Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
File: f8lWpStzUEpPH_NFRxmSl6f13p0.mft (raw, json)
Hash identifier: /Sal0naUQIt6etiX2l3IFA/UowEnFlQG5mZMAFO2/4w=
Subject key identifier: D9:6D:DE:7C:25:C6:91:31:D3:12:6F:82:3A:42:CD:A4:AD:77:0E:28
Authority key identifier: 7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
Certificate issuer: /CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Certificate serial: 0194BC05142A2535CEDEDB8563DC653999E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
Manifest number: 07DD
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: f8lWpStzUEpPH_NFRxmSl6f13p0.crl (hash: 7E5SP+ST8NMl9JuxDXpQpza0tf+9G3TSZUW7DEkrhLc=)
2: oABxc2AhceHbFWdSMSjl8hsmwIU.roa (hash: TEY8sctZHera/7HF2OtPuy78+8vJU3t66DtmPXEJjBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:14:2a:25:35:ce:de:db:85:63:dc:65:39:99:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=d96dde7c25c69131d3126f823a42cda4ad770e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:9a:dd:61:14:66:a8:29:6d:34:08:9a:6e:
63:73:e7:25:da:a9:dd:6b:b8:75:57:c6:91:5a:40:
c3:be:b0:07:b3:9a:88:59:46:85:12:27:72:e1:57:
c9:07:62:05:c9:22:0e:17:4b:fa:76:a3:47:f2:ea:
95:d1:ba:b8:7b:aa:7c:25:5f:9b:77:7d:dc:46:3e:
05:3d:82:b1:42:4a:10:57:b4:35:e9:dd:3c:fe:6e:
8b:49:56:f4:cf:c3:58:2f:97:27:2d:8c:cb:01:e3:
2c:3f:bd:66:74:bc:6d:25:c9:79:af:06:31:e7:d3:
03:ca:2f:da:a6:34:a6:52:00:b2:7b:09:96:15:05:
fe:9b:98:d6:1f:bb:6b:10:7f:5b:46:98:be:96:8d:
98:0a:78:ef:51:c6:82:95:61:c0:66:98:81:94:7c:
12:25:2a:99:5c:ea:a0:e0:3a:e4:8a:be:c7:3c:42:
72:b1:fd:2e:ea:6e:dd:d7:21:67:5e:04:25:39:f7:
dd:84:b6:86:a8:8d:fc:fe:7c:a7:93:b9:2c:7d:fa:
23:d5:8f:50:70:65:95:0f:fa:ae:74:53:aa:08:55:
5c:8d:5d:bc:52:92:98:b6:73:d2:be:52:1d:d7:ea:
29:f6:e8:c3:3d:47:df:5f:96:59:d8:b2:f6:ad:87:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6D:DE:7C:25:C6:91:31:D3:12:6F:82:3A:42:CD:A4:AD:77:0E:28
X509v3 Authority Key Identifier:
keyid:7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f7:ba:50:c5:3d:d9:cd:c6:88:3e:c7:25:e1:60:25:6f:ea:
2d:17:c6:84:d8:cf:03:e1:5c:22:77:a8:24:9d:d1:a8:c0:0e:
b3:13:5e:f1:04:03:88:77:31:b9:17:05:fb:72:81:44:a6:21:
1b:77:04:d0:67:3c:c1:21:80:4c:22:ef:4e:34:09:2c:2c:18:
95:55:ae:74:88:c4:ec:4f:1b:5a:d6:32:a7:0a:2e:6e:0f:b6:
bd:ef:04:40:8a:d2:ad:e0:67:0a:2b:02:3d:5e:3f:26:26:15:
80:57:3b:7c:4c:da:a4:25:5b:83:76:5d:bb:f8:71:f8:aa:ce:
a7:00:ae:ae:6d:3e:f9:61:de:36:4f:31:eb:bd:8a:e2:48:b6:
29:71:4d:ed:d4:93:a8:f6:aa:60:44:70:a3:5b:82:9e:cd:bf:
cb:b7:ef:5f:c2:fb:89:f9:a7:77:8e:8a:0a:36:fb:3a:4d:ab:
4b:3d:3a:57:b6:c8:a1:13:e1:0c:f3:1e:28:e4:f0:f8:55:40:
7a:0b:8f:ec:18:fa:71:ee:dc:e8:a3:7c:8f:be:45:1b:1a:f4:
7b:9f:40:6e:8b:32:ac:e4:98:ee:25:82:dd:61:c2:54:1d:8d:
9d:6b:95:9c:f3:4a:3a:08:8f:57:c9:af:34:e1:f5:7d:47:3a:
a2:55:24:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRQqJTXO3tuFY9xlOZnnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmYzk1NmE1MmI3MzUwNGE0ZjFmZjM0NTQ3MTk5Mjk3YTdm
NWRlOWQwHhcNMjUwMTMxMTEwMDM2WhcNMjUwMjAxMTEwMDM2WjAzMTEwLwYDVQQD
EyhkOTZkZGU3YzI1YzY5MTMxZDMxMjZmODIzYTQyY2RhNGFkNzcwZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b6a3WEUZqgpbTQImm5jc+cl2qnd
a7h1V8aRWkDDvrAHs5qIWUaFEidy4VfJB2IFySIOF0v6dqNH8uqV0bq4e6p8JV+b
d33cRj4FPYKxQkoQV7Q16d08/m6LSVb0z8NYL5cnLYzLAeMsP71mdLxtJcl5rwYx
59MDyi/apjSmUgCyewmWFQX+m5jWH7trEH9bRpi+lo2YCnjvUcaClWHAZpiBlHwS
JSqZXOqg4Drkir7HPEJysf0u6m7d1yFnXgQlOffdhLaGqI38/nynk7ksffoj1Y9Q
cGWVD/qudFOqCFVcjV28UpKYtnPSvlId1+op9ujDPUffX5ZZ2LL2rYchpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlt3nwlxpEx0xJvgjpCzaStdw4oMB8GA1UdIwQY
MBaAFH/JVqUrc1BKTx/zRUcZkpen9d6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQt
YmI1N2E0ZWY3MTUzLzEvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQtYmI1N2E0ZWY3MTUz
LzEvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgve6UMU9
2c3GiD7HJeFgJW/qLRfGhNjPA+FcIneoJJ3RqMAOsxNe8QQDiHcxuRcF+3KBRKYh
G3cE0Gc8wSGATCLvTjQJLCwYlVWudIjE7E8bWtYypwoubg+2ve8EQIrSreBnCisC
PV4/JiYVgFc7fEzapCVbg3Zdu/hx+KrOpwCurm0++WHeNk8x672K4ki2KXFN7dST
qPaqYERwo1uCns2/y7fvX8L7ifmnd46KCjb7Ok2rSz06V7bIoRPhDPMeKOTw+FVA
eguP7Bj6ce7c6KN8j75FGxr0e59AbosyrOSY7iWC3WHCVB2NnWuVnPNKOgiPV8mv
NOH1fUc6olUkjw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:48 2025 by rpki-client