Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
File: _7yuKykMgB1X0J0CWpNI4WcG8YI.mft (raw, json)
Hash identifier: qcREX0GVqr4/41IF1whI1U0IcKCPlF7q9nPGTQ0yT34=
Subject key identifier: BE:D1:8E:FC:5C:50:3B:03:2D:63:39:04:15:87:5F:C0:18:72:BC:F2
Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
Certificate issuer: /CN=ffbcae2b290c801d57d09d025a9348e16706f182
Certificate serial: 0194BC3C99F1524306FD42782BF3F71AB6FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
Manifest number: 138A
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: 6HrwZNpbvYhhYfLli8aXSDjbSHQ.roa (hash: C9qYI6bwZJAdML2cWWUkqzAkp8NeMEC0TRE5K5vg7C8=)
2: 8wTHmWo4SSJsVc0t3sJFniZg3X0.roa (hash: nwCEElQrpQEsbcFPrYoePVQv66vMAWow/x3hFkCdNgc=)
3: _7yuKykMgB1X0J0CWpNI4WcG8YI.crl (hash: anu8MvXFUNqKU4gNYjvzL4izABT43kWuDBDT2VKYweI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:99:f1:52:43:06:fd:42:78:2b:f3:f7:1a:b6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=bed18efc5c503b032d63390415875fc01872bcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:88:88:44:31:28:39:29:ec:44:c0:74:7b:b6:
ba:f3:3c:8a:51:8c:ae:b5:ff:72:18:16:17:1a:2c:
74:12:70:ec:52:a4:6d:94:0e:47:8a:b3:75:5e:24:
2e:bf:e1:f2:cf:00:cd:77:f7:8d:0c:ed:92:52:47:
5d:7b:b4:37:97:75:15:e9:fa:d8:6b:6c:30:3a:84:
68:94:9b:24:a1:26:f4:1b:73:71:55:00:c1:44:5d:
e9:6b:f3:73:ee:ef:ad:2c:31:8a:52:40:01:9a:0f:
e5:fb:ec:7c:0d:b2:9d:57:46:e0:2e:54:48:d0:1e:
f2:99:70:44:1b:89:b0:05:eb:84:cb:9f:44:f7:03:
a1:23:a1:7a:36:80:93:86:7d:b3:f4:62:62:54:ff:
dd:da:bf:80:88:78:12:7f:29:e0:2f:ca:d4:b0:ef:
02:df:94:ca:3a:5f:2f:2c:c6:2c:93:4b:30:e1:1b:
89:af:7b:78:32:94:af:d5:9a:bf:8d:1c:46:65:0b:
50:d2:7f:cb:92:f3:83:84:1f:77:a3:6d:3a:a1:bf:
cf:78:46:d8:d3:42:52:ee:c3:26:ca:0c:a1:ba:ed:
ee:cb:bb:0b:bf:7b:7e:c2:4b:fe:85:b4:7d:1c:e4:
d8:14:d7:a4:e8:51:40:09:6a:19:e6:c6:e8:34:f7:
19:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D1:8E:FC:5C:50:3B:03:2D:63:39:04:15:87:5F:C0:18:72:BC:F2
X509v3 Authority Key Identifier:
keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:66:b9:d3:35:b7:be:3e:83:d3:12:93:4a:43:bb:91:81:4d:
0c:e5:6c:58:a7:c7:63:94:50:99:82:fc:e5:ec:6c:a3:6a:ad:
f6:56:48:39:d6:96:44:3a:9b:20:f3:01:0a:c5:6f:dc:25:b0:
29:e9:f8:81:a7:50:e3:cb:eb:82:14:e4:bd:b5:93:71:37:ea:
25:c1:0e:59:45:1a:b7:d4:19:b8:05:4b:69:d1:1c:7f:eb:f6:
3d:03:a5:3e:1e:3b:a2:aa:aa:d2:5c:0c:e0:14:df:ae:9b:56:
9e:e5:57:e0:20:86:fe:78:be:db:e2:be:0b:3a:00:9f:18:51:
38:66:8b:b3:7e:6a:71:30:d6:d7:9b:73:af:77:a0:f7:33:75:
27:69:22:c9:44:ed:24:2b:d8:34:66:74:2f:f1:6e:37:59:e0:
db:e4:7b:a7:7d:34:8e:ca:4e:bb:e3:ed:2c:60:da:d5:e7:7a:
89:f5:67:63:fa:eb:86:e1:55:4a:02:7c:82:34:bd:25:30:b3:
dd:51:9f:51:7b:e2:69:90:b3:19:2a:ee:65:24:ca:11:5b:c8:
07:12:23:3d:24:20:9a:49:1f:4c:7e:a9:19:7c:ec:67:6e:57:
24:c6:4a:37:4c:38:ab:c5:b4:27:98:3f:18:95:cf:7e:60:bd:
8f:cc:55:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJnxUkMG/UJ4K/P3Grb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYmNhZTJiMjkwYzgwMWQ1N2QwOWQwMjVhOTM0OGUxNjcw
NmYxODIwHhcNMjUwMTMxMTIwMTE1WhcNMjUwMjAxMTIwMTE1WjAzMTEwLwYDVQQD
EyhiZWQxOGVmYzVjNTAzYjAzMmQ2MzM5MDQxNTg3NWZjMDE4NzJiY2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IiIRDEoOSnsRMB0e7a68zyKUYyu
tf9yGBYXGix0EnDsUqRtlA5HirN1XiQuv+HyzwDNd/eNDO2SUkdde7Q3l3UV6frY
a2wwOoRolJskoSb0G3NxVQDBRF3pa/Nz7u+tLDGKUkABmg/l++x8DbKdV0bgLlRI
0B7ymXBEG4mwBeuEy59E9wOhI6F6NoCThn2z9GJiVP/d2r+AiHgSfyngL8rUsO8C
35TKOl8vLMYsk0sw4RuJr3t4MpSv1Zq/jRxGZQtQ0n/LkvODhB93o206ob/PeEbY
00JS7sMmygyhuu3uy7sLv3t+wkv+hbR9HOTYFNek6FFACWoZ5sboNPcZ7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7RjvxcUDsDLWM5BBWHX8AYcrzyMB8GA1UdIwQY
MBaAFP+8rispDIAdV9CdAlqTSOFnBvGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzd5dUt5a01nQjFYMEowQ1dwTkk0V2NHOFlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81OWJjZDEtMWUwYi00ODVkLTk1MTAt
MDk2YWY0NzhmMDRiLzEvXzd5dUt5a01nQjFYMEowQ1dwTkk0V2NHOFlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81OWJjZDEtMWUwYi00ODVkLTk1MTAtMDk2YWY0NzhmMDRi
LzEvXzd5dUt5a01nQjFYMEowQ1dwTkk0V2NHOFlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWa50zW3
vj6D0xKTSkO7kYFNDOVsWKfHY5RQmYL85exso2qt9lZIOdaWRDqbIPMBCsVv3CWw
Ken4gadQ48vrghTkvbWTcTfqJcEOWUUat9QZuAVLadEcf+v2PQOlPh47oqqq0lwM
4BTfrptWnuVX4CCG/ni+2+K+CzoAnxhROGaLs35qcTDW15tzr3eg9zN1J2kiyUTt
JCvYNGZ0L/FuN1ng2+R7p300jspOu+PtLGDa1ed6ifVnY/rrhuFVSgJ8gjS9JTCz
3VGfUXviaZCzGSruZSTKEVvIBxIjPSQgmkkfTH6pGXzsZ25XJMZKN0w4q8W0J5g/
GJXPfmC9j8xV/g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:12:59 2025 by rpki-client