Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
File: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft (raw, json)
Hash identifier: 9NFsasmyhRnkIg3sfXjxpyhF8btMvFpSZPj+X+09pd8=
Subject key identifier: B1:44:63:F6:FF:C1:7E:18:F2:9C:35:98:2C:6E:FA:74:35:FB:5A:45
Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Certificate issuer: /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Certificate serial: 0194BBCDD15ECBE54A620B1021C3092A8768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl (hash: WV3Y4wm/zioErq49gIjrt4eHnDiyCaO0zSmtXCbu0Sw=)
2: c4ZXKHEEWbDTWPlUmqmsKLah8L0.roa (hash: F1WOSma/c9vioH3acUcPAtmz6J5nLcuBuR+41Bzl7HQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d1:5e:cb:e5:4a:62:0b:10:21:c3:09:2a:87:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=b14463f6ffc17e18f29c35982c6efa7435fb5a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:bc:e3:c0:a0:d9:fa:b3:99:e6:58:9b:3b:
dc:14:58:f7:d1:b6:70:aa:83:ff:8d:95:02:d0:95:
fa:c0:a9:65:79:6a:67:ae:79:a9:e7:ef:02:2f:fa:
70:30:dc:b0:0d:e3:94:a6:1b:45:0b:f9:bd:d4:e5:
8e:eb:67:4b:dd:a0:30:80:3c:4e:3f:ac:5a:c9:32:
f4:0a:95:5f:b9:d0:29:55:c1:55:a0:df:31:f7:d8:
76:4e:2f:c3:0c:a7:7a:af:ff:5a:f7:2e:d4:98:33:
d1:7e:b6:75:d6:c1:1d:1e:f1:7b:ab:50:50:84:31:
f3:9f:17:51:4b:e3:aa:3d:a9:66:3a:d7:e0:9b:07:
54:c0:0b:f6:91:0f:99:ea:79:9b:c0:b8:f3:37:67:
d8:02:3d:1f:96:d6:82:cd:0d:ec:9d:13:9a:1d:c7:
c8:37:3e:c9:03:93:f2:1b:9d:73:b2:8c:31:dc:1c:
f6:2a:a7:7b:4e:47:1f:e8:8c:4d:ef:d2:5e:21:ca:
6a:31:4b:61:9a:8c:3a:8a:56:bc:17:c4:93:d3:c9:
8c:0e:cf:2b:87:7d:d7:b1:fa:92:2b:27:1b:7d:ba:
0b:aa:ec:7d:14:48:9e:6e:4b:36:5b:6f:c7:8a:59:
be:20:cf:92:d0:3d:66:94:41:54:77:f2:19:2b:97:
61:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:44:63:F6:FF:C1:7E:18:F2:9C:35:98:2C:6E:FA:74:35:FB:5A:45
X509v3 Authority Key Identifier:
keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:26:6e:ac:41:45:6a:0d:df:94:d4:7e:7a:c5:0a:0b:da:72:
59:50:d2:14:9f:2f:ab:25:08:d8:92:0a:cd:07:da:e5:82:a0:
51:98:f6:47:23:f7:e1:1a:ee:7e:e7:29:8e:2d:5c:2f:b2:84:
5c:57:9c:48:91:f1:67:52:07:45:00:5b:5f:b6:34:9b:3a:69:
a7:c5:e6:51:2e:94:e0:07:84:7b:c0:94:c4:a3:ed:c6:70:11:
57:d9:ad:19:da:31:83:a2:e7:b5:fc:a0:c2:9c:2f:f1:72:66:
02:76:ad:2b:d0:ed:02:41:79:a7:d9:5d:ae:85:42:11:65:6c:
2d:6e:9e:3b:a5:40:42:2a:af:27:41:fe:d0:f9:2b:0d:ff:d1:
46:6d:98:31:bc:ad:ab:16:09:79:d1:c7:66:86:69:28:8b:10:
0d:13:e6:dc:6e:2a:3e:84:00:2f:61:f1:c2:5a:0d:92:ad:4f:
b7:5a:42:3b:c4:84:0c:22:85:eb:18:57:22:dd:ee:c0:21:69:
40:8e:a5:da:8f:6c:a9:7c:a2:5b:19:e1:d0:50:9d:91:8b:9a:
08:dd:7e:f1:59:9a:ba:9f:0c:45:af:7e:28:a5:df:6c:59:23:
e7:6e:8b:41:15:79:15:44:9b:f5:d9:0b:95:c3:69:e7:54:dc:
a0:6a:04:b0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS7zdFey+VKYgsQIcMJKodoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjQwMGU2M2NiMjYyYzIwMDBlMDcxY2U5MGFhNzJlZjY5
M2U2YTIwHhcNMjUwMTMxMTAwMDE1WhcNMjUwMjAxMTAwMDE1WjAzMTEwLwYDVQQD
EyhiMTQ0NjNmNmZmYzE3ZTE4ZjI5YzM1OTgyYzZlZmE3NDM1ZmI1YTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCG848Cg2fqzmeZYmzvcFFj30bZw
qoP/jZUC0JX6wKlleWpnrnmp5+8CL/pwMNywDeOUphtFC/m91OWO62dL3aAwgDxO
P6xayTL0CpVfudApVcFVoN8x99h2Ti/DDKd6r/9a9y7UmDPRfrZ11sEdHvF7q1BQ
hDHznxdRS+OqPalmOtfgmwdUwAv2kQ+Z6nmbwLjzN2fYAj0fltaCzQ3snROaHcfI
Nz7JA5PyG51zsowx3Bz2Kqd7Tkcf6IxN79JeIcpqMUthmow6ila8F8ST08mMDs8r
h33XsfqSKycbfboLqux9FEiebks2W2/Hilm+IM+S0D1mlEFUd/IZK5dhwQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLFEY/b/wX4Y8pw1mCxu+nQ1+1pFMB8GA1UdIwQY
MBaAFPv0AOY8smLCAA4HHOkKpy72k+aiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fUUE1anl5WXNJQURnY2M2UXFuTHZhVDVxSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvOWIzZjZmLTk3NTQtNDU4Zi1iNWI0
LWY5NTg1NWYxMDc2My8xLzEtX1FBNWp5eVlzSUFEZ2NjNlFxbkx2YVQ1cUkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzU0LzliM2Y2Zi05NzU0LTQ1OGYtYjViNC1mOTU4NTVmMTA3
NjMvMS8xLV9RQTVqeXlZc0lBRGdjYzZRcW5MdmFUNXFJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCZu
rEFFag3flNR+esUKC9pyWVDSFJ8vqyUI2JIKzQfa5YKgUZj2RyP34Rrufucpji1c
L7KEXFecSJHxZ1IHRQBbX7Y0mzppp8XmUS6U4AeEe8CUxKPtxnARV9mtGdoxg6Ln
tfygwpwv8XJmAnatK9DtAkF5p9ldroVCEWVsLW6eO6VAQiqvJ0H+0PkrDf/RRm2Y
MbytqxYJedHHZoZpKIsQDRPm3G4qPoQAL2HxwloNkq1Pt1pCO8SEDCKF6xhXIt3u
wCFpQI6l2o9sqXyiWxnh0FCdkYuaCN1+8Vmaup8MRa9+KKXfbFkj526LQRV5FUSb
9dkLlcNp51TcoGoEsA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:11 2025 by rpki-client