Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
File: fWG4N46PNorkmY1Rw6ms5kFI1s0.mft (raw, json)
Hash identifier: o39ZGkYZ2DJxDKInAhE5pYUkXa85izyslvaaktFcCmE=
Subject key identifier: 1B:10:5B:6B:87:BE:69:51:D8:B1:1D:FD:E0:4A:34:04:CD:09:67:96
Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
Certificate issuer: /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Certificate serial: 0194BC04FDD0A8266401AE80465C8DED2504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
Manifest number: 143D
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: fWG4N46PNorkmY1Rw6ms5kFI1s0.crl (hash: JNCSphjPZhjK7alPuF7rxoCM4zL4hJ53mb7PoKXzyhc=)
2: twpPI3s0M0CHfpsRtqw1y94__1Q.roa (hash: 9YvNSCEe8cpoY/bygIYeVTlYIEufzY0ULaNZDfOCQKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fd:d0:a8:26:64:01:ae:80:46:5c:8d:ed:25:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=1b105b6b87be6951d8b11dfde04a3404cd096796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:23:35:34:05:0c:f8:bf:6d:53:14:85:8c:
db:8b:ef:18:7d:b2:9d:2b:45:3b:f1:96:86:5f:c6:
42:4e:2c:6f:1c:06:a0:f7:03:10:c4:b7:0b:83:1d:
29:b6:dd:2e:7d:21:21:7e:bc:c6:da:dd:7e:58:4f:
4a:2b:d9:1a:b4:1d:1c:a4:a5:42:0a:b8:5d:80:ac:
10:fd:c6:68:16:49:cb:98:c4:ba:ed:ff:8d:d3:7e:
81:a7:1d:8b:28:ed:a7:4c:79:83:4b:9f:8e:6b:81:
bf:50:72:8a:36:3a:21:1f:2b:72:26:d6:e8:eb:f1:
99:33:5b:43:8f:b5:11:4f:f0:c2:e2:af:8c:69:b7:
3d:c6:0e:84:49:15:53:e6:76:f7:77:39:d8:e1:12:
1b:b1:14:40:47:8a:d7:26:1f:bb:1a:e0:83:55:aa:
ee:9e:f6:38:c5:e5:1c:d6:3c:2e:53:22:e1:c0:d5:
62:e2:a4:90:58:79:c3:42:02:32:91:cb:3e:86:0c:
9a:3c:44:79:46:8f:6e:bf:ca:7c:bd:4c:00:a8:92:
aa:a4:d9:77:5d:b6:3b:7d:7f:c1:17:d5:1d:01:07:
76:d7:12:25:11:e8:98:b9:23:d4:7f:31:cf:9a:f9:
0b:02:be:16:49:d3:a1:a2:9d:bc:16:23:b4:63:63:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:10:5B:6B:87:BE:69:51:D8:B1:1D:FD:E0:4A:34:04:CD:09:67:96
X509v3 Authority Key Identifier:
keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5b:b7:eb:03:3f:6b:43:5c:8f:f3:1a:44:a1:18:d9:c0:09:
20:1c:92:eb:13:fb:55:57:ec:7b:7a:a5:04:b1:31:33:7c:dd:
09:2d:b7:7a:73:5a:c3:e0:bf:2e:74:3e:6b:bc:da:4a:38:1c:
16:4a:9b:a6:7b:c7:06:4f:91:c2:b0:cd:b7:b7:18:fb:5f:de:
26:cc:f3:b6:5f:91:7f:4f:42:1b:44:83:0f:4a:26:49:4e:f9:
84:8a:69:c0:37:8c:a4:6b:65:e1:a3:ba:55:08:94:95:33:59:
d0:d0:02:bf:e2:55:79:1b:63:7a:e2:db:30:07:93:06:84:73:
8a:08:fd:0a:e5:bb:37:29:f3:0d:d4:59:1f:27:a4:f8:40:ad:
5d:82:8a:71:4b:3a:c7:48:45:c9:ec:5a:d5:5a:61:25:6d:0d:
39:7a:f5:0c:7d:e5:4d:0e:bf:6c:eb:7d:a2:94:91:bf:c4:49:
a9:89:b7:70:80:a6:de:59:c1:b7:5c:2f:ed:56:9f:91:66:f1:
30:0d:10:15:26:9f:df:2b:55:7c:b5:7d:82:80:c6:09:7d:de:
ea:52:3c:a1:29:73:16:60:46:a7:79:a2:14:c1:be:10:57:3b:
44:11:83:98:e5:6f:7e:50:9d:76:a8:b0:32:a7:32:06:58:73:
c4:3d:fb:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BP3QqCZkAa6ARlyN7SUEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNjFiODM3OGU4ZjM2OGFlNDk5OGQ1MWMzYTlhY2U2NDE0
OGQ2Y2QwHhcNMjUwMTMxMTEwMDMxWhcNMjUwMjAxMTEwMDMxWjAzMTEwLwYDVQQD
EygxYjEwNWI2Yjg3YmU2OTUxZDhiMTFkZmRlMDRhMzQwNGNkMDk2Nzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6kjNTQFDPi/bVMUhYzbi+8YfbKd
K0U78ZaGX8ZCTixvHAag9wMQxLcLgx0ptt0ufSEhfrzG2t1+WE9KK9katB0cpKVC
CrhdgKwQ/cZoFknLmMS67f+N036Bpx2LKO2nTHmDS5+Oa4G/UHKKNjohHytyJtbo
6/GZM1tDj7URT/DC4q+Mabc9xg6ESRVT5nb3dznY4RIbsRRAR4rXJh+7GuCDVaru
nvY4xeUc1jwuUyLhwNVi4qSQWHnDQgIykcs+hgyaPER5Ro9uv8p8vUwAqJKqpNl3
XbY7fX/BF9UdAQd21xIlEeiYuSPUfzHPmvkLAr4WSdOhop28FiO0Y2PghQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsQW2uHvmlR2LEd/eBKNATNCWeWMB8GA1UdIwQY
MBaAFH1huDeOjzaK5JmNUcOprOZBSNbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZldHNE40NlBOb3JrbVkxUnc2bXM1a0ZJMXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZDgyMWItMzQ1Mi00MjdhLThlNDQt
ZDE2ZTRhZTYxZjgwLzEvZldHNE40NlBOb3JrbVkxUnc2bXM1a0ZJMXMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZDgyMWItMzQ1Mi00MjdhLThlNDQtZDE2ZTRhZTYxZjgw
LzEvZldHNE40NlBOb3JrbVkxUnc2bXM1a0ZJMXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlu36wM/
a0Ncj/MaRKEY2cAJIByS6xP7VVfse3qlBLExM3zdCS23enNaw+C/LnQ+a7zaSjgc
FkqbpnvHBk+RwrDNt7cY+1/eJszztl+Rf09CG0SDD0omSU75hIppwDeMpGtl4aO6
VQiUlTNZ0NACv+JVeRtjeuLbMAeTBoRzigj9CuW7NynzDdRZHyek+ECtXYKKcUs6
x0hFyexa1VphJW0NOXr1DH3lTQ6/bOt9opSRv8RJqYm3cICm3lnBt1wv7VafkWbx
MA0QFSaf3ytVfLV9goDGCX3e6lI8oSlzFmBGp3miFMG+EFc7RBGDmOVvflCddqiw
MqcyBlhzxD37iQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:21:15 2025 by rpki-client