Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier: lJXWrR9bi/jdkmtU6hWobJlsMA292+iAqv9J0Uet80U=
Subject key identifier: 42:DC:23:4A:F8:03:02:0C:04:91:16:FF:3A:87:15:B6:66:DA:DC:DB
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial: 0195E12255FB1FAF8C7D09FC471CF55FFEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number: 14BF
Signing time: Sat 29 Mar 2025 09:01:18 +0000
Manifest this update: Sat 29 Mar 2025 09:01:18 +0000
Manifest next update: Sun 30 Mar 2025 09:01:18 +0000
Files and hashes: 1: R74uc9VabgDHgeKqSIY7mVcIlEk.roa (hash: SIBptA/iA+nbHhZMlZO1SsqsB2uTnNkUJty4C0HxQAw=)
2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: G+qZzWOagBoisOIc9KRcCe7UTdHkQXBqjGq3BO8NqXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:55:fb:1f:af:8c:7d:09:fc:47:1c:f5:5f:fe:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Validity
Not Before: Mar 29 09:01:18 2025 GMT
Not After : Mar 30 09:01:18 2025 GMT
Subject: CN=42dc234af803020c049116ff3a8715b666dadcdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bb:09:a9:b0:70:9d:58:00:5d:b3:71:45:00:
3c:39:a5:bc:cc:4f:93:83:44:bc:15:16:b7:f3:60:
f4:0a:d5:6c:44:50:76:be:f1:77:a0:1e:83:93:73:
5f:c1:b6:e5:e3:68:af:cf:86:f1:87:1b:eb:27:c9:
be:23:5c:44:84:5b:36:75:1c:25:3d:72:e3:ee:b0:
55:75:50:77:25:36:9a:33:c9:1a:a2:f7:91:a5:4d:
e7:e8:76:02:3c:ba:ec:f6:31:07:a1:ee:d8:e3:4f:
4d:33:99:21:23:8f:1a:cf:7e:0a:b1:d4:97:81:4b:
c0:7c:43:68:b9:fa:a7:7b:48:14:94:01:28:0f:75:
a5:2b:af:a9:c3:64:d6:f4:22:09:ae:44:44:8d:2b:
24:29:00:69:34:20:9d:8f:da:94:78:cd:8b:30:50:
3f:73:43:31:a2:a6:5f:05:8f:b6:ea:68:83:8b:51:
27:d4:27:f0:af:97:86:f1:00:08:fb:e0:ef:6c:6e:
88:1e:cc:fc:ee:85:c6:b3:16:38:d7:58:4f:2a:a7:
25:51:f3:8f:61:4b:5d:fb:25:92:4c:30:f4:22:4b:
68:3c:1e:3a:a3:a9:53:0b:45:1a:27:92:5d:62:da:
96:e7:a2:e0:21:39:f4:92:ab:14:5f:53:c3:cf:8b:
f1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DC:23:4A:F8:03:02:0C:04:91:16:FF:3A:87:15:B6:66:DA:DC:DB
X509v3 Authority Key Identifier:
keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2d:f2:72:fa:f6:6f:13:63:9f:00:cf:51:a1:98:de:92:21:
8a:ba:70:b8:d0:1c:f8:a1:b0:d1:d9:b2:af:32:53:2a:1a:a0:
cb:7b:9c:95:18:f8:53:0f:7d:ff:4e:cc:34:1c:fa:64:86:6c:
a3:db:87:a5:9d:23:1a:60:06:ab:a1:90:d0:59:5e:96:4c:c7:
48:06:29:85:6e:ce:d4:6d:4f:46:a2:5b:e0:f2:a5:2f:2d:44:
58:2c:87:18:59:1e:0f:77:f8:6b:6f:d1:2f:3b:18:86:7b:c6:
b1:e2:c3:15:47:5d:d7:fe:22:17:1e:6e:33:68:4e:f1:da:c4:
06:ce:03:1a:8c:4a:b2:45:c2:38:01:3d:fd:66:c2:bc:72:5c:
46:7d:fb:89:c3:31:22:8c:4a:de:13:5e:17:50:62:7a:93:4a:
6c:67:e1:14:88:67:08:06:d9:25:25:da:0e:02:3e:f4:6e:14:
ca:0d:fc:c7:fe:ac:d8:5d:5e:d8:54:25:d7:9d:aa:4b:dc:b7:
36:3f:a4:9d:ed:b4:84:08:83:ab:87:28:17:f6:c3:50:60:1e:
08:8e:54:4b:06:4f:5b:4e:86:ed:61:62:88:ac:13:2f:24:5a:
53:0b:59:8e:a0:7f:9d:f5:98:ca:c9:34:72:bc:60:f8:d5:ea:
15:05:05:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhIlX7H6+MfQn8Rxz1X/7nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMWQ1OGQ2MmRkZDdlNDdhZjIxOTZmZDc1NGJiM2ZmMjY3
OTg5MmEwHhcNMjUwMzI5MDkwMTE4WhcNMjUwMzMwMDkwMTE4WjAzMTEwLwYDVQQD
Eyg0MmRjMjM0YWY4MDMwMjBjMDQ5MTE2ZmYzYTg3MTViNjY2ZGFkY2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbsJqbBwnVgAXbNxRQA8OaW8zE+T
g0S8FRa382D0CtVsRFB2vvF3oB6Dk3Nfwbbl42ivz4bxhxvrJ8m+I1xEhFs2dRwl
PXLj7rBVdVB3JTaaM8kaoveRpU3n6HYCPLrs9jEHoe7Y409NM5khI48az34KsdSX
gUvAfENoufqne0gUlAEoD3WlK6+pw2TW9CIJrkREjSskKQBpNCCdj9qUeM2LMFA/
c0MxoqZfBY+26miDi1En1Cfwr5eG8QAI++DvbG6IHsz87oXGsxY411hPKqclUfOP
YUtd+yWSTDD0IktoPB46o6lTC0UaJ5JdYtqW56LgITn0kqsUX1PDz4vxzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELcI0r4AwIMBJEW/zqHFbZm2tzbMB8GA1UdIwQY
MBaAFH8dWNYt3X5HryGW/XVLs/8meYkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQt
ZTNiOWUwYmFlNmFiLzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQtZTNiOWUwYmFlNmFi
LzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXi3ycvr2
bxNjnwDPUaGY3pIhirpwuNAc+KGw0dmyrzJTKhqgy3uclRj4Uw99/07MNBz6ZIZs
o9uHpZ0jGmAGq6GQ0FlelkzHSAYphW7O1G1PRqJb4PKlLy1EWCyHGFkeD3f4a2/R
LzsYhnvGseLDFUdd1/4iFx5uM2hO8drEBs4DGoxKskXCOAE9/WbCvHJcRn37icMx
IoxK3hNeF1BiepNKbGfhFIhnCAbZJSXaDgI+9G4Uyg38x/6s2F1e2FQl152qS9y3
Nj+kne20hAiDq4coF/bDUGAeCI5USwZPW06G7WFiiKwTLyRaUwtZjqB/nfWYysk0
crxg+NXqFQUFCQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:41:40 2025 by rpki-client