Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
File: FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft (raw, json)
Hash identifier: 1Ngyez4E8UCCqDGEhcPlyMW3+qvydFgqYjOAIcuz2pQ=
Subject key identifier: 29:F7:30:E2:11:B7:49:B4:7F:BB:17:53:A0:6E:1F:02:05:16:9B:95
Authority key identifier: 15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
Certificate issuer: /CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Certificate serial: 0194BC730BCFD9FD69830A56E7E0D8EF36F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
Manifest number: 0CB0
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl (hash: ctjBflGx29XSNSQGGThqEFHuazSyfbBmguOLydmL1NI=)
2: saR7C8jPhSxxp1U0l0fw1iLpggA.roa (hash: YzILylPp9VZQ/IVzqGiVAC4yp8xtNGEqB65NyOh5ynQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0b:cf:d9:fd:69:83:0a:56:e7:e0:d8:ef:36:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=29f730e211b749b47fbb1753a06e1f0205169b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:7e:c0:d8:69:d4:d7:42:ee:1c:eb:8f:31:
27:b8:2d:d2:e7:81:5d:98:20:b8:87:b7:aa:e4:c7:
6c:b6:fe:20:d8:dd:1b:bf:de:bd:1c:ea:5c:bb:dd:
4e:8e:e7:65:3b:00:21:24:ac:77:7b:e5:f2:6f:49:
59:96:0b:5b:80:9e:a7:e2:f3:06:62:06:d2:f3:18:
c9:64:b3:bf:91:24:56:d3:78:3a:c7:2c:c7:af:1d:
be:94:85:c5:01:6f:85:e0:dc:90:2d:05:9f:5f:f2:
9b:1d:f5:76:6d:03:17:e1:4c:f3:61:03:87:56:2a:
01:5e:16:63:6b:43:ad:10:11:0b:ef:95:23:f2:ab:
9c:34:be:c5:0c:b3:4c:46:e4:37:39:8f:6d:91:ae:
3c:c3:0a:f2:fc:8b:2a:f1:42:c9:c7:8f:12:32:d1:
93:28:ba:26:c5:ef:77:da:7f:a7:15:aa:e5:ae:de:
8b:f1:e8:03:c8:fa:24:4c:0d:21:83:00:8d:ee:c9:
53:09:06:a4:8b:86:eb:cc:a0:e6:ad:b2:0c:f5:2f:
63:27:e2:02:b9:66:b8:86:58:f5:2c:d5:03:0e:02:
f6:b4:2b:3b:5f:1f:a7:2a:15:5a:21:90:eb:a3:b9:
e8:b9:7c:3b:81:c1:12:65:ef:c0:4a:af:25:70:d2:
7d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F7:30:E2:11:B7:49:B4:7F:BB:17:53:A0:6E:1F:02:05:16:9B:95
X509v3 Authority Key Identifier:
keyid:15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b9:3c:b5:f8:c0:06:e0:84:d3:4b:ff:2d:06:e1:82:79:f7:
bc:a9:4b:ed:2f:a5:f8:a6:a4:42:3c:80:d7:e6:31:3b:1f:57:
b5:77:df:ac:af:8b:4a:5a:78:e8:20:40:73:24:de:80:14:c5:
03:00:66:0a:c2:2b:3d:8d:95:8d:df:5b:10:ee:3b:38:6f:c6:
e8:9d:5e:af:e6:b5:05:a0:8a:37:5a:23:f1:d8:af:11:e8:f2:
61:10:de:bb:cc:fe:20:21:93:a1:88:6f:d6:75:e4:fc:da:a1:
21:c7:09:b2:64:21:fc:ad:af:15:50:22:47:61:45:6f:52:f2:
87:48:87:6f:72:63:71:4d:ec:57:62:67:f0:52:a6:bb:21:12:
16:03:8d:64:0e:dd:9c:0c:dd:78:39:e7:a9:d0:b2:4a:db:6b:
f7:cb:9b:a7:19:b3:b7:bc:a9:45:bf:ac:6f:de:37:f5:7e:34:
97:de:0e:44:fc:83:73:20:31:d8:2f:d8:bc:2c:12:4e:3a:c5:
fe:4c:b7:cb:f1:90:df:81:36:5d:b8:c2:e3:e6:02:65:09:5b:
dd:eb:91:eb:bf:09:b2:c2:fd:ef:29:ee:30:95:9b:7a:37:9b:
59:b8:77:31:18:74:05:80:30:17:15:e7:38:07:15:bd:cb:81:
28:49:a0:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cwvP2f1pgwpW5+DY7zb5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjIxNWFkMjc0ZjM1YjI0YWM2YTA2MGIyZjA5Mzk5NzEx
YmMxN2YwHhcNMjUwMTMxMTMwMDQzWhcNMjUwMjAxMTMwMDQzWjAzMTEwLwYDVQQD
EygyOWY3MzBlMjExYjc0OWI0N2ZiYjE3NTNhMDZlMWYwMjA1MTY5Yjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtd+wNhp1NdC7hzrjzEnuC3S54Fd
mCC4h7eq5Mdstv4g2N0bv969HOpcu91OjudlOwAhJKx3e+Xyb0lZlgtbgJ6n4vMG
YgbS8xjJZLO/kSRW03g6xyzHrx2+lIXFAW+F4NyQLQWfX/KbHfV2bQMX4UzzYQOH
VioBXhZja0OtEBEL75Uj8qucNL7FDLNMRuQ3OY9tka48wwry/Isq8ULJx48SMtGT
KLomxe932n+nFarlrt6L8egDyPokTA0hgwCN7slTCQaki4brzKDmrbIM9S9jJ+IC
uWa4hlj1LNUDDgL2tCs7Xx+nKhVaIZDro7nouXw7gcESZe/ASq8lcNJ9OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCn3MOIRt0m0f7sXU6BuHwIFFpuVMB8GA1UdIwQY
MBaAFBXyFa0nTzWySsagYLLwk5lxG8F/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZJVnJTZFBOYkpLeHFCZ3N2Q1RtWEVid1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS85M2UyMGYtODg3OC00MDU4LThlMDEt
YWQwMWUzMGE2MWIyLzEvRmZJVnJTZFBOYkpLeHFCZ3N2Q1RtWEVid1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS85M2UyMGYtODg3OC00MDU4LThlMDEtYWQwMWUzMGE2MWIy
LzEvRmZJVnJTZFBOYkpLeHFCZ3N2Q1RtWEVid1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbk8tfjA
BuCE00v/LQbhgnn3vKlL7S+l+KakQjyA1+YxOx9XtXffrK+LSlp46CBAcyTegBTF
AwBmCsIrPY2Vjd9bEO47OG/G6J1er+a1BaCKN1oj8divEejyYRDeu8z+ICGToYhv
1nXk/NqhIccJsmQh/K2vFVAiR2FFb1Lyh0iHb3JjcU3sV2Jn8FKmuyESFgONZA7d
nAzdeDnnqdCySttr98ubpxmzt7ypRb+sb9439X40l94ORPyDcyAx2C/YvCwSTjrF
/ky3y/GQ34E2XbjC4+YCZQlb3euR678JssL97ynuMJWbejebWbh3MRh0BYAwFxXn
OAcVvcuBKEmgjg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:03 2025 by rpki-client