Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
File: fIwTcd1q_V_XnqmE2j-9oblK_iM.mft (raw, json)
Hash identifier: v/VWBOEqowUBF+4y78sgTqIjzr17XVJch4lbQklF9CM=
Subject key identifier: 09:FF:F4:48:04:91:8D:D3:C6:58:71:7A:B2:00:14:D4:F4:95:8A:8E
Authority key identifier: 7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
Certificate issuer: /CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Certificate serial: 0194BC04D7149E7538B01046971B5BDCAD4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: EeK6cauICbjiVCSXw89JJKbgWuI.roa (hash: dQibGt3eUNBx7bxOeGKDFYcaj4qO4S1imLS16SxshcI=)
2: fIwTcd1q_V_XnqmE2j-9oblK_iM.crl (hash: x1NHds5zNvU1GyG/Wl8AYzrwaPyOsc3c2rTficaNr2g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d7:14:9e:75:38:b0:10:46:97:1b:5b:dc:ad:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=09fff44804918dd3c658717ab20014d4f4958a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:c2:50:29:82:fe:f3:eb:91:78:ac:27:0f:
37:8b:88:23:fc:d2:01:25:f4:52:b2:1b:47:25:4e:
5f:7f:08:d9:ed:86:7e:62:65:b2:e1:79:6e:9a:a1:
fe:74:66:8e:b7:ea:9d:a1:18:29:3b:69:ff:c4:dc:
73:84:31:4e:39:0f:06:a6:29:d9:bb:70:a4:e4:d8:
d9:28:59:ed:8e:fc:c5:f5:b3:e3:0f:22:11:1b:ac:
ad:13:00:f0:d4:25:8e:ad:12:2e:b2:82:62:67:12:
e1:b4:c1:81:a3:a2:63:80:c1:18:05:0c:4f:7c:62:
ac:ae:b7:c9:89:ec:33:e6:c7:d5:e6:37:5d:27:c0:
fc:bf:9d:f7:c8:5f:d7:9e:99:28:0d:40:ab:bf:b5:
d8:a6:f9:85:4b:c8:f5:b0:61:9b:7b:2d:a4:21:16:
da:9b:83:7c:37:9c:e0:f5:e6:c9:4c:f2:a5:4e:f0:
00:c6:80:64:04:fa:d9:08:7b:3a:51:fb:e5:7e:d1:
0f:77:67:f7:71:50:0a:ca:a9:74:ad:c2:1f:13:a8:
64:84:8a:68:ba:d5:0d:d1:af:d2:56:4c:a7:b0:36:
2d:0c:f3:f0:c4:eb:f4:ad:14:dd:ca:70:95:d9:a0:
d3:64:74:8f:7e:4a:b5:eb:a5:fb:71:88:26:7f:f8:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FF:F4:48:04:91:8D:D3:C6:58:71:7A:B2:00:14:D4:F4:95:8A:8E
X509v3 Authority Key Identifier:
keyid:7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9c:0c:84:7a:d7:a7:27:93:8a:03:5c:ea:c8:ec:12:17:fe:
11:f4:fe:57:39:ec:e9:14:f5:ee:f0:84:1b:1d:15:f8:f3:4d:
3d:e0:2a:3b:17:b7:19:0c:6f:a0:75:12:b5:d0:8b:3e:5b:6a:
ba:d5:2f:c3:93:cd:0e:f8:c5:68:c2:1a:f6:f1:02:a1:89:6d:
b6:fa:b5:1a:5f:b6:08:4c:35:5e:69:31:28:96:a9:6d:48:ad:
d2:fe:3d:c3:97:50:36:2c:6b:42:6d:73:1b:56:72:8c:72:dc:
a6:29:72:21:f4:42:f7:32:e2:12:9e:b0:be:4b:53:d3:6f:6e:
21:c8:00:0d:e0:ec:c8:3c:72:a1:30:e6:03:72:5e:e2:17:40:
a8:a3:8b:dc:57:79:88:c6:45:c8:bc:53:68:c1:aa:27:4d:9a:
c9:1f:1a:7b:5b:ad:45:d4:94:6d:20:c1:a9:6a:f6:45:f3:10:
91:6d:74:7b:1f:cf:6f:50:63:cf:1d:78:5b:20:6f:9c:1b:90:
6b:19:f8:fc:96:42:01:5e:36:53:f2:3c:e2:05:ff:a0:0e:b7:
21:43:3e:5d:28:a0:8f:4f:d1:45:3e:aa:c8:24:6e:61:36:dc:
94:ea:96:fd:44:2a:74:7b:74:b0:1d:a9:1b:0a:6f:74:b6:78:
3f:48:d1:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BNcUnnU4sBBGlxtb3K1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOGMxMzcxZGQ2YWZkNWZkNzllYTk4NGRhM2ZiZGExYjk0
YWZlMjMwHhcNMjUwMTMxMTEwMDIxWhcNMjUwMjAxMTEwMDIxWjAzMTEwLwYDVQQD
EygwOWZmZjQ0ODA0OTE4ZGQzYzY1ODcxN2FiMjAwMTRkNGY0OTU4YThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshHCUCmC/vPrkXisJw83i4gj/NIB
JfRSshtHJU5ffwjZ7YZ+YmWy4XlumqH+dGaOt+qdoRgpO2n/xNxzhDFOOQ8GpinZ
u3Ck5NjZKFntjvzF9bPjDyIRG6ytEwDw1CWOrRIusoJiZxLhtMGBo6JjgMEYBQxP
fGKsrrfJiewz5sfV5jddJ8D8v533yF/XnpkoDUCrv7XYpvmFS8j1sGGbey2kIRba
m4N8N5zg9ebJTPKlTvAAxoBkBPrZCHs6UfvlftEPd2f3cVAKyql0rcIfE6hkhIpo
utUN0a/SVkynsDYtDPPwxOv0rRTdynCV2aDTZHSPfkq166X7cYgmf/h1vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAn/9EgEkY3TxlhxerIAFNT0lYqOMB8GA1UdIwQY
MBaAFHyME3Hdav1f156phNo/vaG5Sv4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkl3VGNkMXFfVl9YbnFtRTJqLTlvYmxLX2lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lOTQ2NTItMTU2NC00ZDFiLTgxOTgt
MWFjNWQ4ODYzMDgyLzEvZkl3VGNkMXFfVl9YbnFtRTJqLTlvYmxLX2lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lOTQ2NTItMTU2NC00ZDFiLTgxOTgtMWFjNWQ4ODYzMDgy
LzEvZkl3VGNkMXFfVl9YbnFtRTJqLTlvYmxLX2lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJwMhHrX
pyeTigNc6sjsEhf+EfT+Vzns6RT17vCEGx0V+PNNPeAqOxe3GQxvoHUStdCLPltq
utUvw5PNDvjFaMIa9vECoYlttvq1Gl+2CEw1XmkxKJapbUit0v49w5dQNixrQm1z
G1ZyjHLcpilyIfRC9zLiEp6wvktT029uIcgADeDsyDxyoTDmA3Je4hdAqKOL3Fd5
iMZFyLxTaMGqJ02ayR8ae1utRdSUbSDBqWr2RfMQkW10ex/Pb1Bjzx14WyBvnBuQ
axn4/JZCAV42U/I84gX/oA63IUM+XSigj0/RRT6qyCRuYTbclOqW/UQqdHt0sB2p
GwpvdLZ4P0jRMQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:04 2025 by rpki-client