Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
File: 1-K1UNiT40ygeyXBFjudS8QpCRSk.mft (raw, json)
Hash identifier: gTBH31AV3r5y8PR5aETFDfHnvm4Pk478rgj2CPQvMug=
Subject key identifier: C8:51:F8:57:5A:3A:47:F1:98:6F:3F:79:1E:BA:3F:AE:47:31:3D:7B
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial: 0194BC72A69539A7BD5CC8732B0ECBC994B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: 1-K1UNiT40ygeyXBFjudS8QpCRSk.crl (hash: Gz4+t4Wsrdminca3tPHkK/xdnDtQWKo9//Oa8iz1TMY=)
2: 5zxlB35EdRdJTCe7m-yZUPRlsZg.roa (hash: unU/ZcVY/VTIZQHY93UKjeMabLrjeik9JkKxVo8Mckc=)
3: TQygN4SXBXm6kb6dwTHMvf9SU_c.roa (hash: th78B9M/h4hJt88ooUMk1f8j3+dkZq4RBDefMfAfKbA=)
4: ku9pGx_s_uNGA4P-l6uSYVb3Uis.roa (hash: Ec0Pa020pgxE201VKRA5WvEkhNSTtanwIM+0UgcAx7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a6:95:39:a7:bd:5c:c8:73:2b:0e:cb:c9:94:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=c851f8575a3a47f1986f3f791eba3fae47313d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:3e:9b:84:35:ea:bb:22:e8:4d:23:75:59:
db:c7:21:cb:6b:5f:22:33:a2:59:c9:90:0b:a4:20:
fc:ee:24:d1:1a:0d:ab:1d:79:20:ab:1c:7f:53:2c:
76:de:c6:39:ba:e3:ff:f8:f3:c5:31:66:01:c0:28:
83:1a:2a:2c:f7:7a:52:b5:c5:82:4f:c3:45:7b:97:
d0:bc:93:36:de:4e:93:66:fa:fa:f5:4a:e7:9c:be:
d6:24:6b:7c:6f:8c:2b:5b:96:92:92:18:40:84:c1:
35:0c:56:1b:53:bb:b7:f6:a2:cf:ee:19:23:65:e0:
0a:41:e8:68:65:e6:85:f5:a4:45:e4:6b:55:12:e2:
d0:e7:35:c4:9c:8c:15:cc:3e:43:27:3c:fa:5e:7f:
26:64:e6:72:a5:27:3a:41:61:d1:11:ce:e3:bd:6a:
97:e2:96:15:3c:fc:30:f5:5b:ed:93:80:4b:d4:b2:
42:6e:d2:9b:f7:18:c5:e9:a1:e4:b1:98:83:97:e3:
44:93:70:8b:d8:c5:fd:8e:78:1a:8e:a5:37:2e:70:
05:a5:e3:9a:8a:36:fa:cd:34:52:7b:12:39:65:7e:
8d:7f:1d:c0:a7:02:f4:f3:83:3a:10:84:70:4e:2c:
53:b9:e5:89:bd:26:1e:00:62:34:88:16:0d:db:0d:
2e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:51:F8:57:5A:3A:47:F1:98:6F:3F:79:1E:BA:3F:AE:47:31:3D:7B
X509v3 Authority Key Identifier:
keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ae:2f:51:3a:d9:47:19:73:6c:73:f2:9d:3d:5c:be:a6:44:
22:85:61:d1:05:92:8a:c1:11:8c:f2:78:5f:9a:d9:74:8a:5b:
ca:bf:77:b5:7a:68:10:04:5d:58:df:c1:4f:ac:f6:3c:db:ac:
64:03:ff:1a:d2:c0:28:e0:ca:13:de:27:83:82:18:48:c7:64:
fe:93:a7:a6:12:a3:ae:51:40:cf:f5:8b:fd:4a:73:36:80:ef:
