Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
File: 1-vZEdu85RbNE_-442lbKzMXQObA.mft (raw, json)
Hash identifier: /xgldQpDgUnmvFNnBpRFGZgjyT2hh36cXozIiV8xdu4=
Subject key identifier: ED:89:E1:5A:14:A9:52:00:68:F0:2D:66:31:87:D5:7D:72:04:26:45
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial: 0194BC3BEEDF36057FCE748C800749BFE175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: 1-vZEdu85RbNE_-442lbKzMXQObA.crl (hash: hwsOiQ2+mRemyjaye9J6XqS4UfmmOd5553apQF7clZg=)
2: SyEVUI3N-GA_i-uzTD16e1zmM2E.roa (hash: LqMTwONwWzte69tiLUqbC66cMzx5aiQvY2EzU+SnCGc=)
3: jnW4jrIpgrgFGee1gUUQCX9nMQM.roa (hash: Pg7xp2U2lzFs5nMdCFW1WCbmFf1TrwqIn5BPDmSukZg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ee:df:36:05:7f:ce:74:8c:80:07:49:bf:e1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=ed89e15a14a9520068f02d663187d57d72042645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:77:8f:bb:f8:1b:db:c1:a2:49:72:02:85:2b:
14:b1:b8:4c:79:69:c3:c0:ee:64:b2:40:7e:e5:6d:
df:cb:c0:cb:97:b7:56:b4:98:23:d2:c3:98:e6:b9:
63:c8:f9:7b:5c:cf:49:79:6d:cc:c6:64:4d:a8:e5:
11:c5:ae:c2:03:8b:a1:85:24:ad:a5:a5:a6:93:8a:
07:2c:0b:ef:33:d6:ed:ed:6d:11:2e:dd:61:8a:ba:
bf:d8:55:a5:c4:e7:73:a8:82:81:7a:a0:44:13:c5:
50:a5:a4:fe:2e:b8:2f:06:c2:98:50:09:64:7d:b1:
97:31:4c:e8:ae:86:34:75:27:d1:4f:d4:20:3c:89:
d6:dc:b6:9a:a0:f7:0e:11:c7:c1:79:0b:17:ef:57:
32:a9:19:fd:49:ee:0e:52:d1:c5:2f:92:30:97:36:
c1:3d:d8:37:d5:7a:e3:c4:be:c5:d9:58:70:a3:29:
5e:4a:d9:7c:4d:7a:ae:d7:12:3e:20:44:17:47:9e:
be:8d:15:5e:f8:ec:33:e9:e8:e4:49:a2:bc:a1:91:
1b:a2:f0:fd:cb:40:45:a6:9a:27:6a:5f:40:ef:ec:
96:ec:db:85:b0:ed:c7:20:d3:87:85:24:3c:ed:be:
60:0d:fa:0c:f7:1a:54:19:df:45:1f:93:f6:9e:36:
ba:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:89:E1:5A:14:A9:52:00:68:F0:2D:66:31:87:D5:7D:72:04:26:45
X509v3 Authority Key Identifier:
keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6e:c6:31:b0:c7:b9:d8:03:ec:45:6b:f7:14:3a:b2:f4:34:
03:0a:57:8c:23:9c:ff:e6:1a:d7:c7:1c:bb:64:f0:d9:70:0f:
d3:5d:4f:91:b5:65:7f:87:79:12:59:34:01:c2:6d:bc:31:b9:
68:aa:a3:56:5b:db:6a:3b:0b:2e:4a:8b:83:23:27:b0:73:9c:
82:85:19:61:a9:23:ac:0a:23:fc:bc:8c:c3:f8:06:39:63:05:
3f:ed:56:09:d9:b9:2d:d4:27:3f:25:b4:56:3a:db:3d:52:98:
dc:87:4a:34:44:dd:1e:da:c2:38:ee:d3:2d:02:d9:d7:39:8b:
81:a1:83:b8:e7:b1:ce:a4:15:03:f1:14:88:d8:64:27:d1:34:
92:9f:52:16:d2:2e:e5:58:91:3a:64:3d:f8:4d:f4:a6:45:88:
5e:32:67:3a:21:c5:de:1b:4a:b3:8d:dc:05:fb:02:1c:d3:e9:
11:4b:c9:b0:d6:e3:25:33:dd:ad:da:23:04:33:ad:49:3f:63:
17:d1:42:d8:68:3a:59:48:1e:2b:3d:d7:43:b0:0b:78:66:92:
8b:41:be:d7:87:76:73:7c:20:bc:67:1f:cc:38:c9:d9:6e:b4:
a0:ff:0f:29:12:73:4c:e6:fd:5f:88:01:0f:46:74:b3:6b:64:
06:c9:fc:99
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS8O+7fNgV/znSMgAdJv+F1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZjY0NDc2ZWYzOTQ1YjM0NGZmZWUzOGRhNTZjYWNjYzVk
MDM5YjAwHhcNMjUwMTMxMTIwMDMxWhcNMjUwMjAxMTIwMDMxWjAzMTEwLwYDVQQD
EyhlZDg5ZTE1YTE0YTk1MjAwNjhmMDJkNjYzMTg3ZDU3ZDcyMDQyNjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XePu/gb28GiSXIChSsUsbhMeWnD
wO5kskB+5W3fy8DLl7dWtJgj0sOY5rljyPl7XM9JeW3MxmRNqOURxa7CA4uhhSSt
paWmk4oHLAvvM9bt7W0RLt1hirq/2FWlxOdzqIKBeqBEE8VQpaT+LrgvBsKYUAlk
fbGXMUzoroY0dSfRT9QgPInW3LaaoPcOEcfBeQsX71cyqRn9Se4OUtHFL5IwlzbB
Pdg31XrjxL7F2VhwoyleStl8TXqu1xI+IEQXR56+jRVe+Owz6ejkSaK8oZEbovD9
y0BFpponal9A7+yW7NuFsO3HINOHhSQ87b5gDfoM9xpUGd9FH5P2nja6cQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFO2J4VoUqVIAaPAtZjGH1X1yBCZFMB8GA1UdIwQY
MBaAFPr2RHbvOUWzRP/uONpWyszF0DmwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS12WkVkdTg1UmJORV8tNDQybGJLek1YUU9iQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvNjdlMzZjLWNkNTUtNGI1OS1hYTEy
LTc0NDJmMGUyYmQxNy8xLzEtdlpFZHU4NVJiTkVfLTQ0MmxiS3pNWFFPYkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk4LzY3ZTM2Yy1jZDU1LTRiNTktYWExMi03NDQyZjBlMmJk
MTcvMS8xLXZaRWR1ODVSYk5FXy00NDJsYkt6TVhRT2JBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQW7G
MbDHudgD7EVr9xQ6svQ0AwpXjCOc/+Ya18ccu2Tw2XAP011PkbVlf4d5Elk0AcJt
vDG5aKqjVlvbajsLLkqLgyMnsHOcgoUZYakjrAoj/LyMw/gGOWMFP+1WCdm5LdQn
PyW0VjrbPVKY3IdKNETdHtrCOO7TLQLZ1zmLgaGDuOexzqQVA/EUiNhkJ9E0kp9S
FtIu5ViROmQ9+E30pkWIXjJnOiHF3htKs43cBfsCHNPpEUvJsNbjJTPdrdojBDOt
ST9jF9FC2Gg6WUgeKz3XQ7ALeGaSi0G+14d2c3wgvGcfzDjJ2W60oP8PKRJzTOb9
X4gBD0Z0s2tkBsn8mQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:23 2025 by rpki-client