Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
File: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft (raw, json)
Hash identifier: Ov1x+ALEwAvWqspLuTGbRNCYapvU8eXyX1dyb0LQIRk=
Subject key identifier: A1:6F:BD:2A:82:B7:47:00:E2:5C:7A:A0:80:B0:13:9D:99:1D:E3:0C
Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
Certificate issuer: /CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Certificate serial: 0194BC3BE25C3199BF206E2D697C37069A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
Manifest number: 58
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: XIAriGwKiXIV89XyokuVSU6ok94.roa (hash: hF3zC1oiW03gwgTs9lo/n7vUmEiv8dfR/NI1cnnwuzk=)
2: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl (hash: mxF1jRwbgtbHjhr5wdHB3I9nxN2U86/lCMpp2TRsdFw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e2:5c:31:99:bf:20:6e:2d:69:7c:37:06:9a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=a16fbd2a82b74700e25c7aa080b0139d991de30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:07:b1:5b:0e:a2:b5:02:24:f9:c6:22:e1:0c:
8b:89:d0:74:db:80:e0:e8:bb:5f:29:7a:a3:af:fc:
13:01:e6:3c:b0:5b:5f:fe:0a:0e:5e:22:8f:52:af:
3d:f0:7c:4f:53:4a:44:96:42:4a:d3:05:b7:15:5a:
01:85:1c:dc:5d:55:98:c1:fd:52:57:93:22:e6:17:
5f:15:c8:ce:1c:e0:01:90:a0:33:46:d6:d8:a6:b1:
af:b4:e8:68:34:30:5b:28:64:90:d9:76:72:1d:cc:
9e:10:6e:a4:43:71:19:d3:9f:ac:6b:0c:ea:30:9d:
5e:7a:2a:ca:4b:e8:af:3f:20:3c:d4:07:b7:6d:d1:
f4:30:37:3e:24:70:21:10:3c:ee:c7:78:31:1e:66:
6a:25:a5:33:e3:62:2c:74:d8:97:4d:a8:b9:17:b6:
db:e9:76:10:30:ad:b3:91:ba:5c:e0:cd:ff:d6:07:
5d:54:2a:7b:f6:7a:a7:7b:19:21:4d:f6:bf:24:1b:
dc:89:9d:b9:e0:55:9e:e8:c2:73:13:0a:e3:d4:af:
6a:37:d5:59:9b:0c:58:81:14:79:8b:14:af:1a:c1:
51:91:50:ef:1d:8e:38:f7:95:20:30:c2:70:b1:6d:
3c:71:44:f5:92:d4:43:a7:cd:3d:c0:f2:4c:56:eb:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6F:BD:2A:82:B7:47:00:E2:5C:7A:A0:80:B0:13:9D:99:1D:E3:0C
X509v3 Authority Key Identifier:
keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:13:e5:d1:5a:65:74:02:72:31:31:6e:30:c1:53:85:f4:84:
dc:f3:44:b8:d5:fa:a4:c5:db:b2:5f:0a:92:c8:8a:9e:ad:48:
f9:2b:90:9e:67:b2:c9:c6:1f:bd:50:d5:a0:9c:48:04:4d:2b:
85:f8:1f:bf:c4:76:e7:74:1e:88:ca:66:3d:98:6a:64:28:18:
da:99:a6:b7:35:78:b8:1b:c0:e3:f9:eb:0f:c8:e6:cd:ea:de:
bc:82:0c:88:5f:61:d1:04:91:bf:9d:38:a5:16:be:1e:5d:79:
44:2e:34:25:ec:e0:90:87:6a:df:e3:2e:a3:0a:e7:4f:24:e0:
2c:d5:de:51:4e:ea:33:0e:17:3b:b1:1c:6c:35:df:98:a8:de:
af:22:71:53:c4:8d:18:0b:c6:0d:3a:99:49:1b:13:1d:48:07:
ab:18:9b:5d:00:2b:81:1e:4e:f8:19:2b:1e:83:1c:cb:8f:57:
62:d5:74:b5:33:f3:0e:dd:ef:0e:9e:8e:7b:5f:1c:8f:03:b8:
32:ff:8c:fb:35:49:dc:c1:80:5d:97:05:02:95:16:04:df:bc:
3f:fd:46:b5:1e:33:4e:e4:45:44:65:36:96:5e:0c:84:25:9f:
19:5a:0e:3a:99:57:9a:22:d5:d8:94:38:c1:4e:5e:e6:24:47:
a8:49:e2:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+JcMZm/IG4taXw3BpoyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmODVlOTkwMzU0Mzk3ZTM2YzBjYTkwM2EwYzYyMGM3NzA5
ZWZkY2QwHhcNMjUwMTMxMTIwMDI4WhcNMjUwMjAxMTIwMDI4WjAzMTEwLwYDVQQD
EyhhMTZmYmQyYTgyYjc0NzAwZTI1YzdhYTA4MGIwMTM5ZDk5MWRlMzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAexWw6itQIk+cYi4QyLidB024Dg
6LtfKXqjr/wTAeY8sFtf/goOXiKPUq898HxPU0pElkJK0wW3FVoBhRzcXVWYwf1S
V5Mi5hdfFcjOHOABkKAzRtbYprGvtOhoNDBbKGSQ2XZyHcyeEG6kQ3EZ05+sawzq
MJ1eeirKS+ivPyA81Ae3bdH0MDc+JHAhEDzux3gxHmZqJaUz42IsdNiXTai5F7bb
6XYQMK2zkbpc4M3/1gddVCp79nqnexkhTfa/JBvciZ254FWe6MJzEwrj1K9qN9VZ
mwxYgRR5ixSvGsFRkVDvHY4495UgMMJwsW08cUT1ktRDp809wPJMVutOYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFvvSqCt0cA4lx6oICwE52ZHeMMMB8GA1UdIwQY
MBaAFH+F6ZA1Q5fjbAypA6DGIMdwnv3NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80YWUxNzUtNTVkMC00ODRkLThkMTEt
OGM5ZDU4MjNiYWQ5LzEvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80YWUxNzUtNTVkMC00ODRkLThkMTEtOGM5ZDU4MjNiYWQ5
LzEvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhPl0Vpl
dAJyMTFuMMFThfSE3PNEuNX6pMXbsl8KksiKnq1I+SuQnmeyycYfvVDVoJxIBE0r
hfgfv8R253QeiMpmPZhqZCgY2pmmtzV4uBvA4/nrD8jmzerevIIMiF9h0QSRv504
pRa+Hl15RC40JezgkIdq3+MuowrnTyTgLNXeUU7qMw4XO7EcbDXfmKjeryJxU8SN
GAvGDTqZSRsTHUgHqxibXQArgR5O+BkrHoMcy49XYtV0tTPzDt3vDp6Oe18cjwO4
Mv+M+zVJ3MGAXZcFApUWBN+8P/1GtR4zTuRFRGU2ll4MhCWfGVoOOplXmiLV2JQ4
wU5e5iRHqEniIQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:52 2025 by rpki-client