Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
File: fsZaHc-CJefxC-IN3eHiFugAtnw.mft (raw, json)
Hash identifier: /GM196JRvJPNrsldZ39hP2e2eOeP1TUNyg4nVBcMYoY=
Subject key identifier: 61:7C:25:C3:15:23:61:FB:25:8E:57:D3:80:94:6A:FB:47:FF:61:AF
Authority key identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
Certificate issuer: /CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Certificate serial: 0194BCE07E8E2727EFE62210BBC7AF95BD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
Manifest number: 1449
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: fsZaHc-CJefxC-IN3eHiFugAtnw.crl (hash: 8hQT440mlcKmXwzgsN/iXWNQyXKVVrK0C1GbLXZOaCI=)
2: iyAReQYZi6annFwTzxnNMi_NX88.roa (hash: RA8Tw9Fc/DRqwFBqIp5rQULzzVh8lGYGH4fnEdfI7zE=)
3: onQc6RXgIQfb3aGGII4Ouo46uLk.roa (hash: YBoMTfa2KP4rZrIUbdsss9ucz/bO7zkPPOfx3KzpJMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7e:8e:27:27:ef:e6:22:10:bb:c7:af:95:bd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=617c25c3152361fb258e57d380946afb47ff61af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:32:d1:46:db:d5:bf:51:f4:47:1b:24:77:
50:fe:3f:ce:1c:61:c8:bd:54:b5:ac:b0:aa:a6:47:
3e:f6:95:62:d1:a0:ea:b4:35:d7:4b:9a:69:05:08:
7f:cf:ce:b7:9e:15:d9:e1:e5:61:af:ec:58:c3:99:
24:40:4d:f2:10:1c:8a:35:ff:a1:98:e4:a2:7d:58:
ff:23:bb:e2:1f:02:57:71:50:c9:89:ef:23:a5:4d:
d7:8b:5c:6b:08:59:75:e6:d2:fb:21:22:e6:4a:ee:
ff:a1:ab:d6:3e:2a:04:c0:b1:ad:bf:2a:7a:47:9f:
d8:5a:a8:54:9a:5b:3b:83:d9:61:0b:ee:ee:46:3b:
75:18:ef:90:68:11:ad:f5:b6:79:be:ab:50:b8:90:
4a:7e:6a:a8:c5:9b:b6:36:70:8c:a6:51:c0:e6:c9:
e9:83:2b:f9:18:aa:cd:78:a4:2e:a7:ad:32:9a:3e:
ad:e8:b8:91:dd:07:72:bc:03:dc:bd:ea:8e:a2:c9:
d2:61:88:2a:2b:98:1a:fa:32:98:08:5c:14:5e:de:
8d:37:a2:9a:f5:91:8c:ac:f5:f6:1e:1f:47:be:f7:
16:cb:60:ba:d6:a2:02:7e:c2:da:37:c8:4d:96:2f:
e0:15:0f:05:ed:81:9a:f7:70:a8:68:3f:3e:5a:44:
78:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7C:25:C3:15:23:61:FB:25:8E:57:D3:80:94:6A:FB:47:FF:61:AF
X509v3 Authority Key Identifier:
keyid:7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:57:02:3c:9b:d4:8b:65:46:02:a2:16:71:87:8a:04:ea:41:
98:80:2e:09:26:f8:7b:05:fe:82:fb:15:d1:ab:2c:c6:8e:d8:
65:4b:79:a9:bf:69:0c:5f:a3:21:5b:2c:9b:1f:b7:fa:55:96:
