Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
File: FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json)
Hash identifier: Lx7oXrBYi1NnEqyyhDBXSWDszq1WfaGemPOg68BfZSU=
Subject key identifier: E8:56:BF:70:28:C0:94:E4:75:EF:4B:1C:19:3E:C3:AD:10:B1:01:03
Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Certificate serial: 0194BBCE80F37F17F7EBC1978FA5D68AE64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
Manifest number: 074F
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: 6p3Jds6DKeiBYWdjzJHxbb6aD1L62jcpZYpcEVEF1yE=)
2: bi5ZDVAxCgXHP4ptHVBQTkUpE6s.roa (hash: bndk3fWWVAXFwXPZNDDoiBYejq5Lux0P2PBtRDEnol8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:80:f3:7f:17:f7:eb:c1:97:8f:a5:d6:8a:e6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=e856bf7028c094e475ef4b1c193ec3ad10b10103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:05:5d:98:b3:ad:dc:8c:03:3a:4c:06:92:
68:39:42:63:ad:ff:1f:28:cf:5a:c2:75:a5:6e:3d:
07:e7:6f:73:38:63:84:aa:6f:62:0c:5a:e5:7c:b8:
e9:c1:17:20:75:ca:15:8b:9e:ad:2f:55:a0:47:03:
86:b6:4c:08:f5:91:e3:9c:e6:35:22:9f:97:12:ed:
9e:1b:1e:0f:65:31:23:e8:1a:f0:83:04:d1:d0:de:
94:b0:3b:1a:1c:8f:fe:2c:9c:c9:6a:78:d7:91:88:
e0:36:7c:a9:72:d4:4f:29:05:8c:2d:2d:c9:1e:37:
cd:56:df:28:9a:96:8b:53:d6:ba:53:60:bb:6f:3c:
33:ff:bb:ca:a5:54:7b:d2:44:44:10:dd:60:91:18:
fe:96:14:97:3b:d4:06:7b:38:08:22:66:73:f0:a5:
96:b4:41:f5:d0:d8:31:bf:f9:50:b9:da:2d:8f:60:
e9:dc:3b:d2:5f:6a:a6:1e:a5:1f:ea:ec:c8:dd:36:
c0:39:7c:46:c6:3d:20:59:1c:de:d2:4e:b7:93:12:
3f:78:a8:1d:13:cd:c1:92:79:ea:0e:3b:27:be:67:
3e:61:6b:5a:2f:35:a4:e5:54:7f:6f:56:25:cd:18:
11:5f:89:60:3d:08:9c:14:d1:b2:24:50:0a:1c:cd:
63:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:56:BF:70:28:C0:94:E4:75:EF:4B:1C:19:3E:C3:AD:10:B1:01:03
X509v3 Authority Key Identifier:
keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8f:29:dd:e2:1b:93:6a:94:c0:0a:97:33:79:1d:3f:de:43:
c0:6b:d4:11:81:f2:de:95:f0:7f:c6:38:aa:d6:4d:d7:0d:b7:
4e:13:ac:14:ce:fd:a1:ad:09:8e:b2:28:68:b0:66:34:c9:63:
7a:e0:4b:ca:92:81:80:2d:e4:7c:47:a5:8e:05:fa:15:c5:36:
e0:53:12:88:44:3c:d8:af:c3:29:24:b2:53:47:51:c9:ba:b6:
4d:78:24:ac:a1:53:32:d1:2e:a1:30:3b:29:14:cd:41:e7:98:
93:ac:66:3c:51:de:13:a5:ce:c5:18:86:d8:f1:e2:ed:0b:44:
19:3f:6a:aa:56:13:a3:df:c5:0d:16:99:59:a4:46:77:57:a7:
26:05:94:86:90:31:a1:f5:f6:bc:da:c9:00:f2:73:a3:c6:a4:
c0:61:6f:60:fa:b2:0a:40:58:9b:c9:ab:eb:fe:d4:a6:bd:49:
9e:3d:cb:cb:2c:97:4c:8c:fe:1c:50:44:90:18:a8:b5:8b:fa:
23:cc:7e:b4:3e:8a:e3:c5:af:9e:4c:a6:a7:f6:ff:7f:f3:35:
b5:2e:8f:d0:6e:b8:65:b9:65:85:ed:37:59:27:46:b6:99:dc:
b2:ec:21:e4:50:ef:02:46:89:18:22:59:b1:e2:61:b0:de:89:
fc:e6:0b:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zoDzfxf368GXj6XWiuZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MzJmMzM0ZDhhYmI2OGVmODIyNTQ2ZDhmNmY4ZTgxNTYz
YzZmZDkwHhcNMjUwMTMxMTAwMTAwWhcNMjUwMjAxMTAwMTAwWjAzMTEwLwYDVQQD
EyhlODU2YmY3MDI4YzA5NGU0NzVlZjRiMWMxOTNlYzNhZDEwYjEwMTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEcFXZizrdyMAzpMBpJoOUJjrf8f
KM9awnWlbj0H529zOGOEqm9iDFrlfLjpwRcgdcoVi56tL1WgRwOGtkwI9ZHjnOY1
Ip+XEu2eGx4PZTEj6BrwgwTR0N6UsDsaHI/+LJzJanjXkYjgNnypctRPKQWMLS3J
HjfNVt8ompaLU9a6U2C7bzwz/7vKpVR70kREEN1gkRj+lhSXO9QGezgIImZz8KWW
tEH10Ngxv/lQudotj2Dp3DvSX2qmHqUf6uzI3TbAOXxGxj0gWRze0k63kxI/eKgd
E83BknnqDjsnvmc+YWtaLzWk5VR/b1YlzRgRX4lgPQicFNGyJFAKHM1jCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhWv3AowJTkde9LHBk+w60QsQEDMB8GA1UdIwQY
MBaAFBcy8zTYq7aO+CJUbY9vjoFWPG/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83YmM4ZGEtY2I4Mi00YWJjLWIyZjAt
MTNiNGI4MGM1NGJhLzEvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83YmM4ZGEtY2I4Mi00YWJjLWIyZjAtMTNiNGI4MGM1NGJh
LzEvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEo8p3eIb
k2qUwAqXM3kdP95DwGvUEYHy3pXwf8Y4qtZN1w23ThOsFM79oa0JjrIoaLBmNMlj
euBLypKBgC3kfEeljgX6FcU24FMSiEQ82K/DKSSyU0dRybq2TXgkrKFTMtEuoTA7
KRTNQeeYk6xmPFHeE6XOxRiG2PHi7QtEGT9qqlYTo9/FDRaZWaRGd1enJgWUhpAx
ofX2vNrJAPJzo8akwGFvYPqyCkBYm8mr6/7Upr1Jnj3LyyyXTIz+HFBEkBiotYv6
I8x+tD6K48Wvnkymp/b/f/M1tS6P0G64Zbllhe03WSdGtpncsuwh5FDvAkaJGCJZ
seJhsN6J/OYLzw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:46 2025 by rpki-client