Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b45f21-3ee6-4712-98fc-b89840a74809/1/i7tTj8T48ZhBAGQN2ENXZqYgZyM.mft
File: i7tTj8T48ZhBAGQN2ENXZqYgZyM.mft (raw, json)
Hash identifier: bPGTTmWL2vR0kmMvrePDkDxdyk4MOPu/+BicjN51VG8=
Subject key identifier: A2:A7:14:FC:1B:35:D0:B1:36:1C:E4:0B:66:F5:3E:52:CE:61:B7:E4
Authority key identifier: 8B:BB:53:8F:C4:F8:F1:98:41:00:64:0D:D8:43:57:66:A6:20:67:23
Certificate issuer: /CN=8bbb538fc4f8f1984100640dd8435766a6206723
Certificate serial: 0194BC3BFC6504509F8F5CDDCF44BF42A1CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7tTj8T48ZhBAGQN2ENXZqYgZyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b45f21-3ee6-4712-98fc-b89840a74809/1/i7tTj8T48ZhBAGQN2ENXZqYgZyM.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: F-XmOCCi8zdRGEXsEW8GIj9dotE.roa (hash: aZqtC7YnlJ57aaBe7FRji3vyD3JPHZ6fm+Qh4aIyCFw=)
2: i7tTj8T48ZhBAGQN2ENXZqYgZyM.crl (hash: IzZ8dAKgc0WhadYf2uIOPkrTB8L6973O26aH6OmwVYI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fc:65:04:50:9f:8f:5c:dd:cf:44:bf:42:a1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bbb538fc4f8f1984100640dd8435766a6206723
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=a2a714fc1b35d0b1361ce40b66f53e52ce61b7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4a:75:45:56:2f:83:b3:39:bc:42:d9:2d:e1:
fc:17:55:64:a0:7d:42:aa:f0:d6:f7:a5:77:72:71:
34:58:7c:27:40:e4:ca:eb:a7:31:8d:7d:9c:4b:1e:
4e:f8:6d:df:b0:ad:bd:ad:ff:28:40:f0:90:ab:76:
a6:60:08:d2:75:2f:37:7c:0c:ae:94:78:18:34:28:
c6:e3:6a:be:a9:21:b5:64:10:80:a4:4d:82:4d:42:
6e:f7:ae:96:76:51:dd:03:38:ef:e0:4a:6d:55:b2:
9c:a8:b8:c7:0e:2c:d9:60:b9:89:5f:f8:ee:77:d3:
f5:e5:1d:d4:a6:3c:38:a4:eb:d0:19:19:5d:0e:6f:
63:a0:5f:35:22:a9:4f:60:bb:4f:db:36:97:d5:31:
fe:c1:a2:01:23:99:71:7a:d5:6d:c5:30:04:8d:db:
35:48:9b:5b:12:24:b5:47:cc:6f:8d:7b:00:16:dd:
d8:bf:6e:4e:4b:75:5a:50:e5:0d:25:ce:1d:7a:14:
f9:26:b2:64:fa:84:1a:65:a7:91:93:a7:2d:21:de:
1b:d2:2b:51:24:64:e5:55:60:87:5c:1e:99:5f:51:
6d:a9:ff:56:7c:fc:05:49:70:b6:79:58:72:06:75:
54:02:b4:b7:33:0d:3c:6e:72:dd:74:fc:98:34:62:
58:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A7:14:FC:1B:35:D0:B1:36:1C:E4:0B:66:F5:3E:52:CE:61:B7:E4
X509v3 Authority Key Identifier:
keyid:8B:BB:53:8F:C4:F8:F1:98:41:00:64:0D:D8:43:57:66:A6:20:67:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7tTj8T48ZhBAGQN2ENXZqYgZyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b45f21-3ee6-4712-98fc-b89840a74809/1/i7tTj8T48ZhBAGQN2ENXZqYgZyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b45f21-3ee6-4712-98fc-b89840a74809/1/i7tTj8T48ZhBAGQN2ENXZqYgZyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:04:ad:eb:68:fa:36:17:46:85:04:ca:52:71:89:6b:4b:95:
