Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
File: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft (raw, json)
Hash identifier: qfqiiTu5FjG0UDFwj77Zir3rcnevb6nErx/AX1MsChc=
Subject key identifier: FD:0E:EB:5A:2B:93:CE:DC:DB:54:6B:29:4F:1D:BD:18:EA:3D:A0:C0
Authority key identifier: 3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
Certificate issuer: /CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Certificate serial: 0194BC3C98081A91E56D6A8BD3F6C4CB76EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl (hash: Ej39WP0HM/+J8GwZMN+5bkEYxxb+oxeVoEeSAM4UlfY=)
2: T32ivR4pPT16GdJvEk3qcae9a-0.roa (hash: Ar4IuLNK/JbYrWnO/0jZmTGQAGYJO2SXqHxbBEnLR+A=)
3: uXJUN0yqzJ3TaQzP9cjAtVVx7hs.roa (hash: suoYCzad2UWOr/Nnpp8SMjjTemdQYZDDmDi97rBzGqg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:98:08:1a:91:e5:6d:6a:8b:d3:f6:c4:cb:76:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=fd0eeb5a2b93cedcdb546b294f1dbd18ea3da0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:68:0b:a6:e7:d3:af:c0:2a:ed:e6:6a:57:
e8:f7:69:bf:d2:e9:17:92:47:a7:3a:3a:de:64:b8:
83:3e:1d:35:4f:d4:47:0f:b9:3e:15:7a:eb:89:23:
a2:8c:1c:4a:24:3b:b4:e7:62:6d:7a:d1:28:ba:3d:
79:56:06:6a:5f:01:3d:03:d9:19:bf:02:61:8b:d1:
43:4f:9f:75:dc:d1:ab:07:e1:65:6a:b5:6c:33:6a:
59:5d:98:c0:7a:bd:c7:61:76:c7:2c:14:cd:61:6d:
5e:97:43:7d:8e:11:a8:2b:42:73:36:af:8a:bf:80:
f2:9d:5e:87:76:a3:bf:33:ed:1c:05:bf:db:c1:fb:
d0:36:e3:2b:5e:11:c6:3c:fc:71:bb:20:52:54:74:
3b:43:cc:83:86:99:ac:d9:24:9c:1d:36:50:0b:dd:
6d:f4:e8:91:44:eb:d8:d6:41:f2:e7:1c:85:96:47:
4c:83:60:70:cb:08:74:8f:7b:6c:6a:cf:67:da:9e:
4c:ec:36:13:b2:c2:b7:bd:26:4c:be:09:3a:51:99:
ae:dd:cf:98:30:05:60:d7:76:b9:1d:20:98:39:c1:
bb:b7:93:e9:a5:b3:3e:88:c9:98:bc:4c:21:6a:e6:
0d:c0:d8:f7:25:47:e9:77:c1:de:97:a5:9f:7a:d0:
23:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0E:EB:5A:2B:93:CE:DC:DB:54:6B:29:4F:1D:BD:18:EA:3D:A0:C0
X509v3 Authority Key Identifier:
keyid:3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:01:98:89:0a:bf:33:86:da:db:e8:76:fa:42:8f:22:ac:66:
8f:3e:32:6c:a1:a7:35:00:eb:3b:fb:9d:19:13:6f:85:39:d6:
c1:7e:c4:2c:84:b1:3a:4f:00:22:10:a2:ad:35:81:15:7a:70:
75:aa:df:15:27:62:db:f8:d4:77:54:b8:34:57:43:c2:af:82:
0c:94:40:04:5f:a8:5e:1e:18:24:bf:9e:d2:17:d7:d1:94:da:
0f:56:04:58:a9:ab:7b:17:b1:a1:ab:72:f6:10:51:26:90:80:
1b:bf:4b:79:f0:c6:d1:d6:cb:84:b8:75:f5:9c:ff:a3:d6:af:
4c:eb:80:84:0a:58:8a:ae:15:91:70:33:8f:d0:04:5a:22:d9:
f4:34:44:8c:ee:50:f2:70:99:15:74:34:35:fb:61:68:24:32:
c3:0a:74:a4:3e:6d:c9:81:59:78:20:b6:23:0f:64:52:91:4c:
38:51:cb:db:59:41:68:08:a5:0b:30:74:3b:c1:8b:8b:8c:94:
99:50:ea:8d:67:4e:bc:d6:0c:61:6f:fb:b5:78:19:e7:97:8c:
21:62:9a:53:54:c8:33:f9:dc:1f:91:fe:b6:f6:39:a6:35:5b:
ef:da:ef:95:49:ce:f8:bd:95:04:80:e8:2e:71:1d:5a:f1:2a:
cf:16:17:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJgIGpHlbWqL0/bEy3buMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOTQ3YzRmZDIzOTZkOWVkYjhiYzQ1NDQwNWU1NzU1OGQ4
Yjk1MDIwHhcNMjUwMTMxMTIwMTE1WhcNMjUwMjAxMTIwMTE1WjAzMTEwLwYDVQQD
EyhmZDBlZWI1YTJiOTNjZWRjZGI1NDZiMjk0ZjFkYmQxOGVhM2RhMGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6loC6bn06/AKu3malfo92m/0ukX
kkenOjreZLiDPh01T9RHD7k+FXrriSOijBxKJDu052JtetEouj15VgZqXwE9A9kZ
vwJhi9FDT5913NGrB+FlarVsM2pZXZjAer3HYXbHLBTNYW1el0N9jhGoK0JzNq+K
v4DynV6HdqO/M+0cBb/bwfvQNuMrXhHGPPxxuyBSVHQ7Q8yDhpms2SScHTZQC91t
9OiRROvY1kHy5xyFlkdMg2Bwywh0j3tsas9n2p5M7DYTssK3vSZMvgk6UZmu3c+Y
MAVg13a5HSCYOcG7t5PppbM+iMmYvEwhauYNwNj3JUfpd8Hel6WfetAj8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0O61ork87c21RrKU8dvRjqPaDAMB8GA1UdIwQY
MBaAFD+UfE/SOW2e24vEVEBeV1WNi5UCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVSOFQ5STViWjdiaThSVVFGNVhWWTJMbFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOWI0NTAtNzI5ZC00OGRlLWFiOGYt
Y2VjNDBlNDI1MjY0LzEvUDVSOFQ5STViWjdiaThSVVFGNVhWWTJMbFFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kOWI0NTAtNzI5ZC00OGRlLWFiOGYtY2VjNDBlNDI1MjY0
LzEvUDVSOFQ5STViWjdiaThSVVFGNVhWWTJMbFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAGYiQq/
M4ba2+h2+kKPIqxmjz4ybKGnNQDrO/udGRNvhTnWwX7ELISxOk8AIhCirTWBFXpw
darfFSdi2/jUd1S4NFdDwq+CDJRABF+oXh4YJL+e0hfX0ZTaD1YEWKmrexexoaty
9hBRJpCAG79LefDG0dbLhLh19Zz/o9avTOuAhApYiq4VkXAzj9AEWiLZ9DREjO5Q
8nCZFXQ0NfthaCQywwp0pD5tyYFZeCC2Iw9kUpFMOFHL21lBaAilCzB0O8GLi4yU
mVDqjWdOvNYMYW/7tXgZ55eMIWKaU1TIM/ncH5H+tvY5pjVb79rvlUnO+L2VBIDo
LnEdWvEqzxYXEQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:20 2025 by rpki-client