Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
File: c7gWQOG2T1HSun149nd8BW0RVL8.mft (raw, json)
Hash identifier: k66rRP42sO2JVj9iiCdWdzBFlcIeQvaUzgFDrCI4Gmo=
Subject key identifier: B6:05:F6:BF:9E:28:94:3B:86:E2:C6:B7:F0:0E:5F:64:6C:63:01:E5
Authority key identifier: 73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF
Certificate issuer: /CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf
Certificate serial: 0194BC3C1C946DBEA1D0C8DF8489D3A4C0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: 3rVvEb5TD5sUIiR8g28gQB62SZ4.roa (hash: I97/quPKUPqVv98vrZrzthe6vPPP5kOtjCTGVwTGxJg=)
2: c7gWQOG2T1HSun149nd8BW0RVL8.crl (hash: SWWIL+Y6MhR4EtNDp41QK0oEzJxoG/JlTruiSHER29A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1c:94:6d:be:a1:d0:c8:df:84:89:d3:a4:c0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=b605f6bf9e28943b86e2c6b7f00e5f646c6301e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:fe:7f:dd:be:4d:8f:99:ae:73:a6:7f:97:
11:31:50:e4:3c:eb:30:66:cc:f8:78:8d:f2:2b:27:
43:0b:8e:ed:84:dc:4a:ab:3f:f0:0b:a2:30:c9:7d:
20:64:6b:52:31:4b:a3:f8:d5:71:0d:72:28:cd:2c:
aa:d9:bb:44:6f:ab:26:b1:e8:a0:c6:94:cd:cb:9a:
0e:e6:7d:70:af:90:67:2d:85:bc:37:ec:71:74:cc:
2d:6e:e0:56:48:34:b6:c7:0c:a3:6b:91:00:03:99:
c4:8b:da:dc:50:be:92:54:f6:29:13:a6:67:61:a1:
ca:2e:6f:8a:aa:d0:02:1b:b1:96:83:61:db:28:35:
9d:6e:8e:0b:8e:2b:58:e0:3e:fb:23:27:4e:a1:c3:
f9:c0:be:1d:ae:7a:33:95:be:e1:fe:52:03:e4:5d:
31:68:44:a0:49:bc:fe:0b:c9:d1:73:c5:ce:11:13:
af:3b:97:21:fe:a2:79:0e:1c:f2:d6:8f:ec:ba:5e:
95:75:ed:e5:fc:9a:53:8f:18:8e:f3:73:75:a2:48:
36:bf:70:73:33:da:b2:ea:8b:56:ff:01:99:1c:05:
c0:e8:69:28:06:5b:ca:4e:4c:f2:bc:79:2f:21:ea:
2f:2a:42:b2:51:c6:a1:11:fe:1a:30:71:8b:a8:18:
e7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:05:F6:BF:9E:28:94:3B:86:E2:C6:B7:F0:0E:5F:64:6C:63:01:E5
X509v3 Authority Key Identifier:
keyid:73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:14:e6:c2:a9:91:c2:d5:4f:6f:9d:97:7e:58:5a:4e:8e:6c:
1a:ac:58:2a:34:00:23:a6:b2:b7:fc:e2:62:43:22:d5:52:95:
51:be:6f:14:99:ce:d8:be:cc:4c:ce:af:b7:b4:2d:63:0e:11:
bf:08:74:1a:1c:50:8a:25:e0:83:3b:b8:cd:50:90:83:6f:0d:
45:9e:ec:84:8f:09:d3:f2:97:da:aa:9a:63:35:43:41:87:92:
7c:82:34:7c:25:99:0a:87:45:02:4a:7a:3d:80:79:05:95:9b:
a2:00:02:3d:86:c4:94:cf:38:2b:73:18:36:19:2e:68:9d:12:
36:d8:55:70:78:76:bd:e9:f1:79:1a:30:a3:83:a1:ef:29:0e:
f1:ff:4f:b8:20:0f:f1:ef:83:a8:e2:38:0b:f1:d1:96:ab:67:
02:4f:d3:41:51:49:c7:3d:eb:c7:8a:3b:eb:6b:35:2c:60:07:
7b:02:64:d4:45:14:c9:37:6e:0e:cd:5e:c3:a6:a2:c9:39:f6:
00:05:8e:9b:7f:45:58:37:1a:93:63:02:0c:5f:5d:8b:7a:f9:
f0:14:cc:b3:18:e3:c5:d6:9b:15:73:3c:2e:d2:14:ad:af:ce:
58:32:33:84:e0:f3:6c:29:4f:60:18:49:92:d8:cd:05:26:c2:
dc:3c:05:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PByUbb6h0MjfhInTpMC3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYjgxNjQwZTFiNjRmNTFkMmJhN2Q3OGY2Nzc3YzA1NmQx
MTU0YmYwHhcNMjUwMTMxMTIwMDQzWhcNMjUwMjAxMTIwMDQzWjAzMTEwLwYDVQQD
EyhiNjA1ZjZiZjllMjg5NDNiODZlMmM2YjdmMDBlNWY2NDZjNjMwMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOH+f92+TY+ZrnOmf5cRMVDkPOsw
Zsz4eI3yKydDC47thNxKqz/wC6IwyX0gZGtSMUuj+NVxDXIozSyq2btEb6smseig
xpTNy5oO5n1wr5BnLYW8N+xxdMwtbuBWSDS2xwyja5EAA5nEi9rcUL6SVPYpE6Zn
YaHKLm+KqtACG7GWg2HbKDWdbo4LjitY4D77IydOocP5wL4drnozlb7h/lID5F0x
aESgSbz+C8nRc8XOEROvO5ch/qJ5Dhzy1o/sul6Vde3l/JpTjxiO83N1okg2v3Bz
M9qy6otW/wGZHAXA6GkoBlvKTkzyvHkvIeovKkKyUcahEf4aMHGLqBjnYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYF9r+eKJQ7huLGt/AOX2RsYwHlMB8GA1UdIwQY
MBaAFHO4FkDhtk9R0rp9ePZ3fAVtEVS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzdnV1FPRzJUMUhTdW4xNDluZDhCVzBSVkw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hYmIxNTMtNTFiMy00ODQ5LTg5ODUt
ZDMwZjkxNjhmODAxLzEvYzdnV1FPRzJUMUhTdW4xNDluZDhCVzBSVkw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9hYmIxNTMtNTFiMy00ODQ5LTg5ODUtZDMwZjkxNjhmODAx
LzEvYzdnV1FPRzJUMUhTdW4xNDluZDhCVzBSVkw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxTmwqmR
wtVPb52XflhaTo5sGqxYKjQAI6ayt/ziYkMi1VKVUb5vFJnO2L7MTM6vt7QtYw4R
vwh0GhxQiiXggzu4zVCQg28NRZ7shI8J0/KX2qqaYzVDQYeSfII0fCWZCodFAkp6
PYB5BZWbogACPYbElM84K3MYNhkuaJ0SNthVcHh2venxeRowo4Oh7ykO8f9PuCAP
8e+DqOI4C/HRlqtnAk/TQVFJxz3rx4o762s1LGAHewJk1EUUyTduDs1ew6aiyTn2
AAWOm39FWDcak2MCDF9di3r58BTMsxjjxdabFXM8LtIUra/OWDIzhODzbClPYBhJ
ktjNBSbC3DwFBA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:47:08 2025 by rpki-client