQxRUtPcEpGem5MTDZJNE8taGx4a2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wMjA1ZjItZGYyYS00MWQ2LWJjMmQt
NzI4MjdmZTZkN2FmLzEvZmdXRGQxRUtPcEpGem5MTDZJNE8taGx4a2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wMjA1ZjItZGYyYS00MWQ2LWJjMmQtNzI4MjdmZTZkN2Fm
LzEvZmdXRGQxRUtPcEpGem5MTDZJNE8taGx4a2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5ZQBSfu
ccRR8dPuqDzD5V9P/p4uOmNL7zDll78iDsBLd8UKQcMaylmB5uMcJZKxDrfhwsMD
kafh3QhAoRX4vN4oxEhAJzXCwDWpqOUC4L5st38NQDZ2eWGTyEulbTp8hRA3yrDJ
416M0iV28IjljymUJF6K4GTBgOVcsoPXNIh77vIx60rx2NNzWV3hjZ6RvXFqQ6jt
b0bUxYyB71dRumwYIwTYfBgqEQEj+IhM86TYaMfh1xBonRIrdo94d1qEWyv6g3Nx
PsOjGKGdI346qtZTNSl7UjqGb+Eoxl9Q0g746vNBHf3yOEP9pPtM4Uvi2tyYywO0
6fWdgPlm+p506Q==
-----END CERTIFICATE-----
Generated at Thu May 1 11:24:36 2025 by rpki-client