Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
File: fQtE5JJUnht9pTLIDDSIUMWkToA.mft (raw, json)
Hash identifier: M6ee7vtjgQqm3fqKb7rJX1Y5Dl8n9ZuiOU/IAQP4izQ=
Subject key identifier: 21:32:E3:AB:0B:FC:95:D3:B2:28:EB:12:A2:D9:51:D5:25:98:C1:9E
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial: 0194BD177D6A574687338A4A78DB6E9F239B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: Vh9zdU6UPXBw1wsGMQVn_pjjotw.roa (hash: RHQ7Mk9Ul2niP+vY1weS4xjGH8dOqLq3Efjab5Bc1HU=)
2: fQtE5JJUnht9pTLIDDSIUMWkToA.crl (hash: r7UgdDDRcs4yplAovvGTw5dkpgaxiCQQG1S4vyaoCXA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7d:6a:57:46:87:33:8a:4a:78:db:6e:9f:23:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=2132e3ab0bfc95d3b228eb12a2d951d52598c19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:c2:7e:93:8f:fc:36:93:24:83:cf:54:07:
bb:d8:9c:ea:30:04:8c:db:65:a0:1b:4c:8b:2d:c7:
4c:bd:6f:b5:6f:e6:10:5f:89:ab:d0:9c:f9:1a:0f:
8c:71:11:d9:97:fb:c8:52:ae:6c:33:1c:a3:91:8d:
80:37:84:55:ce:64:f2:fd:04:6a:3d:12:3c:84:e2:
f7:07:ab:21:b5:f4:62:bd:40:5c:25:ef:05:7c:cf:
c5:85:3d:5d:d4:58:61:7c:36:d8:83:1d:3c:d2:84:
aa:33:b0:25:46:c6:55:1d:42:fb:fe:f0:e6:d7:c6:
e0:0a:b2:cf:2a:e5:89:e5:b5:db:87:e1:3d:83:c9:
c4:f6:89:86:a3:b0:96:cd:c8:6e:84:b9:19:84:94:
9c:7d:52:7e:46:79:85:ac:b9:85:97:44:0f:67:7c:
b8:0a:2d:6b:73:82:42:0b:d6:12:17:2b:78:7e:07:
a3:a4:71:07:ee:ef:dc:97:fc:e6:f8:fe:f5:55:18:
63:2a:ee:51:d9:ec:46:12:90:c7:ab:ce:8e:98:af:
c3:14:3d:2a:36:81:c7:fb:fb:45:4f:19:72:cc:df:
9e:9b:df:1c:ae:ac:4a:cc:33:74:85:1d:99:e1:b9:
fb:d1:13:8c:84:46:de:06:66:43:e6:45:a6:ed:d8:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:32:E3:AB:0B:FC:95:D3:B2:28:EB:12:A2:D9:51:D5:25:98:C1:9E
X509v3 Authority Key Identifier:
keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a0:6d:07:24:37:05:f7:a0:60:0f:b5:39:a8:1d:d5:ca:69:
fc:3e:d0:75:41:0a:85:68:82:0f:56:22:59:a3:6d:63:4e:75:
43:4c:5e:23:b1:87:4d:9f:b7:8f:a2:fd:56:a8:bb:ed:65:ca:
24:c8:b1:89:db:44:42:d0:02:36:04:12:4a:d3:4a:5a:a8:08:
c2:f0:24:00:76:33:d4:09:e9:ab:dd:95:cd:35:8a:a3:8c:b1:
2d:ab:bb:db:08:41:78:55:30:d2:84:2e:b8:f7:39:1b:30:54:
de:ae:9e:3f:3f:93:81:d2:fb:f4:0c:b5:35:03:3b:0e:69:c3:
63:d8:46:17:03:27:ee:1c:1b:fb:3c:17:38:23:bf:ea:a9:9c:
61:94:6b:83:78:c2:ff:00:02:31:8d:e8:38:8d:bf:f7:ff:b1:
5a:da:c6:d8:aa:a0:21:a9:b7:b2:ca:4a:2b:9e:8f:7d:f6:d3:
56:d9:8d:55:2a:51:0a:16:8a:fd:72:bc:13:71:27:f4:27:fe:
99:3d:e1:9f:03:7c:bd:bf:07:9e:7e:a9:85:ac:b1:77:89:a1:
cf:08:f5:a7:c5:4e:28:33:94:de:88:55:9a:36:33:c0:f7:52:
47:df:4f:23:76:ec:60:3e:b2:a2:64:3a:b8:98:24:70:92:e4:
0f:cc:62:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F31qV0aHM4pKeNtunyObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMGI0NGU0OTI1NDllMWI3ZGE1MzJjODBjMzQ4ODUwYzVh
NDRlODAwHhcNMjUwMTMxMTYwMDIwWhcNMjUwMjAxMTYwMDIwWjAzMTEwLwYDVQQD
EygyMTMyZTNhYjBiZmM5NWQzYjIyOGViMTJhMmQ5NTFkNTI1OThjMTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9/CfpOP/DaTJIPPVAe72JzqMASM
22WgG0yLLcdMvW+1b+YQX4mr0Jz5Gg+McRHZl/vIUq5sMxyjkY2AN4RVzmTy/QRq
PRI8hOL3B6shtfRivUBcJe8FfM/FhT1d1FhhfDbYgx080oSqM7AlRsZVHUL7/vDm
18bgCrLPKuWJ5bXbh+E9g8nE9omGo7CWzchuhLkZhJScfVJ+RnmFrLmFl0QPZ3y4
Ci1rc4JCC9YSFyt4fgejpHEH7u/cl/zm+P71VRhjKu5R2exGEpDHq86OmK/DFD0q
NoHH+/tFTxlyzN+em98crqxKzDN0hR2Z4bn70ROMhEbeBmZD5kWm7dgCLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEy46sL/JXTsijrEqLZUdUlmMGeMB8GA1UdIwQY
MBaAFH0LROSSVJ4bfaUyyAw0iFDFpE6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlF0RTVKSlVuaHQ5cFRMSUREU0lVTVdrVG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iOTIzMWYtYjNkZi00MDEyLTk2ZDct
NzIwNGI4MTEyNTBmLzEvZlF0RTVKSlVuaHQ5cFRMSUREU0lVTVdrVG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iOTIzMWYtYjNkZi00MDEyLTk2ZDctNzIwNGI4MTEyNTBm
LzEvZlF0RTVKSlVuaHQ5cFRMSUREU0lVTVdrVG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKBtByQ3
BfegYA+1Oagd1cpp/D7QdUEKhWiCD1YiWaNtY051Q0xeI7GHTZ+3j6L9Vqi77WXK
JMixidtEQtACNgQSStNKWqgIwvAkAHYz1Anpq92VzTWKo4yxLau72whBeFUw0oQu
uPc5GzBU3q6ePz+TgdL79Ay1NQM7DmnDY9hGFwMn7hwb+zwXOCO/6qmcYZRrg3jC
/wACMY3oOI2/9/+xWtrG2KqgIam3sspKK56PffbTVtmNVSpRChaK/XK8E3En9Cf+
mT3hnwN8vb8Hnn6phayxd4mhzwj1p8VOKDOU3ohVmjYzwPdSR99PI3bsYD6yomQ6
uJgkcJLkD8xizQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:34 2025 by rpki-client