Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
File: F34R9SM-kzmZoqDGiQP8J1rkWeY.mft (raw, json)
Hash identifier: F/DBXqe5sclRWp0/0LSljaKH4SVYqIci8cSqVsCEtTE=
Subject key identifier: 48:D4:A6:F2:EC:F8:D4:81:D8:95:2C:98:79:D9:B8:23:47:D2:EF:3E
Authority key identifier: 17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
Certificate issuer: /CN=177e11f5233e933999a2a0c68903fc275ae459e6
Certificate serial: 0194BC3C7CC8BF681D02B20060E62132C472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
Manifest number: 0A5B
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: F34R9SM-kzmZoqDGiQP8J1rkWeY.crl (hash: QSGT9Igy4oVs/gS8coamOgn4OCeDJFHyEtAXDOeo1Bw=)
2: V-SPBonH-GE9ewbFSO5NODHxd8U.roa (hash: pNam+wwq47C4Qg+Kyg4fIGCIT+ztn7vo1w+K7kvIl84=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7c:c8:bf:68:1d:02:b2:00:60:e6:21:32:c4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177e11f5233e933999a2a0c68903fc275ae459e6
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=48d4a6f2ecf8d481d8952c9879d9b82347d2ef3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:ba:b5:47:2c:fe:84:f3:76:34:98:c0:e9:
d9:0e:f3:e9:33:a3:b6:93:14:a6:bd:ff:78:7c:1f:
8d:f3:10:88:c3:67:ed:c1:96:25:bb:02:97:3e:fe:
84:0d:18:72:42:3d:08:f3:2f:31:80:20:d3:d7:99:
31:e6:e2:72:da:98:b3:0e:3f:67:32:50:f3:48:17:
1c:20:bc:86:fe:c1:b1:8d:6d:9a:d6:da:02:b2:46:
66:fa:af:a9:20:d6:3c:96:18:8f:0f:27:e0:66:fc:
84:b4:aa:91:2b:97:f7:7a:a6:11:f0:ba:c2:98:e6:
a3:bf:c3:3e:37:ac:63:13:e3:91:06:7e:ac:98:cd:
f5:5e:4f:dd:95:2f:e7:7b:00:a1:d7:03:3e:ec:48:
30:98:ba:7e:f2:ed:9e:f4:e9:5d:d4:48:0d:4b:db:
d7:52:3b:3a:20:65:9d:46:13:29:93:b8:94:77:d1:
7f:45:4c:86:d3:e1:c6:51:b5:55:ac:5e:4c:9d:ba:
a0:01:93:bc:9d:ba:69:51:06:67:92:91:54:5e:8e:
5a:9a:04:ef:7a:1a:d0:de:df:ab:6e:ba:ce:cf:4b:
90:60:cb:e8:fb:76:2b:9b:92:00:9a:5a:7c:e8:40:
da:71:b9:e3:a2:28:6b:f0:44:80:18:d4:11:d9:0a:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D4:A6:F2:EC:F8:D4:81:D8:95:2C:98:79:D9:B8:23:47:D2:EF:3E
X509v3 Authority Key Identifier:
keyid:17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:24:6c:ee:1f:4f:ae:f7:4d:7d:a1:ca:96:45:a4:f5:4a:82:
44:a7:d2:b4:fc:7d:ff:f5:80:83:6e:d8:20:b4:5a:cf:11:45:
24:fd:f9:ef:43:42:4f:d8:61:a0:e7:5c:c9:75:32:bf:16:a1:
5c:95:01:38:b5:f7:43:3c:bc:79:62:07:65:7f:3f:3f:c0:61:
4d:83:b5:1a:98:09:ae:31:05:58:d2:80:28:8f:35:5c:be:26:
46:6a:ed:a9:fe:b0:08:72:54:77:66:e0:83:d3:2a:91:aa:7d:
17:3f:1b:5e:38:21:04:ce:7f:58:57:1e:fe:62:fb:2a:78:fa:
29:d9:57:2c:44:1c:de:ef:d8:16:d4:0b:0d:62:8b:a8:ec:e4:
57:83:2c:ca:fb:52:10:ba:af:31:e6:f0:e9:40:fc:83:b7:24:
93:1e:f9:71:78:40:63:14:18:30:6d:7c:a1:97:0f:c3:81:a5:
ad:b1:48:20:3d:42:72:0f:5f:6c:18:cb:44:5e:64:6e:ae:d7:
27:71:d1:63:55:0f:15:32:dc:e3:07:ac:cd:02:28:5a:11:49:
26:8c:8e:2b:e6:0c:cb:b5:2e:8f:5c:2a:d2:c7:de:cb:ca:be:
0a:5b:59:d3:58:48:c4:67:38:77:88:2f:4c:70:13:b8:4f:0e:
6a:a8:d6:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PHzIv2gdArIAYOYhMsRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3N2UxMWY1MjMzZTkzMzk5OWEyYTBjNjg5MDNmYzI3NWFl
NDU5ZTYwHhcNMjUwMTMxMTIwMTA4WhcNMjUwMjAxMTIwMTA4WjAzMTEwLwYDVQQD
Eyg0OGQ0YTZmMmVjZjhkNDgxZDg5NTJjOTg3OWQ5YjgyMzQ3ZDJlZjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmu6tUcs/oTzdjSYwOnZDvPpM6O2
kxSmvf94fB+N8xCIw2ftwZYluwKXPv6EDRhyQj0I8y8xgCDT15kx5uJy2pizDj9n
MlDzSBccILyG/sGxjW2a1toCskZm+q+pINY8lhiPDyfgZvyEtKqRK5f3eqYR8LrC
mOajv8M+N6xjE+ORBn6smM31Xk/dlS/newCh1wM+7EgwmLp+8u2e9Old1EgNS9vX
Ujs6IGWdRhMpk7iUd9F/RUyG0+HGUbVVrF5MnbqgAZO8nbppUQZnkpFUXo5amgTv
ehrQ3t+rbrrOz0uQYMvo+3Yrm5IAmlp86EDacbnjoihr8ESAGNQR2QqILQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjUpvLs+NSB2JUsmHnZuCNH0u8+MB8GA1UdIwQY
MBaAFBd+EfUjPpM5maKgxokD/Cda5FnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xMTlkY2QtODRlMS00OGQ1LWEyODAt
YWEwOWQ2ZTFmZmVlLzEvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xMTlkY2QtODRlMS00OGQ1LWEyODAtYWEwOWQ2ZTFmZmVl
LzEvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiRs7h9P
rvdNfaHKlkWk9UqCRKfStPx9//WAg27YILRazxFFJP3570NCT9hhoOdcyXUyvxah
XJUBOLX3Qzy8eWIHZX8/P8BhTYO1GpgJrjEFWNKAKI81XL4mRmrtqf6wCHJUd2bg
g9Mqkap9Fz8bXjghBM5/WFce/mL7Knj6KdlXLEQc3u/YFtQLDWKLqOzkV4MsyvtS
ELqvMebw6UD8g7ckkx75cXhAYxQYMG18oZcPw4GlrbFIID1Ccg9fbBjLRF5kbq7X
J3HRY1UPFTLc4weszQIoWhFJJoyOK+YMy7Uuj1wq0sfey8q+CltZ01hIxGc4d4gv
THATuE8OaqjWqg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:08:58 2025 by rpki-client