Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
File: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json)
Hash identifier: OZeJNti7SuBzQKrwO6RfBfucHJ1YpF6PDt667yVc0Xc=
Subject key identifier: 3B:BE:B7:27:83:B5:6A:F0:0B:20:68:8F:3E:70:13:FE:72:C9:5C:FB
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial: 0194BD17889D3B833DAFFDEB3716663ED05F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
Manifest number: 02F2
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: gzFtXUZX7JXfyqdb9ayTDlgefy2d114YkQBrFyjCyFI=)
2: mYkTlXqpG_46xscAOO-Sp6Bp4FA.roa (hash: F4Jtc5+FUEqcLwMhPjxlPH6jWlgxGrbFa+YLXHGjjaE=)
3: tXhAc_5lQ9z8se-7mjM6cOpg6e4.roa (hash: 26ICYZJOvq605v0CSl1cezfNjCXPU7AckP1ImmTpFUQ=)
4: u7uQ2Dm3QD7l-Xxryd9G8exq5eQ.roa (hash: z1DWJwaHbuR/Qct83OIrMO/3C45DlWrhtr2MVeCX/hs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:88:9d:3b:83:3d:af:fd:eb:37:16:66:3e:d0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=3bbeb72783b56af00b20688f3e7013fe72c95cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:f5:f1:27:75:f7:b3:5e:f1:a1:be:6d:b1:
e8:89:d2:5a:8c:e6:2e:b4:2c:8b:c5:95:4f:13:65:
06:9f:f5:25:04:1f:b5:67:9c:91:49:aa:a8:b7:64:
f2:95:36:e3:ad:4b:01:04:f2:09:58:4b:ab:8e:07:
55:45:f8:3a:a0:2f:b6:45:ee:0a:9e:b1:33:dd:3c:
14:3b:98:88:e3:1f:f3:5c:31:cc:9c:b4:13:83:df:
c2:f9:15:0e:83:8c:9b:02:50:0d:d6:1e:9f:26:7b:
e7:12:a4:66:0b:1f:db:bf:2a:d9:e8:2d:5a:ef:61:
9c:cc:40:2d:b6:ab:a7:00:9e:71:32:af:06:5c:e9:
e4:9b:4f:32:46:7f:52:56:f7:39:2d:bf:5a:ac:29:
83:41:63:8d:c7:8a:3f:e5:23:99:66:9c:b5:2f:a5:
3f:d9:3d:e4:ed:58:08:b6:c1:f6:f1:9d:05:33:cc:
2c:0e:e1:11:c3:92:18:f9:4e:9b:dc:56:c7:19:b1:
e3:55:71:70:40:9d:51:97:dd:9d:0b:d9:b3:0e:20:
3f:dc:52:9d:6b:e3:a9:20:1a:08:42:5e:76:db:67:
5e:c1:1b:aa:8a:85:3a:82:95:eb:fd:bc:c8:17:e1:
9d:6d:a5:3c:be:53:9f:06:38:e8:30:77:4c:44:c0:
6a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BE:B7:27:83:B5:6A:F0:0B:20:68:8F:3E:70:13:FE:72:C9:5C:FB
X509v3 Authority Key Identifier:
keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:47:a7:e6:db:a6:23:7c:65:49:0d:17:5a:a2:38:03:54:f1:
93:59:9d:a7:78:49:7e:99:27:0f:b4:e0:d9:e2:0e:b3:18:10:
6f:bc:ae:4f:8e:e2:81:1d:bd:05:09:74:e4:a0:52:b5:68:fb:
be:40:d1:3e:9a:1c:4a:0d:b1:56:e7:fe:ec:10:71:98:33:21:
37:6a:e9:04:75:c1:a6:5f:9e:3f:11:05:9e:7e:8b:03:63:8e:
0a:84:cc:1e:6c:86:26:e8:0b:9d:38:18:30:55:59:20:2e:1e:
8f:88:d9:35:fb:90:dc:2c:27:63:1a:61:86:9f:4d:86:f7:12:
2f:64:e8:79:a9:26:64:c0:c5:c1:4d:b8:a0:79:87:b7:69:dd:
7e:4f:68:4c:d5:83:79:d7:8c:1a:b9:97:0c:a1:99:8a:83:ce:
cf:8a:54:78:7e:fa:47:7c:d5:59:5e:41:63:e1:3e:e6:6a:ce:
41:6f:4b:df:6c:13:3e:e8:cb:7d:bb:30:82:69:7d:ce:ac:78:
24:3e:a1:9b:fa:b1:52:0d:56:d9:87:97:12:ed:3e:70:37:6e:
a2:86:3b:26:b7:13:d4:7f:ec:2d:9d:17:0f:66:e1:80:c4:52:
56:bc:3d:9e:78:d4:d9:d3:e4:33:18:ba:b2:f6:94:2b:bd:d4:
12:15:af:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F4idO4M9r/3rNxZmPtBfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjN2M3ZDQ4ODg3ZTJmMDg2NWQ3MDFjZGM2ZTBiYjdkZWVk
NWRiMzQwHhcNMjUwMTMxMTYwMDIzWhcNMjUwMjAxMTYwMDIzWjAzMTEwLwYDVQQD
EygzYmJlYjcyNzgzYjU2YWYwMGIyMDY4OGYzZTcwMTNmZTcyYzk1Y2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/T18Sd197Ne8aG+bbHoidJajOYu
tCyLxZVPE2UGn/UlBB+1Z5yRSaqot2TylTbjrUsBBPIJWEurjgdVRfg6oC+2Re4K
nrEz3TwUO5iI4x/zXDHMnLQTg9/C+RUOg4ybAlAN1h6fJnvnEqRmCx/bvyrZ6C1a
72GczEAttqunAJ5xMq8GXOnkm08yRn9SVvc5Lb9arCmDQWONx4o/5SOZZpy1L6U/
2T3k7VgItsH28Z0FM8wsDuERw5IY+U6b3FbHGbHjVXFwQJ1Rl92dC9mzDiA/3FKd
a+OpIBoIQl5222dewRuqioU6gpXr/bzIF+GdbaU8vlOfBjjoMHdMRMBqEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDu+tyeDtWrwCyBojz5wE/5yyVz7MB8GA1UdIwQY
MBaAFHx8fUiIfi8IZdcBzcbgu33u1ds0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYt
ZjdhYmVmM2M4YTJiLzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYtZjdhYmVmM2M4YTJi
LzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqUen5tum
I3xlSQ0XWqI4A1Txk1mdp3hJfpknD7Tg2eIOsxgQb7yuT47igR29BQl05KBStWj7
vkDRPpocSg2xVuf+7BBxmDMhN2rpBHXBpl+ePxEFnn6LA2OOCoTMHmyGJugLnTgY
MFVZIC4ej4jZNfuQ3CwnYxphhp9NhvcSL2ToeakmZMDFwU24oHmHt2ndfk9oTNWD
edeMGrmXDKGZioPOz4pUeH76R3zVWV5BY+E+5mrOQW9L32wTPujLfbswgml9zqx4
JD6hm/qxUg1W2YeXEu0+cDduooY7JrcT1H/sLZ0XD2bhgMRSVrw9nnjU2dPkMxi6
svaUK73UEhWvkg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:41:08 2025 by rpki-client