Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
File: fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft (raw, json)
Hash identifier: VQ35K4IIeT6J+MptV0E5kjlqfcacPxz/q8Smj17zH80=
Subject key identifier: 4C:6A:1A:D3:B8:B8:7D:66:6D:96:8C:62:04:2D:59:CC:56:12:44:86
Authority key identifier: 7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
Certificate issuer: /CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Certificate serial: 0194BC3C3DD03348DFD52A1CBA4873C82EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl (hash: mf9BlXLx6qr11qktdptj8pJ+bXFRnt/kGjJYlVszSg8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3d:d0:33:48:df:d5:2a:1c:ba:48:73:c8:2e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=4c6a1ad3b8b87d666d968c62042d59cc56124486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ce:5c:9a:c2:3b:44:4c:84:85:fc:24:a6:f7:
2e:57:f0:53:3c:c3:05:08:26:fd:5c:ad:e4:12:ed:
e2:a5:51:5a:0e:44:a8:ff:44:aa:e8:bd:56:4a:2d:
3c:8f:7a:d4:f0:57:c4:49:8e:f8:7a:95:43:f6:ac:
6b:99:7e:57:71:b5:74:13:89:d6:d5:86:7a:3f:4a:
81:a4:66:69:83:56:ea:ea:13:a5:30:ba:42:e6:c9:
a1:02:49:44:9c:a6:ce:83:30:39:99:d7:47:86:24:
ae:bb:40:49:2b:f4:6a:4d:d8:6b:9e:55:3b:3a:6a:
d7:7d:64:51:95:e8:16:08:f8:f2:62:c8:89:8c:1c:
2d:ab:ad:cd:d8:17:0d:9c:5b:08:06:4c:af:4d:cd:
3a:c3:6d:27:0d:02:a3:11:4c:c7:61:8e:0d:d9:2e:
25:72:e4:16:fc:9e:7d:d6:e0:40:10:02:b4:4c:41:
2e:b0:66:5f:d5:78:94:6d:af:ca:55:ec:65:78:9c:
61:a8:64:56:7d:78:5e:0f:5c:80:7c:ee:fb:85:2e:
ab:cf:28:2f:96:3e:c8:77:dc:0c:f5:ec:2b:e8:69:
15:cc:7b:e9:ef:ee:f4:e4:09:37:54:2a:06:36:0c:
3e:72:d1:30:23:12:15:7a:9a:8f:12:d3:54:be:68:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6A:1A:D3:B8:B8:7D:66:6D:96:8C:62:04:2D:59:CC:56:12:44:86
X509v3 Authority Key Identifier:
keyid:7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:03:dc:4a:8d:23:07:8b:d0:d5:a3:b5:c4:d9:8f:23:fe:60:
dc:28:f2:ce:20:4f:10:cb:a6:67:dd:7a:6a:22:23:b2:41:8b:
ee:c5:58:7c:e5:1f:41:41:88:38:e5:d3:96:91:b4:37:ea:cb:
a7:fb:98:1a:45:d9:5c:4d:e1:36:1c:6f:fd:50:bd:88:d7:ca:
7d:58:51:c4:a1:6b:88:44:29:9c:19:7b:82:44:93:dd:8e:e1:
be:f9:52:05:ec:da:05:ac:74:25:14:55:7c:6d:5e:5f:99:9c:
9f:fe:67:0c:e4:8e:01:2f:db:98:e8:dc:95:b8:9b:94:2f:10:
15:6b:0d:22:f0:30:8b:99:dc:0e:cb:40:00:18:cd:3f:38:91:
2e:04:a0:d7:fe:41:fd:fc:af:43:05:0e:32:46:1f:76:9f:23:
5c:2f:2e:4e:9c:93:c6:09:b4:ac:d5:a6:f0:79:f4:93:7a:31:
95:e6:9e:4b:49:c3:a2:4d:4d:e3:2a:14:f5:89:23:a3:67:e8:
0f:e7:f8:46:e4:91:89:8f:2a:f7:6d:5b:82:54:70:6e:b3:74:
4a:b3:8e:a1:75:21:4c:af:00:9b:88:b7:20:3e:0b:09:bb:5a:
87:35:4b:f9:b8:ba:da:c3:5a:21:36:81:86:9f:51:bf:f5:94:
10:45:2b:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PD3QM0jf1SocukhzyC7+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzBhMWU1MGQxYzAwOGUxZmZhZDVmMmY3NTc5ODI5NGQ1
YzRlZDgwHhcNMjUwMTMxMTIwMDUyWhcNMjUwMjAxMTIwMDUyWjAzMTEwLwYDVQQD
Eyg0YzZhMWFkM2I4Yjg3ZDY2NmQ5NjhjNjIwNDJkNTljYzU2MTI0NDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm85cmsI7REyEhfwkpvcuV/BTPMMF
CCb9XK3kEu3ipVFaDkSo/0Sq6L1WSi08j3rU8FfESY74epVD9qxrmX5XcbV0E4nW
1YZ6P0qBpGZpg1bq6hOlMLpC5smhAklEnKbOgzA5mddHhiSuu0BJK/RqTdhrnlU7
OmrXfWRRlegWCPjyYsiJjBwtq63N2BcNnFsIBkyvTc06w20nDQKjEUzHYY4N2S4l
cuQW/J591uBAEAK0TEEusGZf1XiUba/KVexleJxhqGRWfXheD1yAfO77hS6rzygv
lj7Id9wM9ewr6GkVzHvp7+705Ak3VCoGNgw+ctEwIxIVepqPEtNUvmhJnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExqGtO4uH1mbZaMYgQtWcxWEkSGMB8GA1UdIwQY
MBaAFH7AoeUNHACOH/rV8vdXmClNXE7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNDaDVRMGNBSTRmLXRYeTkxZVlLVTFjVHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mNWQ0MmQtZDYwNy00NWY5LTgwOTkt
MzcyZmY2NjZiZTJlLzEvZnNDaDVRMGNBSTRmLXRYeTkxZVlLVTFjVHRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9mNWQ0MmQtZDYwNy00NWY5LTgwOTktMzcyZmY2NjZiZTJl
LzEvZnNDaDVRMGNBSTRmLXRYeTkxZVlLVTFjVHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwPcSo0j
B4vQ1aO1xNmPI/5g3CjyziBPEMumZ916aiIjskGL7sVYfOUfQUGIOOXTlpG0N+rL
p/uYGkXZXE3hNhxv/VC9iNfKfVhRxKFriEQpnBl7gkST3Y7hvvlSBezaBax0JRRV
fG1eX5mcn/5nDOSOAS/bmOjclbiblC8QFWsNIvAwi5ncDstAABjNPziRLgSg1/5B
/fyvQwUOMkYfdp8jXC8uTpyTxgm0rNWm8Hn0k3oxleaeS0nDok1N4yoU9Ykjo2fo
D+f4RuSRiY8q921bglRwbrN0SrOOoXUhTK8Am4i3ID4LCbtahzVL+bi62sNaITaB
hp9Rv/WUEEUraQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:05 2025 by rpki-client