Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
File: _kFOohqRFtLN-PXALQhnOvpXaJM.mft (raw, json)
Hash identifier: hBkKOGbAZejC83rgCbEO0GhHKM7onA7f9q0iKK4BR6s=
Subject key identifier: 17:2E:67:47:24:F6:69:EE:DC:EB:E6:82:09:7D:C9:7E:77:3B:A3:C2
Authority key identifier: FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
Certificate issuer: /CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Certificate serial: 0194BC72ED85EDDEAE6950C545EAF43A4889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
Manifest number: 01C5
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: 0MAgU7sTLhp2qbqkuMgBEoG1GaM.roa (hash: qBfT5pIrk1/WlfhHIXDzrsxZlkpu9JZ5SsEtvG7MW+c=)
2: _kFOohqRFtLN-PXALQhnOvpXaJM.crl (hash: 9iPsRpJZKe1aQfNWZQ4sYVTeBlE/bXQEY531I75b+yA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ed:85:ed:de:ae:69:50:c5:45:ea:f4:3a:48:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=172e674724f669eedcebe682097dc97e773ba3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:44:b4:dc:a6:67:af:f4:02:8e:7b:45:5d:1b:
b1:07:ac:87:3c:f2:66:0e:20:5c:a8:e7:2d:cf:5a:
14:be:77:e2:78:12:77:03:5e:1e:49:97:34:41:ab:
28:b7:90:d7:ce:1d:5d:b1:10:4a:fa:d3:f3:4e:b9:
8a:15:21:c5:6f:dd:48:83:ff:51:46:c6:45:c7:80:
21:59:96:7d:56:63:7f:f2:30:d0:07:6e:7c:92:54:
3e:cf:71:64:27:b6:1d:2f:b8:33:3b:11:47:08:7e:
a1:86:cd:75:d2:f6:32:9a:be:a1:ed:cd:60:6d:d7:
a3:ff:7e:df:dc:53:e6:55:2e:17:44:24:e9:86:f5:
34:6b:bf:e4:45:9c:70:5b:d8:a6:9b:e6:c2:0f:aa:
c8:4e:e5:92:26:be:be:29:09:fe:9e:f9:f3:90:ff:
32:90:ae:d3:84:35:38:5c:92:6e:6f:6a:fd:dd:9b:
dd:45:8b:84:eb:6d:e2:9e:33:c2:72:60:1f:25:3e:
71:53:16:ad:08:61:25:9e:90:31:ac:63:2d:df:6d:
3a:1d:e9:33:2d:00:70:3d:05:27:bc:fc:33:9d:f3:
bb:b6:b2:60:9b:bf:fb:d8:75:bd:b7:87:79:78:4a:
88:42:5a:90:18:71:df:5c:29:69:ee:aa:90:e4:f6:
cd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2E:67:47:24:F6:69:EE:DC:EB:E6:82:09:7D:C9:7E:77:3B:A3:C2
X509v3 Authority Key Identifier:
keyid:FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:13:75:64:d2:c5:03:8d:1b:23:7f:1a:31:0a:22:ba:4c:af:
07:5b:e8:c3:75:db:38:54:57:28:56:56:f1:db:82:3c:a1:89:
43:60:4a:c9:35:50:18:33:c3:af:ea:26:db:9a:c4:b9:40:3c:
a3:92:4c:7a:01:55:46:77:b9:31:a6:83:60:5f:3c:77:43:58:
4c:e6:4d:68:c8:0b:03:db:63:09:67:b2:9f:be:49:43:6c:47:
74:cc:6b:76:93:29:25:3d:8c:4f:bf:48:ba:ac:e8:ee:c1:07:
1e:b7:75:6e:50:e0:69:90:43:26:47:5c:0f:eb:42:d6:8e:05:
7e:5a:5f:f2:74:ba:2a:4d:b9:9e:ef:bc:92:0c:b0:07:69:b2:
da:18:00:05:89:58:a6:09:32:3f:93:4c:d6:1a:50:ca:1b:ee:
ba:17:09:ba:d3:b7:ef:78:80:18:b6:0f:1c:da:30:a2:b2:78:
15:90:5c:6d:af:a2:97:15:f2:5d:08:fc:f7:d4:d3:fe:1d:c5:
1c:57:58:f5:15:27:2a:6f:69:b9:63:8f:5b:90:de:14:25:0e:
6b:92:47:89:15:d5:ec:dc:53:38:c3:dd:e9:e7:86:8c:1f:bc:
83:de:92:ad:e2:b8:93:c0:56:c8:79:94:de:bc:ee:be:32:b9:
3b:91:dd:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cu2F7d6uaVDFRer0OkiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNDE0ZWEyMWE5MTE2ZDJjZGY4ZjVjMDJkMDg2NzNhZmE1
NzY4OTMwHhcNMjUwMTMxMTMwMDM1WhcNMjUwMjAxMTMwMDM1WjAzMTEwLwYDVQQD
EygxNzJlNjc0NzI0ZjY2OWVlZGNlYmU2ODIwOTdkYzk3ZTc3M2JhM2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqES03KZnr/QCjntFXRuxB6yHPPJm
DiBcqOctz1oUvnfieBJ3A14eSZc0Qasot5DXzh1dsRBK+tPzTrmKFSHFb91Ig/9R
RsZFx4AhWZZ9VmN/8jDQB258klQ+z3FkJ7YdL7gzOxFHCH6hhs110vYymr6h7c1g
bdej/37f3FPmVS4XRCTphvU0a7/kRZxwW9imm+bCD6rITuWSJr6+KQn+nvnzkP8y
kK7ThDU4XJJub2r93ZvdRYuE623injPCcmAfJT5xUxatCGElnpAxrGMt3206Hekz
LQBwPQUnvPwznfO7trJgm7/72HW9t4d5eEqIQlqQGHHfXClp7qqQ5PbNVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcuZ0ck9mnu3Ovmggl9yX53O6PCMB8GA1UdIwQY
MBaAFP5BTqIakRbSzfj1wC0IZzr6V2iTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2tGT29ocVJGdExOLVBYQUxRaG5PdnBYYUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lNzFkMjEtYTM2MC00NTc5LTgxYTAt
YmNjYTI2ZmM4OTQ1LzEvX2tGT29ocVJGdExOLVBYQUxRaG5PdnBYYUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lNzFkMjEtYTM2MC00NTc5LTgxYTAtYmNjYTI2ZmM4OTQ1
LzEvX2tGT29ocVJGdExOLVBYQUxRaG5PdnBYYUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhN1ZNLF
A40bI38aMQoiukyvB1vow3XbOFRXKFZW8duCPKGJQ2BKyTVQGDPDr+om25rEuUA8
o5JMegFVRne5MaaDYF88d0NYTOZNaMgLA9tjCWeyn75JQ2xHdMxrdpMpJT2MT79I
uqzo7sEHHrd1blDgaZBDJkdcD+tC1o4Fflpf8nS6Kk25nu+8kgywB2my2hgABYlY
pgkyP5NM1hpQyhvuuhcJutO373iAGLYPHNoworJ4FZBcba+ilxXyXQj899TT/h3F
HFdY9RUnKm9puWOPW5DeFCUOa5JHiRXV7NxTOMPd6eeGjB+8g96SreK4k8BWyHmU
3rzuvjK5O5Hdqg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:41 2025 by rpki-client