Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
File: f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft (raw, json)
Hash identifier: y5NE53JK5Ze+Wq3gA672P9Gnj6n30slWocnLFJyyPq4=
Subject key identifier: CC:20:C8:46:2F:B6:E6:D2:2E:80:7C:45:A2:5E:9D:44:2B:46:4D:EA
Authority key identifier: 7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
Certificate issuer: /CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Certificate serial: 0194BCE0969A7D1251A61554EED531FFE76B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: AfxHVZhw7S6ij1s6ZJ4SMYoOQJc.roa (hash: LJW5Y4vZe3G/aI05TP+NUCTrdwpagASD2p69Aj70Dcw=)
2: f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl (hash: FiR2I16+eM7ylzTCneok1xuHfIqgn/wruGkK9TFVY1c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:96:9a:7d:12:51:a6:15:54:ee:d5:31:ff:e7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=cc20c8462fb6e6d22e807c45a25e9d442b464dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:52:b6:1c:b0:4c:6a:7d:a8:24:6a:1c:b5:
f7:a6:e6:7d:b7:63:65:da:b9:43:71:e7:8b:ed:78:
0b:12:1e:5e:f9:18:91:58:af:2c:a2:19:94:05:e1:
39:84:4f:79:db:8f:2e:11:22:f5:c0:87:29:c8:7d:
86:81:10:32:c2:8a:3a:8e:6c:9c:7e:4f:43:29:ef:
03:c6:8c:53:29:15:e8:46:69:8a:7e:83:b4:54:22:
a6:c7:89:b4:8d:54:f1:43:64:b6:95:ce:a0:d7:a8:
5e:81:f6:93:a8:02:98:dc:cf:b8:d2:30:cf:d9:4c:
52:85:a2:34:b9:bb:a6:e1:a0:70:52:d2:78:68:85:
da:76:d3:89:f4:04:85:57:47:73:cf:9d:51:b3:04:
bf:1d:d2:c3:f7:c5:b6:4b:23:c1:73:25:97:49:28:
ef:b5:19:29:3a:34:63:e9:52:c2:2f:8e:3d:fd:cf:
bd:a3:3d:9d:f5:35:aa:99:8e:e4:bc:99:22:45:fb:
f1:19:a2:e2:03:2a:24:a1:9f:60:d0:91:de:63:86:
b0:19:6c:07:e9:b1:c5:3f:84:19:b2:f4:ef:12:61:
a5:aa:40:28:a5:4b:a2:6e:66:db:bb:39:c1:16:a7:
2a:f8:23:47:99:58:9b:9f:0a:0f:4e:63:af:38:60:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:20:C8:46:2F:B6:E6:D2:2E:80:7C:45:A2:5E:9D:44:2B:46:4D:EA
X509v3 Authority Key Identifier:
keyid:7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:14:a5:fd:fd:8e:89:ed:de:e8:06:57:99:1a:2d:d6:5d:f0:
b4:69:41:5f:7e:d8:e1:d9:e8:48:13:b9:cf:90:0c:97:e5:e4:
c6:36:a9:e8:d4:a1:be:d4:9d:4b:aa:7f:8a:e4:92:64:b1:a5:
0b:1f:b7:be:19:1f:6d:ac:b0:fc:c3:3d:9d:65:ea:46:6e:bf:
8a:97:fb:a4:94:93:4c:50:fe:46:03:6e:04:e7:95:4b:76:41:
6a:ac:fb:4a:92:c7:04:68:a8:75:e7:25:c1:d3:2f:1b:5c:d9:
57:1c:a7:3c:c1:30:4e:48:7c:13:f4:c9:fc:13:fb:7e:68:06:
7e:47:32:1d:f9:dc:c5:dc:72:12:b7:51:b5:e1:bc:d0:43:cf:
fd:cc:89:75:cf:70:1b:dc:1c:f0:51:a4:5a:48:d4:54:a8:f2:
a7:f9:c5:58:fc:79:bb:e9:a0:f4:70:d1:f3:fa:4c:98:b0:44:
98:54:6b:c2:f6:e0:1a:4d:6f:7a:f8:a1:8a:1d:73:4f:c4:5f:
f3:8b:9c:45:2f:ad:cd:c1:aa:20:9c:72:5e:1a:24:eb:03:c0:
d3:87:74:26:2f:36:97:dc:63:33:6f:03:27:6d:87:dc:2b:f1:
53:66:d5:81:4d:9a:24:b5:b5:1b:3e:3d:6a:02:79:18:22:dc:
85:19:20:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JaafRJRphVU7tUx/+drMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTY4OWRlNGE3Y2U3NjhiZjNhYjVkOWY4NTQ2ZTg1NmNj
YjE5MzYwHhcNMjUwMTMxMTUwMDIyWhcNMjUwMjAxMTUwMDIyWjAzMTEwLwYDVQQD
EyhjYzIwYzg0NjJmYjZlNmQyMmU4MDdjNDVhMjVlOWQ0NDJiNDY0ZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRNSthywTGp9qCRqHLX3puZ9t2Nl
2rlDceeL7XgLEh5e+RiRWK8sohmUBeE5hE95248uESL1wIcpyH2GgRAywoo6jmyc
fk9DKe8DxoxTKRXoRmmKfoO0VCKmx4m0jVTxQ2S2lc6g16hegfaTqAKY3M+40jDP
2UxShaI0ubum4aBwUtJ4aIXadtOJ9ASFV0dzz51RswS/HdLD98W2SyPBcyWXSSjv
tRkpOjRj6VLCL449/c+9oz2d9TWqmY7kvJkiRfvxGaLiAyokoZ9g0JHeY4awGWwH
6bHFP4QZsvTvEmGlqkAopUuibmbbuznBFqcq+CNHmVibnwoPTmOvOGBDzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwgyEYvtubSLoB8RaJenUQrRk3qMB8GA1UdIwQY
MBaAFH9Wid5KfOdovzq12fhUboVsyxk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82NGQ1MDUtMjIwNC00ZGNhLWE5NWUt
OGI1MzcyNTg0YWNkLzEvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82NGQ1MDUtMjIwNC00ZGNhLWE5NWUtOGI1MzcyNTg0YWNk
LzEvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBSl/f2O
ie3e6AZXmRot1l3wtGlBX37Y4dnoSBO5z5AMl+Xkxjap6NShvtSdS6p/iuSSZLGl
Cx+3vhkfbayw/MM9nWXqRm6/ipf7pJSTTFD+RgNuBOeVS3ZBaqz7SpLHBGiodecl
wdMvG1zZVxynPMEwTkh8E/TJ/BP7fmgGfkcyHfncxdxyErdRteG80EPP/cyJdc9w
G9wc8FGkWkjUVKjyp/nFWPx5u+mg9HDR8/pMmLBEmFRrwvbgGk1vevihih1zT8Rf
84ucRS+tzcGqIJxyXhok6wPA04d0Ji82l9xjM28DJ22H3CvxU2bVgU2aJLW1Gz49
agJ5GCLchRkgtQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:43 2025 by rpki-client