Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
File: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft (raw, json)
Hash identifier: wdS60n54SO5bj9EdI8NoeX/TB2B2CLgItpYcM5mk0qg=
Subject key identifier: A5:61:B8:87:33:D5:4D:45:19:26:0C:57:52:A8:E6:EA:5E:26:0B:42
Authority key identifier: FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
Certificate issuer: /CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Certificate serial: 0194BCA9D805BB6D6AD6B1FBA932CCEC16EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl (hash: s6KlCN2O/qqXJtnLjZM78Y8+hgy9QSBi78NIJOS1h5w=)
2: IU1kfq4weOzN7OdLshfRhNPWBJA.roa (hash: dD5C1zuWgoU/8heEjF9DtJJhbPxUK71KXWz/l+dejRI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d8:05:bb:6d:6a:d6:b1:fb:a9:32:cc:ec:16:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=a561b88733d54d4519260c5752a8e6ea5e260b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ba:bf:b1:ee:85:d5:a6:4c:62:80:84:f3:c1:
35:45:12:5e:bf:b2:8c:92:da:7e:04:be:15:db:08:
b4:60:c7:39:5f:f5:1f:0e:7f:56:80:94:85:1f:55:
91:da:4d:eb:51:9e:43:b1:d9:b7:0a:17:f2:4c:9c:
fa:14:fc:4e:f6:2b:7e:53:41:db:8b:5b:67:ec:03:
c1:86:06:b0:9e:02:4c:ff:39:23:6d:df:6b:9e:03:
97:5d:43:30:1b:fd:00:cb:f4:7a:87:0f:19:19:f5:
a8:e0:a8:5c:2b:ef:6f:9d:ab:f0:82:a8:2a:64:7b:
43:52:2b:b2:b8:6a:a1:96:dd:3d:5c:92:a7:e6:2c:
76:ec:9f:d0:0a:82:59:e6:3b:e1:19:ef:c0:16:24:
d6:6a:b1:09:85:b3:80:94:c4:23:2c:a3:be:52:83:
40:10:50:05:72:7b:1b:64:9c:c6:cb:a3:55:a6:46:
24:79:f9:d9:d0:17:f7:49:8d:bd:e3:28:3a:96:1b:
39:97:56:70:fc:5c:38:e6:ad:f0:b6:53:7a:9b:66:
20:13:d4:5d:35:29:79:8a:ef:4a:a7:4f:6e:1d:f4:
e9:65:b2:c5:14:44:f9:68:84:9a:18:6d:e8:86:68:
f7:27:85:20:7c:ac:70:82:3d:2d:7c:2c:a6:68:24:
ba:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:61:B8:87:33:D5:4D:45:19:26:0C:57:52:A8:E6:EA:5E:26:0B:42
X509v3 Authority Key Identifier:
keyid:FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1d:b0:62:3c:91:48:78:14:58:4f:22:1f:86:34:ba:de:50:
cc:a4:ac:f4:20:bd:04:6c:79:b1:37:0a:6a:c2:a2:fe:d2:8b:
54:59:cb:14:0c:68:b0:70:7b:be:53:62:61:a9:94:8d:60:de:
59:9b:d4:6e:a3:8d:dd:90:e3:4f:36:1b:c7:c1:5d:86:d2:77:
ca:c9:43:40:e8:82:20:fb:3d:b4:bc:cb:aa:6c:52:75:f8:99:
ac:78:a0:89:b8:f0:15:c9:ec:6e:9f:58:9e:db:a1:0b:b3:38:
8d:e2:73:a6:82:bd:0a:11:d8:e4:db:70:e2:f8:1a:b9:f3:82:
7d:be:a2:ea:3c:02:a8:81:e1:c3:fb:c4:54:bf:fb:7a:f0:1e:
bd:b0:37:a5:f6:94:46:b8:1c:2c:68:4e:22:a2:b5:57:ac:18:
0e:ce:6f:9e:6a:61:e1:39:01:60:e8:8e:16:1d:4c:9f:02:45:
37:8f:48:43:26:50:47:b8:a8:be:0b:8b:44:41:f3:32:db:56:
8d:c3:ac:04:4e:d1:5b:0b:2f:10:c2:86:47:57:4d:31:d9:7d:
99:59:d8:83:ba:30:3b:6f:63:9d:fe:06:31:35:82:82:3d:85:
5b:7f:8a:5e:b6:54:bc:06:a1:79:38:46:cb:11:ef:97:93:27:
18:80:fa:c8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS8qdgFu21q1rH7qTLM7BbvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYzBmMGRhMzlhMjJhNzlmODBjMWYzNzliNjY4YjkwZjZk
NzQ3MDgwHhcNMjUwMTMxMTQwMDM0WhcNMjUwMjAxMTQwMDM0WjAzMTEwLwYDVQQD
EyhhNTYxYjg4NzMzZDU0ZDQ1MTkyNjBjNTc1MmE4ZTZlYTVlMjYwYjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bq/se6F1aZMYoCE88E1RRJev7KM
ktp+BL4V2wi0YMc5X/UfDn9WgJSFH1WR2k3rUZ5Dsdm3ChfyTJz6FPxO9it+U0Hb
i1tn7APBhgawngJM/zkjbd9rngOXXUMwG/0Ay/R6hw8ZGfWo4KhcK+9vnavwgqgq
ZHtDUiuyuGqhlt09XJKn5ix27J/QCoJZ5jvhGe/AFiTWarEJhbOAlMQjLKO+UoNA
EFAFcnsbZJzGy6NVpkYkefnZ0Bf3SY294yg6lhs5l1Zw/Fw45q3wtlN6m2YgE9Rd
NSl5iu9Kp09uHfTpZbLFFET5aISaGG3ohmj3J4UgfKxwgj0tfCymaCS61wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKVhuIcz1U1FGSYMV1Ko5upeJgtCMB8GA1UdIwQY
MBaAFPrA8No5oip5+AwfN5tmi5D210cIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zRHcyam1pS25uNERCODNtMmFMa1BiWFJ3Zy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvODZlZDViLWJjYzEtNGQwMy05NWRh
LWI5OWQ0ZDAwZjgzMS8xLzEtc0R3MmptaUtubjREQjgzbTJhTGtQYlhSd2cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg4Lzg2ZWQ1Yi1iY2MxLTRkMDMtOTVkYS1iOTlkNGQwMGY4
MzEvMS8xLXNEdzJqbWlLbm40REI4M20yYUxrUGJYUndnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATh2w
YjyRSHgUWE8iH4Y0ut5QzKSs9CC9BGx5sTcKasKi/tKLVFnLFAxosHB7vlNiYamU
jWDeWZvUbqON3ZDjTzYbx8FdhtJ3yslDQOiCIPs9tLzLqmxSdfiZrHigibjwFcns
bp9YntuhC7M4jeJzpoK9ChHY5Ntw4vgaufOCfb6i6jwCqIHhw/vEVL/7evAevbA3
pfaURrgcLGhOIqK1V6wYDs5vnmph4TkBYOiOFh1MnwJFN49IQyZQR7iovguLREHz
MttWjcOsBE7RWwsvEMKGR1dNMdl9mVnYg7owO29jnf4GMTWCgj2FW3+KXrZUvAah
eThGyxHvl5MnGID6yA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:56 2025 by rpki-client