Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
File: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft (raw, json)
Hash identifier: VO3RzJ/hJN1YJW06FfNgHOHARyM6IHAyE8VmGJAtrTA=
Subject key identifier: 75:C9:C0:B0:A7:E7:51:24:BA:74:2E:4B:64:4A:C1:52:A1:F7:18:BF
Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
Certificate issuer: /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Certificate serial: 0194BD4EBF1EA05D4DD81FEA82C262EEBC3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl (hash: o3JEJD7dtZDGuGQKrj44W3J01nLC9P2Cj7+owiJhs/0=)
2: 2sMuB3L4wKNk6KQ1vUkgecapqPs.roa (hash: a+lo4xla0hStaCSeWZ2tmrm8LUp0PkG7cZXb4aMXUeo=)
3: CANBUB1YKbCmA7ScoDWaXGtX2uc.roa (hash: aie8Fma/xfSFGEQSDW4nRAqWZZILRzEAkJDRNa0r8qI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bf:1e:a0:5d:4d:d8:1f:ea:82:c2:62:ee:bc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=75c9c0b0a7e75124ba742e4b644ac152a1f718bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:28:6e:27:6d:56:d6:5a:13:92:01:fa:ea:
49:66:cc:67:4c:f8:9a:ba:97:33:48:57:a4:41:79:
a2:17:d4:47:d1:d2:0e:a7:8c:fc:60:a1:c0:3c:b9:
1e:0f:b8:f4:51:d6:1e:11:be:be:23:93:1b:d1:23:
9c:dc:01:47:9f:3d:29:7c:b4:9e:16:2e:4a:6f:39:
51:23:3d:fc:93:b0:ba:c3:2d:34:fa:08:10:01:40:
4e:9a:06:a0:be:bb:32:d8:b1:9e:a1:2d:8f:bf:52:
1c:29:d9:f7:d8:32:c7:cd:75:c7:3b:bf:dd:7e:b7:
60:67:46:ac:22:60:f2:dd:cb:3f:00:5e:1f:83:72:
04:0f:5c:dc:3b:12:f3:bc:66:07:f8:1b:da:7b:26:
12:32:1d:90:f0:b2:29:07:89:a2:9b:81:a4:d4:98:
ee:c8:d1:a2:d0:c5:2f:76:f5:b6:0e:45:6c:0d:48:
f8:d6:54:b1:5c:2b:b2:79:eb:60:66:d5:a2:bb:f6:
66:42:5c:18:35:6b:c0:e8:5e:25:ec:a1:27:dc:70:
66:a0:23:4a:83:cf:d0:55:44:fe:3f:06:20:97:b1:
fb:f7:17:7a:c3:37:89:40:d0:fa:4c:c9:fd:3a:a5:
b6:d3:6d:d7:18:1c:ad:0d:84:d4:33:a7:75:2e:9c:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C9:C0:B0:A7:E7:51:24:BA:74:2E:4B:64:4A:C1:52:A1:F7:18:BF
X509v3 Authority Key Identifier:
keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:51:7d:55:46:66:dc:f2:57:9c:6d:2a:ce:e2:62:ae:6a:05:
cc:bd:e9:38:68:d2:88:4b:c5:80:2e:41:40:85:4b:98:e1:57:
ae:df:7b:2b:6c:bd:91:3f:e6:ba:12:06:6f:35:37:99:a7:72:
62:d8:bd:1f:f8:a4:da:65:f9:ea:b5:e5:38:94:ad:94:9d:ab:
72:8a:64:32:57:79:33:f3:94:f8:27:20:d1:d5:3c:12:96:94:
b6:0e:d9:54:e2:1d:f8:2a:43:d7:e8:8a:54:e2:c9:22:e8:4b:
ce:c3:a5:57:af:22:fa:23:96:64:7e:59:24:dd:5e:da:11:60:
69:5a:64:32:69:59:03:14:6d:5f:f5:c4:e3:66:c8:e6:5b:85:
ec:63:b8:b7:76:cf:99:d7:5d:50:cb:bc:1d:42:69:6f:b5:34:
63:69:98:7d:6d:cd:3a:57:d4:0c:b0:b7:cb:3f:5e:ef:89:69:
9c:f0:61:ba:f7:45:d9:1f:61:e6:df:ff:62:20:53:fd:e4:d6:
08:4e:32:dd:9a:82:97:3e:78:33:bd:49:5c:d0:82:96:6d:de:
a4:90:1d:31:e0:71:f6:6e:62:3c:ab:3e:d2:92:69:61:5b:13:
71:44:d9:ab:b3:5d:e2:28:46:35:11:10:a1:e6:a5:4a:52:0c:
09:4c:d1:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tr8eoF1N2B/qgsJi7rw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNWE4NWM0NWJmNTNjM2Q4OGE3NjY5NWFhZmViYmQ0YWE3
N2JiYzEwHhcNMjUwMTMxMTcwMDQyWhcNMjUwMjAxMTcwMDQyWjAzMTEwLwYDVQQD
Eyg3NWM5YzBiMGE3ZTc1MTI0YmE3NDJlNGI2NDRhYzE1MmExZjcxOGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul0obidtVtZaE5IB+upJZsxnTPia
upczSFekQXmiF9RH0dIOp4z8YKHAPLkeD7j0UdYeEb6+I5Mb0SOc3AFHnz0pfLSe
Fi5KbzlRIz38k7C6wy00+ggQAUBOmgagvrsy2LGeoS2Pv1IcKdn32DLHzXXHO7/d
frdgZ0asImDy3cs/AF4fg3IED1zcOxLzvGYH+BvaeyYSMh2Q8LIpB4mim4Gk1Jju
yNGi0MUvdvW2DkVsDUj41lSxXCuyeetgZtWiu/ZmQlwYNWvA6F4l7KEn3HBmoCNK
g8/QVUT+PwYgl7H79xd6wzeJQND6TMn9OqW2023XGBytDYTUM6d1Lpz6/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXJwLCn51EkunQuS2RKwVKh9xi/MB8GA1UdIwQY
MBaAFNBahcRb9Tw9iKdmlar+u9Sqd7vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81NDk0NzctNGE4Mi00MmJjLTgzOWUt
NGY5ODQwZGVmYTFmLzEvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81NDk0NzctNGE4Mi00MmJjLTgzOWUtNGY5ODQwZGVmYTFm
LzEvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1F9VUZm
3PJXnG0qzuJirmoFzL3pOGjSiEvFgC5BQIVLmOFXrt97K2y9kT/muhIGbzU3mady
Yti9H/ik2mX56rXlOJStlJ2rcopkMld5M/OU+Ccg0dU8EpaUtg7ZVOId+CpD1+iK
VOLJIuhLzsOlV68i+iOWZH5ZJN1e2hFgaVpkMmlZAxRtX/XE42bI5luF7GO4t3bP
mdddUMu8HUJpb7U0Y2mYfW3NOlfUDLC3yz9e74lpnPBhuvdF2R9h5t//YiBT/eTW
CE4y3ZqClz54M71JXNCClm3epJAdMeBx9m5iPKs+0pJpYVsTcUTZq7Nd4ihGNREQ
oealSlIMCUzR3g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:29 2025 by rpki-client