
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
File: 94ItRZflST0VF4v7EOaEHdF-WJc.mft (raw, json)
Hash identifier: h7jXZPi5qyUngJjG2u13SC+/DR/0hCYgcHSPQwuW/O8=
Subject key identifier: 44:2F:00:43:79:0C:89:30:9F:EC:14:CB:AB:DB:DF:22:CC:7D:85:9E
Authority key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
Certificate issuer: /CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Certificate serial: 0194BC4B1C1EF4D13FA057809DE621B4435A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:17:06 +0000
Manifest this update: Fri 31 Jan 2025 12:17:06 +0000
Manifest next update: Sat 01 Feb 2025 12:17:06 +0000
Files and hashes: 1: 1YmAF7f_m5KPGo_OwiMLBR1JW5M.roa (hash: UAkDP6iNOKZ++HkTLAbL+chM5gUSSrJ7CaImjH0oho8=)
2: 8IPy-th6QBkZVGcJBRGxaY1ixxE.roa (hash: fD6Nl6TCQyt8AiPaTgCfKVtFsiJXNxpYLFBwwdK0IYw=)
3: 94ItRZflST0VF4v7EOaEHdF-WJc.crl (hash: MzaJswSeJPkg56H7mmBFoRjJvEyqb4OkaXYfP+GCHF8=)
4: En9vXJm7XWjYXN5tMXgE82FcYWY.roa (hash: U0ZcoSNs7yuylkfmvka9vQooaxrwx4TKjkqWeYLwaY8=)
5: VD6wEJYNAt-3ccOgOQEtYbRpD0A.roa (hash: 8S53UWk8y2kICWluONZMk3V/wk1nRogIOqOUIQmbX3U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:4b:1c:1e:f4:d1:3f:a0:57:80:9d:e6:21:b4:43:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Validity
Not Before: Jan 31 12:17:06 2025 GMT
Not After : Feb 1 12:17:06 2025 GMT
Subject: CN=442f0043790c89309fec14cbabdbdf22cc7d859e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:97:55:0e:52:b5:d5:a5:32:b6:31:8f:e9:
d1:a8:40:34:e6:05:aa:41:04:54:da:2d:87:4c:f6:
ce:ac:43:1f:f7:b1:1d:6d:40:f2:5a:54:f4:2d:22:
7b:1c:00:a1:4e:fe:54:ad:56:1f:4c:b7:8d:32:88:
aa:64:75:93:5a:ad:78:f6:89:49:03:49:ae:0a:4d:
a4:8a:7b:ac:c3:79:41:b5:ad:f7:09:2b:76:92:78:
4e:64:96:d5:d5:d3:0b:25:53:d0:a7:87:83:59:77:
b1:9e:d7:e0:28:ec:95:54:4b:fd:92:96:6e:fe:50:
4a:cd:b8:0b:8c:b2:30:b6:14:32:87:20:2d:e1:61:
11:54:c3:0a:28:04:98:13:96:4f:4d:22:d1:c9:75:
ea:a3:64:d9:bd:1f:81:69:24:b6:b1:a4:df:55:af:
d9:3d:77:9b:cc:84:f3:a9:db:a6:44:37:4c:80:9a:
ee:dc:d5:3c:69:74:a8:09:20:83:ba:84:73:16:37:
d4:63:3b:69:e5:85:6a:cb:6d:a7:b4:07:4c:1e:68:
00:75:c6:ee:7e:0c:8d:a5:6a:95:78:7b:4f:ed:34:
60:3a:09:26:c4:c5:c4:cf:6d:f4:3c:c0:40:52:7a:
1e:1f:63:4e:21:29:72:20:dd:fa:00:81:6e:e4:dd:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2F:00:43:79:0C:89:30:9F:EC:14:CB:AB:DB:DF:22:CC:7D:85:9E
X509v3 Authority Key Identifier:
keyid:F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:37:aa:6e:26:57:52:f7:dc:23:f9:23:99:36:83:20:4d:62:
