Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
File: 1-6DtkuyUMh3LIZ03842QfhgyRL0.mft (raw, json)
Hash identifier: DswNzfca9QkuJOmcYAtnVH/r2FKU/CY3O5r5EcMUUAg=
Subject key identifier: 7D:3B:7A:8A:B9:C1:CD:36:28:9D:99:BF:FD:2D:8C:2A:61:36:D3:4D
Authority key identifier: FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
Certificate issuer: /CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Certificate serial: 0194BC3BBF1908DF9A6365B1940A18F64189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
Manifest number: 07EA
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: 1-6DtkuyUMh3LIZ03842QfhgyRL0.crl (hash: FlFugkvYQD9TM/m0YCtoBut/bKixSy4a50Zxwp8IuBI=)
2: 1s70h6r87L-IulVsz6h8zyFXb_Q.roa (hash: 5H/5j8LaoLq/mqGaGFCi4+VAwjIOpu8grnJTKJtYod4=)
3: sEXfZ_frVlYD_mxkBMmTSShT4Aw.roa (hash: q9q1zeZ/+pc1h+hiJuULLx4217R4jnkBQRFKylMHrZk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bf:19:08:df:9a:63:65:b1:94:0a:18:f6:41:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=7d3b7a8ab9c1cd36289d99bffd2d8c2a6136d34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:dc:1a:91:e0:20:45:4b:7a:e9:ec:52:30:
8d:ac:1a:f7:78:98:a8:2b:08:77:60:37:4e:27:70:
8a:7c:9c:01:ab:21:c7:5a:20:88:de:a0:d5:7c:a7:
d4:ed:ae:ee:a4:ed:c2:6e:9f:b9:ef:1e:c5:4b:7a:
25:a7:b5:76:df:d2:1e:08:2c:f8:5b:d2:83:b7:41:
90:e0:ca:fe:62:8e:5c:79:31:11:03:bb:94:ac:ef:
a5:61:09:71:9c:1d:84:1f:c4:1b:22:42:d9:9a:e8:
f4:7b:a6:a2:2f:cd:97:3b:2c:3a:af:15:f7:90:4f:
ef:bf:cf:9f:5e:3c:9d:1f:11:c2:41:d7:c3:a1:c1:
af:35:ec:45:80:dd:46:42:5e:e5:3b:fe:99:8a:3c:
66:61:37:da:1a:b9:18:f5:34:99:eb:07:3a:69:be:
85:9e:44:cb:29:f3:5a:0b:1a:e1:8e:89:cf:7d:b2:
6d:30:4b:ba:45:5c:82:34:dd:b1:ba:fc:d4:6b:b0:
70:01:8c:49:85:86:c2:e6:98:3c:20:3c:78:15:d8:
ba:03:ec:a4:82:3e:36:d5:d7:1d:c0:77:1c:40:4f:
d4:dd:1d:8c:f1:25:92:b3:e3:d3:7e:04:0a:5b:a5:
73:b7:b6:e9:49:10:19:34:c7:16:8d:e9:da:44:9f:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3B:7A:8A:B9:C1:CD:36:28:9D:99:BF:FD:2D:8C:2A:61:36:D3:4D
X509v3 Authority Key Identifier:
keyid:FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e6:db:50:42:d9:5d:1a:38:47:25:1b:ff:32:53:55:82:46:
b8:07:fa:f1:48:26:82:43:1e:b5:5d:02:59:09:9f:ee:e2:fd:
f3:7d:e5:f4:92:38:4a:63:9d:aa:1f:06:24:3f:4f:53:b4:4c:
4c:57:37:b3:7e:7a:35:ae:0a:98:5e:c2:3b:b5:d7:c0:04:39:
