Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
File: rFjrfGF1DM4zPNACbHfJPL5GXZg.mft (raw, json)
Hash identifier: fI/E1YCqKj6qdKKHtOzL9RbLuUrsLXyEU6sJetT2XSU=
Subject key identifier: 59:2B:EC:A1:59:08:DB:80:92:0C:2B:0C:74:31:9E:BF:C3:A6:70:10
Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
Certificate issuer: /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Certificate serial: 0194BC05142A12F71AE1306DB59737800468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
Manifest number: 0879
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: dYveMxpV9vTvL48rADeNQga7MgQ.roa (hash: cc3Bn2ZybQkob9bKAAN2kkILYEKK4Ym19QeA8svRfJQ=)
2: rFjrfGF1DM4zPNACbHfJPL5GXZg.crl (hash: 0ZtXbDNeKxy4VH96vGh9EoWuTLymLZ2VVZfDT+RLlAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:14:2a:12:f7:1a:e1:30:6d:b5:97:37:80:04:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=592beca15908db80920c2b0c74319ebfc3a67010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:7c:b2:35:76:66:46:a6:c8:d7:00:34:4a:
61:c6:25:d4:83:59:88:44:0d:2d:cd:93:41:91:14:
82:30:93:de:37:0e:b8:47:df:14:8f:d0:30:39:6e:
8b:bc:e4:b9:c4:7a:55:f9:c3:b2:89:f1:e0:c7:76:
78:a3:ce:f4:50:ac:cb:1a:8f:f9:eb:b7:19:34:85:
8c:68:40:a0:b1:c5:cf:88:78:09:16:98:3a:d4:fe:
64:da:91:47:b4:5b:ea:fe:09:88:f5:17:85:49:24:
e7:0b:b2:f9:b1:96:f6:a4:fa:15:c5:98:f5:9b:12:
c0:72:f1:9d:59:11:6f:00:5b:e0:41:4e:18:36:fd:
da:3d:e7:a6:01:5d:c7:91:c6:1b:ca:6c:10:2d:ed:
87:dd:79:de:e7:9a:38:a1:f8:05:0b:29:35:8f:91:
ab:cd:7b:dc:f7:af:0d:65:26:b2:a8:ef:7e:b8:b0:
8d:7a:f7:72:cd:85:b1:cd:bc:95:8a:27:70:e2:ee:
58:b4:90:03:79:e2:35:f5:06:40:07:91:c4:87:49:
f5:cc:ac:7e:43:19:7b:17:22:a3:e2:00:d1:17:72:
7e:76:cc:51:e8:d7:88:08:57:64:37:01:98:74:6b:
6d:dc:ae:e2:df:19:20:29:3f:a2:0f:06:24:92:8e:
ef:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2B:EC:A1:59:08:DB:80:92:0C:2B:0C:74:31:9E:BF:C3:A6:70:10
X509v3 Authority Key Identifier:
keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:87:53:89:a6:ef:61:03:09:0b:50:98:1b:4b:c4:b6:6b:e1:
b4:5f:66:3d:a7:54:dd:3e:74:97:7e:26:f8:e6:e8:29:b1:22:
f9:9a:b1:cf:1c:03:df:ec:10:d9:7e:ac:71:63:36:a0:0b:71:
42:f0:ec:02:d0:5a:23:47:41:29:9b:de:df:b2:e4:2f:4d:82:
f6:b8:c3:5f:c2:0b:35:f1:20:01:79:1d:75:01:da:6f:99:db:
b0:77:14:56:cf:d2:12:1f:d3:62:4c:95:9b:26:a9:b2:58:e4:
92:fa:28:86:4b:61:92:1d:58:21:93:fe:c5:fd:00:7a:5a:f6:
7a:25:be:eb:17:9d:7b:ba:ef:ad:9f:ad:aa:78:09:6d:b1:08:
c4:33:1e:4d:63:8d:8e:8f:33:0b:c8:fd:56:45:7a:6c:15:d0:
6c:c9:87:cc:3d:f4:5a:8e:a1:5a:1d:1a:1f:fd:d6:a9:c4:a4:
f9:4d:2f:ec:63:93:c4:60:10:51:e0:e6:72:17:44:ed:a5:4b:
45:11:4c:b3:85:4f:67:17:84:e0:17:03:5b:b7:81:f9:4b:8f:
61:a1:43:37:4f:99:c7:0e:b9:15:9b:a0:8c:6d:3b:db:aa:87:
87:89:7c:4d:f0:2c:34:83:7c:18:ed:7f:ef:f2:0a:d7:09:2a:
28:77:d2:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRQqEvca4TBttZc3gARoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNThlYjdjNjE3NTBjY2UzMzNjZDAwMjZjNzdjOTNjYmU0
NjVkOTgwHhcNMjUwMTMxMTEwMDM2WhcNMjUwMjAxMTEwMDM2WjAzMTEwLwYDVQQD
Eyg1OTJiZWNhMTU5MDhkYjgwOTIwYzJiMGM3NDMxOWViZmMzYTY3MDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlt8sjV2ZkamyNcANEphxiXUg1mI
RA0tzZNBkRSCMJPeNw64R98Uj9AwOW6LvOS5xHpV+cOyifHgx3Z4o870UKzLGo/5
67cZNIWMaECgscXPiHgJFpg61P5k2pFHtFvq/gmI9ReFSSTnC7L5sZb2pPoVxZj1
mxLAcvGdWRFvAFvgQU4YNv3aPeemAV3HkcYbymwQLe2H3Xne55o4ofgFCyk1j5Gr
zXvc968NZSayqO9+uLCNevdyzYWxzbyViidw4u5YtJADeeI19QZAB5HEh0n1zKx+
Qxl7FyKj4gDRF3J+dsxR6NeICFdkNwGYdGtt3K7i3xkgKT+iDwYkko7vbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkr7KFZCNuAkgwrDHQxnr/DpnAQMB8GA1UdIwQY
MBaAFKxY63xhdQzOMzzQAmx3yTy+Rl2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lYmQwYzktN2EzNi00MDM2LTg2NTgt
MWRlMDBiZDg5MTJjLzEvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9lYmQwYzktN2EzNi00MDM2LTg2NTgtMWRlMDBiZDg5MTJj
LzEvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYdTiabv
YQMJC1CYG0vEtmvhtF9mPadU3T50l34m+OboKbEi+ZqxzxwD3+wQ2X6scWM2oAtx
QvDsAtBaI0dBKZve37LkL02C9rjDX8ILNfEgAXkddQHab5nbsHcUVs/SEh/TYkyV
myapsljkkvoohkthkh1YIZP+xf0Aelr2eiW+6xede7rvrZ+tqngJbbEIxDMeTWON
jo8zC8j9VkV6bBXQbMmHzD30Wo6hWh0aH/3WqcSk+U0v7GOTxGAQUeDmchdE7aVL
RRFMs4VPZxeE4BcDW7eB+UuPYaFDN0+Zxw65FZugjG0726qHh4l8TfAsNIN8GO1/
7/IK1wkqKHfSXg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:58 2025 by rpki-client