0d:78:86:8b:4e:01:a1:7b:ee:e3:d5:f0:71:1c:2e:79:e2:73:
b6:c1:2e:77:46:9a:a5:a3:b7:5a:7e:be:2d:5c:58:c9:98:3c:
61:1b:8a:00:c5:04:97:73:c8:4f:1e:bd:36:ee:06:d1:fd:54:
44:d9:a7:b3:26:4e:ce:d8:d7:28:9b:d1:e6:c9:34:5b:f8:ea:
3e:38:b3:c1:97:e1:88:87:7c:12:b8:1b:a5:6b:09:7e:53:98:
3d:4e:9f:63:83:29:5b:00:79:c9:48:c7:9d:ae:7e:cb:f0:7a:
49:cb:26:08:8b:7d:e0:92:13:89:c7:12:c6:bb:9a:53:2e:ba:
8e:82:21:78:d1:24:aa:26:ff:1e:42:11:ac:49:e1:b2:b4:fe:
48:ab:9b:a0:e9:57:d2:95:61:e8:0b:07:ee:17:5b:b1:f8:6e:
79:ab:a7:56:ea:a6:46:f1:c5:41:2e:2b:e4:c0:ab:cd:fb:90:
cd:3a:75:b4:c9:c6:ec:d0:71:4a:80:39:5a:4c:3c:5d:2f:39:
5f:94:06:75:32:13:8c:58:16:eb:4f:b5:f9:b4:47:fc:b1:14:
a3:67:75:e4:78:e9:e7:05:3e:ed:ab:0b:71:d6:5e:f6:bb:59:
72:30:4a:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8Sxwe9NE/oFeAneYhtENaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODIyZDQ1OTdlNTQ5M2QxNTE3OGJmYjEwZTY4NDFkZDE3
ZTU4OTcwHhcNMjUwMTMxMTIxNzA2WhcNMjUwMjAxMTIxNzA2WjAzMTEwLwYDVQQD
Eyg0NDJmMDA0Mzc5MGM4OTMwOWZlYzE0Y2JhYmRiZGYyMmNjN2Q4NTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudeXVQ5StdWlMrYxj+nRqEA05gWq
QQRU2i2HTPbOrEMf97EdbUDyWlT0LSJ7HAChTv5UrVYfTLeNMoiqZHWTWq149olJ
A0muCk2kinusw3lBta33CSt2knhOZJbV1dMLJVPQp4eDWXexntfgKOyVVEv9kpZu
/lBKzbgLjLIwthQyhyAt4WERVMMKKASYE5ZPTSLRyXXqo2TZvR+BaSS2saTfVa/Z
PXebzITzqdumRDdMgJru3NU8aXSoCSCDuoRzFjfUYztp5YVqy22ntAdMHmgAdcbu
fgyNpWqVeHtP7TRgOgkmxMXEz230PMBAUnoeH2NOISlyIN36AIFu5N1NEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQvAEN5DIkwn+wUy6vb3yLMfYWeMB8GA1UdIwQY
MBaAFPeCLUWX5Uk9FReL+xDmhB3RfliXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRJdFJaZmxTVDBWRjR2N0VPYUVIZEYtV0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zMTA4MWEtOGI1YS00OWVjLTkwMzYt
ODYyZTk5OTczZmMzLzEvOTRJdFJaZmxTVDBWRjR2N0VPYUVIZEYtV0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8zMTA4MWEtOGI1YS00OWVjLTkwMzYtODYyZTk5OTczZmMz
LzEvOTRJdFJaZmxTVDBWRjR2N0VPYUVIZEYtV0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDeqbiZX
UvfcI/kjmTaDIE1iDXiGi04BoXvu49XwcRwueeJztsEud0aapaO3Wn6+LVxYyZg8
YRuKAMUEl3PITx69Nu4G0f1URNmnsyZOztjXKJvR5sk0W/jqPjizwZfhiId8Ergb
pWsJflOYPU6fY4MpWwB5yUjHna5+y/B6ScsmCIt94JITiccSxruaUy66joIheNEk
qib/HkIRrEnhsrT+SKuboOlX0pVh6AsH7hdbsfhueaunVuqmRvHFQS4r5MCrzfuQ
zTp1tMnG7NBxSoA5Wkw8XS85X5QGdTITjFgW60+1+bRH/LEUo2d15Hjp5wU+7asL
cdZe9rtZcjBKgA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:45:24 2025 by rpki-client