Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
File: c-FXspGMrcqKWp-8Zul3YIpt9eE.mft (raw, json)
Hash identifier: 5ZMW/Ow2iJqkkFmKfFEpEnAXyJ61MpWUCHh3JxgZIN0=
Subject key identifier: 08:7B:03:24:75:CC:49:1F:5A:5B:9F:F2:74:1D:BF:4F:17:B3:A6:E3
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial: 0194BC72DF589AE6B22D1F52943821D6455D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: 9Vc3AbW6vlZ_1l6ygzFXdiG_9DU.roa (hash: XyjyaFRHv8L+Xv8vUnenIR3U/Eb6y+TGYMaeT4tV8mY=)
2: F8Nk--QAXVfgvDbLL_6xQcd6OeY.roa (hash: B5PNCVqEZ3htMuoUo9SXwMTUf5kV2N6tfRSmohV4ztI=)
3: c-FXspGMrcqKWp-8Zul3YIpt9eE.crl (hash: SJtRuazum98DN1Tph3joIHYEcU/Fe/SlgWsYdc/FSOg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:df:58:9a:e6:b2:2d:1f:52:94:38:21:d6:45:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=087b032475cc491f5a5b9ff2741dbf4f17b3a6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f8:b9:ef:62:ae:fb:1d:d6:01:36:94:74:08:
69:30:3f:36:4e:2a:7b:6d:3c:0d:d5:fc:fe:46:b6:
98:d8:36:c8:50:93:5d:01:76:c4:76:03:43:cb:95:
a5:54:81:fe:ff:58:44:5e:3d:78:e6:05:8b:4c:e6:
62:bc:78:d9:cb:5f:72:02:e2:2e:3f:37:ff:36:c5:
a8:a4:b7:e0:39:07:57:4f:b2:79:4d:e1:8e:75:3e:
23:70:3f:cc:87:97:b9:f0:76:a4:05:92:8a:af:9c:
e3:ce:ce:14:33:c6:44:6a:47:4a:b1:4f:54:7f:25:
22:ee:c7:ef:21:b7:15:7d:a8:bd:d9:c9:67:04:58:
11:98:41:10:9d:53:0b:79:f1:6e:fd:23:69:d3:c6:
1d:54:57:74:3d:1e:c4:5e:ed:e4:53:21:7b:61:8e:
ed:1e:b0:de:d8:1f:63:77:6c:75:ad:1b:a5:7d:80:
08:35:95:ac:4c:88:84:e9:4f:5f:b8:a6:31:de:0e:
d2:18:2c:01:0e:bf:f5:21:71:20:32:84:ae:e9:62:
c8:df:69:3b:50:11:21:f4:85:65:e0:2f:5b:27:03:
94:d1:a7:43:37:87:1b:e7:9c:fc:17:32:37:94:98:
e5:dd:5e:d9:6b:ef:3f:27:07:af:76:e0:5c:13:64:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7B:03:24:75:CC:49:1F:5A:5B:9F:F2:74:1D:BF:4F:17:B3:A6:E3
X509v3 Authority Key Identifier:
keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b2:8f:e0:ae:a7:fe:39:ca:c5:41:f5:27:bf:eb:02:e5:a5:
a4:df:d7:b3:9f:81:5f:83:01:e8:17:67:37:90:29:50:8c:41:
95:69:6d:21:50:4e:15:9a:e9:06:08:4b:52:7c:d0:a8:37:25:
83:6c:67:8a:dc:0d:51:85:70:d1:1d:e3:9d:dd:df:01:a1:19:
a1:3b:51:90:53:5b:6c:3f:9a:9f:e7:6e:b4:cc:a1:5c:f9:f1:
36:6a:a0:aa:93:a2:37:6b:05:7d:cd:d8:85:6c:08:9e:59:05:
63:c2:4c:ef:6f:3d:80:18:5e:5f:ed:96:d6:5d:1e:d9:66:1b:
ef:56:1d:7a:19:2b:8b:52:e2:b6:3c:01:59:84:03:a3:d6:8a:
4a:6e:d8:d5:4e:48:55:1b:83:56:03:22:7f:c7:cb:fa:25:ac:
ea:f1:25:5a:d4:c7:1c:2c:a4:33:da:98:55:b8:09:af:d9:db:
f9:19:8a:a1:42:41:5a:ab:d1:a4:87:62:03:8f:17:e0:68:1a:
e3:ab:83:f8:71:2d:61:0b:8d:6d:eb:9b:e4:68:c2:01:e9:01:
74:29:b9:4a:51:ca:8f:32:3a:30:f5:4e:30:12:e4:ce:1d:c9:
4d:12:c6:d2:36:a5:db:16:06:41:72:ca:18:52:51:02:bf:32:
41:ee:63:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ct9YmuayLR9SlDgh1kVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZTE1N2IyOTE4Y2FkY2E4YTVhOWZiYzY2ZTk3NzYwOGE2
ZGY1ZTEwHhcNMjUwMTMxMTMwMDMyWhcNMjUwMjAxMTMwMDMyWjAzMTEwLwYDVQQD
EygwODdiMDMyNDc1Y2M0OTFmNWE1YjlmZjI3NDFkYmY0ZjE3YjNhNmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fi572Ku+x3WATaUdAhpMD82Tip7
bTwN1fz+RraY2DbIUJNdAXbEdgNDy5WlVIH+/1hEXj145gWLTOZivHjZy19yAuIu
Pzf/NsWopLfgOQdXT7J5TeGOdT4jcD/Mh5e58HakBZKKr5zjzs4UM8ZEakdKsU9U
fyUi7sfvIbcVfai92clnBFgRmEEQnVMLefFu/SNp08YdVFd0PR7EXu3kUyF7YY7t
HrDe2B9jd2x1rRulfYAINZWsTIiE6U9fuKYx3g7SGCwBDr/1IXEgMoSu6WLI32k7
UBEh9IVl4C9bJwOU0adDN4cb55z8FzI3lJjl3V7Za+8/JwevduBcE2Rv/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAh7AyR1zEkfWluf8nQdv08Xs6bjMB8GA1UdIwQY
MBaAFHPhV7KRjK3KilqfvGbpd2CKbfXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAt
MDBhMTU0YjhlY2IxLzEvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAtMDBhMTU0YjhlY2Ix
LzEvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbKP4K6n
/jnKxUH1J7/rAuWlpN/Xs5+BX4MB6BdnN5ApUIxBlWltIVBOFZrpBghLUnzQqDcl
g2xnitwNUYVw0R3jnd3fAaEZoTtRkFNbbD+an+dutMyhXPnxNmqgqpOiN2sFfc3Y
hWwInlkFY8JM7289gBheX+2W1l0e2WYb71Ydehkri1LitjwBWYQDo9aKSm7Y1U5I
VRuDVgMif8fL+iWs6vElWtTHHCykM9qYVbgJr9nb+RmKoUJBWqvRpIdiA48X4Gga
46uD+HEtYQuNbeub5GjCAekBdCm5SlHKjzI6MPVOMBLkzh3JTRLG0jal2xYGQXLK
GFJRAr8yQe5j8Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:32 2025 by rpki-client