Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
File: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft (raw, json)
Hash identifier: HIX85SP/3UDroDuZE1KS3LgVvjM5491Cnqv863r65BY=
Subject key identifier: FD:89:D8:22:48:DF:67:40:1A:2E:7C:5E:D5:35:96:B1:69:A9:C2:F2
Authority key identifier: FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
Certificate issuer: /CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Certificate serial: 0194BC3C68FD372F3A0575DDAFB3E5A555B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
Manifest number: 0FCF
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl (hash: nLNh4gaxPMbA1Vj/IrwFD+nlR8eb2vsK2ucUzHO6w2k=)
2: h0w_kFKT0XqvvDjFWN0hbdP6R0I.roa (hash: HwjG9qWbKXQOPWt9s3bE5FAbNnpfV2VmVkVACeqa+SM=)
3: mduo7I3wNgYNMDFTnFs9bATZw0U.roa (hash: cwDJD0pk/dLmG1tNo7Q1h2nrGc/1dBKFJ1gp1DO7kqI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:68:fd:37:2f:3a:05:75:dd:af:b3:e5:a5:55:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=fd89d82248df67401a2e7c5ed53596b169a9c2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b3:c7:25:8d:10:d3:12:f6:0e:77:af:a2:a2:
db:e2:8a:67:60:fc:d4:26:f4:2a:a7:dc:42:6f:d8:
6d:d0:c2:00:a2:fc:7d:20:d4:22:66:37:e0:38:d8:
a8:c3:b6:a7:14:d5:2e:f1:91:19:ef:4d:9c:3e:63:
ef:ff:d8:54:26:cf:27:73:6f:d1:de:6e:b5:2a:f4:
26:fb:3b:10:8b:d4:b1:1f:b5:e9:03:da:8f:ee:7c:
30:8e:8b:35:4c:d8:48:e9:51:d1:d1:3d:0f:e5:80:
57:62:31:c4:d8:fd:1e:b5:e6:a7:6e:5f:82:e3:d4:
bc:e6:07:b5:e9:21:ff:59:84:a6:fb:86:3e:35:58:
a7:8d:49:e0:f0:1e:10:96:31:0d:17:38:9c:32:9f:
cc:fd:29:d0:c9:8d:06:79:2c:53:fe:74:a3:66:bd:
c6:a5:f7:d8:7e:29:4c:ce:2a:ef:86:db:e2:0a:59:
4b:7b:10:f7:b8:14:60:97:04:cf:f5:6e:73:8f:8c:
a1:16:92:e3:73:9f:f3:f4:83:70:8c:2d:19:6a:4b:
36:a9:5a:5c:8f:bf:af:3f:ed:e5:f9:8c:59:b5:3d:
20:5b:2f:0f:36:e9:4e:b4:da:b9:39:6f:5d:d7:aa:
89:52:af:14:4d:1b:9c:1a:28:4e:47:1f:0e:39:ea:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:89:D8:22:48:DF:67:40:1A:2E:7C:5E:D5:35:96:B1:69:A9:C2:F2
X509v3 Authority Key Identifier:
keyid:FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f3:d9:cd:59:2b:ee:18:b4:58:ad:d3:7e:1e:e3:c1:fa:94:
1f:1f:ef:af:78:21:88:3d:e2:79:ce:0c:cd:44:54:05:92:15:
72:b2:b6:03:01:44:e7:8f:45:b0:37:d0:08:e6:83:37:a5:00:
c5:50:24:d8:4e:00:79:24:4c:b9:d2:2e:85:46:ba:b4:b7:1d:
d4:b6:19:42:2a:c7:cb:67:bc:82:93:24:bd:c0:07:52:c4:4b:
e2:44:de:27:16:14:30:0d:e2:8c:84:a5:b1:d3:fc:60:ee:8f:
12:2c:31:b7:d5:3a:bc:e6:b7:9b:ac:7d:88:a1:3c:3e:a5:7f:
cc:03:10:6c:63:af:0c:ed:bf:db:98:ea:a1:98:7d:ba:9d:a7:
14:ae:32:67:29:be:5f:83:c5:c9:38:58:47:69:98:be:fb:b4:
96:92:64:d2:f1:8c:14:aa:44:e3:9a:fd:d7:4e:89:46:b7:a8:
36:f2:63:37:1d:e1:8c:6d:4b:93:ea:ef:ab:84:80:74:cd:d2:
76:0c:2c:fb:aa:96:bc:d5:b9:5b:e1:de:a0:ff:fa:24:1c:71:
8f:e5:b1:bf:c9:2b:f6:b3:57:4b:88:14:f4:8b:22:2a:62:ec:
c0:b2:e6:52:cb:6a:15:9b:8c:63:29:92:73:b4:33:cd:01:ba:
13:d5:13:5c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS8PGj9Ny86BXXdr7PlpVW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDBmYjM5ZDZiMTFmZDE1ZmNiYjQxNjM0MDMxNTVkMWQ0
NTVjMDUwHhcNMjUwMTMxMTIwMTAzWhcNMjUwMjAxMTIwMTAzWjAzMTEwLwYDVQQD
EyhmZDg5ZDgyMjQ4ZGY2NzQwMWEyZTdjNWVkNTM1OTZiMTY5YTljMmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLPHJY0Q0xL2DnevoqLb4opnYPzU
JvQqp9xCb9ht0MIAovx9INQiZjfgONiow7anFNUu8ZEZ702cPmPv/9hUJs8nc2/R
3m61KvQm+zsQi9SxH7XpA9qP7nwwjos1TNhI6VHR0T0P5YBXYjHE2P0eteanbl+C
49S85ge16SH/WYSm+4Y+NVinjUng8B4QljENFzicMp/M/SnQyY0GeSxT/nSjZr3G
pffYfilMzirvhtviCllLexD3uBRglwTP9W5zj4yhFpLjc5/z9INwjC0Zaks2qVpc
j7+vP+3l+YxZtT0gWy8PNulOtNq5OW9d16qJUq8UTRucGihORx8OOerNiQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFP2J2CJI32dAGi58XtU1lrFpqcLyMB8GA1UdIwQY
MBaAFPrQ+znWsR/RX8u0FjQDFV0dRVwFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10RDdPZGF4SDlGZnk3UVdOQU1WWFIxRlhBVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvMzA0ZTNkLTFmMGUtNDRlYi1iMmMx
LWU3OTJmODljYmNlMi8xLzEtdEQ3T2RheEg5RmZ5N1FXTkFNVlhSMUZYQVUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VkLzMwNGUzZC0xZjBlLTQ0ZWItYjJjMS1lNzkyZjg5Y2Jj
ZTIvMS8xLXREN09kYXhIOUZmeTdRV05BTVZYUjFGWEFVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPPZ
zVkr7hi0WK3Tfh7jwfqUHx/vr3ghiD3iec4MzURUBZIVcrK2AwFE549FsDfQCOaD
N6UAxVAk2E4AeSRMudIuhUa6tLcd1LYZQirHy2e8gpMkvcAHUsRL4kTeJxYUMA3i
jISlsdP8YO6PEiwxt9U6vOa3m6x9iKE8PqV/zAMQbGOvDO2/25jqoZh9up2nFK4y
Zym+X4PFyThYR2mYvvu0lpJk0vGMFKpE45r9106JRreoNvJjNx3hjG1Lk+rvq4SA
dM3Sdgws+6qWvNW5W+HeoP/6JBxxj+Wxv8kr9rNXS4gU9IsiKmLswLLmUstqFZuM
YymSc7QzzQG6E9UTXA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:49 2025 by rpki-client