b9:fb:89:fc:30:73:88:ff:85:8e:8f:a7:f3:0d:51:3b:18:9d:
b3:fa:9c:76:fa:1b:69:ff:e0:5e:3a:d8:de:3a:1b:aa:2d:6f:
28:17:13:a8:40:0a:b5:99:f0:82:de:07:ee:fb:78:3a:ce:b1:
8c:a9:2c:3f:b6:6b:dc:32:11:73:ad:32:2c:06:93:f8:fb:04:
fe:78:b1:aa:8e:71:bc:56:08:63:75:da:08:8f:34:c7:c8:b7:
ee:ef:09:3c:b5:51:5e:1e:04:19:3d:94:18:dc:a0:c5:58:78:
48:f4:9e:62:0d:53:55:54:16:7b:7a:de:3a:a0:24:12:2c:eb:
62:ee:d0:d6:12:e9:44:89:69:9d:55:81:86:c1:2b:70:e1:72:
1c:8a:8b:da:a6:fb:22:39:fa:25:d2:f5:fc:ca:33:7f:37:71:
49:46:f9:62:02:04:77:41:4c:4e:8d:29:e3:19:2a:d0:06:9b:
a8:83:35:d8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS8O78ZCN+aY2WxlAoY9kGJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYTBlZDkyZWM5NDMyMWRjYjIxOWQzN2YzOGQ5MDdlMTgz
MjQ0YmQwHhcNMjUwMTMxMTIwMDE5WhcNMjUwMjAxMTIwMDE5WjAzMTEwLwYDVQQD
Eyg3ZDNiN2E4YWI5YzFjZDM2Mjg5ZDk5YmZmZDJkOGMyYTYxMzZkMzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhDcGpHgIEVLeunsUjCNrBr3eJio
Kwh3YDdOJ3CKfJwBqyHHWiCI3qDVfKfU7a7upO3Cbp+57x7FS3olp7V239IeCCz4
W9KDt0GQ4Mr+Yo5ceTERA7uUrO+lYQlxnB2EH8QbIkLZmuj0e6aiL82XOyw6rxX3
kE/vv8+fXjydHxHCQdfDocGvNexFgN1GQl7lO/6ZijxmYTfaGrkY9TSZ6wc6ab6F
nkTLKfNaCxrhjonPfbJtMEu6RVyCNN2xuvzUa7BwAYxJhYbC5pg8IDx4Fdi6A+yk
gj421dcdwHccQE/U3R2M8SWSs+PTfgQKW6Vzt7bpSRAZNMcWjenaRJ8IQwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFH07eoq5wc02KJ2Zv/0tjCphNtNNMB8GA1UdIwQY
MBaAFPug7ZLslDIdyyGdN/ONkH4YMkS9MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02RHRrdXlVTWgzTElaMDM4NDJRZmhneVJMMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvNTkzNDgyLWQ3NjItNDQwOS1iODUw
LTIwYzQ0YTgxZjk3Ny8xLzEtNkR0a3V5VU1oM0xJWjAzODQyUWZoZ3lSTDAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzU0LzU5MzQ4Mi1kNzYyLTQ0MDktYjg1MC0yMGM0NGE4MWY5
NzcvMS8xLTZEdGt1eVVNaDNMSVowMzg0MlFmaGd5UkwwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABebb
UELZXRo4RyUb/zJTVYJGuAf68UgmgkMetV0CWQmf7uL9833l9JI4SmOdqh8GJD9P
U7RMTFc3s356Na4KmF7CO7XXwAQ5ufuJ/DBziP+Fjo+n8w1ROxids/qcdvobaf/g
XjrY3jobqi1vKBcTqEAKtZnwgt4H7vt4Os6xjKksP7Zr3DIRc60yLAaT+PsE/nix
qo5xvFYIY3XaCI80x8i37u8JPLVRXh4EGT2UGNygxVh4SPSeYg1TVVQWe3reOqAk
EizrYu7Q1hLpRIlpnVWBhsErcOFyHIqL2qb7Ijn6JdL1/MozfzdxSUb5YgIEd0FM
To0p4xkq0AabqIM12A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:08 2025 by rpki-client