fe:e2:91:81:46:ea:f1:63:fd:ce:40:5c:b9:9d:e2:b3:01:9d:
5a:8c:64:42:bd:74:48:a7:d4:d9:57:49:f6:85:5d:cb:bf:35:
55:cd:ce:42:d2:5f:f7:ec:9c:59:6b:76:a7:e9:b2:7b:08:6e:
26:fb:08:90:59:0b:66:a7:d5:ec:0f:ae:85:08:51:e8:ba:f1:
38:c7:b7:11:8f:ca:b7:df:c7:ba:5c:5d:ef:0a:60:cd:9b:3e:
7c:66:63:3d:66:d7:9f:84:a2:6f:c6:94:cf:4f:0b:93:ca:eb:
4a:6a:13:23:32:76:f4:3d:64:cf:f0:25:bd:0d:18:7f:15:1f:
10:51:1d:ba:6c:cb:b1:9b:51:6b:7a:ae:6d:51:78:8e:9a:8b:
be:db:47:5f:e8:b4:1a:45:ed:39:5f:57:6b:35:86:08:e8:a8:
47:db:b2:ed:80:ff:d5:f2:9a:d8:0f:68:3e:e1:97:6e:a8:68:
6b:44:6b:e5:8c:5d:35:7f:ad:95:98:1a:d7:69:73:30:0a:92:
c6:e1:31:88:9c:80:31:dd:35:fd:aa:a0:0d:76:92:d7:05:53:
85:00:52:0b:f9:65:9c:05:31:c0:40:18:cf:3c:4c:f8:9a:78:
18:23:63:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/xlBFCfj1zdz0S/QqHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYmI1MzhmYzRmOGYxOTg0MTAwNjQwZGQ4NDM1NzY2YTYy
MDY3MjMwHhcNMjUwMTMxMTIwMDM1WhcNMjUwMjAxMTIwMDM1WjAzMTEwLwYDVQQD
EyhhMmE3MTRmYzFiMzVkMGIxMzYxY2U0MGI2NmY1M2U1MmNlNjFiN2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEp1RVYvg7M5vELZLeH8F1VkoH1C
qvDW96V3cnE0WHwnQOTK66cxjX2cSx5O+G3fsK29rf8oQPCQq3amYAjSdS83fAyu
lHgYNCjG42q+qSG1ZBCApE2CTUJu966WdlHdAzjv4EptVbKcqLjHDizZYLmJX/ju
d9P15R3Upjw4pOvQGRldDm9joF81IqlPYLtP2zaX1TH+waIBI5lxetVtxTAEjds1
SJtbEiS1R8xvjXsAFt3Yv25OS3VaUOUNJc4dehT5JrJk+oQaZaeRk6ctId4b0itR
JGTlVWCHXB6ZX1Ftqf9WfPwFSXC2eVhyBnVUArS3Mw08bnLddPyYNGJY2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKnFPwbNdCxNhzkC2b1PlLOYbfkMB8GA1UdIwQY
MBaAFIu7U4/E+PGYQQBkDdhDV2amIGcjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTd0VGo4VDQ4WmhCQUdRTjJFTlhacVlnWnlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iNDVmMjEtM2VlNi00NzEyLTk4ZmMt
Yjg5ODQwYTc0ODA5LzEvaTd0VGo4VDQ4WmhCQUdRTjJFTlhacVlnWnlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iNDVmMjEtM2VlNi00NzEyLTk4ZmMtYjg5ODQwYTc0ODA5
LzEvaTd0VGo4VDQ4WmhCQUdRTjJFTlhacVlnWnlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANASt62j6
NhdGhQTKUnGJa0uV/uKRgUbq8WP9zkBcuZ3iswGdWoxkQr10SKfU2VdJ9oVdy781
Vc3OQtJf9+ycWWt2p+myewhuJvsIkFkLZqfV7A+uhQhR6LrxOMe3EY/Kt9/Hulxd
7wpgzZs+fGZjPWbXn4Sib8aUz08Lk8rrSmoTIzJ29D1kz/AlvQ0YfxUfEFEdumzL
sZtRa3qubVF4jpqLvttHX+i0GkXtOV9XazWGCOioR9uy7YD/1fKa2A9oPuGXbqho
a0Rr5YxdNX+tlZga12lzMAqSxuExiJyAMd01/aqgDXaS1wVThQBSC/llnAUxwEAY
zzxM+Jp4GCNjkw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:02 2025 by rpki-client