Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: tmkeOsgDospkIINbTW69545T39LP1nGmLU5RiR9mPAY=
Subject key identifier: 7E:A5:BD:C5:47:C4:49:81:98:10:B9:0E:CB:78:B9:AC:D9:5E:22:92
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 0194BBCEB92E0D997ADCD85B3C8CCB3BAA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 095F
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: XDbrvNT86ISN_spCbo4xvAzpVp4.roa (hash: VdcMI142dXyMiD8Y0gV4McGw1NiqJuUGtwcS5l0geTI=)
2: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: 4K19pGFgKxFgwUyCEY57qy296nsuK6X/9B44duZwjns=)
3: ziT1KvRp4nclVM5reU3sOFNH1x4.roa (hash: Q4C5iLbiXkuuyYxp+dYvmqYFnNUxA4NFMnWPDomm2KQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b9:2e:0d:99:7a:dc:d8:5b:3c:8c:cb:3b:aa:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=7ea5bdc547c449819810b90ecb78b9acd95e2292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:64:06:35:e4:b3:c8:2a:e9:b9:3f:1f:17:e4:
e0:31:78:e7:33:42:cc:68:66:7d:43:fb:73:59:1e:
44:dc:35:09:fd:4f:8f:77:52:bc:ee:45:fe:c1:e0:
6b:b0:7b:28:2a:af:9b:0f:8e:ce:55:31:76:04:30:
4e:b7:ec:13:a8:5a:9c:3e:69:4e:11:0c:63:8e:10:
27:77:33:39:b8:e2:fe:be:f8:74:15:8d:e0:4d:bc:
24:2d:1b:88:c3:b0:cf:e0:52:48:54:dc:9c:e1:75:
25:63:2a:15:ed:89:f6:f8:eb:1d:d1:b5:f7:da:8f:
bd:bd:5a:95:2f:39:0c:dc:af:ac:3e:46:78:6b:bc:
c7:c2:40:0f:2b:a3:45:38:4d:25:15:12:91:67:7c:
7f:85:02:eb:00:0b:7a:e5:25:e6:94:ad:0f:72:64:
99:f4:57:c2:fe:64:ad:55:48:83:4c:76:ee:ba:74:
24:17:24:25:f1:c2:44:30:0a:e3:ca:a1:b8:e5:5c:
54:c5:d5:3a:48:42:10:4b:31:0f:46:34:ac:a8:bf:
e3:9d:62:dd:08:4d:67:c2:23:61:b9:54:1b:37:64:
e9:ca:c3:75:fc:9f:e7:8e:e7:cd:bd:b3:51:58:f4:
97:dd:6f:17:e3:5d:b5:0e:cb:69:cc:9a:bc:23:12:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A5:BD:C5:47:C4:49:81:98:10:B9:0E:CB:78:B9:AC:D9:5E:22:92
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:79:49:78:90:79:70:af:7d:bc:58:be:ad:bf:ce:96:c9:43:
fc:7f:87:e3:e0:0c:7a:c5:61:17:09:f7:90:8e:5a:8e:e4:0c:
66:9c:60:c2:fe:85:30:24:b0:a1:ab:61:f9:51:b2:2b:1f:d6:
d8:e5:5b:b1:a7:36:54:d2:e1:d8:06:54:01:79:f2:68:f3:f6:
fd:d9:d0:3c:04:a0:1d:99:30:ce:aa:5b:f7:25:2e:5c:5a:a6:
07:76:ab:a8:d1:ff:fc:7c:06:34:db:1b:28:4f:68:68:ec:a0:
bb:f4:01:8c:01:99:26:2c:55:6c:86:6b:f9:a0:23:aa:e8:55:
a2:e1:0e:36:80:f6:a9:55:ff:de:d9:b2:b3:81:fc:4f:62:e4:
68:fd:ce:7c:8b:fc:fb:da:56:6e:fc:b2:7e:e9:09:3c:9c:cd:
9c:bc:1b:d9:ed:f6:d4:8b:3c:d4:0a:e9:3c:96:22:ac:3c:b7:
f2:86:f4:1b:7d:52:77:7f:13:1f:a3:60:e5:d4:68:b2:f9:04:
9d:50:8f:f3:74:2d:76:cd:3d:98:d1:4a:8e:87:ef:e8:5e:00:
a3:01:3a:3e:83:aa:48:f9:05:fc:0e:9e:09:26:bb:30:88:cd:
69:e5:0b:99:ec:6a:b4:b8:70:50:b9:49:13:e0:00:7e:a1:1d:
42:53:5f:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zrkuDZl63NhbPIzLO6pZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMjM4MGQ3NjRhOTYxMWRmZTJmYmMwY2UwY2M0MDQ5NmVj
MWU4M2UwHhcNMjUwMTMxMTAwMTE0WhcNMjUwMjAxMTAwMTE0WjAzMTEwLwYDVQQD
Eyg3ZWE1YmRjNTQ3YzQ0OTgxOTgxMGI5MGVjYjc4YjlhY2Q5NWUyMjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02QGNeSzyCrpuT8fF+TgMXjnM0LM
aGZ9Q/tzWR5E3DUJ/U+Pd1K87kX+weBrsHsoKq+bD47OVTF2BDBOt+wTqFqcPmlO
EQxjjhAndzM5uOL+vvh0FY3gTbwkLRuIw7DP4FJIVNyc4XUlYyoV7Yn2+Osd0bX3
2o+9vVqVLzkM3K+sPkZ4a7zHwkAPK6NFOE0lFRKRZ3x/hQLrAAt65SXmlK0PcmSZ
9FfC/mStVUiDTHbuunQkFyQl8cJEMArjyqG45VxUxdU6SEIQSzEPRjSsqL/jnWLd
CE1nwiNhuVQbN2TpysN1/J/njufNvbNRWPSX3W8X4121DstpzJq8IxKTcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6lvcVHxEmBmBC5Dst4uazZXiKSMB8GA1UdIwQY
MBaAFHwjgNdkqWEd/i+8DODMQEluweg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84NWZhODQtNWQ5OS00YWE4LTg3NTMt
NWQ4Y2E2MzY4MWFkLzEvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84NWZhODQtNWQ5OS00YWE4LTg3NTMtNWQ4Y2E2MzY4MWFk
LzEvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXlJeJB5
cK99vFi+rb/OlslD/H+H4+AMesVhFwn3kI5ajuQMZpxgwv6FMCSwoath+VGyKx/W
2OVbsac2VNLh2AZUAXnyaPP2/dnQPASgHZkwzqpb9yUuXFqmB3arqNH//HwGNNsb
KE9oaOygu/QBjAGZJixVbIZr+aAjquhVouEONoD2qVX/3tmys4H8T2LkaP3OfIv8
+9pWbvyyfukJPJzNnLwb2e321Is81ArpPJYirDy38ob0G31Sd38TH6Ng5dRosvkE
nVCP83Qtds09mNFKjofv6F4AowE6PoOqSPkF/A6eCSa7MIjNaeULmexqtLhwULlJ
E+AAfqEdQlNf9g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:01 2025 by rpki-client