Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier: qZmEM+8Xzsff9vbsPHu+n1roawdLUR71OTbt/xj6FN8=
Subject key identifier: 7A:AB:B4:06:B8:97:10:F4:69:7E:5E:E9:E0:86:AF:72:71:50:EB:4A
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial: 0194BC3C88FE49A8A11950B36C22EA35892E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: 1-TlqHwAPmWVtB0VaMS2dcw_y4BM.roa (hash: Vsrj8BjejOLCxBhFk7ZH0eVSUMnx2WUgqzTLU5U12JQ=)
2: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: 4LLRRB+YvVwUWz+L66X84AoRgvv4tb3FjuCXudnlvN4=)
3: fwhTjjRIhEdJ6uOffHkJ9IbiBcc.roa (hash: uAg9kNvS0wjEdBKrNfsh4Pl1caTWWUTWPoPoJJEyRFk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:88:fe:49:a8:a1:19:50:b3:6c:22:ea:35:89:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=7aabb406b89710f4697e5ee9e086af727150eb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:b1:df:23:78:26:25:4d:6d:8b:b4:c3:4e:
19:6d:ee:1d:89:49:4e:e6:17:6f:30:d8:61:69:cb:
92:71:d6:96:73:6e:ee:e5:fa:b1:41:d5:7b:bd:53:
8b:66:19:16:7d:39:35:42:fc:76:25:44:7a:2f:81:
1c:6f:a4:a5:4c:88:a0:37:b2:fc:c0:e7:52:df:9a:
58:e2:2f:7f:7d:66:54:80:85:39:6a:46:c9:37:23:
b5:b0:d6:95:0a:5f:eb:1c:17:bf:14:31:61:7f:2a:
a0:24:3c:8a:33:84:e9:e1:2f:18:2b:dc:a6:1a:93:
ef:3c:2f:f1:f8:2f:ac:91:04:04:ec:b0:3a:3c:2c:
4c:de:56:96:b6:c0:41:50:57:b6:29:b2:17:28:50:
80:2c:b4:6b:4d:94:30:76:ac:3b:ad:e3:37:df:24:
c3:22:22:66:ed:d4:9d:50:4d:7c:de:ae:5a:b3:cb:
92:db:a5:6e:22:1e:95:8d:0c:60:11:38:63:55:bc:
89:bf:ee:fb:28:3d:a3:cd:18:f6:b7:f9:5f:d3:80:
84:4d:98:39:0e:1b:cf:9f:2a:20:f7:e2:64:df:de:
6f:de:b0:e6:96:f4:ae:db:a6:f5:3f:0e:8c:01:58:
6e:40:ed:c1:0d:66:82:c2:82:3d:7d:95:8c:e4:16:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AB:B4:06:B8:97:10:F4:69:7E:5E:E9:E0:86:AF:72:71:50:EB:4A
X509v3 Authority Key Identifier:
keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:21:69:07:21:75:97:54:9c:fe:66:34:2c:4e:71:87:f3:8e:
94:9b:3e:ef:51:74:56:cc:9c:a6:c4:64:82:f3:74:a6:b7:82:
1a:1b:d9:a6:0c:3d:72:a1:09:ac:fc:00:df:57:29:14:b0:9c:
72:ed:c8:db:81:16:78:29:0b:83:13:4c:4d:b9:f2:64:12:0a:
67:3b:f9:1c:43:5e:35:f6:27:63:9a:17:ec:ed:c7:3f:31:5c:
8c:6d:48:8d:8a:c7:3d:d6:4e:e6:38:47:af:15:da:8b:30:c9:
8a:03:e1:24:0a:13:b6:b7:62:7e:1f:bd:b9:ab:2b:7f:cc:45:
7f:d3:31:f5:1f:3f:d9:25:1c:09:7a:05:06:c1:3c:93:55:b6:
9f:4c:47:5d:c7:f5:f3:6e:bb:77:c0:dd:47:eb:06:ed:b3:33:
64:80:a9:7a:56:34:51:c6:e3:7e:a4:b8:97:f3:12:47:10:58:
a1:67:b5:23:85:fb:80:c3:7e:68:95:84:57:d4:55:fe:00:e3:
5b:5d:a6:5a:23:00:31:11:a0:5d:72:03:ee:15:c6:21:47:ce:
5b:80:e5:ce:5f:f1:f7:8b:2f:8c:66:27:ef:73:68:18:d1:77:
5b:f3:0e:81:65:95:7c:e3:21:9a:ba:cb:4b:ae:38:03:94:a6:
0d:74:c2:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PIj+SaihGVCzbCLqNYkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYjRmNDBmMzIxMTU2MWMyOWYxYmJjMzIwYmQ4N2NmYTJk
ZGQwMjkwHhcNMjUwMTMxMTIwMTExWhcNMjUwMjAxMTIwMTExWjAzMTEwLwYDVQQD
Eyg3YWFiYjQwNmI4OTcxMGY0Njk3ZTVlZTllMDg2YWY3MjcxNTBlYjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOWx3yN4JiVNbYu0w04Zbe4diUlO
5hdvMNhhacuScdaWc27u5fqxQdV7vVOLZhkWfTk1Qvx2JUR6L4Ecb6SlTIigN7L8
wOdS35pY4i9/fWZUgIU5akbJNyO1sNaVCl/rHBe/FDFhfyqgJDyKM4Tp4S8YK9ym
GpPvPC/x+C+skQQE7LA6PCxM3laWtsBBUFe2KbIXKFCALLRrTZQwdqw7reM33yTD
IiJm7dSdUE183q5as8uS26VuIh6VjQxgEThjVbyJv+77KD2jzRj2t/lf04CETZg5
DhvPnyog9+Jk395v3rDmlvSu26b1Pw6MAVhuQO3BDWaCwoI9fZWM5BaJBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqrtAa4lxD0aX5e6eCGr3JxUOtKMB8GA1UdIwQY
MBaAFP+09A8yEVYcKfG7wyC9h8+i3dApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzdUMER6SVJWaHdwOGJ2RElMMkh6NkxkMENrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xNDhkODgtNjEzNi00Mzc0LTk5NGIt
ZDUzZjk0ZTIwN2E5LzEvXzdUMER6SVJWaHdwOGJ2RElMMkh6NkxkMENrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xNDhkODgtNjEzNi00Mzc0LTk5NGItZDUzZjk0ZTIwN2E5
LzEvXzdUMER6SVJWaHdwOGJ2RElMMkh6NkxkMENrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiFpByF1
l1Sc/mY0LE5xh/OOlJs+71F0VsycpsRkgvN0preCGhvZpgw9cqEJrPwA31cpFLCc
cu3I24EWeCkLgxNMTbnyZBIKZzv5HENeNfYnY5oX7O3HPzFcjG1IjYrHPdZO5jhH
rxXaizDJigPhJAoTtrdifh+9uasrf8xFf9Mx9R8/2SUcCXoFBsE8k1W2n0xHXcf1
8267d8DdR+sG7bMzZICpelY0UcbjfqS4l/MSRxBYoWe1I4X7gMN+aJWEV9RV/gDj
W12mWiMAMRGgXXID7hXGIUfOW4Dlzl/x94svjGYn73NoGNF3W/MOgWWVfOMhmrrL
S644A5SmDXTCxg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:37 2025 by rpki-client