Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
File: 1-ggEoOt5W4aCwn2inp-iKPFygwY.mft (raw, json)
Hash identifier: WLlRmtv5rkdw99QVwxhtkZ5k281j63nSEUIz7J8ZtE0=
Subject key identifier: 3B:64:F9:40:B3:E9:BB:66:D7:67:3E:2B:EB:DD:71:CD:55:7A:23:AC
Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
Certificate issuer: /CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Certificate serial: 0194BC7325A5EDFBBD814E7777903DDA384F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
Manifest number: 03A9
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: 0Z-2mc7N_pHYIGxfIlO4U3iMW84.roa (hash: 99tzN5586TEAscs+FoMd66gq2ah//z8X0pHGL4hBGp8=)
2: 1-ggEoOt5W4aCwn2inp-iKPFygwY.crl (hash: D/Dl1J7LhopClCRJrprkOIovZ5MA0ucHeHJnjSKjVpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:25:a5:ed:fb:bd:81:4e:77:77:90:3d:da:38:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=3b64f940b3e9bb66d7673e2bebdd71cd557a23ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:a2:00:40:33:e0:29:8a:11:00:eb:1e:62:
cb:8b:58:9d:b4:ea:d4:17:47:c7:b6:ac:21:bd:ce:
96:3d:10:f9:54:17:36:9b:cf:94:78:f4:21:48:0f:
2a:8a:2b:aa:36:d2:58:9b:86:3b:8b:60:05:27:85:
6c:d4:69:0d:83:01:15:42:7e:17:4e:66:12:4a:18:
ca:81:44:79:31:c2:86:bd:ea:34:78:f9:4b:7c:65:
77:6a:44:16:ed:d1:5b:42:0e:ca:54:d1:db:66:98:
98:78:83:a9:29:07:54:23:56:64:94:25:9c:b8:38:
2d:6f:0b:e0:e9:b2:39:79:a7:5e:9b:f1:7c:cb:98:
91:03:4a:d1:0e:17:da:1d:66:b1:9e:1d:a6:fa:e3:
36:00:95:12:d5:35:1e:8d:0a:1f:ee:9f:70:30:d2:
0c:7a:e5:5f:65:13:08:ef:2e:da:0a:ca:85:d8:85:
d2:bc:37:7d:81:63:2e:6d:2a:a3:7f:36:45:a2:4e:
31:d2:96:36:a3:f0:06:47:99:47:f7:e4:ab:29:a3:
b1:0b:8e:c1:de:bd:5e:01:13:22:c1:78:dc:c2:f1:
f4:87:a6:f6:25:56:2e:f8:26:d5:86:fa:8d:e9:c9:
a5:c5:a5:f5:18:8c:7d:5d:c2:8a:3b:54:b3:8a:7e:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:64:F9:40:B3:E9:BB:66:D7:67:3E:2B:EB:DD:71:CD:55:7A:23:AC
X509v3 Authority Key Identifier:
keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7f:df:12:b9:da:5e:25:0c:f3:8a:18:09:34:96:99:69:74:
00:b9:dd:49:6b:33:cb:ff:f4:2a:a5:e9:30:8f:a7:c1:55:ad:
51:a9:f8:bd:ec:e2:e3:16:29:75:8f:4f:0c:1e:cb:ba:81:71:
cb:43:67:3b:32:cf:6a:67:ac:2b:d4:81:21:19:ca:58:13:a1:
b6:8f:aa:ed:14:6c:31:eb:fd:79:0b:f5:7d:cb:fe:e4:fd:c7:
6b:dd:e9:08:7d:de:31:42:a3:0d:21:fe:7f:29:d2:2d:3f:af:
3f:3e:6f:59:71:85:0e:cb:e1:6b:ef:9b:2f:51:ed:51:be:db:
31:db:33:df:c6:cb:37:fd:d2:4a:85:08:f0:10:29:77:f7:1a:
f0:6b:61:0d:b3:0f:76:4e:fd:80:67:78:27:10:41:fb:45:5a:
a9:11:2a:79:53:e8:64:6b:d5:c0:f6:f5:02:88:bc:e9:d8:80:
60:d8:d0:13:6c:6c:8f:b8:b8:86:ba:48:f2:d3:21:b2:61:24:
0f:e6:ef:38:69:6c:b0:7b:b9:52:7b:93:8d:14:89:bf:ed:d2:
8e:02:e7:f5:8a:a1:8d:84:fc:ac:10:ff:73:8b:d8:8c:a6:50:
36:36:5c:8b:a9:84:83:87:61:d2:9b:54:c4:ae:35:ec:9b:d9:
3b:7f:ae:15
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS8cyWl7fu9gU53d5A92jhPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMDgwNGEwZWI3OTViODY4MmMyN2RhMjllOWZhMjI4ZjE3
MjgzMDYwHhcNMjUwMTMxMTMwMDUwWhcNMjUwMjAxMTMwMDUwWjAzMTEwLwYDVQQD
EygzYjY0Zjk0MGIzZTliYjY2ZDc2NzNlMmJlYmRkNzFjZDU1N2EyM2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBCiAEAz4CmKEQDrHmLLi1idtOrU
F0fHtqwhvc6WPRD5VBc2m8+UePQhSA8qiiuqNtJYm4Y7i2AFJ4Vs1GkNgwEVQn4X
TmYSShjKgUR5McKGveo0ePlLfGV3akQW7dFbQg7KVNHbZpiYeIOpKQdUI1ZklCWc
uDgtbwvg6bI5eadem/F8y5iRA0rRDhfaHWaxnh2m+uM2AJUS1TUejQof7p9wMNIM
euVfZRMI7y7aCsqF2IXSvDd9gWMubSqjfzZFok4x0pY2o/AGR5lH9+SrKaOxC47B
3r1eARMiwXjcwvH0h6b2JVYu+CbVhvqN6cmlxaX1GIx9XcKKO1Szin4DRQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDtk+UCz6btm12c+K+vdcc1VeiOsMB8GA1UdIwQY
MBaAFPoIBKDreVuGgsJ9op6foijxcoMGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1nZ0VvT3Q1VzRhQ3duMmlucC1pS1BGeWd3WS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvMjdmYWI4LTBkMjUtNGRiZS05Zjhh
LTQyNmE4Y2RjOGU0OS8xLzEtZ2dFb090NVc0YUN3bjJpbnAtaUtQRnlnd1kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RjLzI3ZmFiOC0wZDI1LTRkYmUtOWY4YS00MjZhOGNkYzhl
NDkvMS8xLWdnRW9PdDVXNGFDd24yaW5wLWlLUEZ5Z3dZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3/f
ErnaXiUM84oYCTSWmWl0ALndSWszy//0KqXpMI+nwVWtUan4vezi4xYpdY9PDB7L
uoFxy0NnOzLPamesK9SBIRnKWBOhto+q7RRsMev9eQv1fcv+5P3Ha93pCH3eMUKj
DSH+fynSLT+vPz5vWXGFDsvha++bL1HtUb7bMdsz38bLN/3SSoUI8BApd/ca8Gth
DbMPdk79gGd4JxBB+0VaqREqeVPoZGvVwPb1Aoi86diAYNjQE2xsj7i4hrpI8tMh
smEkD+bvOGlssHu5UnuTjRSJv+3SjgLn9YqhjYT8rBD/c4vYjKZQNjZci6mEg4dh
0ptUxK417JvZO3+uFQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:18 2025 by rpki-client