Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
File: _cv3oqQ7GA1yKzdjHoea-huaXts.mft (raw, json)
Hash identifier: UHEDDQ46tI6OycKr7ilGBbRO4O6ifiYgm965ukZuIao=
Subject key identifier: 7F:CD:8A:8F:42:4C:E2:16:C9:8F:61:9F:E9:1A:D6:A4:39:3B:DF:C9
Authority key identifier: FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
Certificate issuer: /CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Certificate serial: 0194BCA9D3FA6E04AA8BCA5ABD594EF19CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: _cv3oqQ7GA1yKzdjHoea-huaXts.crl (hash: lEn8bIClIAxbd46OkfRTQtpZjwzURh0fOWoZEv08xrs=)
2: t-4cbJi-Ew3u3ipzgXiueic4IR4.roa (hash: bVpOfO45u9FlgP+T8GAth2ynXzQ4yeosDEHag/U9nSY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d3:fa:6e:04:aa:8b:ca:5a:bd:59:4e:f1:9c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=7fcd8a8f424ce216c98f619fe91ad6a4393bdfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:99:72:eb:e1:37:04:6d:a3:22:5e:ac:17:0c:
19:62:4c:92:e9:3f:cc:01:e7:ac:ab:19:48:b0:49:
c6:79:54:c5:bb:06:30:a9:19:83:b0:ec:93:63:e0:
bd:50:d4:e6:56:19:56:86:03:5f:6c:d3:4f:55:02:
4f:c8:39:ea:49:11:df:52:b5:26:a5:42:92:73:b0:
e3:12:4c:e7:19:19:b6:44:00:5e:a5:82:a2:2c:16:
5b:76:94:13:99:3b:cb:95:58:47:2e:fe:b2:54:cb:
d1:a3:d0:ee:22:16:7b:a1:5d:1b:6f:11:e7:6f:b0:
9e:47:95:66:6e:99:2a:f5:18:fd:64:45:3b:76:86:
9b:30:5b:b0:44:60:43:9a:df:60:2c:16:b8:c6:89:
4b:4e:b3:25:1e:7b:70:57:d7:4e:62:2f:12:ff:20:
dd:72:96:82:12:72:cd:20:93:72:6c:ec:43:34:db:
24:e2:ba:89:a4:70:5e:76:8c:73:20:d2:d7:e1:77:
be:d9:51:9c:a8:86:80:8a:a0:16:3c:b5:e7:18:e4:
05:ce:40:14:ba:ff:83:7b:47:2b:8e:be:62:f8:25:
56:65:6f:8c:70:0e:8e:83:0c:1a:de:c3:3d:69:e5:
db:33:40:a4:1d:88:94:31:43:c4:04:84:31:50:2c:
4d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CD:8A:8F:42:4C:E2:16:C9:8F:61:9F:E9:1A:D6:A4:39:3B:DF:C9
X509v3 Authority Key Identifier:
keyid:FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d6:5e:d8:c0:de:5f:18:a1:d9:c9:a1:53:c1:3b:3c:bf:99:
4f:2b:1e:0a:92:6b:5e:16:f9:8e:16:e6:7b:22:03:ca:18:03:
8d:9c:b6:45:a5:09:29:1b:fb:50:f2:43:b5:96:91:72:34:34:
15:fa:85:36:dc:64:f3:93:61:aa:b5:b9:e1:f0:91:80:f7:63:
3e:56:f6:61:5e:6f:c6:5d:8a:84:49:1b:ae:1d:5f:95:3a:ca:
5d:59:a9:66:7f:8f:4f:08:4c:1f:a5:ed:d4:61:ab:aa:c6:41:
6e:64:85:29:8d:d1:fd:44:a1:bb:8c:ee:f9:bd:91:3c:f4:91:
8b:9c:2f:5b:8e:93:9b:1b:a6:92:ac:d4:3d:1a:03:2e:4c:8d:
d8:ec:db:a9:bb:03:d2:88:8b:14:25:07:18:2e:89:14:09:65:
64:6d:1c:8a:4a:c1:2d:3b:6b:7e:6d:9b:a4:85:98:08:64:f8:
26:62:35:7b:4d:6f:06:34:e2:f3:ab:fc:c0:68:d8:b5:0d:d8:
25:6e:3a:89:82:2c:cb:3c:9d:dc:b3:7e:97:55:b7:b7:55:1b:
00:f5:3c:3c:4a:13:1a:bb:51:b7:27:f5:74:45:b4:ad:ac:5c:
be:19:ec:f1:32:1d:7f:09:dd:45:4f:e2:ad:a7:72:d6:0c:1d:
9d:49:e6:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdP6bgSqi8pavVlO8ZzuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkY2JmN2EyYTQzYjE4MGQ3MjJiMzc2MzFlODc5YWZhMWI5
YTVlZGIwHhcNMjUwMTMxMTQwMDMzWhcNMjUwMjAxMTQwMDMzWjAzMTEwLwYDVQQD
Eyg3ZmNkOGE4ZjQyNGNlMjE2Yzk4ZjYxOWZlOTFhZDZhNDM5M2JkZmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5ly6+E3BG2jIl6sFwwZYkyS6T/M
AeesqxlIsEnGeVTFuwYwqRmDsOyTY+C9UNTmVhlWhgNfbNNPVQJPyDnqSRHfUrUm
pUKSc7DjEkznGRm2RABepYKiLBZbdpQTmTvLlVhHLv6yVMvRo9DuIhZ7oV0bbxHn
b7CeR5Vmbpkq9Rj9ZEU7doabMFuwRGBDmt9gLBa4xolLTrMlHntwV9dOYi8S/yDd
cpaCEnLNIJNybOxDNNsk4rqJpHBedoxzINLX4Xe+2VGcqIaAiqAWPLXnGOQFzkAU
uv+De0crjr5i+CVWZW+McA6Ogwwa3sM9aeXbM0CkHYiUMUPEBIQxUCxNWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/Nio9CTOIWyY9hn+ka1qQ5O9/JMB8GA1UdIwQY
MBaAFP3L96KkOxgNcis3Yx6Hmvobml7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2N2M29xUTdHQTF5S3pkakhvZWEtaHVhWHRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mOWE5M2MtMGQ2OS00NGVjLTg0NDUt
ZjU4YTViODhjNzNlLzEvX2N2M29xUTdHQTF5S3pkakhvZWEtaHVhWHRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mOWE5M2MtMGQ2OS00NGVjLTg0NDUtZjU4YTViODhjNzNl
LzEvX2N2M29xUTdHQTF5S3pkakhvZWEtaHVhWHRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdZe2MDe
Xxih2cmhU8E7PL+ZTyseCpJrXhb5jhbmeyIDyhgDjZy2RaUJKRv7UPJDtZaRcjQ0
FfqFNtxk85NhqrW54fCRgPdjPlb2YV5vxl2KhEkbrh1flTrKXVmpZn+PTwhMH6Xt
1GGrqsZBbmSFKY3R/UShu4zu+b2RPPSRi5wvW46TmxumkqzUPRoDLkyN2OzbqbsD
0oiLFCUHGC6JFAllZG0cikrBLTtrfm2bpIWYCGT4JmI1e01vBjTi86v8wGjYtQ3Y
JW46iYIsyzyd3LN+l1W3t1UbAPU8PEoTGrtRtyf1dEW0raxcvhns8TIdfwndRU/i
rady1gwdnUnm0A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:33 2025 by rpki-client