Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
File: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft (raw, json)
Hash identifier: 6HlFtvWpjaMGDdYBrYGxq1eh3QJLkwc9kagXhIMnuks=
Subject key identifier: C8:A1:16:9C:2E:EA:5E:C7:34:41:56:8D:EF:B1:AC:83:7C:E9:48:DC
Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
Certificate issuer: /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Certificate serial: 0194BBCE1F7C60FACCBA9C0DF7D4FE4D0E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl (hash: AhkVNV2FfLjlJVnMDAPrUTet79kA7Yy6W0hqlUz3b7o=)
2: KK6CnYNVLgkO9qFyFOT9UGvXJYI.roa (hash: ZHlrP8V5BtXECEdhL9eJuVBZKLMvwmVQC0U5b4cXw08=)
3: o5N_jAG9g_aL4MkwpX9OBq0Dy-k.roa (hash: M8ydZ1fG/pikMq2g2Lj2Oo2CSVv2VUo2aqU5TzG0PFg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1f:7c:60:fa:cc:ba:9c:0d:f7:d4:fe:4d:0e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=c8a1169c2eea5ec73441568defb1ac837ce948dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:af:90:ba:fd:eb:3c:af:dd:45:10:bb:93:
0b:fb:b0:74:ed:67:cb:53:8c:f9:fc:7b:17:87:18:
75:59:2e:c7:e7:89:f8:67:ac:36:83:76:38:4b:7d:
9b:1d:e7:dc:db:6d:0f:79:d1:09:ad:82:e7:f9:0f:
f0:78:f5:90:0b:2a:39:9c:02:f8:2c:40:54:28:b0:
69:ea:1e:89:ef:67:57:ef:b2:4d:e6:1f:95:c5:f6:
5b:e0:db:ab:79:4d:dc:f5:bf:ea:88:14:72:8d:dd:
b4:c4:97:a4:3b:7d:40:91:e4:f9:64:b1:8f:ab:90:
2b:dd:31:da:b3:0e:0f:69:74:9a:21:5f:d0:b6:d7:
41:ce:8e:dd:cb:91:01:fe:75:61:a8:0e:bd:17:42:
30:5b:9a:8a:58:95:40:fc:1e:99:17:e9:bb:f8:a2:
2a:f2:77:16:7e:3b:ab:56:98:2a:eb:d2:1a:41:10:
ce:4d:f8:eb:9e:ab:bd:0d:bb:56:d2:98:95:eb:a2:
72:a4:fb:12:54:01:39:ae:f0:7e:2d:be:f3:bf:da:
e2:db:44:95:60:36:ff:3f:7c:19:6a:37:35:07:d1:
e5:9e:95:c3:d3:32:17:d0:18:da:79:10:57:39:b6:
07:2a:6f:dc:13:8b:32:96:16:2c:bd:f4:60:b4:e6:
3d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A1:16:9C:2E:EA:5E:C7:34:41:56:8D:EF:B1:AC:83:7C:E9:48:DC
X509v3 Authority Key Identifier:
keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cd:99:f2:12:aa:bb:23:6c:48:03:1b:d1:0b:55:fd:86:3f:
d2:35:b5:99:50:6b:81:d3:c5:ce:ed:b3:99:40:36:97:24:d1:
94:d3:09:ff:e2:23:bf:1a:d7:fa:7e:7d:a6:89:a0:50:08:7e:
71:2b:36:45:06:39:f5:78:da:1d:ba:1f:13:2e:7a:fc:a9:44:
d1:18:32:b5:3a:c2:ef:37:40:c6:9f:12:78:ab:b8:6d:ab:b2:
51:bd:3c:60:44:12:c6:82:93:b4:46:6e:4f:cb:1c:36:9a:1f:
9e:3a:62:92:42:0d:77:a7:d0:94:7e:66:9e:08:f6:19:2c:fc:
21:6d:44:7c:11:8b:c5:a4:3d:4f:73:17:a5:6e:a4:44:fe:d0:
47:05:8f:61:78:67:7d:40:8d:ce:a2:86:ca:e2:e8:1f:d9:94:
12:71:6a:cf:3e:a6:aa:8b:4f:5e:89:34:10:ee:7d:34:ad:83:
57:a5:4a:e8:6f:56:32:da:be:8a:dc:96:f4:e5:9c:60:ff:17:
85:ad:7a:7d:53:d1:b8:00:41:87:d3:9e:e2:10:f2:9d:78:53:
d0:bb:ba:24:cd:e1:8c:4f:b8:dd:e5:02:be:ed:89:f8:9f:31:
6c:4b:08:b3:c1:fc:5d:4c:b4:16:7e:9b:76:e8:4c:6a:41:10:
3e:22:b1:66
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS7zh98YPrMupwN99T+TQ5TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNzBiNDJkN2FmNmFkNzgyMjJiMzBmMDVmMmI3OTEzZjgw
NjM1NzAwHhcNMjUwMTMxMTAwMDM1WhcNMjUwMjAxMTAwMDM1WjAzMTEwLwYDVQQD
EyhjOGExMTY5YzJlZWE1ZWM3MzQ0MTU2OGRlZmIxYWM4MzdjZTk0OGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfGvkLr96zyv3UUQu5ML+7B07WfL
U4z5/HsXhxh1WS7H54n4Z6w2g3Y4S32bHefc220PedEJrYLn+Q/wePWQCyo5nAL4
LEBUKLBp6h6J72dX77JN5h+VxfZb4NureU3c9b/qiBRyjd20xJekO31AkeT5ZLGP
q5Ar3THasw4PaXSaIV/QttdBzo7dy5EB/nVhqA69F0IwW5qKWJVA/B6ZF+m7+KIq
8ncWfjurVpgq69IaQRDOTfjrnqu9DbtW0piV66JypPsSVAE5rvB+Lb7zv9ri20SV
YDb/P3wZajc1B9HlnpXD0zIX0BjaeRBXObYHKm/cE4sylhYsvfRgtOY9PQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMihFpwu6l7HNEFWje+xrIN86UjcMB8GA1UdIwQY
MBaAFPpwtC169q14Iisw8F8reRP4BjVwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1uQzBMWHIyclhnaUt6RHdYeXQ1RV9nR05YQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvZDNiZmU2LTc4YjUtNDM3Yi05OGU5
LWI5MTQxNTliYThhZC8xLzEtbkMwTFhyMnJYZ2lLekR3WHl0NUVfZ0dOWEEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzZhL2QzYmZlNi03OGI1LTQzN2ItOThlOS1iOTE0MTU5YmE4
YWQvMS8xLW5DMExYcjJyWGdpS3pEd1h5dDVFX2dHTlhBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR82Z
8hKquyNsSAMb0QtV/YY/0jW1mVBrgdPFzu2zmUA2lyTRlNMJ/+IjvxrX+n59pomg
UAh+cSs2RQY59XjaHbofEy56/KlE0RgytTrC7zdAxp8SeKu4bauyUb08YEQSxoKT
tEZuT8scNpofnjpikkINd6fQlH5mngj2GSz8IW1EfBGLxaQ9T3MXpW6kRP7QRwWP
YXhnfUCNzqKGyuLoH9mUEnFqzz6mqotPXok0EO59NK2DV6VK6G9WMtq+ityW9OWc
YP8Xha16fVPRuABBh9Oe4hDynXhT0Lu6JM3hjE+43eUCvu2J+J8xbEsIs8H8XUy0
Fn6bduhMakEQPiKxZg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:49 2025 by rpki-client