Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
File: _FfXotV2YfbDxup2NsoP8jAMFG8.mft (raw, json)
Hash identifier: tKz7El9x9LyPFPv42I+iDy/ik9imhWfqU3wK96hVZGI=
Subject key identifier: 83:7F:B1:87:11:D1:3D:AA:AD:78:25:5C:40:B3:B5:13:E6:2E:F5:C2
Authority key identifier: FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
Certificate issuer: /CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Certificate serial: 0194BC730556F1D07F990EE8FCC96BEBE2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: MLpmz1Ih74d3ai6mUgS3az1JAoA.roa (hash: wPq9cbkd3gHsPqU0L1CCMHdPpNtSvMWNQxLswqIps2I=)
2: _FfXotV2YfbDxup2NsoP8jAMFG8.crl (hash: 7bm78ORlzYHaR9L0+LIqgkOGOzfxdfwkJNp5wONRqa0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:05:56:f1:d0:7f:99:0e:e8:fc:c9:6b:eb:e2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=837fb18711d13daaad78255c40b3b513e62ef5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:14:b5:34:2e:97:1d:1f:35:0d:d4:08:ee:ce:
ea:af:8f:b4:ea:55:4e:4a:80:da:bc:80:bd:82:b8:
ea:f5:49:4c:8b:87:2d:1a:1d:6f:9d:96:1b:fc:3e:
7b:60:d3:72:29:47:9b:1a:ff:01:b8:3e:14:37:21:
f6:e4:be:7b:5f:e2:1d:ba:1a:47:2e:a4:2f:44:bd:
5f:fa:40:76:a6:64:eb:12:0d:f3:27:37:21:17:03:
7f:d7:16:16:9b:e5:6f:af:6b:1f:42:dc:8b:6c:c1:
fb:b5:9e:10:f4:01:7c:56:d3:93:a0:7e:e6:d6:7a:
d9:41:ec:39:55:c1:da:06:11:be:05:18:7b:05:ed:
a7:32:b3:f3:c5:f3:dd:9d:13:0f:71:34:c2:2a:1b:
53:38:2c:80:84:69:69:0f:31:5f:e6:2b:fc:86:24:
42:03:62:21:bb:a1:29:fa:c3:46:7e:79:d0:11:13:
06:93:1a:20:54:b9:7b:d3:15:2e:aa:85:09:f4:2c:
53:9f:b4:a7:1d:01:e1:df:0a:f5:bb:5d:9c:83:94:
d0:70:8a:12:c4:43:ea:30:34:e2:fe:97:df:42:96:
18:d5:95:7b:a4:d4:12:25:22:0a:e5:5a:b7:26:36:
11:18:1e:b1:fb:da:13:0a:b0:9f:c4:ee:0e:28:1d:
a3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7F:B1:87:11:D1:3D:AA:AD:78:25:5C:40:B3:B5:13:E6:2E:F5:C2
X509v3 Authority Key Identifier:
keyid:FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b1:a4:c8:fd:4a:e4:bc:60:c5:33:9c:29:83:9b:aa:54:0e:
86:84:0c:34:25:d6:da:6e:7a:1f:db:04:78:63:97:ba:d9:5d:
82:5d:63:84:ce:a7:32:b6:99:18:30:25:cd:72:f6:b7:53:7f:
69:19:38:97:45:2d:59:86:8d:00:2b:3d:b0:1e:3a:fe:01:12:
3b:96:06:2e:35:db:7c:6e:d4:74:53:96:b6:5f:19:3e:06:53:
21:71:f0:fe:9b:06:46:46:9f:72:be:a0:4d:ed:71:e0:6d:75:
f0:8a:5f:4c:25:e0:bf:95:34:9e:69:c0:8e:c8:54:60:a8:77:
b8:23:52:df:bb:10:c3:05:5b:4b:9c:81:11:07:82:27:a8:ed:
44:29:bf:82:b8:8a:9a:49:25:2a:eb:7a:59:53:d8:a8:cf:aa:
89:d0:2f:f1:db:8b:56:99:fb:62:1e:88:59:9a:d5:22:e8:bf:
90:b1:58:0e:b6:b6:75:a2:0a:eb:e2:49:63:82:70:8b:38:fe:
32:c5:9c:3c:64:2a:c1:6e:48:f1:6b:82:88:7c:e0:0e:ac:ab:
35:bb:ad:f2:9e:6d:e3:d1:96:86:75:50:e0:55:66:f4:25:50:
6e:52:0e:90:08:b8:7d:76:87:22:5a:a2:1e:b6:69:3c:f7:47:
c3:ae:0f:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cwVW8dB/mQ7o/Mlr6+KsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNTdkN2EyZDU3NjYxZjZjM2M2ZWE3NjM2Y2EwZmYyMzAw
YzE0NmYwHhcNMjUwMTMxMTMwMDQyWhcNMjUwMjAxMTMwMDQyWjAzMTEwLwYDVQQD
Eyg4MzdmYjE4NzExZDEzZGFhYWQ3ODI1NWM0MGIzYjUxM2U2MmVmNWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRS1NC6XHR81DdQI7s7qr4+06lVO
SoDavIC9grjq9UlMi4ctGh1vnZYb/D57YNNyKUebGv8BuD4UNyH25L57X+IduhpH
LqQvRL1f+kB2pmTrEg3zJzchFwN/1xYWm+Vvr2sfQtyLbMH7tZ4Q9AF8VtOToH7m
1nrZQew5VcHaBhG+BRh7Be2nMrPzxfPdnRMPcTTCKhtTOCyAhGlpDzFf5iv8hiRC
A2Ihu6Ep+sNGfnnQERMGkxogVLl70xUuqoUJ9CxTn7SnHQHh3wr1u12cg5TQcIoS
xEPqMDTi/pffQpYY1ZV7pNQSJSIK5Vq3JjYRGB6x+9oTCrCfxO4OKB2j4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIN/sYcR0T2qrXglXECztRPmLvXCMB8GA1UdIwQY
MBaAFPxX16LVdmH2w8bqdjbKD/IwDBRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0ZmWG90VjJZZmJEeHVwMk5zb1A4akFNRkc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iMjRiODgtMjJmMC00OWI4LWIyZTMt
NzMxZjQ3ODIwYjIwLzEvX0ZmWG90VjJZZmJEeHVwMk5zb1A4akFNRkc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iMjRiODgtMjJmMC00OWI4LWIyZTMtNzMxZjQ3ODIwYjIw
LzEvX0ZmWG90VjJZZmJEeHVwMk5zb1A4akFNRkc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrGkyP1K
5LxgxTOcKYObqlQOhoQMNCXW2m56H9sEeGOXutldgl1jhM6nMraZGDAlzXL2t1N/
aRk4l0UtWYaNACs9sB46/gESO5YGLjXbfG7UdFOWtl8ZPgZTIXHw/psGRkafcr6g
Te1x4G118IpfTCXgv5U0nmnAjshUYKh3uCNS37sQwwVbS5yBEQeCJ6jtRCm/griK
mkklKut6WVPYqM+qidAv8duLVpn7Yh6IWZrVIui/kLFYDra2daIK6+JJY4Jwizj+
MsWcPGQqwW5I8WuCiHzgDqyrNbut8p5t49GWhnVQ4FVm9CVQblIOkAi4fXaHIlqi
HrZpPPdHw64Pmw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:34 2025 by rpki-client