Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft
File: fUOw7HmVHV1VgBM-UympDy_uHFs.mft (raw, json)
Hash identifier: 70MTlEAORWV+qcQx/fhNd+HK1Hx8Aksi+1jw7UBmMNE=
Subject key identifier: CB:FE:A1:06:7C:AC:F0:96:D8:D3:42:E4:86:65:2B:02:2F:32:67:B7
Authority key identifier: 7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
Certificate issuer: /CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Certificate serial: 0194BD85B3B20689739B1E4A374E59A617EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: fUOw7HmVHV1VgBM-UympDy_uHFs.crl (hash: gQbRtCyaIdThSA58fnBpgDH2cNDF1hizZMA2nLDM4J0=)
2: xgmy0sqwA2aGVF5twml3PF6jHVs.roa (hash: TiGnF5pl1wlg4dnvVcdyr5lG9rpTWjsJi0mQ3O+Hoq8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b3:b2:06:89:73:9b:1e:4a:37:4e:59:a6:17:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=cbfea1067cacf096d8d342e486652b022f3267b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:97:13:cc:10:b4:d0:f7:33:ff:63:77:ad:
77:a5:35:18:81:b8:b5:98:58:e0:fd:21:df:92:1b:
c2:c7:45:cb:32:04:b5:fb:13:24:4b:0e:8d:7b:33:
49:4e:32:cf:97:48:59:ec:5a:a0:e4:ab:c0:dd:7f:
d6:b4:0e:9e:d3:fa:01:2d:4d:ad:92:e9:ea:22:65:
63:ea:96:85:4c:99:d4:81:3c:06:6d:27:a5:31:f7:
7f:ac:f5:bd:2e:01:11:88:44:f2:aa:bf:d8:57:fb:
ce:33:47:62:4e:df:25:cd:c1:a0:6b:82:f8:30:0b:
48:f0:40:0f:31:d2:95:90:7b:11:ec:49:90:fb:f2:
fc:2d:6e:93:e3:d9:04:90:3d:e8:15:69:c8:bc:1b:
c0:56:5e:5b:51:bb:aa:0e:bf:97:98:37:3b:00:41:
5e:76:a5:0d:eb:43:22:80:cc:01:5d:c7:6f:58:e1:
47:b0:e0:87:a5:6c:d6:d5:e7:55:f6:28:b4:47:57:
90:36:46:74:c4:24:98:3f:6d:2b:4a:84:66:24:fc:
06:e5:6c:f3:95:61:e7:8c:a5:e4:b9:bc:a8:ce:4e:
09:fe:52:32:b3:86:f5:10:6a:6e:93:ec:29:e0:34:
42:e7:50:be:74:2a:c4:07:d6:df:fe:39:31:cd:22:
98:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FE:A1:06:7C:AC:F0:96:D8:D3:42:E4:86:65:2B:02:2F:32:67:B7
X509v3 Authority Key Identifier:
keyid:7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fd:4d:30:ee:c4:73:1d:59:62:63:d7:94:6f:ce:05:9e:8b:
4f:ef:57:b6:4f:5e:74:5c:37:2b:62:bf:dd:49:83:10:2d:72:
12:7a:68:f9:9f:63:d2:9f:cf:c1:63:36:e2:53:6d:65:ca:1d:
cd:1a:96:63:ec:43:7d:c9:d3:d4:bc:5b:48:fd:8c:43:3a:8d:
d5:e2:17:bc:4b:e3:73:59:3d:33:71:e0:e5:79:26:9a:fe:04:
81:f8:fe:cf:c8:f7:8f:df:15:0d:52:5c:a4:02:36:00:26:04:
dd:11:ff:43:b9:da:65:be:e5:90:ce:5a:ea:b3:a6:3b:5b:67:
b2:d9:32:69:9b:d4:32:f5:44:c7:9d:18:e6:20:fb:42:82:dc:
09:d2:f4:c9:e5:4a:d0:40:ab:60:c9:7e:2a:7a:f4:48:2a:e8:
41:39:22:46:dc:29:be:41:9a:ea:bf:e2:cc:67:ff:b5:db:5b:
75:40:b0:ce:ca:9a:7a:80:f5:f0:93:04:37:2d:e8:fa:07:5a:
6b:f9:98:45:b7:22:98:ed:74:e2:53:e5:25:6b:f6:a3:73:c7:
23:4e:07:b1:a4:77:ea:74:d3:00:98:26:38:4b:bf:13:b2:ec:
0c:91:72:e8:f2:f7:51:89:bc:e5:8e:30:e2:a2:17:d5:b1:13:
1a:1e:0d:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hbOyBolzmx5KN05ZphfuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNDNiMGVjNzk5NTFkNWQ1NTgwMTMzZTUzMjlhOTBmMmZl
ZTFjNWIwHhcNMjUwMTMxMTgwMDQzWhcNMjUwMjAxMTgwMDQzWjAzMTEwLwYDVQQD
EyhjYmZlYTEwNjdjYWNmMDk2ZDhkMzQyZTQ4NjY1MmIwMjJmMzI2N2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJCXE8wQtND3M/9jd613pTUYgbi1
mFjg/SHfkhvCx0XLMgS1+xMkSw6NezNJTjLPl0hZ7Fqg5KvA3X/WtA6e0/oBLU2t
kunqImVj6paFTJnUgTwGbSelMfd/rPW9LgERiETyqr/YV/vOM0diTt8lzcGga4L4
MAtI8EAPMdKVkHsR7EmQ+/L8LW6T49kEkD3oFWnIvBvAVl5bUbuqDr+XmDc7AEFe
dqUN60MigMwBXcdvWOFHsOCHpWzW1edV9ii0R1eQNkZ0xCSYP20rSoRmJPwG5Wzz
lWHnjKXkubyozk4J/lIys4b1EGpuk+wp4DRC51C+dCrEB9bf/jkxzSKYrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMv+oQZ8rPCW2NNC5IZlKwIvMme3MB8GA1UdIwQY
MBaAFH1DsOx5lR1dVYATPlMpqQ8v7hxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlVPdzdIbVZIVjFWZ0JNLVV5bXBEeV91SEZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNjA0ZTAtOTFmYS00ZmU5LWJiMjgt
OTNhNjE5MmIxNzg1LzEvZlVPdzdIbVZIVjFWZ0JNLVV5bXBEeV91SEZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yNjA0ZTAtOTFmYS00ZmU5LWJiMjgtOTNhNjE5MmIxNzg1
LzEvZlVPdzdIbVZIVjFWZ0JNLVV5bXBEeV91SEZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASP1NMO7E
cx1ZYmPXlG/OBZ6LT+9Xtk9edFw3K2K/3UmDEC1yEnpo+Z9j0p/PwWM24lNtZcod
zRqWY+xDfcnT1LxbSP2MQzqN1eIXvEvjc1k9M3Hg5Xkmmv4Egfj+z8j3j98VDVJc
pAI2ACYE3RH/Q7naZb7lkM5a6rOmO1tnstkyaZvUMvVEx50Y5iD7QoLcCdL0yeVK
0ECrYMl+Knr0SCroQTkiRtwpvkGa6r/izGf/tdtbdUCwzsqaeoD18JMENy3o+gda
a/mYRbcimO104lPlJWv2o3PHI04HsaR36nTTAJgmOEu/E7LsDJFy6PL3UYm85Y4w
4qIX1bETGh4NeA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:39 2025 by rpki-client