Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
File: 1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft (raw, json)
Hash identifier: B+w+KlzP7TkHVpZYpXRAhJKVoVU6euDTBWkYfXFWjmI=
Subject key identifier: 81:D0:7D:68:88:1F:A0:7F:50:DC:EE:58:AD:D0:80:47:DC:C5:B5:61
Authority key identifier: FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA
Certificate issuer: /CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
Certificate serial: 0194BC3C811F9942A3F7DD0A8D5EC10BC28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: 1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl (hash: pgrtOzYIF02AFO5lbVn4UJUVIpxs3zQ5sLsSn2YkvM0=)
2: kM09o73dWvN-pIf-j5VVGqnFs3E.roa (hash: 1NF2t1HFyA9I2wGXRPo18jluITzSgbYTlyBY51pRw6o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:81:1f:99:42:a3:f7:dd:0a:8d:5e:c1:0b:c2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=81d07d68881fa07f50dcee58add08047dcc5b561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:0a:1a:86:18:27:ee:a4:d7:aa:16:90:2b:
a5:ec:2e:70:25:b8:2e:6f:eb:e1:33:74:75:bf:b5:
4f:c0:23:cc:85:eb:25:52:e4:c0:5a:d0:b8:3f:3c:
9d:74:98:20:01:a3:b7:0b:65:c8:e0:6e:88:29:ba:
61:b9:33:38:3f:77:b2:20:e2:3e:80:15:5f:d2:58:
9b:5b:ea:03:6f:9e:ce:bc:e5:85:f7:6b:ba:8e:d0:
63:8d:8d:36:47:80:9c:60:ad:0b:c7:45:28:6f:f6:
c6:02:4e:0c:4e:06:3a:1c:ee:6f:5b:63:56:1d:55:
82:c1:d3:5b:28:db:f2:59:8f:1b:8b:f9:37:c7:1e:
2f:a9:3c:90:eb:32:2f:a6:2f:f1:cd:86:d8:0a:06:
f2:28:17:9b:d4:c0:eb:93:a7:4b:b3:a9:8f:86:da:
66:70:72:51:46:91:1a:c8:e8:0f:29:b2:92:cc:c8:
7a:75:3b:15:7e:b5:b1:ff:9f:30:1d:6b:ff:ac:f2:
91:29:78:dd:08:47:7e:97:3e:9e:db:20:2d:93:e4:
d1:8e:4e:9c:75:4d:5c:e5:b5:78:d2:ca:04:ea:7e:
07:cb:38:09:b7:53:c0:62:5d:a5:15:31:c3:c1:7b:
2b:94:92:16:af:27:a4:16:e6:2d:48:02:e4:40:ac:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D0:7D:68:88:1F:A0:7F:50:DC:EE:58:AD:D0:80:47:DC:C5:B5:61
X509v3 Authority Key Identifier:
keyid:FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7a:b2:66:c8:ac:54:24:9d:d0:46:b9:1c:56:9a:08:43:bc:
1f:65:7f:10:8d:1e:01:1e:00:3a:90:24:b6:4d:98:12:bf:83:
8f:02:a7:8d:fb:8e:83:3d:8e:f8:56:63:ba:56:00:9b:c8:0e:
09:3e:24:b9:92:55:20:77:a0:8e:b4:63:c8:31:04:ca:cf:5c:
f6:e6:da:23:4e:ab:53:6e:c7:5c:84:58:45:3a:38:59:e4:a5:
98:2c:c1:44:a3:4a:3b:c5:07:ec:c6:39:0b:07:3a:62:76:4f:
c0:51:9f:f9:09:8a:0d:2d:a9:1a:66:80:55:7e:91:86:14:a7:
f7:00:13:81:9d:c7:11:17:78:06:6a:94:e7:91:43:24:77:04:
a5:1c:be:87:4a:94:b2:40:d2:cc:65:39:fa:86:5c:5f:68:b8:
e8:91:68:14:94:36:1b:54:9c:44:19:ba:a2:7c:61:86:63:34:
ed:e9:60:b5:d5:7e:35:46:50:e8:58:7b:06:de:ff:c9:34:62:
59:e0:8b:9e:8b:ed:00:b2:2b:7e:a0:04:88:1c:98:ee:ab:48:
c3:62:0f:17:8e:c7:83:63:26:40:68:f5:df:09:c2:73:dc:83:
9a:f3:ad:5b:1e:5a:f0:13:77:e4:2d:76:51:ca:71:61:48:cc:
a1:cc:c6:30
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS8PIEfmUKj990KjV7BC8KKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNDgwYzczMzU0MzA1Y2M0MGY4ZmFiYTllNTQwMmVmMzdk
ZTJlYWEwHhcNMjUwMTMxMTIwMTA5WhcNMjUwMjAxMTIwMTA5WjAzMTEwLwYDVQQD
Eyg4MWQwN2Q2ODg4MWZhMDdmNTBkY2VlNThhZGQwODA0N2RjYzViNTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspQKGoYYJ+6k16oWkCul7C5wJbgu
b+vhM3R1v7VPwCPMheslUuTAWtC4PzyddJggAaO3C2XI4G6IKbphuTM4P3eyIOI+
gBVf0libW+oDb57OvOWF92u6jtBjjY02R4CcYK0Lx0Uob/bGAk4MTgY6HO5vW2NW
HVWCwdNbKNvyWY8bi/k3xx4vqTyQ6zIvpi/xzYbYCgbyKBeb1MDrk6dLs6mPhtpm
cHJRRpEayOgPKbKSzMh6dTsVfrWx/58wHWv/rPKRKXjdCEd+lz6e2yAtk+TRjk6c
dU1c5bV40soE6n4HyzgJt1PAYl2lFTHDwXsrlJIWryekFuYtSALkQKwhcwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIHQfWiIH6B/UNzuWK3QgEfcxbVhMB8GA1UdIwQY
MBaAFPtIDHM1QwXMQPj6up5UAu833i6qMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0wZ01jelZEQmN4QS1QcTZubFFDN3pmZUxxby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvMGRjNDg5LWUwMjgtNGYzNy1hOTcy
LTUwOWY0NGU5MjAyMi8xLzEtMGdNY3pWREJjeEEtUHE2bmxRQzd6ZmVMcW8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M1LzBkYzQ4OS1lMDI4LTRmMzctYTk3Mi01MDlmNDRlOTIw
MjIvMS8xLTBnTWN6VkRCY3hBLVBxNm5sUUM3emZlTHFvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnqy
ZsisVCSd0Ea5HFaaCEO8H2V/EI0eAR4AOpAktk2YEr+DjwKnjfuOgz2O+FZjulYA
m8gOCT4kuZJVIHegjrRjyDEEys9c9ubaI06rU27HXIRYRTo4WeSlmCzBRKNKO8UH
7MY5Cwc6YnZPwFGf+QmKDS2pGmaAVX6RhhSn9wATgZ3HERd4BmqU55FDJHcEpRy+
h0qUskDSzGU5+oZcX2i46JFoFJQ2G1ScRBm6onxhhmM07elgtdV+NUZQ6Fh7Bt7/
yTRiWeCLnovtALIrfqAEiByY7qtIw2IPF47Hg2MmQGj13wnCc9yDmvOtWx5a8BN3
5C12UcpxYUjMoczGMA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:07 2025 by rpki-client