Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: 90csdAmpdQ/Av2bhzAaYgTKfZhTuZlhXNWCxBgUQhs0=
Subject key identifier: 47:F7:DA:66:DD:B7:EB:43:76:06:60:A8:09:EC:45:38:D3:B3:E2:1E
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 0194BD4EB1FA5DEA1939220EF8CC1A1F2EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: 1-TdRJj4h2RmubOdxb9rkHHG6bhc.roa (hash: IbIK2UxlwKjCUY9QjIcWsizwAMtE57kEDfBifLf6mzQ=)
2: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: gUw4O+0iF3LpCaWaQKoUK2UuQFWjyFSoEm3bLBKbqWI=)
3: QR0Kgwt3HCwjc-xcqO7iblC-rKY.roa (hash: 0rkvAXImNg4dab81A4VmHvprnFlgPXRICVp6eT39HwM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b1:fa:5d:ea:19:39:22:0e:f8:cc:1a:1f:2e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=47f7da66ddb7eb43760660a809ec4538d3b3e21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:e9:c8:fb:de:bf:30:53:d2:4d:f5:da:20:
b6:b8:60:47:fe:61:f7:65:12:34:b1:bc:1c:6c:ec:
b0:84:fc:eb:48:63:a8:9b:9e:76:8e:c1:9d:f4:e1:
fe:7d:29:2f:db:4e:9f:04:d3:7c:c6:36:22:34:7c:
30:d4:34:56:c8:6f:21:b0:f1:a5:68:f0:41:23:14:
3c:1e:df:75:2e:0b:5e:93:07:4e:bf:84:75:37:1c:
b6:72:72:d4:d6:b4:a8:51:54:83:6e:13:9b:d5:a7:
df:fa:2e:d1:2d:02:28:32:be:a2:1c:0b:4a:2d:30:
09:a7:fd:b1:f6:8f:07:2b:9f:f4:da:db:fc:ad:eb:
ea:db:3f:66:2e:dd:d1:c2:f5:6c:ac:d9:61:4b:bc:
2d:c5:3e:12:7b:68:cd:db:64:8d:a8:76:4e:26:73:
6f:98:ad:d6:f3:3c:bf:77:a0:6f:8a:a7:82:55:02:
4b:7b:55:79:28:df:6b:eb:22:8a:fc:77:46:71:49:
f4:f7:87:b6:77:49:a3:ff:ca:df:e3:57:36:4e:52:
d4:35:33:40:ff:c7:4d:a8:4d:9a:1a:4d:cc:dc:13:
09:48:e6:7d:a5:3b:b6:8b:cb:61:82:db:48:90:bf:
b8:4c:c2:ac:31:12:3e:2c:eb:b9:fe:12:cc:be:5c:
35:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F7:DA:66:DD:B7:EB:43:76:06:60:A8:09:EC:45:38:D3:B3:E2:1E
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8b:e8:5f:a3:6b:95:91:99:62:ea:99:ef:2a:5c:22:30:4c:
03:ec:34:b7:20:fa:dd:79:19:9e:47:6a:19:e8:7f:00:e8:62:
6e:ba:bc:bc:2c:c1:fd:3a:d7:86:3d:78:a9:22:40:9d:e0:5a:
b3:e3:6a:7e:75:37:ca:8b:83:ae:d8:a8:d9:8b:b1:82:b1:3e:
d3:29:c1:8b:4b:8a:ae:d2:f2:6b:05:f3:1e:80:be:74:8d:a3:
bb:9b:2f:fa:0d:db:92:68:ff:5b:eb:88:9b:b7:64:f5:b2:82:
fe:ef:24:28:31:da:35:8a:78:65:05:49:db:1a:21:d6:c0:ff:
1c:79:59:f0:79:03:ab:a9:8f:12:7e:3c:d0:20:0a:83:5b:8c:
4c:e7:db:3d:08:bc:e6:4c:af:8a:27:06:aa:b7:14:e9:b8:42:
1d:e0:73:0e:fe:73:73:ed:06:a3:f9:01:60:c8:1d:27:ef:74:
ce:c1:22:ce:e0:81:6b:db:fb:c9:31:03:81:1c:52:5d:22:9e:
b2:11:7c:69:d8:4c:b1:94:67:19:3a:ee:4b:08:c5:e9:b3:30:
06:d9:c0:81:dc:f7:69:08:dd:38:e1:90:3b:cc:1a:51:f2:85:
b6:0d:d9:11:f6:87:ea:97:b8:44:7f:06:c1:bd:d5:ea:5c:b7:
28:73:d4:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TrH6XeoZOSIO+MwaHy6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDk3ZDg0NTNjNWVlM2ViYmIzODhlMWE0N2ExOTVmZjMw
ZmUwMDkwHhcNMjUwMTMxMTcwMDM4WhcNMjUwMjAxMTcwMDM4WjAzMTEwLwYDVQQD
Eyg0N2Y3ZGE2NmRkYjdlYjQzNzYwNjYwYTgwOWVjNDUzOGQzYjNlMjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllbpyPvevzBT0k312iC2uGBH/mH3
ZRI0sbwcbOywhPzrSGOom552jsGd9OH+fSkv206fBNN8xjYiNHww1DRWyG8hsPGl
aPBBIxQ8Ht91LgtekwdOv4R1Nxy2cnLU1rSoUVSDbhOb1aff+i7RLQIoMr6iHAtK
LTAJp/2x9o8HK5/02tv8revq2z9mLt3RwvVsrNlhS7wtxT4Se2jN22SNqHZOJnNv
mK3W8zy/d6BviqeCVQJLe1V5KN9r6yKK/HdGcUn094e2d0mj/8rf41c2TlLUNTNA
/8dNqE2aGk3M3BMJSOZ9pTu2i8thgttIkL+4TMKsMRI+LOu5/hLMvlw10QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEf32mbdt+tDdgZgqAnsRTjTs+IeMB8GA1UdIwQY
MBaAFBZJfYRTxe4+u7OI4aR6GV/zD+AJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEt
YjIzNGRkNmVkNjM3LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEtYjIzNGRkNmVkNjM3
LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYvoX6Nr
lZGZYuqZ7ypcIjBMA+w0tyD63XkZnkdqGeh/AOhibrq8vCzB/TrXhj14qSJAneBa
s+NqfnU3youDrtio2YuxgrE+0ynBi0uKrtLyawXzHoC+dI2ju5sv+g3bkmj/W+uI
m7dk9bKC/u8kKDHaNYp4ZQVJ2xoh1sD/HHlZ8HkDq6mPEn480CAKg1uMTOfbPQi8
5kyviicGqrcU6bhCHeBzDv5zc+0Go/kBYMgdJ+90zsEizuCBa9v7yTEDgRxSXSKe
shF8adhMsZRnGTruSwjF6bMwBtnAgdz3aQjdOOGQO8waUfKFtg3ZEfaH6pe4RH8G
wb3V6ly3KHPUKg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:15 2025 by rpki-client