Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json)
Hash identifier: Rv9UeoBzpdyOk5mp6d6vcMcfrbX+rxqQuM/1Si3huOM=
Subject key identifier: 68:2D:7F:C5:E2:D7:5A:E1:B9:66:B4:B3:24:56:26:AC:91:A4:5C:F3
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 0194BC3C55455C967888791CB8D51882765C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
Manifest number: 0772
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: WkM1k4qAimxGoAXfYc3XtjG5aS4.roa (hash: JEjZGh4dEBWAy5uvNyzYoFAxp8bWgzv1444j2h2JEVg=)
2: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: p9XjoOaA1NCBRHMAoZAC+NdD6OGenYF01lFtk1sLMp0=)
3: jqc-CSQwW-qQ7TAEXOV-0DlhyHo.roa (hash: 2Wow4x7KtU4iQlp8s7jxmW893ftKcMCmze/PFHE6hj8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:55:45:5c:96:78:88:79:1c:b8:d5:18:82:76:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=682d7fc5e2d75ae1b966b4b3245626ac91a45cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:89:7c:e3:3e:ee:ba:f3:a1:62:39:5d:b5:11:
9e:71:90:52:e9:80:e7:ec:f3:06:9b:05:6c:d9:3a:
c1:a7:8a:1c:7a:66:dd:2a:64:07:a1:f4:3b:da:6b:
1b:de:f3:c7:05:d9:52:df:b1:69:82:b4:11:f3:04:
84:27:d6:b8:17:04:df:74:0c:94:5c:29:ec:70:27:
07:f0:3d:bc:d4:ac:15:44:3e:12:b6:4a:97:0d:ea:
4d:09:3e:28:de:4b:5f:f7:8f:3e:ee:6a:7f:fc:04:
bc:a9:76:07:22:61:4c:43:f1:76:f0:67:ed:fb:65:
ed:28:c8:44:98:87:b4:bf:e6:d6:66:11:af:f7:f2:
48:5f:e7:dd:58:31:93:e2:6f:cd:4a:6d:d2:48:41:
ee:00:79:e8:d4:41:1b:84:4a:cb:37:c0:de:eb:49:
52:cb:54:b9:73:09:2f:b8:63:70:ae:b7:bc:a2:8a:
03:a9:59:4f:65:44:7c:a3:d7:c2:05:a2:4e:9f:41:
77:cf:67:77:ff:b7:95:40:27:2a:e3:99:16:6f:d2:
bf:16:f7:09:fa:3c:e0:e5:fe:7d:a4:f3:1d:f0:1c:
b1:fb:4c:43:68:46:d4:06:ff:ed:44:da:50:04:aa:
a0:04:16:e0:5e:3a:70:e1:fc:17:e1:29:c0:07:f8:
af:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2D:7F:C5:E2:D7:5A:E1:B9:66:B4:B3:24:56:26:AC:91:A4:5C:F3
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e2:fa:35:cf:fe:a8:36:16:90:3e:4e:ee:72:41:7d:46:71:
0d:40:f6:ab:c7:f2:fa:54:04:8d:98:fc:bb:44:f2:c7:d8:af:
7f:d0:ba:04:35:81:4f:4e:f4:c8:ae:7e:15:28:ae:c1:ea:15:
42:d8:9c:e3:26:31:ca:62:5b:61:9f:a3:96:20:1e:87:dc:4c:
d1:59:f5:02:d2:cc:96:11:42:19:c4:a9:42:6a:f7:41:15:1c:
42:01:d9:38:51:ec:54:6e:bc:0f:55:52:da:87:de:82:4b:fb:
d4:e2:52:2b:d0:10:a6:94:68:07:06:f3:db:d7:8f:8a:75:f9:
21:89:f7:01:09:e7:b9:85:ce:f0:f6:6c:4e:81:33:17:cc:2b:
11:70:5b:69:56:89:1f:0e:1f:ac:34:94:ea:e4:c1:c0:56:8c:
5b:9c:d2:6d:92:72:f9:92:bc:f7:ac:e6:19:c2:b8:af:5d:ab:
13:a0:d5:ee:82:fd:1d:70:09:6f:63:29:ee:58:ac:73:dc:a0:
6a:93:49:fa:e6:6c:f9:24:d0:60:9e:99:2d:27:2f:c5:4f:8c:
6a:6b:28:5b:12:ea:b3:d0:d4:6f:44:05:be:c3:da:40:e5:69:
cf:19:5b:71:57:30:f8:b8:d9:40:3b:7b:27:8e:60:9b:a8:ce:
49:5a:1d:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFVFXJZ4iHkcuNUYgnZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYzM2NWFhZmJlMGU0NWEwNGRkMTVlOWMyMzExMjFlOWVh
ZWE4ZjIwHhcNMjUwMTMxMTIwMDU4WhcNMjUwMjAxMTIwMDU4WjAzMTEwLwYDVQQD
Eyg2ODJkN2ZjNWUyZDc1YWUxYjk2NmI0YjMyNDU2MjZhYzkxYTQ1Y2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Il84z7uuvOhYjldtRGecZBS6YDn
7PMGmwVs2TrBp4ocembdKmQHofQ72msb3vPHBdlS37FpgrQR8wSEJ9a4FwTfdAyU
XCnscCcH8D281KwVRD4StkqXDepNCT4o3ktf948+7mp//AS8qXYHImFMQ/F28Gft
+2XtKMhEmIe0v+bWZhGv9/JIX+fdWDGT4m/NSm3SSEHuAHno1EEbhErLN8De60lS
y1S5cwkvuGNwrre8oooDqVlPZUR8o9fCBaJOn0F3z2d3/7eVQCcq45kWb9K/FvcJ
+jzg5f59pPMd8Byx+0xDaEbUBv/tRNpQBKqgBBbgXjpw4fwX4SnAB/ivIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgtf8Xi11rhuWa0syRWJqyRpFzzMB8GA1UdIwQY
MBaAFP3DZar74ORaBN0V6cIxEh6erqjyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2NObHF2dmc1Rm9FM1JYcHdqRVNIcDZ1cVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81MGIwODItNDNjOS00YjUwLTkwNGMt
YWJkZTdhNjVlMDRhLzEvX2NObHF2dmc1Rm9FM1JYcHdqRVNIcDZ1cVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81MGIwODItNDNjOS00YjUwLTkwNGMtYWJkZTdhNjVlMDRh
LzEvX2NObHF2dmc1Rm9FM1JYcHdqRVNIcDZ1cVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuL6Nc/+
qDYWkD5O7nJBfUZxDUD2q8fy+lQEjZj8u0Tyx9ivf9C6BDWBT070yK5+FSiuweoV
Qtic4yYxymJbYZ+jliAeh9xM0Vn1AtLMlhFCGcSpQmr3QRUcQgHZOFHsVG68D1VS
2ofegkv71OJSK9AQppRoBwbz29ePinX5IYn3AQnnuYXO8PZsToEzF8wrEXBbaVaJ
Hw4frDSU6uTBwFaMW5zSbZJy+ZK896zmGcK4r12rE6DV7oL9HXAJb2Mp7lisc9yg
apNJ+uZs+STQYJ6ZLScvxU+MamsoWxLqs9DUb0QFvsPaQOVpzxlbcVcw+LjZQDt7
J45gm6jOSVodlg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:46:58 2025 by rpki-client