1c:74:dd:54:37:03:70:18:47:8f:7d:5b:02:ab:34:ac:60:99:
89:b6:2e:0b:2d:c4:cb:33:d8:08:08:d9:cf:bf:27:08:7f:ac:
5a:25:d3:6f:25:d1:bb:85:1a:9f:60:38:7d:59:5a:4c:c5:a1:
82:e7:8b:bb:e0:b8:e6:2f:df:5e:ce:15:4e:57:e1:00:98:a4:
75:82:1d:94:31:46:fe:a7:df:6a:82:d3:6d:d1:03:40:52:8a:
27:99:c0:67:2c:be:65:58:4f:8e:7a:5d:1d:f0:4b:13:3c:5e:
a4:2d:d0:44:a4:ec:58:c4:4b:3c:01:df:a9:5f:ec:35:f0:66:
51:ea:8d:85:ff:90:b0:08:54:92:4b:30:0a:c9:a1:7a:33:e5:
6a:48:4c:63:ce:84:47:96:52:0f:de:ef:81:25:24:13:b9:29:
f1:cc:22:43
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS8cqaVOae9XMhzKw7LyZS4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YWQ1NDM2MjRmOGQzMjgxZWM5NzA0NThlZTc1MmYxMGE0
MjQ1MjkwHhcNMjUwMTMxMTMwMDE3WhcNMjUwMjAxMTMwMDE3WjAzMTEwLwYDVQQD
EyhjODUxZjg1NzVhM2E0N2YxOTg2ZjNmNzkxZWJhM2ZhZTQ3MzEzZDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln4+m4Q16rsi6E0jdVnbxyHLa18i
M6JZyZALpCD87iTRGg2rHXkgqxx/Uyx23sY5uuP/+PPFMWYBwCiDGios93pStcWC
T8NFe5fQvJM23k6TZvr69UrnnL7WJGt8b4wrW5aSkhhAhME1DFYbU7u39qLP7hkj
ZeAKQehoZeaF9aRF5GtVEuLQ5zXEnIwVzD5DJzz6Xn8mZOZypSc6QWHREc7jvWqX
4pYVPPww9Vvtk4BL1LJCbtKb9xjF6aHksZiDl+NEk3CL2MX9jngajqU3LnAFpeOa
ijb6zTRSexI5ZX6Nfx3ApwL084M6EIRwTixTueWJvSYeAGI0iBYN2w0ujQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMhR+FdaOkfxmG8/eR66P65HMT17MB8GA1UdIwQY
MBaAFPitVDYk+NMoHslwRY7nUvEKQkUpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LMVVOaVQ0MHlnZXlYQkZqdWRTOFFwQ1JTay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYWYxZjY0LWMzNWYtNDdlOC04N2M5
LThhMTFiNDcxOWQ4Mi8xLzEtSzFVTmlUNDB5Z2V5WEJGanVkUzhRcENSU2subWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzIwL2FmMWY2NC1jMzVmLTQ3ZTgtODdjOS04YTExYjQ3MTlk
ODIvMS8xLUsxVU5pVDQweWdleVhCRmp1ZFM4UXBDUlNrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY64v
UTrZRxlzbHPynT1cvqZEIoVh0QWSisERjPJ4X5rZdIpbyr93tXpoEARdWN/BT6z2
PNusZAP/GtLAKODKE94ng4IYSMdk/pOnphKjrlFAz/WL/UpzNoDvHHTdVDcDcBhH
j31bAqs0rGCZibYuCy3EyzPYCAjZz78nCH+sWiXTbyXRu4Uan2A4fVlaTMWhgueL
u+C45i/fXs4VTlfhAJikdYIdlDFG/qffaoLTbdEDQFKKJ5nAZyy+ZVhPjnpdHfBL
EzxepC3QRKTsWMRLPAHfqV/sNfBmUeqNhf+QsAhUkkswCsmhejPlakhMY86ER5ZS
D97vgSUkE7kp8cwiQw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:15:19 2025 by rpki-client