Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
File: 1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft (raw, json)
Hash identifier: uY1SlbD2nYFqvvitLvaah4Kv1rQfcJEcPbGfmen5p2E=
Subject key identifier: 0F:DA:0C:76:CE:92:0E:5C:8A:42:B8:52:4A:A7:B8:9E:CB:FB:43:BC
Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
Certificate issuer: /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Certificate serial: 0194BCA9AD77CC8BC17ABCDEA6A65AB34AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
Manifest number: 1298
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: 1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl (hash: IX2DOvNXDWmuJk8XUGzMciTplXuD0li+3VuCeLFR9Qk=)
2: LOHHuqh5utbV1sVMvLXO9x4HEv0.roa (hash: zlFj/WpL6Qd/ZD0zeyPqhzWIhhj8Nvvt5witl0z9Yic=)
3: ndH6JM8LGw_-a86HEW7P-1qV0gM.roa (hash: PbblUtc0vHojXJBh5Iy7RwAYCiNyZajL5DEQ2efa9es=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ad:77:cc:8b:c1:7a:bc:de:a6:a6:5a:b3:4a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=0fda0c76ce920e5c8a42b8524aa7b89ecbfb43bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:9d:ea:bd:46:a2:86:66:e8:af:e3:68:ed:
d8:d2:87:7b:13:4d:e3:1e:ee:5f:32:fc:f8:bc:41:
37:59:ab:af:1c:45:48:bf:ad:3d:5b:13:a8:20:f9:
55:9b:fa:a9:43:86:ce:7c:07:8e:ac:f5:93:bc:ad:
a6:d1:c2:60:4f:4e:93:9a:1e:ad:9d:1e:39:7c:7f:
09:6d:3f:40:3e:67:ba:29:ea:9d:14:9f:db:c5:3f:
59:54:85:d8:c1:c4:15:67:e8:06:a4:b6:b7:8d:16:
84:40:8a:77:8c:ae:1e:4a:63:95:e2:1d:58:78:28:
ed:17:95:a9:67:cb:b6:75:75:f6:9e:dd:af:df:3b:
b0:2f:62:ee:63:b6:57:b2:f3:41:f0:cc:0e:46:17:
6f:e7:91:db:10:9a:80:a4:1b:20:5c:7b:e5:a2:10:
39:7c:a1:41:8b:4b:50:26:76:45:85:a7:72:b7:35:
83:a9:dd:4d:c0:b0:cd:de:a4:89:ae:9f:16:e7:d9:
3a:c2:75:b2:60:eb:e0:fd:d3:4e:9a:34:18:d4:6f:
51:16:71:b4:ef:56:03:08:a0:f7:b2:ee:42:fd:72:
99:b9:8d:59:29:64:5d:02:63:d1:e9:4b:97:a4:87:
5a:d8:b9:d6:4f:94:50:2e:21:d4:36:a7:61:c3:15:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DA:0C:76:CE:92:0E:5C:8A:42:B8:52:4A:A7:B8:9E:CB:FB:43:BC
X509v3 Authority Key Identifier:
keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:67:2f:73:c5:16:6e:f0:87:f6:8a:10:73:e5:b3:ef:7a:32:
6a:1e:00:c2:2f:94:1b:21:6f:d4:28:a2:e6:c2:76:f4:85:42:
4c:4b:8b:9f:9c:07:bc:7c:a3:ff:06:e8:44:25:51:12:9a:f3:
42:b0:c2:bd:18:8b:93:74:8f:c9:81:6a:e0:f9:f0:ed:ee:5f:
5c:75:14:bb:31:6c:c9:de:99:32:ed:a6:c0:a5:ee:cf:53:40:
09:67:93:fc:4e:f0:28:34:11:77:5c:fb:dc:90:4a:90:f5:8f:
f9:e1:b9:68:d8:7c:a7:ef:25:27:68:55:df:54:d3:bf:25:36:
eb:5d:94:a2:e0:84:4b:e6:bf:d0:6b:0c:a9:77:f8:3a:db:d0:
8a:e5:03:d4:49:c3:81:27:06:f2:ec:50:2d:1a:33:d7:dd:a2:
f7:53:97:14:25:68:44:14:86:20:0e:7b:c0:5e:45:94:15:f9:
27:02:27:b6:5e:eb:17:98:37:78:11:53:96:2d:75:d9:85:ec:
49:19:c1:ce:f9:3d:05:12:2a:74:a4:23:e0:ca:1d:fd:d5:30:
4d:28:26:54:1d:b4:eb:27:a7:69:98:30:39:63:d3:b9:ef:32:
f3:8e:1b:61:6e:c1:49:91:ae:65:28:a2:40:a2:b0:e2:b0:0d:
a4:53:0b:5f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS8qa13zIvBerzepqZas0rhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNDg2YTBiYTliOWIwOWY0ZGU0Nzk2MmUyYzJhZTQxZmM1
NTc2ODYwHhcNMjUwMTMxMTQwMDI0WhcNMjUwMjAxMTQwMDI0WjAzMTEwLwYDVQQD
EygwZmRhMGM3NmNlOTIwZTVjOGE0MmI4NTI0YWE3Yjg5ZWNiZmI0M2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbOd6r1GooZm6K/jaO3Y0od7E03j
Hu5fMvz4vEE3WauvHEVIv609WxOoIPlVm/qpQ4bOfAeOrPWTvK2m0cJgT06Tmh6t
nR45fH8JbT9APme6KeqdFJ/bxT9ZVIXYwcQVZ+gGpLa3jRaEQIp3jK4eSmOV4h1Y
eCjtF5WpZ8u2dXX2nt2v3zuwL2LuY7ZXsvNB8MwORhdv55HbEJqApBsgXHvlohA5
fKFBi0tQJnZFhadytzWDqd1NwLDN3qSJrp8W59k6wnWyYOvg/dNOmjQY1G9RFnG0
71YDCKD3su5C/XKZuY1ZKWRdAmPR6UuXpIda2LnWT5RQLiHUNqdhwxXRYwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFA/aDHbOkg5cikK4UkqnuJ7L+0O8MB8GA1UdIwQY
MBaAFPtIagupubCfTeR5YuLCrkH8VXaGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0waHFDNm01c0o5TjVIbGk0c0t1UWZ4VmRvWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNmFjNGRhLWY1NmEtNGMxYi1iNWJk
LWZhYWM5MDgwMjkwOC8xLzEtMGhxQzZtNXNKOU41SGxpNHNLdVFmeFZkb1kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzU3LzZhYzRkYS1mNTZhLTRjMWItYjViZC1mYWFjOTA4MDI5
MDgvMS8xLTBocUM2bTVzSjlONUhsaTRzS3VRZnhWZG9ZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2cv
c8UWbvCH9ooQc+Wz73oyah4Awi+UGyFv1Cii5sJ29IVCTEuLn5wHvHyj/wboRCVR
EprzQrDCvRiLk3SPyYFq4Pnw7e5fXHUUuzFsyd6ZMu2mwKXuz1NACWeT/E7wKDQR
d1z73JBKkPWP+eG5aNh8p+8lJ2hV31TTvyU2612UouCES+a/0GsMqXf4OtvQiuUD
1EnDgScG8uxQLRoz192i91OXFCVoRBSGIA57wF5FlBX5JwIntl7rF5g3eBFTli11
2YXsSRnBzvk9BRIqdKQj4Mod/dUwTSgmVB206yenaZgwOWPTue8y844bYW7BSZGu
ZSiiQKKw4rANpFMLXw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:01 2025 by rpki-client