Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
File: _fGs8n0eRLz5EnH7Z1AVXENV_zk.mft (raw, json)
Hash identifier: R0IUz2iFIKN+PVs1h0hnyagaDy4rA7n+sk94gdH2W+g=
Subject key identifier: F5:BD:69:B7:6B:FC:F0:43:F9:A9:1D:A3:F5:67:E9:46:F9:3F:E9:9B
Authority key identifier: FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
Certificate issuer: /CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Certificate serial: 0194BCE094E9EE626B0CEC566612DF5C8CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
Manifest number: 0838
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: _fGs8n0eRLz5EnH7Z1AVXENV_zk.crl (hash: zKRGIO3JEpOd6AMp9XMd1uNCQOdHsCaGlLipjW3y3C0=)
2: pSzdGy5wvZ2oOOhRlwxrxQanyEI.roa (hash: gpyggWv1B6MR9MZIaLvGDCcYLmPKVbPbekI0j6+XsgA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:94:e9:ee:62:6b:0c:ec:56:66:12:df:5c:8c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=f5bd69b76bfcf043f9a91da3f567e946f93fe99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:b0:4e:15:cd:74:1e:44:c9:74:c0:61:41:
79:7b:96:c1:69:6d:e4:4d:01:99:e2:bf:36:b2:2c:
fb:9e:72:91:32:aa:7d:3b:a9:f9:fc:13:f5:b7:34:
8f:df:46:0e:da:24:7f:42:25:75:87:91:f0:f1:e9:
4c:8c:e5:06:3a:5d:87:25:c5:a9:c1:c6:78:64:58:
cc:ac:7c:d0:12:88:d7:01:11:d7:71:6e:35:23:4c:
34:bd:2e:40:94:3c:35:3e:47:5c:e5:28:f3:fc:f5:
f6:63:36:51:80:cd:5f:e2:ed:cd:67:59:9e:5b:45:
17:25:63:67:d2:48:bb:94:7d:40:51:e0:91:40:7b:
40:76:bc:f8:00:b0:9d:7c:6a:de:0e:5d:5b:bf:fb:
60:95:fa:e6:63:fd:da:d9:3a:ec:a7:89:b7:1f:e4:
b3:b5:ed:9e:97:2d:85:9b:79:c3:81:51:84:54:f2:
2d:39:7f:78:65:41:e7:a7:4c:6c:12:c5:11:5f:35:
0c:d6:fd:e8:81:a5:2d:12:90:d9:78:61:8a:0b:62:
dc:67:c6:c2:e4:b8:47:c8:6d:c9:67:9e:3e:38:30:
d3:ab:9a:fb:af:9e:6e:37:ab:a5:2e:c5:f6:31:8d:
a7:a5:55:90:c0:31:17:be:50:fe:43:90:65:41:74:
53:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BD:69:B7:6B:FC:F0:43:F9:A9:1D:A3:F5:67:E9:46:F9:3F:E9:9B
X509v3 Authority Key Identifier:
keyid:FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:01:91:9b:79:4f:0a:bb:83:14:60:07:23:8c:65:90:90:d4:
b6:f4:1e:2d:93:b8:30:b8:40:64:44:db:36:8a:28:45:37:09:
ec:b2:7f:72:9c:73:77:52:1e:64:75:c1:2a:00:9e:10:0e:6f:
e6:96:52:82:34:d8:5d:f9:22:3d:99:3c:0f:2f:07:f2:88:96:
20:3d:5e:e6:84:59:8a:cc:4a:1f:81:c7:c5:2e:e4:96:64:53:
27:f4:b2:f6:25:dc:e2:82:a0:99:8e:23:50:e1:a6:9b:8f:4a:
63:65:17:1a:78:aa:e5:b1:7f:08:76:4f:90:1f:17:d5:58:86:
f0:53:fc:eb:2a:07:d3:d6:05:6b:10:3d:16:58:00:7c:7b:70:
e5:91:1f:c8:a7:53:10:93:88:9d:59:68:19:84:1d:6b:91:c6:
2b:ed:d7:51:14:b6:a4:a6:0c:53:24:4e:bc:a9:db:4e:38:e7:
b9:bd:81:ae:53:8f:0a:4e:42:9e:f5:c2:da:02:76:f1:02:fc:
2d:1e:05:69:d0:c5:2c:97:3e:35:22:e0:01:dd:90:81:9e:f1:
4c:fa:16:ed:68:00:b1:da:04:2d:7e:c7:d0:36:2a:57:b6:b1:
de:3f:a7:79:aa:04:62:f2:ac:5d:d0:7d:d1:d9:6d:8a:60:a6:
65:8c:b5:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JTp7mJrDOxWZhLfXIzjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZjFhY2YyN2QxZTQ0YmNmOTEyNzFmYjY3NTAxNTVjNDM1
NWZmMzkwHhcNMjUwMTMxMTUwMDIyWhcNMjUwMjAxMTUwMDIyWjAzMTEwLwYDVQQD
EyhmNWJkNjliNzZiZmNmMDQzZjlhOTFkYTNmNTY3ZTk0NmY5M2ZlOTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gWwThXNdB5EyXTAYUF5e5bBaW3k
TQGZ4r82siz7nnKRMqp9O6n5/BP1tzSP30YO2iR/QiV1h5Hw8elMjOUGOl2HJcWp
wcZ4ZFjMrHzQEojXARHXcW41I0w0vS5AlDw1Pkdc5Sjz/PX2YzZRgM1f4u3NZ1me
W0UXJWNn0ki7lH1AUeCRQHtAdrz4ALCdfGreDl1bv/tglfrmY/3a2Trsp4m3H+Sz
te2ely2Fm3nDgVGEVPItOX94ZUHnp0xsEsURXzUM1v3ogaUtEpDZeGGKC2LcZ8bC
5LhHyG3JZ54+ODDTq5r7r55uN6ulLsX2MY2npVWQwDEXvlD+Q5BlQXRTjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPW9abdr/PBD+akdo/Vn6Ub5P+mbMB8GA1UdIwQY
MBaAFP3xrPJ9HkS8+RJx+2dQFVxDVf85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2ZHczhuMGVSTHo1RW5IN1oxQVZYRU5WX3prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82NTIwYzQtNzdjZS00NjM4LWIyYWMt
ZGM5ZmNjZDVmZTAxLzEvX2ZHczhuMGVSTHo1RW5IN1oxQVZYRU5WX3prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC82NTIwYzQtNzdjZS00NjM4LWIyYWMtZGM5ZmNjZDVmZTAx
LzEvX2ZHczhuMGVSTHo1RW5IN1oxQVZYRU5WX3prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAGRm3lP
CruDFGAHI4xlkJDUtvQeLZO4MLhAZETbNoooRTcJ7LJ/cpxzd1IeZHXBKgCeEA5v
5pZSgjTYXfkiPZk8Dy8H8oiWID1e5oRZisxKH4HHxS7klmRTJ/Sy9iXc4oKgmY4j
UOGmm49KY2UXGniq5bF/CHZPkB8X1ViG8FP86yoH09YFaxA9FlgAfHtw5ZEfyKdT
EJOInVloGYQda5HGK+3XURS2pKYMUyROvKnbTjjnub2BrlOPCk5CnvXC2gJ28QL8
LR4FadDFLJc+NSLgAd2QgZ7xTPoW7WgAsdoELX7H0DYqV7ax3j+neaoEYvKsXdB9
0dltimCmZYy1Fg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:48 2025 by rpki-client