Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
File: fEStUyVA0tLa66leE9YUt4Va1iI.mft (raw, json)
Hash identifier: +sIqa0K4Df2y/VX/BsD5VvoeBf0Oecqa0tTLycTdEgI=
Subject key identifier: 1A:E5:22:03:0F:5E:8A:D9:77:6C:43:2E:57:C1:41:7A:DB:A7:88:47
Authority key identifier: 7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
Certificate issuer: /CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Certificate serial: 0194BC7289E0573E71FECF5580B0B641AE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
Manifest number: 03BB
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: fEStUyVA0tLa66leE9YUt4Va1iI.crl (hash: Y/5DF/umP9NpeunnYovq50SU2bhknPjEjdPVm+wKSQk=)
2: wVdARfy8kyS2yygCe6VeSrxjsrI.roa (hash: hDzrF6MC+t3cfKHXPCsVlZtlykkOSNtAuETj7zQp0RA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:89:e0:57:3e:71:fe:cf:55:80:b0:b6:41:ae:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=1ae522030f5e8ad9776c432e57c1417adba78847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:67:65:60:53:b3:bc:a7:e2:c3:af:a4:23:
ad:95:05:ca:13:ea:34:17:af:3c:49:23:24:69:fc:
b3:d3:6a:61:73:54:a3:3f:64:b6:25:0d:54:b1:ee:
f6:d5:51:d2:56:62:c2:1b:2e:9a:42:9c:11:6f:c6:
79:79:ae:48:ec:a9:ed:e5:ae:58:ac:bb:59:c9:a1:
89:88:b8:fe:54:7c:17:1e:d4:f3:76:42:35:11:ca:
18:4c:d7:5f:58:ff:1e:07:64:08:e4:ac:11:cf:cc:
43:ab:94:1d:e6:14:02:73:92:77:c0:b9:82:ee:22:
a9:8c:17:f8:3d:d0:27:eb:09:66:7a:5a:2a:61:62:
1e:ea:ba:30:ce:1c:44:af:ad:e1:dc:3f:0e:e6:b0:
e0:52:38:e9:49:0c:55:86:ae:ed:5f:1a:40:24:0c:
f1:89:34:e5:ee:ba:7c:d7:85:9f:fe:3a:39:6f:35:
07:39:7b:63:32:7e:11:a0:02:d1:c5:7b:74:eb:21:
49:6c:3b:f9:6a:4d:ed:8f:3b:f2:62:e9:5d:5c:c1:
18:b1:3d:22:8b:3a:10:5a:0c:fe:fb:c7:57:1d:c9:
74:e8:2a:c1:f9:8d:8f:78:f9:2a:62:56:77:fb:ae:
c2:44:2f:96:af:08:32:f9:b9:f2:58:c9:15:a6:e5:
de:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E5:22:03:0F:5E:8A:D9:77:6C:43:2E:57:C1:41:7A:DB:A7:88:47
X509v3 Authority Key Identifier:
keyid:7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:f8:98:86:9d:53:22:c8:d5:2f:9b:8f:1c:33:1b:49:d8:c5:
f7:47:b8:62:5a:37:62:a7:68:2f:b8:79:2d:d2:9b:56:8d:65:
e8:04:45:cd:04:5e:43:81:36:b9:b1:02:a3:d9:df:24:79:2d:
56:0b:b0:ac:7d:bf:3b:e9:8c:81:38:a4:36:7d:11:c5:ea:07:
ef:c3:bc:dd:1f:6d:ac:98:e7:1b:77:6e:86:72:63:5a:f3:24:
aa:29:a2:3d:cb:eb:cc:54:7d:e8:78:39:dc:db:cd:49:5b:5e:
8b:32:1f:ed:a8:41:01:a0:02:65:ff:30:a5:3c:53:11:ee:f5:
17:90:9e:5a:91:df:cd:fa:1e:f3:53:aa:d2:e3:dd:15:e1:f5:
cb:92:5e:6b:2e:47:3c:be:b9:69:c6:f4:b4:b5:a5:c4:f6:10:
9b:24:94:ad:c0:4e:9c:e9:2d:8d:7b:e1:60:0e:75:70:1e:cb:
b5:f8:60:d6:c3:06:39:e3:93:98:e8:54:7f:e2:82:b3:bd:e1:
ba:e9:5f:e8:ee:61:79:74:6d:88:5a:ce:86:71:8a:cd:0f:e1:
16:a4:bf:ed:b4:87:b3:33:99:a2:25:9c:96:67:39:54:04:fb:
cf:e1:4b:33:db:c5:e8:75:7c:b3:82:10:cf:6d:ae:56:af:bd:
87:a6:0d:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8congVz5x/s9VgLC2Qa5TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNDRhZDUzMjU0MGQyZDJkYWViYTk1ZTEzZDYxNGI3ODU1
YWQ2MjIwHhcNMjUwMTMxMTMwMDEwWhcNMjUwMjAxMTMwMDEwWjAzMTEwLwYDVQQD
EygxYWU1MjIwMzBmNWU4YWQ5Nzc2YzQzMmU1N2MxNDE3YWRiYTc4ODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY9nZWBTs7yn4sOvpCOtlQXKE+o0
F688SSMkafyz02phc1SjP2S2JQ1Use721VHSVmLCGy6aQpwRb8Z5ea5I7Knt5a5Y
rLtZyaGJiLj+VHwXHtTzdkI1EcoYTNdfWP8eB2QI5KwRz8xDq5Qd5hQCc5J3wLmC
7iKpjBf4PdAn6wlmeloqYWIe6rowzhxEr63h3D8O5rDgUjjpSQxVhq7tXxpAJAzx
iTTl7rp814Wf/jo5bzUHOXtjMn4RoALRxXt06yFJbDv5ak3tjzvyYuldXMEYsT0i
izoQWgz++8dXHcl06CrB+Y2PePkqYlZ3+67CRC+Wrwgy+bnyWMkVpuXezwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrlIgMPXorZd2xDLlfBQXrbp4hHMB8GA1UdIwQY
MBaAFHxErVMlQNLS2uupXhPWFLeFWtYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85NjQ2ZDctNWIwNC00NTQ0LThlZGMt
NjU5Y2I0MjdkY2Y3LzEvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85NjQ2ZDctNWIwNC00NTQ0LThlZGMtNjU5Y2I0MjdkY2Y3
LzEvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyfiYhp1T
IsjVL5uPHDMbSdjF90e4Ylo3YqdoL7h5LdKbVo1l6ARFzQReQ4E2ubECo9nfJHkt
VguwrH2/O+mMgTikNn0RxeoH78O83R9trJjnG3duhnJjWvMkqimiPcvrzFR96Hg5
3NvNSVteizIf7ahBAaACZf8wpTxTEe71F5CeWpHfzfoe81Oq0uPdFeH1y5Jeay5H
PL65acb0tLWlxPYQmySUrcBOnOktjXvhYA51cB7Ltfhg1sMGOeOTmOhUf+KCs73h
uulf6O5heXRtiFrOhnGKzQ/hFqS/7bSHszOZoiWclmc5VAT7z+FLM9vF6HV8s4IQ
z22uVq+9h6YNSw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:06 2025 by rpki-client