Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
File: 1-geuOnkY-TLqJMwVa0tum6VYG_o.mft (raw, json)
Hash identifier: c1bLnmBcIeu3ShieA8sS+vBgoa6pRUb9P54OiVWWchc=
Subject key identifier: B0:7F:65:4F:AF:01:62:53:4B:E2:1F:54:24:9E:E8:9B:EC:64:C3:A8
Authority key identifier: FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
Certificate issuer: /CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Certificate serial: 0194BCE0BEBDCBA5C8B5E7302977271407EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
Manifest number: 0138
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: 1-geuOnkY-TLqJMwVa0tum6VYG_o.crl (hash: XiDN/dJaU89zx1sNzzxrqU8u4z2Fn/qDuuwGIhAIBkg=)
2: rs3gWt450Dc5VAdX-LPh4FxzPfI.roa (hash: yHX556DQVgZDjr2xTPApsPlrmF99zYD+miBAgNn4a5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:be:bd:cb:a5:c8:b5:e7:30:29:77:27:14:07:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=b07f654faf0162534be21f54249ee89bec64c3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:ff:bf:96:c2:63:d0:72:d5:d0:97:c1:01:
9e:dd:d1:1e:10:dd:c6:4a:99:9f:ce:2f:0e:a9:ce:
9b:ea:61:85:9a:e4:47:27:1b:99:bd:82:28:27:2c:
bb:45:2e:63:29:d0:3c:b5:d7:8b:1d:bc:15:81:7c:
b2:40:bf:c8:a5:48:6a:81:7a:f5:10:c3:3b:89:9e:
59:c3:92:9d:82:53:fb:8d:8e:e9:7f:fd:2d:a5:ee:
d7:82:26:16:e3:8d:2d:67:90:c9:46:b5:10:cd:ac:
19:7e:a9:73:a1:90:a3:9d:43:5e:f4:69:9f:db:c5:
fc:d8:9a:5b:19:5c:95:f4:c3:bd:72:e9:c1:d9:e9:
7e:78:48:c5:d2:6d:83:3e:73:71:eb:85:a2:6c:79:
f0:1f:d3:ae:9f:8a:a5:0d:f5:a7:1e:31:c7:82:44:
64:b1:86:f2:c0:d5:a8:47:34:84:33:f7:96:c4:73:
dd:3c:a5:8b:5a:94:2d:1c:d3:d7:f8:64:29:f4:7a:
7c:53:48:75:cb:9d:de:36:fd:75:11:c7:b1:a1:82:
8a:2e:f7:f9:7d:df:30:35:27:bd:e2:91:47:29:74:
78:1c:e8:54:87:2c:58:22:b5:6e:e5:39:3c:ba:c1:
d5:5c:12:35:f7:30:6a:25:fa:e6:65:5e:fb:02:66:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7F:65:4F:AF:01:62:53:4B:E2:1F:54:24:9E:E8:9B:EC:64:C3:A8
X509v3 Authority Key Identifier:
keyid:FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:33:aa:40:44:0e:41:68:34:12:f3:e1:3b:04:40:1d:5b:ac:
10:24:b3:ec:0f:13:ae:46:d3:e9:c3:a3:a9:87:33:4b:3d:9f:
db:0c:de:9a:17:d2:f9:fa:45:84:90:20:54:71:42:eb:e6:f6:
0e:4b:ba:9c:93:7f:c5:6f:a6:6f:4b:d2:06:d6:b7:e1:ed:5c:
5e:28:81:92:ed:b8:e6:ec:27:99:64:5f:e9:65:82:62:d1:0e:
53:f1:2c:9f:5c:c3:b3:2e:82:d5:34:04:0f:4e:65:64:7c:00:
30:9d:18:db:73:c4:76:60:66:66:a3:ea:52:aa:8b:e5:11:7b:
3d:75:a9:36:cb:66:b8:65:9f:a2:0a:b3:ad:24:00:98:58:3a:
68:b3:4b:be:55:b3:ec:52:82:a1:ce:f7:23:4a:ec:be:a3:a3:
99:d5:71:f4:a4:28:b1:1c:dd:01:d8:40:1b:76:c9:05:0f:ac:
a4:e0:ac:5b:4c:e3:3b:71:78:d3:e4:a5:c8:40:2c:b7:3c:a3:
dd:5e:6b:d5:d9:11:be:83:d3:41:3a:ff:16:9d:c2:57:38:4d:
11:2c:24:36:4a:1a:b7:2e:9e:56:d7:a9:5c:42:75:ae:ce:b1:
d5:2e:f2:de:34:a4:16:1f:be:88:b9:e0:fe:7f:df:42:ad:d1:
d9:dd:9c:36
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS84L69y6XItecwKXcnFAfvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMDdhZTNhNzkxOGY5MzJlYTI0Y2MxNTZiNGI2ZTliYTU1
ODFiZmEwHhcNMjUwMTMxMTUwMDMyWhcNMjUwMjAxMTUwMDMyWjAzMTEwLwYDVQQD
EyhiMDdmNjU0ZmFmMDE2MjUzNGJlMjFmNTQyNDllZTg5YmVjNjRjM2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsj/v5bCY9By1dCXwQGe3dEeEN3G
Spmfzi8Oqc6b6mGFmuRHJxuZvYIoJyy7RS5jKdA8tdeLHbwVgXyyQL/IpUhqgXr1
EMM7iZ5Zw5KdglP7jY7pf/0tpe7XgiYW440tZ5DJRrUQzawZfqlzoZCjnUNe9Gmf
28X82JpbGVyV9MO9cunB2el+eEjF0m2DPnNx64WibHnwH9Oun4qlDfWnHjHHgkRk
sYbywNWoRzSEM/eWxHPdPKWLWpQtHNPX+GQp9Hp8U0h1y53eNv11EcexoYKKLvf5
fd8wNSe94pFHKXR4HOhUhyxYIrVu5Tk8usHVXBI19zBqJfrmZV77AmaVTQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLB/ZU+vAWJTS+IfVCSe6JvsZMOoMB8GA1UdIwQY
MBaAFPoHrjp5GPky6iTMFWtLbpulWBv6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1nZXVPbmtZLVRMcUpNd1ZhMHR1bTZWWUdfby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvYTk3ZGMwLTU2ODUtNGY2ZS05ODdm
LTJhNWE2ZTJkNzk0OC8xLzEtZ2V1T25rWS1UTHFKTXdWYTB0dW02VllHX28ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk1L2E5N2RjMC01Njg1LTRmNmUtOTg3Zi0yYTVhNmUyZDc5
NDgvMS8xLWdldU9ua1ktVExxSk13VmEwdHVtNlZZR19vLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzOq
QEQOQWg0EvPhOwRAHVusECSz7A8TrkbT6cOjqYczSz2f2wzemhfS+fpFhJAgVHFC
6+b2Dku6nJN/xW+mb0vSBta34e1cXiiBku245uwnmWRf6WWCYtEOU/Esn1zDsy6C
1TQED05lZHwAMJ0Y23PEdmBmZqPqUqqL5RF7PXWpNstmuGWfogqzrSQAmFg6aLNL
vlWz7FKCoc73I0rsvqOjmdVx9KQosRzdAdhAG3bJBQ+spOCsW0zjO3F40+SlyEAs
tzyj3V5r1dkRvoPTQTr/Fp3CVzhNESwkNkoaty6eVtepXEJ1rs6x1S7y3jSkFh++
iLng/n/fQq3R2d2cNg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:54 2025 by rpki-client