Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
File: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft (raw, json)
Hash identifier: inLfhNFbRmt39gcCIIZie3w+SWB/fZzo9tbNBHcWkUQ=
Subject key identifier: 2A:6D:74:23:03:B3:F8:C6:A2:6E:45:D8:49:F9:D3:15:D0:C3:9A:07
Authority key identifier: FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35
Certificate issuer: /CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
Certificate serial: 0194BC3BE32FBD0F9A234985439F0CD617C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl (hash: TbcHwS6BTxzLkWxsetiAepEGILGmoVYJsb6f5L9v9nw=)
2: gj7G_bFbDmDYpYp6GKUqBVaPkf0.roa (hash: 636LllEYf1p/aMnvVspv63btZ6guwyZEmYUh7DiMd9c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e3:2f:bd:0f:9a:23:49:85:43:9f:0c:d6:17:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=2a6d742303b3f8c6a26e45d849f9d315d0c39a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:e3:eb:79:91:54:d6:76:42:8e:6f:81:46:
bf:63:8f:19:d0:16:a0:55:df:44:fb:9f:12:de:39:
57:08:50:3a:90:6e:b3:86:68:7b:25:2f:5b:2c:ec:
a7:47:dd:11:61:92:f0:8e:b8:82:cc:55:aa:36:bf:
ec:eb:93:6a:99:cc:4f:36:bd:de:7c:d7:92:eb:b4:
d6:d0:ab:0d:72:e9:61:79:ff:30:cd:c1:76:5d:21:
62:5b:14:65:bd:72:38:85:78:c6:f8:2f:d0:d8:ae:
72:6d:ec:64:49:6c:64:5b:ea:15:56:74:cf:15:a2:
6f:3a:97:2a:a7:b2:67:44:ec:c2:0a:45:b2:96:81:
d6:e3:5f:3e:49:ee:df:26:bc:93:bb:55:ca:7d:da:
21:c0:c7:8d:92:10:ab:b7:6b:df:cb:b2:e8:28:24:
dd:5f:7a:85:e7:da:f6:4e:34:1b:9e:1c:8b:14:02:
98:69:26:b4:3f:25:49:8f:06:17:55:c2:7e:d1:87:
87:db:5c:3e:74:d1:4a:95:54:80:2d:51:5e:b1:4f:
4b:92:2a:ba:4e:00:6f:69:43:7e:be:fd:18:4d:67:
84:18:d0:e3:94:37:d7:50:3b:bd:24:b0:0a:39:db:
49:ad:32:a6:5a:85:f3:0a:c4:17:a2:d3:f3:c1:06:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6D:74:23:03:B3:F8:C6:A2:6E:45:D8:49:F9:D3:15:D0:C3:9A:07
X509v3 Authority Key Identifier:
keyid:FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:51:3a:8f:8d:c6:f2:ed:cd:84:6b:54:5b:83:f5:d0:dc:a8:
06:55:b4:91:78:3e:71:5f:b8:84:26:f1:c9:3c:01:83:60:0b:
82:98:c7:de:fe:06:af:16:27:b1:f4:be:99:07:2d:b9:f8:bc:
c9:3b:c4:3f:fd:dc:98:59:fd:05:33:4f:90:e1:89:f4:82:4e:
da:44:b1:38:0c:20:8d:1e:84:8b:d6:48:3c:2a:d1:81:cb:09:
0a:c8:d9:30:e0:40:8c:f3:96:eb:e8:e5:df:af:13:08:2e:10:
90:cc:b3:8f:a1:21:32:ce:19:5f:08:0b:1e:f3:09:62:fd:82:
6e:ca:5d:e2:7c:c4:95:24:3f:32:a2:c4:3b:cf:5b:e1:79:fa:
96:38:0d:45:61:7e:9f:b1:01:5b:b5:c6:d4:27:54:fd:4f:42:
d7:a0:01:aa:eb:c7:43:68:0f:40:77:a7:07:6e:24:4b:eb:a8:
e6:22:1e:ca:00:a6:39:66:b9:a9:f6:e3:f3:3f:50:48:cf:7a:
a3:6e:73:56:b4:50:53:11:3a:06:9c:5c:0a:0b:21:19:e8:c3:
f3:bf:4b:cc:11:d2:82:88:0e:e6:09:0d:bb:8d:69:15:18:46:
dd:c0:80:22:c0:94:3c:af:6a:36:21:80:37:9a:ac:ef:df:29:
85:1c:24:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+MvvQ+aI0mFQ58M1hfCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjN2NmYWIyNGYxNWNkMjYyMTc2YWYwZDFjY2Q4ODEyN2Ri
ZjYzMzUwHhcNMjUwMTMxMTIwMDI4WhcNMjUwMjAxMTIwMDI4WjAzMTEwLwYDVQQD
EygyYTZkNzQyMzAzYjNmOGM2YTI2ZTQ1ZDg0OWY5ZDMxNWQwYzM5YTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvbj63mRVNZ2Qo5vgUa/Y48Z0Bag
Vd9E+58S3jlXCFA6kG6zhmh7JS9bLOynR90RYZLwjriCzFWqNr/s65NqmcxPNr3e
fNeS67TW0KsNculhef8wzcF2XSFiWxRlvXI4hXjG+C/Q2K5ybexkSWxkW+oVVnTP
FaJvOpcqp7JnROzCCkWyloHW418+Se7fJryTu1XKfdohwMeNkhCrt2vfy7LoKCTd
X3qF59r2TjQbnhyLFAKYaSa0PyVJjwYXVcJ+0YeH21w+dNFKlVSALVFesU9Lkiq6
TgBvaUN+vv0YTWeEGNDjlDfXUDu9JLAKOdtJrTKmWoXzCsQXotPzwQZ7jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCptdCMDs/jGom5F2En50xXQw5oHMB8GA1UdIwQY
MBaAFPx8+rJPFc0mIXavDRzNiBJ9v2M1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hZjJhZGItZmY2OS00YjA0LWE4MDYt
NDZkZDEyMDVkY2ZmLzEvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9hZjJhZGItZmY2OS00YjA0LWE4MDYtNDZkZDEyMDVkY2Zm
LzEvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlE6j43G
8u3NhGtUW4P10NyoBlW0kXg+cV+4hCbxyTwBg2ALgpjH3v4GrxYnsfS+mQctufi8
yTvEP/3cmFn9BTNPkOGJ9IJO2kSxOAwgjR6Ei9ZIPCrRgcsJCsjZMOBAjPOW6+jl
368TCC4QkMyzj6EhMs4ZXwgLHvMJYv2Cbspd4nzElSQ/MqLEO89b4Xn6ljgNRWF+
n7EBW7XG1CdU/U9C16ABquvHQ2gPQHenB24kS+uo5iIeygCmOWa5qfbj8z9QSM96
o25zVrRQUxE6BpxcCgshGejD879LzBHSgogO5gkNu41pFRhG3cCAIsCUPK9qNiGA
N5qs798phRwkcw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:58 2025 by rpki-client