Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: VjPHpFBvJlnEKzVEhymJb6Kg9hjFbkZ2Y+18gRzDVcU=
Subject key identifier: 1F:AF:18:A4:CF:30:F7:12:BB:25:B2:94:AA:90:01:95:F4:ED:5B:54
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 0194BBCDFE797DD718E0F4CF0AAB7B89C530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: uKVatOuQZlKpz8Izes0PuFJzyhTywT+VLowzRLel3cA=)
2: YlLGMMGfzp4BFnoZ0HiHBmcAlqs.roa (hash: imBK0lUnHzFl1op2tHfNsjuMR3mqpTEborDSGd19hUM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fe:79:7d:d7:18:e0:f4:cf:0a:ab:7b:89:c5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=1faf18a4cf30f712bb25b294aa900195f4ed5b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:5d:19:a6:11:f6:74:4a:bc:ee:2d:b1:05:
2b:81:a4:2e:35:d8:ed:71:b2:44:79:9f:c6:ab:30:
de:77:0c:54:e7:e2:39:24:7b:18:ef:03:95:f2:b9:
9d:49:96:fb:2a:d4:ca:c2:74:e6:85:c9:34:26:0c:
c9:0d:bd:26:f1:df:c8:3a:39:ac:25:ff:37:19:38:
e2:cc:41:54:f1:f1:cf:49:cf:2d:ab:45:de:fb:b5:
89:5f:18:55:36:6f:24:e2:1b:0d:f7:24:66:b4:0e:
6d:d9:b7:cd:eb:15:1c:59:86:ef:13:26:e9:3d:75:
40:cb:f1:fe:50:82:fc:53:7c:99:82:b7:f8:c7:e3:
09:01:44:27:fd:c2:10:61:b5:99:f4:f6:2c:61:64:
17:90:13:02:94:3a:70:89:52:93:90:c5:a2:a6:f7:
34:b4:d4:9a:35:98:b5:2c:f0:d5:2a:8d:5e:c7:9a:
42:a5:3d:99:07:9c:da:93:0c:ea:e4:1a:ae:64:54:
0c:1e:43:b7:e9:6d:9b:b2:92:e4:bb:5b:58:6d:86:
82:c8:48:90:37:31:9e:32:ab:d3:22:7a:cb:97:d7:
a5:a6:28:db:a1:9a:da:89:1d:ef:94:6f:df:70:d7:
41:ba:87:8b:e9:a8:1c:28:8d:29:92:c0:4f:c7:20:
f0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AF:18:A4:CF:30:F7:12:BB:25:B2:94:AA:90:01:95:F4:ED:5B:54
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:be:00:77:10:11:bb:b3:48:b1:56:9f:d5:2d:4f:ee:e1:a0:
13:5f:69:e9:8a:32:c0:4c:1f:6e:41:31:4f:d2:0f:9c:a8:d4:
20:1d:dd:89:87:1e:a3:24:55:e9:c9:d6:b2:3a:a1:cc:b8:74:
30:c7:e0:e2:34:04:72:17:3f:97:18:1e:01:d8:14:3a:de:5e:
5c:81:d7:78:ac:f6:2c:4c:2b:30:74:9c:d2:b6:37:70:85:51:
03:6d:49:ac:78:e5:22:84:1f:d4:7a:fc:fe:42:e7:5c:92:c4:
19:4e:44:19:e7:1e:8c:98:c1:58:0c:da:d6:6e:f4:34:dd:3c:
5b:54:57:5e:b5:8e:68:b6:8c:c1:fa:8b:78:89:d5:c6:16:51:
4e:33:60:35:6c:d5:56:37:4b:30:6f:ee:8b:d5:9a:97:96:6d:
d9:38:cd:2c:c8:69:7a:c4:56:ae:f8:c3:7b:e6:f6:ae:21:e5:
8e:4c:fa:5a:9a:ec:60:29:27:d5:f2:13:cd:3c:e7:fd:1d:84:
2c:4c:a7:c0:80:a3:6a:1a:09:2c:ee:5d:6c:1f:a7:25:b5:2c:
1e:3c:a8:d7:3f:41:67:1d:41:44:10:8b:66:97:47:8b:20:5d:
a3:2c:20:4b:92:b0:93:c9:99:d1:9d:cd:4d:4a:d8:37:de:f2:
f7:17:d7:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zf55fdcY4PTPCqt7icUwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MTE5YTIwNTY4MzE2NzkyNWI5ZjA0MTc0MzEyNjM3YjE2
MDBjMDcwHhcNMjUwMTMxMTAwMDI2WhcNMjUwMjAxMTAwMDI2WjAzMTEwLwYDVQQD
EygxZmFmMThhNGNmMzBmNzEyYmIyNWIyOTRhYTkwMDE5NWY0ZWQ1YjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv9dGaYR9nRKvO4tsQUrgaQuNdjt
cbJEeZ/GqzDedwxU5+I5JHsY7wOV8rmdSZb7KtTKwnTmhck0JgzJDb0m8d/IOjms
Jf83GTjizEFU8fHPSc8tq0Xe+7WJXxhVNm8k4hsN9yRmtA5t2bfN6xUcWYbvEybp
PXVAy/H+UIL8U3yZgrf4x+MJAUQn/cIQYbWZ9PYsYWQXkBMClDpwiVKTkMWipvc0
tNSaNZi1LPDVKo1ex5pCpT2ZB5zakwzq5BquZFQMHkO36W2bspLku1tYbYaCyEiQ
NzGeMqvTInrLl9elpijboZraiR3vlG/fcNdBuoeL6agcKI0pksBPxyDwJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+vGKTPMPcSuyWylKqQAZX07VtUMB8GA1UdIwQY
MBaAFEcRmiBWgxZ5JbnwQXQxJjexYAwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYjM2YTAtMDRlYy00MTkwLWI1OWQt
MmEwZTQ1ODYyYzAzLzEvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hYjM2YTAtMDRlYy00MTkwLWI1OWQtMmEwZTQ1ODYyYzAz
LzEvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjr4AdxAR
u7NIsVaf1S1P7uGgE19p6YoywEwfbkExT9IPnKjUIB3diYceoyRV6cnWsjqhzLh0
MMfg4jQEchc/lxgeAdgUOt5eXIHXeKz2LEwrMHSc0rY3cIVRA21JrHjlIoQf1Hr8
/kLnXJLEGU5EGecejJjBWAza1m70NN08W1RXXrWOaLaMwfqLeInVxhZRTjNgNWzV
VjdLMG/ui9Wal5Zt2TjNLMhpesRWrvjDe+b2riHljkz6WprsYCkn1fITzTzn/R2E
LEynwICjahoJLO5dbB+nJbUsHjyo1z9BZx1BRBCLZpdHiyBdoywgS5Kwk8mZ0Z3N
TUrYN97y9xfXAQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:58 2025 by rpki-client