Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
File: 6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft (raw, json)
Hash identifier: WZPUsFJ7hgbnuj4pIvDC6MerXVk6eX9giiBbDYyYNek=
Subject key identifier: F5:FD:B7:EC:33:79:C7:47:EB:71:08:A3:7E:E6:1E:38:28:0B:45:86
Authority key identifier: E8:53:46:43:EC:48:26:B4:39:41:7F:DB:3C:B2:C4:93:E6:1F:94:9E
Certificate issuer: /CN=e8534643ec4826b439417fdb3cb2c493e61f949e
Certificate serial: 0194BD17AFBC28C584D133D1BEAD1ECDDCA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
Manifest number: 087B
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: 6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl (hash: JDzjjduVxxqeITfqJ1kAumNpDsfq4IJt385llEhxnB8=)
2: pcaO9IUtzZyK8Co5EmCpCcfvONI.roa (hash: IIenPfWR2zkC41HP7odhhfKlMtF18hRjl9raKSYcubs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:af:bc:28:c5:84:d1:33:d1:be:ad:1e:cd:dc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8534643ec4826b439417fdb3cb2c493e61f949e
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=f5fdb7ec3379c747eb7108a37ee61e38280b4586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:8f:60:3c:b3:56:c3:d3:01:5b:dd:33:f4:
f2:9a:db:6d:21:f8:41:63:a5:44:20:4b:60:a8:10:
17:31:6c:ac:db:85:39:a9:bb:20:21:4b:c2:8a:57:
f1:e6:7b:6f:6d:ca:8e:a8:d2:3a:08:4b:99:86:b8:
52:33:b8:35:a5:2e:bd:79:d9:de:55:8d:fe:20:16:
af:a5:87:5a:7b:d0:b3:5a:fa:4f:02:63:b8:d7:c9:
99:39:17:0d:c2:18:ce:9e:5f:da:5d:74:cd:6e:b2:
01:85:21:d4:f6:c0:f2:13:28:bd:1c:3a:c6:af:73:
4e:46:77:36:ef:50:70:e3:1d:05:25:c3:c5:6c:68:
d0:a8:c7:c7:70:b3:5f:c9:76:0a:0d:73:e3:df:cd:
10:84:53:65:36:27:7a:9d:92:55:17:63:64:11:c5:
ee:a5:cf:a4:2d:c5:1e:27:65:ea:b4:9b:ef:1b:a2:
4a:3d:b2:df:0c:54:c1:f8:9a:ab:4b:40:9a:26:04:
c5:eb:72:a9:d4:a0:b5:8a:a2:ac:23:c2:3f:e5:30:
27:ae:bb:82:e5:d4:37:f4:a5:52:ea:f4:2b:f9:46:
80:ff:1e:07:b4:69:be:43:c5:d1:d7:67:78:29:66:
98:15:9f:57:90:0b:f4:f2:6b:84:af:39:10:08:af:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FD:B7:EC:33:79:C7:47:EB:71:08:A3:7E:E6:1E:38:28:0B:45:86
X509v3 Authority Key Identifier:
keyid:E8:53:46:43:EC:48:26:B4:39:41:7F:DB:3C:B2:C4:93:E6:1F:94:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c6:49:83:2f:5f:36:9e:b2:c7:08:e1:e5:0c:51:29:21:16:
33:ca:ea:34:e7:90:0f:b1:1b:17:8f:e0:aa:51:e9:e1:57:59:
25:a3:e4:97:f1:23:97:cc:d8:7e:92:60:64:4b:bd:cc:07:ae:
a4:52:9a:b1:92:ff:21:63:9e:8f:5a:0f:f3:82:7e:92:80:d8:
54:0a:df:b3:5a:25:68:c3:73:47:eb:58:05:a4:14:7b:0b:7d:
37:48:ad:f1:6b:db:46:7a:f8:b8:6e:31:bb:6b:9a:e2:e3:91:
38:8a:69:0c:9d:f9:70:bb:77:c7:d3:29:fa:9b:e6:e6:e2:9e:
f6:37:6e:d0:ae:8b:b3:88:0e:10:5d:4d:04:1c:86:9e:45:4c:
53:68:d1:82:98:6e:87:8f:5b:47:87:53:4e:df:95:4b:b5:44:
2f:23:7d:43:db:66:05:bd:04:0b:28:18:ee:1a:bb:ba:49:90:
bd:9e:f8:fc:a0:74:f8:2d:12:1f:e1:0d:33:1c:71:52:33:65:
d7:55:fa:f2:7c:be:b2:a9:f9:b5:93:1f:18:54:66:f0:3c:01:
8a:7c:3a:6c:2d:2c:fb:e3:14:71:5d:97:c4:ea:be:76:f2:e3:
3a:24:94:f0:5e:5b:49:f6:e7:e4:b3:0f:54:6d:a6:f6:60:b9:
d0:5f:0f:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6+8KMWE0TPRvq0ezdyjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NTM0NjQzZWM0ODI2YjQzOTQxN2ZkYjNjYjJjNDkzZTYx
Zjk0OWUwHhcNMjUwMTMxMTYwMDMzWhcNMjUwMjAxMTYwMDMzWjAzMTEwLwYDVQQD
EyhmNWZkYjdlYzMzNzljNzQ3ZWI3MTA4YTM3ZWU2MWUzODI4MGI0NTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIOPYDyzVsPTAVvdM/TymtttIfhB
Y6VEIEtgqBAXMWys24U5qbsgIUvCilfx5ntvbcqOqNI6CEuZhrhSM7g1pS69edne
VY3+IBavpYdae9CzWvpPAmO418mZORcNwhjOnl/aXXTNbrIBhSHU9sDyEyi9HDrG
r3NORnc271Bw4x0FJcPFbGjQqMfHcLNfyXYKDXPj380QhFNlNid6nZJVF2NkEcXu
pc+kLcUeJ2XqtJvvG6JKPbLfDFTB+JqrS0CaJgTF63Kp1KC1iqKsI8I/5TAnrruC
5dQ39KVS6vQr+UaA/x4HtGm+Q8XR12d4KWaYFZ9XkAv08muErzkQCK/fHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX9t+wzecdH63EIo37mHjgoC0WGMB8GA1UdIwQY
MBaAFOhTRkPsSCa0OUF/2zyyxJPmH5SeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkZOR1EteElKclE1UVhfYlBMTEVrLVlmbEo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84M2NhZTYtNWJjYi00OGM0LThlYmQt
MjlkZTQ4ZWUwMGI5LzEvNkZOR1EteElKclE1UVhfYlBMTEVrLVlmbEo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi84M2NhZTYtNWJjYi00OGM0LThlYmQtMjlkZTQ4ZWUwMGI5
LzEvNkZOR1EteElKclE1UVhfYlBMTEVrLVlmbEo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsZJgy9f
Np6yxwjh5QxRKSEWM8rqNOeQD7EbF4/gqlHp4VdZJaPkl/Ejl8zYfpJgZEu9zAeu
pFKasZL/IWOej1oP84J+koDYVArfs1olaMNzR+tYBaQUewt9N0it8WvbRnr4uG4x
u2ua4uOROIppDJ35cLt3x9Mp+pvm5uKe9jdu0K6Ls4gOEF1NBByGnkVMU2jRgphu
h49bR4dTTt+VS7VELyN9Q9tmBb0ECygY7hq7ukmQvZ74/KB0+C0SH+ENMxxxUjNl
11X68ny+sqn5tZMfGFRm8DwBinw6bC0s++MUcV2XxOq+dvLjOiSU8F5bSfbn5LMP
VG2m9mC50F8PQA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:08 2025 by rpki-client