48:2f:57:3d:bc:ad:d7:ee:4d:73:06:22:c8:e0:37:ba:ec:df:
23:ba:87:85:b2:b2:33:20:6d:73:7a:6e:5e:34:51:8d:57:ab:
92:54:f6:20:78:20:66:f0:e9:e8:48:70:64:21:e9:33:39:78:
65:75:68:22:75:8d:93:8c:a5:a8:42:8f:33:38:bc:5f:51:29:
90:38:59:30:39:0e:f9:79:5a:32:d1:e6:74:fe:ac:0b:09:ef:
90:bf:66:c5:ef:65:2c:b6:d7:30:cf:d4:3b:ce:13:90:ae:c6:
fd:56:28:cf:ef:f5:8f:f6:d4:53:e8:0b:aa:28:1f:56:68:09:
85:b3:4f:fe:61:4c:ed:48:2c:e3:d4:af:aa:3a:dc:d7:15:61:
1f:9c:0e:73:57:6b:06:5f:10:45:ba:5a:76:67:03:fe:82:de:
29:f1:3c:39:6e:eb:f9:69:fe:6d:74:99:4e:03:43:5c:28:e6:
e7:fc:03:da:3d:d2:f4:f4:df:ed:4d:e3:7e:5c:6b:8d:58:e2:
30:ea:63:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84H6OJyfv5iIQu8evlb2UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzY1YTFkY2Y4MjI1ZTdmMTBiZTIwZGRkZTFlMjE2ZTgw
MGI2N2MwHhcNMjUwMTMxMTUwMDE2WhcNMjUwMjAxMTUwMDE2WjAzMTEwLwYDVQQD
Eyg2MTdjMjVjMzE1MjM2MWZiMjU4ZTU3ZDM4MDk0NmFmYjQ3ZmY2MWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJMy0Ubb1b9R9EcbJHdQ/j/OHGHI
vVS1rLCqpkc+9pVi0aDqtDXXS5ppBQh/z863nhXZ4eVhr+xYw5kkQE3yEByKNf+h
mOSifVj/I7viHwJXcVDJie8jpU3Xi1xrCFl15tL7ISLmSu7/oavWPioEwLGtvyp6
R5/YWqhUmls7g9lhC+7uRjt1GO+QaBGt9bZ5vqtQuJBKfmqoxZu2NnCMplHA5snp
gyv5GKrNeKQup60ymj6t6LiR3QdyvAPcveqOosnSYYgqK5ga+jKYCFwUXt6NN6Ka
9ZGMrPX2Hh9HvvcWy2C61qICfsLaN8hNli/gFQ8F7YGa93CoaD8+WkR4EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGF8JcMVI2H7JY5X04CUavtH/2GvMB8GA1UdIwQY
MBaAFH7GWh3PgiXn8QviDd3h4hboALZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNaYUhjLUNKZWZ4Qy1JTjNlSGlGdWdBdG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84ZTc3ODUtOTQ1MS00NmZiLWIyNDQt
N2Q5YjgyMzA1MzdlLzEvZnNaYUhjLUNKZWZ4Qy1JTjNlSGlGdWdBdG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84ZTc3ODUtOTQ1MS00NmZiLWIyNDQtN2Q5YjgyMzA1Mzdl
LzEvZnNaYUhjLUNKZWZ4Qy1JTjNlSGlGdWdBdG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVcCPJvU
i2VGAqIWcYeKBOpBmIAuCSb4ewX+gvsV0assxo7YZUt5qb9pDF+jIVssmx+3+lWW
SC9XPbyt1+5NcwYiyOA3uuzfI7qHhbKyMyBtc3puXjRRjVerklT2IHggZvDp6Ehw
ZCHpMzl4ZXVoInWNk4ylqEKPMzi8X1EpkDhZMDkO+XlaMtHmdP6sCwnvkL9mxe9l
LLbXMM/UO84TkK7G/VYoz+/1j/bUU+gLqigfVmgJhbNP/mFM7Ugs49Svqjrc1xVh
H5wOc1drBl8QRbpadmcD/oLeKfE8OW7r+Wn+bXSZTgNDXCjm5/wD2j3S9PTf7U3j
flxrjVjiMOpj6Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:33 2025 by rpki-client