Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
File: fD2KpDg1BKMa_0sAaBCga88DBa4.mft (raw, json)
Hash identifier: n3A9U4v6COm3D2IApz5q3gljjmUi4AlQV/fF4JdY+tg=
Subject key identifier: 04:20:40:32:3B:8B:AF:0C:4A:F8:B6:C6:BB:CA:3B:73:02:99:0E:19
Authority key identifier: 7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE
Certificate issuer: /CN=7c3d8aa4383504a31aff4b006810a06bcf0305ae
Certificate serial: 0194BC3BF657060FA06EFF2D55898BBF5BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
Manifest number: 1005
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: 8L2O5GlhNp_lrqBMRrzhkCl_FU4.roa (hash: MpUCXGi4iU4O/s2W0Ri/evmaR2tEREi873mtgHCWuJE=)
2: fD2KpDg1BKMa_0sAaBCga88DBa4.crl (hash: Q3WZxGTHTGPA2mYrJDr5UdW+WnZBgR9NcigUd+06WkA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f6:57:06:0f:a0:6e:ff:2d:55:89:8b:bf:5b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d8aa4383504a31aff4b006810a06bcf0305ae
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=042040323b8baf0c4af8b6c6bbca3b7302990e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:93:d2:1a:04:1c:07:c3:04:23:e3:3e:ca:f2:
7f:40:7f:97:5c:61:f2:13:54:f0:c8:42:b0:8d:b9:
9b:a9:6a:c3:06:27:9b:cc:95:56:dd:d6:85:41:b5:
a3:84:45:19:f9:9c:b6:75:bb:47:03:37:97:ca:36:
63:3f:17:ca:e1:1c:f6:48:25:43:9f:e9:d6:56:b4:
58:94:14:63:05:0f:a3:6a:a4:ad:e1:18:1a:38:47:
3d:55:a2:7a:21:5f:8f:37:83:b5:50:b9:ef:77:49:
e0:fa:0c:28:b2:e7:66:58:67:80:9b:61:a5:c6:44:
95:11:69:17:07:a2:79:e7:84:b6:75:eb:97:0e:9d:
dd:cc:c8:1b:65:ce:ce:28:6b:d8:40:6c:09:71:60:
f3:b5:7c:cc:53:e8:31:b0:a5:3b:a2:e2:61:49:a2:
e6:5e:9f:97:a3:3b:2f:30:76:e3:be:cc:c3:c0:fe:
0d:f8:42:80:0d:7d:24:b3:12:66:29:14:6e:8f:a4:
62:d3:5f:00:01:2d:9e:43:60:69:02:83:16:cd:30:
5f:97:7f:ce:71:e2:d4:6e:c2:d9:5e:33:ad:62:19:
c7:65:f4:cf:58:08:4d:61:82:84:03:25:2e:24:b8:
5f:4a:08:15:88:12:a0:a5:a0:a5:f8:35:fa:30:08:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:20:40:32:3B:8B:AF:0C:4A:F8:B6:C6:BB:CA:3B:73:02:99:0E:19
X509v3 Authority Key Identifier:
keyid:7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:41:33:70:23:4c:07:41:94:8c:40:a5:67:a7:54:18:03:b0:
4b:c5:30:c7:88:99:6d:4c:cc:f9:5b:9d:3d:cc:9e:c1:db:c7:
6a:cb:c8:3f:f5:31:0c:d9:8f:57:84:3d:ac:be:f1:4a:21:68:
5f:95:23:72:59:e2:17:0e:25:74:bd:97:a1:b1:2a:35:55:7d:
ee:de:d6:ed:3b:1c:0c:92:32:4c:2b:2a:9e:f9:c5:a9:84:47:
fe:3b:bb:d8:ab:5e:8d:a6:96:68:91:35:86:c4:73:0a:0f:fd:
94:0f:84:e3:84:c2:ab:4a:71:1c:0d:a6:71:d1:5e:6d:82:ea:
c8:4a:a9:e7:e4:99:e1:5e:71:d8:d9:f4:ac:60:57:ad:64:4e:
3a:09:fd:10:07:51:0f:13:b0:41:09:f0:72:2f:b3:4c:18:6c:
dd:95:77:5d:af:a3:2e:c1:91:1b:e8:64:b4:d0:15:7c:c4:65:
c2:d6:2d:f9:43:6f:5a:d6:bb:de:92:a4:59:b8:bd:c6:e7:f5:
57:f3:2b:24:45:ef:f5:01:3d:53:34:b1:d0:91:ce:44:ab:86:
1f:dc:75:e2:bf:89:16:de:94:51:2e:34:f7:c3:8b:0a:51:17:
e6:35:e9:69:1c:57:48:57:2f:89:47:93:48:60:3c:69:67:77:
a4:71:de:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/ZXBg+gbv8tVYmLv1uzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2Q4YWE0MzgzNTA0YTMxYWZmNGIwMDY4MTBhMDZiY2Yw
MzA1YWUwHhcNMjUwMTMxMTIwMDMzWhcNMjUwMjAxMTIwMDMzWjAzMTEwLwYDVQQD
EygwNDIwNDAzMjNiOGJhZjBjNGFmOGI2YzZiYmNhM2I3MzAyOTkwZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5PSGgQcB8MEI+M+yvJ/QH+XXGHy
E1TwyEKwjbmbqWrDBiebzJVW3daFQbWjhEUZ+Zy2dbtHAzeXyjZjPxfK4Rz2SCVD
n+nWVrRYlBRjBQ+jaqSt4RgaOEc9VaJ6IV+PN4O1ULnvd0ng+gwosudmWGeAm2Gl
xkSVEWkXB6J554S2deuXDp3dzMgbZc7OKGvYQGwJcWDztXzMU+gxsKU7ouJhSaLm
Xp+XozsvMHbjvszDwP4N+EKADX0ksxJmKRRuj6Ri018AAS2eQ2BpAoMWzTBfl3/O
ceLUbsLZXjOtYhnHZfTPWAhNYYKEAyUuJLhfSggViBKgpaCl+DX6MAhXGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQgQDI7i68MSvi2xrvKO3MCmQ4ZMB8GA1UdIwQY
MBaAFHw9iqQ4NQSjGv9LAGgQoGvPAwWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQyS3BEZzFCS01hXzBzQWFCQ2dhODhEQmE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hNDJlOTQtMTViNy00MjcyLTllYjAt
OTlkYjIxMjQ0ZWRmLzEvZkQyS3BEZzFCS01hXzBzQWFCQ2dhODhEQmE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9hNDJlOTQtMTViNy00MjcyLTllYjAtOTlkYjIxMjQ0ZWRm
LzEvZkQyS3BEZzFCS01hXzBzQWFCQ2dhODhEQmE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEEzcCNM
B0GUjEClZ6dUGAOwS8Uwx4iZbUzM+VudPcyewdvHasvIP/UxDNmPV4Q9rL7xSiFo
X5UjclniFw4ldL2XobEqNVV97t7W7TscDJIyTCsqnvnFqYRH/ju72KtejaaWaJE1
hsRzCg/9lA+E44TCq0pxHA2mcdFebYLqyEqp5+SZ4V5x2Nn0rGBXrWROOgn9EAdR
DxOwQQnwci+zTBhs3ZV3Xa+jLsGRG+hktNAVfMRlwtYt+UNvWta73pKkWbi9xuf1
V/MrJEXv9QE9UzSx0JHORKuGH9x14r+JFt6UUS4098OLClEX5jXpaRxXSFcviUeT
SGA8aWd3pHHeXw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:40 2025 by rpki-client