Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: D1yFzVErNJSwf4V7f2ymRnCISLyonTNbtLpSi6OCQnM=
Subject key identifier: BA:CE:85:91:5A:38:55:0A:42:73:BC:CC:4A:15:61:1B:51:CA:7C:8B
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 0194BD4E7D41711541B52B8673BC599AD9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 13A9
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: +MSDHTAC7rqYRN9DtPGmZg3GwT9GP4IkVgE2GPY6ajY=)
2: 8Ja6nLmqn5rWkD8bJIXyJiseunA.roa (hash: 0Zo4/0JR5pHj4KIYK41VyhNWjJ7czQTS1SR9Du+4qQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7d:41:71:15:41:b5:2b:86:73:bc:59:9a:d9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=bace85915a38550a4273bccc4a15611b51ca7c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:ca:4e:3d:08:a1:d5:60:d5:4e:b3:05:f5:
1f:d2:c2:8f:f0:07:a6:f0:e2:42:4d:95:75:84:fd:
5f:58:00:b7:d6:ef:18:b0:ee:95:1f:0f:ec:fc:ef:
05:cc:43:bd:5d:4b:a3:fc:76:35:d5:2c:a9:8a:47:
29:f5:a5:29:d4:17:e8:df:0d:af:4a:a9:32:f5:a9:
25:0e:c8:ab:e9:d6:2a:e1:e1:e8:7e:79:05:78:bc:
e0:80:18:21:e7:b7:43:1b:b6:e8:a9:fe:b2:de:df:
f5:0a:81:61:f1:cf:9a:d9:5a:fb:89:be:20:5c:06:
d1:ea:d1:a5:28:9f:67:a6:e4:94:4d:07:31:84:ce:
8f:1a:65:b3:4b:49:44:87:fc:f3:68:bb:69:54:53:
8c:33:d8:5d:08:0c:2e:1b:72:37:71:71:6f:5d:bd:
31:df:c5:7b:ef:26:93:43:0d:61:80:c4:88:2d:14:
60:a2:da:b0:15:b7:c7:a9:1a:91:ff:c4:c3:ff:95:
75:90:08:f0:b0:eb:24:ca:a7:03:04:eb:6f:4f:45:
1f:32:28:ba:e1:a6:4c:55:5e:5e:01:65:71:72:ab:
22:58:34:e6:df:57:f7:54:08:5c:1d:23:66:b9:fd:
09:13:56:1f:de:58:91:48:99:09:72:86:f4:3e:1e:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CE:85:91:5A:38:55:0A:42:73:BC:CC:4A:15:61:1B:51:CA:7C:8B
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:09:4d:f6:34:58:71:19:41:83:32:b0:6a:40:df:88:90:f6:
ca:a2:cf:7f:69:1a:e7:09:18:cd:47:cf:ad:a5:0c:30:a9:c4:
d9:a0:2b:e7:38:b8:74:81:f0:bc:e9:50:d1:8c:11:69:b4:ac:
69:d6:88:ad:fe:d6:e1:f8:5d:18:63:14:9f:56:fa:79:47:59:
3b:ff:26:3d:c4:4e:6f:6c:df:3b:8b:9d:d3:98:27:29:2d:ae:
1d:61:83:c3:73:55:be:44:c1:9e:61:46:85:31:68:0c:6f:ad:
a9:3e:08:88:14:72:49:7e:28:3d:34:a4:0a:4b:2b:8f:f1:a1:
ef:30:f6:41:20:44:03:03:c3:fb:e3:dd:8a:20:48:9c:dd:03:
ef:a6:2b:78:a3:90:1b:3c:93:1c:44:fe:f2:71:02:2d:3f:93:
58:f9:1e:9d:8a:47:8c:74:1b:eb:32:ce:fb:3b:61:62:58:dd:
70:09:48:d2:bd:0d:86:15:34:09:9d:b1:39:4c:d3:17:03:35:
2f:2a:ee:54:29:35:d2:a0:0d:6a:4d:04:99:11:a6:ce:8b:81:
b0:5d:11:f8:16:15:b1:2e:56:17:ac:cf:28:da:dc:65:e8:f6:
e3:cd:0a:e2:b5:73:90:d5:43:f4:15:d4:ae:52:8a:78:63:6c:
07:fc:f9:43
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS9Tn1BcRVBtSuGc7xZmtnNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNjQ5OTE1YTQ3OGVhODZkZmYwMDAyYzViZWQ5ODI5ODI1
Zjk4MTMwHhcNMjUwMTMxMTcwMDI1WhcNMjUwMjAxMTcwMDI1WjAzMTEwLwYDVQQD
EyhiYWNlODU5MTVhMzg1NTBhNDI3M2JjY2M0YTE1NjExYjUxY2E3YzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu7KTj0IodVg1U6zBfUf0sKP8Aem
8OJCTZV1hP1fWAC31u8YsO6VHw/s/O8FzEO9XUuj/HY11Sypikcp9aUp1Bfo3w2v
Sqky9aklDsir6dYq4eHofnkFeLzggBgh57dDG7boqf6y3t/1CoFh8c+a2Vr7ib4g
XAbR6tGlKJ9npuSUTQcxhM6PGmWzS0lEh/zzaLtpVFOMM9hdCAwuG3I3cXFvXb0x
38V77yaTQw1hgMSILRRgotqwFbfHqRqR/8TD/5V1kAjwsOskyqcDBOtvT0UfMii6
4aZMVV5eAWVxcqsiWDTm31f3VAhcHSNmuf0JE1Yf3liRSJkJcob0Ph4OMQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLrOhZFaOFUKQnO8zEoVYRtRynyLMB8GA1UdIwQY
MBaAFPpkmRWkeOqG3/AALFvtmCmCX5gTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tU1pGYVI0Nm9iZjhBQXNXLTJZS1lKZm1CTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvYmM0ZjIxLWE5NzctNDdlMi1iY2Iz
LTdlYWQ2MjY0ZTY1NS8xLzEtbVNaRmFSNDZvYmY4QUFzVy0yWUtZSmZtQk0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFiL2JjNGYyMS1hOTc3LTQ3ZTItYmNiMy03ZWFkNjI2NGU2
NTUvMS8xLW1TWkZhUjQ2b2JmOEFBc1ctMllLWUpmbUJNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmAlN
9jRYcRlBgzKwakDfiJD2yqLPf2ka5wkYzUfPraUMMKnE2aAr5zi4dIHwvOlQ0YwR
abSsadaIrf7W4fhdGGMUn1b6eUdZO/8mPcROb2zfO4ud05gnKS2uHWGDw3NVvkTB
nmFGhTFoDG+tqT4IiBRySX4oPTSkCksrj/Gh7zD2QSBEAwPD++PdiiBInN0D76Yr
eKOQGzyTHET+8nECLT+TWPkenYpHjHQb6zLO+zthYljdcAlI0r0NhhU0CZ2xOUzT
FwM1LyruVCk10qANak0EmRGmzouBsF0R+BYVsS5WF6zPKNrcZej2480K4rVzkNVD
9BXUrlKKeGNsB/z5Qw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:00 2025 by rpki-client