Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
File: fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft (raw, json)
Hash identifier: Cg/iDLJiKhQq5D7asC2SDj1QrcA/FUw6W0gRLE/4oh4=
Subject key identifier: DD:3E:84:58:C0:EB:C6:64:3D:E9:6A:CC:32:A4:03:BD:4B:68:53:4C
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 0195E159B7340DBF1E9CD36FC5A2A21BD426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
Manifest number: 1280
Signing time: Sat 29 Mar 2025 10:01:48 +0000
Manifest this update: Sat 29 Mar 2025 10:01:48 +0000
Manifest next update: Sun 30 Mar 2025 10:01:48 +0000
Files and hashes: 1: Qmn6qMcsYc4tSMLHc4aOlKWHzLY.roa (hash: Z49F7eb8HQunLu54eXsnAFNRgDwdiL3VgHCYWpkpRJk=)
2: fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl (hash: 5Pa4dg4uvWZKN2BMgczG+FOPJ+SolOsHaLkarE8WRn4=)
3: mwGFMLP8urixZJ9W1x_56ovfS3g.roa (hash: FFppZXO5afH6JgZ/GAUgkUjtbJbJsW6ZdAq5a1dyQoM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:b7:34:0d:bf:1e:9c:d3:6f:c5:a2:a2:1b:d4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Mar 29 10:01:48 2025 GMT
Not After : Mar 30 10:01:48 2025 GMT
Subject: CN=dd3e8458c0ebc6643de96acc32a403bd4b68534c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:73:7b:de:ac:8e:81:39:dd:66:9d:6b:c5:
f1:3a:54:a6:62:89:38:e9:6b:ed:7e:6b:e7:e9:84:
72:1c:d5:13:50:51:49:fe:1a:93:8a:53:21:43:d2:
29:a2:30:22:65:de:e5:51:12:10:01:39:8f:96:0a:
c6:09:b0:2f:a1:5d:be:17:73:3e:f3:c4:3d:32:ce:
6d:3e:95:c2:5d:4d:c5:57:e4:65:14:7f:40:60:61:
b0:62:12:53:b7:84:7c:58:01:7b:98:78:8e:d3:92:
4a:35:d5:0f:e3:1b:aa:90:4a:79:aa:e1:72:a3:a2:
63:90:e4:c0:9c:92:7a:de:90:02:30:a0:1e:df:92:
e3:cd:0d:c3:da:1b:93:8e:3d:cd:47:c3:e8:80:c7:
2e:8c:a2:a6:33:ab:54:cb:70:f1:97:cc:05:43:9e:
76:c9:3d:ff:7a:72:ba:96:9f:45:cf:19:9c:42:29:
e3:8f:1d:fc:f0:be:86:5a:55:2c:4a:09:bb:a0:43:
92:07:6c:57:79:56:ed:e3:7a:ba:f9:7a:f6:4f:9b:
4f:94:01:05:b3:01:86:ca:11:4f:06:b8:cf:a9:28:
c5:09:f7:40:c2:97:ad:78:72:cf:91:61:7b:1f:ff:
3a:e9:86:cb:6f:ec:c5:e8:ba:de:dc:c2:ac:d6:c1:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3E:84:58:C0:EB:C6:64:3D:E9:6A:CC:32:A4:03:BD:4B:68:53:4C
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8a:48:78:23:84:7a:3c:50:ae:0b:f1:53:f2:66:00:4f:a1:
62:76:ca:fc:d4:f1:47:36:50:25:4c:9d:a4:5f:9b:b0:8b:9b:
dc:e6:17:64:2e:af:12:e4:7d:76:97:67:e7:69:2b:98:42:7a:
04:d8:23:98:e8:66:8a:c4:93:da:8e:5f:ca:88:28:ea:71:10:
eb:61:83:f5:3f:25:a6:62:ab:30:a4:fd:ca:7b:60:b3:85:45:
27:27:3e:a9:a8:b0:38:2c:ca:9c:94:bb:9d:2b:87:68:ea:66:
e6:45:a1:fe:9a:46:b9:4b:48:5b:5b:f1:db:22:40:65:79:10:
e5:fd:5a:ed:69:ff:9f:15:bf:bc:08:bb:d8:5b:b2:a5:28:45:
4e:08:52:55:e6:e7:42:f9:71:56:f3:82:20:20:d1:c7:a2:cf:
af:82:ad:8f:2a:e1:5a:36:b9:00:6f:46:b7:28:e3:12:3c:85:
95:2a:b3:fb:42:a8:44:3b:d5:32:7c:52:57:ed:6f:91:5f:c4:
3e:2f:bb:b1:b6:5d:9f:2a:01:ae:fb:ba:c9:12:39:09:f7:fa:
af:78:b7:dd:ef:dd:b7:ef:4b:39:8e:39:4d:99:18:e1:fa:e2:
0f:79:2c:84:5d:98:ec:4a:a0:81:1b:d9:18:71:2a:53:29:3b:
1b:c9:47:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWbc0Db8enNNvxaKiG9QmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkN2I0YmNhYmViMjk2MDVlYTUxMWRlOTczZTQ2NzVjNGI4
YTI5ZGYwHhcNMjUwMzI5MTAwMTQ4WhcNMjUwMzMwMTAwMTQ4WjAzMTEwLwYDVQQD
EyhkZDNlODQ1OGMwZWJjNjY0M2RlOTZhY2MzMmE0MDNiZDRiNjg1MzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIVze96sjoE53Wada8XxOlSmYok4
6Wvtfmvn6YRyHNUTUFFJ/hqTilMhQ9IpojAiZd7lURIQATmPlgrGCbAvoV2+F3M+
88Q9Ms5tPpXCXU3FV+RlFH9AYGGwYhJTt4R8WAF7mHiO05JKNdUP4xuqkEp5quFy
o6JjkOTAnJJ63pACMKAe35LjzQ3D2huTjj3NR8PogMcujKKmM6tUy3Dxl8wFQ552
yT3/enK6lp9FzxmcQinjjx388L6GWlUsSgm7oEOSB2xXeVbt43q6+Xr2T5tPlAEF
swGGyhFPBrjPqSjFCfdAwpeteHLPkWF7H/866YbLb+zF6Lre3MKs1sE+zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0+hFjA68ZkPelqzDKkA71LaFNMMB8GA1UdIwQY
MBaAFH17S8q+spYF6lEd6XPkZ1xLiinfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84ODk3ZmQtMTg2Mi00MzkzLWFhNGIt
NDQ3NjE3YTRhNzQ0LzEvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84ODk3ZmQtMTg2Mi00MzkzLWFhNGItNDQ3NjE3YTRhNzQ0
LzEvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIpIeCOE
ejxQrgvxU/JmAE+hYnbK/NTxRzZQJUydpF+bsIub3OYXZC6vEuR9dpdn52krmEJ6
BNgjmOhmisST2o5fyogo6nEQ62GD9T8lpmKrMKT9yntgs4VFJyc+qaiwOCzKnJS7
nSuHaOpm5kWh/ppGuUtIW1vx2yJAZXkQ5f1a7Wn/nxW/vAi72FuypShFTghSVebn
QvlxVvOCICDRx6LPr4KtjyrhWja5AG9GtyjjEjyFlSqz+0KoRDvVMnxSV+1vkV/E
Pi+7sbZdnyoBrvu6yRI5Cff6r3i33e/dt+9LOY45TZkY4friD3kshF2Y7EqggRvZ
GHEqUyk7G8lHfA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:07:05 2025 by rpki-client