Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
File: fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft (raw, json)
Hash identifier: BXkaA5R7RWVs+VYDIGr2FmTDhw9bfKbp8JGKZUisd3I=
Subject key identifier: BF:82:D2:1A:3A:C4:23:4B:47:2A:48:09:21:06:30:65:34:7B:AD:FD
Authority key identifier: 7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
Certificate issuer: /CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Certificate serial: 0194BC72C0A445AB84C4E26C927E4245568D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
Manifest number: 076B
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: WdmL2O8VPrkR42ZOw2QephNcMKQ.roa (hash: hlVVES8UOIZDvKYVagg5Nkh0JVEcOtJVFmlV0ra9F/8=)
2: fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl (hash: 0WtqjOBPou/QxHou5Aufy1hWkxxMwaZiDe2iVtj4TF0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c0:a4:45:ab:84:c4:e2:6c:92:7e:42:45:56:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=bf82d21a3ac4234b472a480921063065347badfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:ba:a6:07:ff:e7:5d:52:96:b9:bc:8b:71:
c9:4d:61:9f:d2:d3:0f:63:37:4a:98:46:d5:1d:7e:
d5:b2:c1:dc:67:83:8b:17:c4:8f:38:a8:01:1b:0f:
b4:80:5d:ec:e1:3e:d8:e7:61:bf:ec:4b:64:1e:9f:
af:22:f2:6c:6b:55:2c:8b:f5:91:ff:8d:07:95:dd:
c0:22:3a:7b:8a:60:64:79:99:64:94:1d:a5:0d:27:
ff:24:5b:b9:e1:e3:63:be:0e:4c:98:d5:2f:9a:e1:
f4:9c:db:22:aa:ec:8e:f8:44:c8:9c:c3:9f:c5:65:
86:0f:ff:82:54:b7:ac:3b:a0:18:bc:05:e8:9c:3d:
f1:12:fa:6c:fe:f8:e8:bc:80:51:dd:ba:58:79:c6:
30:3d:cb:5b:61:57:cb:bd:e4:a6:95:34:0c:30:07:
29:57:5a:1f:fb:2d:4c:59:ea:b6:7e:6c:3a:64:fd:
fa:df:05:12:73:f4:05:e4:9a:59:2e:72:50:66:79:
35:ab:2b:ed:12:6e:a9:53:a5:3c:7d:60:46:93:f3:
52:c4:28:11:f2:74:b6:74:fc:02:7a:b5:eb:5f:9d:
2d:9b:a4:b7:ed:bf:16:81:e3:ba:59:91:db:bb:29:
8c:3b:a5:2a:62:0c:81:89:dd:c3:95:aa:58:73:48:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:82:D2:1A:3A:C4:23:4B:47:2A:48:09:21:06:30:65:34:7B:AD:FD
X509v3 Authority Key Identifier:
keyid:7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7f:19:56:2b:7b:46:2b:de:8c:ea:0e:c2:db:aa:2a:b1:86:
04:f9:2e:25:75:f4:df:e6:fb:f0:84:00:9f:11:6b:cc:ed:8d:
29:c7:10:4c:38:12:db:4c:d5:d3:6a:39:3d:38:ca:f0:ae:48:
b6:be:ad:5b:16:3d:d8:61:6e:19:e5:d5:9f:dd:b8:4d:bf:34:
6c:ae:5f:cf:b9:9f:0f:fa:aa:a0:58:39:1f:eb:09:91:e4:d4:
c3:d2:bf:4e:68:3e:a0:33:6d:ba:64:d5:ec:8a:d5:cc:71:f2:
08:b6:68:81:13:8b:20:05:c8:e8:31:eb:e4:92:30:2a:42:4f:
e7:2e:94:1c:a3:4a:bd:aa:b9:ee:db:0b:6b:31:58:9b:dd:26:
62:c6:1d:d6:e7:7d:fd:b9:84:a1:78:78:f1:9c:37:11:69:87:
01:4c:67:82:d2:6d:eb:8a:f4:17:87:ab:ee:89:ae:5f:7b:29:
8f:dd:b2:d4:c1:65:b4:1e:f9:1f:76:c8:b0:a3:d1:52:81:c5:
30:c7:da:cc:84:14:0a:fe:d2:54:e4:77:84:78:f3:44:4d:57:
b8:3d:c8:fe:4b:8e:82:9b:74:c2:45:0e:aa:75:0a:3f:0e:60:
e2:de:81:31:8c:0a:1e:67:55:4b:1c:81:66:dd:f1:b7:21:b3:
f4:ae:e4:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8csCkRauExOJskn5CRVaNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZGM0MGMzZGJkZjgxOWQ3NDEzZTc3MmJkODc1ODE0Yzdl
YWY1NWUwHhcNMjUwMTMxMTMwMDI0WhcNMjUwMjAxMTMwMDI0WjAzMTEwLwYDVQQD
EyhiZjgyZDIxYTNhYzQyMzRiNDcyYTQ4MDkyMTA2MzA2NTM0N2JhZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw26pgf/511Slrm8i3HJTWGf0tMP
YzdKmEbVHX7VssHcZ4OLF8SPOKgBGw+0gF3s4T7Y52G/7EtkHp+vIvJsa1Usi/WR
/40Hld3AIjp7imBkeZlklB2lDSf/JFu54eNjvg5MmNUvmuH0nNsiquyO+ETInMOf
xWWGD/+CVLesO6AYvAXonD3xEvps/vjovIBR3bpYecYwPctbYVfLveSmlTQMMAcp
V1of+y1MWeq2fmw6ZP363wUSc/QF5JpZLnJQZnk1qyvtEm6pU6U8fWBGk/NSxCgR
8nS2dPwCerXrX50tm6S37b8WgeO6WZHbuymMO6UqYgyBid3DlapYc0jNXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+C0ho6xCNLRypICSEGMGU0e639MB8GA1UdIwQY
MBaAFHzcQMPb34GddBPncr2HWBTH6vVeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk54QXc5dmZnWjEwRS1keXZZZFlGTWZxOVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yZTU0M2QtNGVmNy00ZTg1LTg2N2Et
OTlmMjAwNDY1OWQxLzEvZk54QXc5dmZnWjEwRS1keXZZZFlGTWZxOVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8yZTU0M2QtNGVmNy00ZTg1LTg2N2EtOTlmMjAwNDY1OWQx
LzEvZk54QXc5dmZnWjEwRS1keXZZZFlGTWZxOVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASn8ZVit7
RivejOoOwtuqKrGGBPkuJXX03+b78IQAnxFrzO2NKccQTDgS20zV02o5PTjK8K5I
tr6tWxY92GFuGeXVn924Tb80bK5fz7mfD/qqoFg5H+sJkeTUw9K/Tmg+oDNtumTV
7IrVzHHyCLZogROLIAXI6DHr5JIwKkJP5y6UHKNKvaq57tsLazFYm90mYsYd1ud9
/bmEoXh48Zw3EWmHAUxngtJt64r0F4er7omuX3spj92y1MFltB75H3bIsKPRUoHF
MMfazIQUCv7SVOR3hHjzRE1XuD3I/kuOgpt0wkUOqnUKPw5g4t6BMYwKHmdVSxyB
Zt3xtyGz9K7k1A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:45:52 2025 by rpki-client