Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
File: 1-puJ82fU-5UCh3AfYtSgObf2yyA.mft (raw, json)
Hash identifier: FPOwd7Q4dUgzMyoM2FLr2Sj79sVHUbDegETpmcViqEY=
Subject key identifier: 83:9A:AB:1B:AC:A9:F4:59:BC:3B:53:21:1B:66:33:20:0A:50:A9:3C
Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
Certificate issuer: /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Certificate serial: 0195E0B4748F17D7F49DDBC4FF8025B712B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
Manifest number: 12CF
Signing time: Sat 29 Mar 2025 07:01:17 +0000
Manifest this update: Sat 29 Mar 2025 07:01:17 +0000
Manifest next update: Sun 30 Mar 2025 07:01:17 +0000
Files and hashes: 1: 1-puJ82fU-5UCh3AfYtSgObf2yyA.crl (hash: AtjrNH7pC8h4fsM1TyUqGQPb0xA9XVbq0AzA7hplIJ0=)
2: BkhUnEeKLpdw7zqQsCW8fb_TG_I.roa (hash: krWgcFHtgzZmGIlUNG6InVr0KfezPC+cFYoPcdTkKaw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:74:8f:17:d7:f4:9d:db:c4:ff:80:25:b7:12:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Validity
Not Before: Mar 29 07:01:17 2025 GMT
Not After : Mar 30 07:01:17 2025 GMT
Subject: CN=839aab1baca9f459bc3b53211b6633200a50a93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:b5:4e:f6:f5:6a:bb:23:31:ce:17:c4:d6:
14:fb:5d:68:ed:26:f7:00:93:4f:af:ae:b4:23:7c:
ed:41:23:3f:e4:94:34:ba:27:72:a2:1c:f0:52:ce:
a3:93:b3:d9:bb:76:c3:97:e9:40:8a:f7:8f:3b:f1:
7a:db:08:74:af:21:58:68:3a:c2:c3:0b:f7:9b:03:
ea:23:d9:9c:3a:02:cc:93:14:c8:d7:6f:3a:2c:81:
e1:9c:d3:a0:27:25:70:04:75:4b:86:85:e9:38:30:
86:cc:7d:89:79:b0:ec:33:74:83:2c:ef:ec:a7:f8:
49:b7:8b:e1:a3:aa:5e:89:86:50:10:c4:c8:fc:bb:
3e:73:be:53:0d:90:8a:07:37:f9:84:ff:35:8d:50:
c7:ee:b7:62:17:c1:de:bb:0d:e0:c0:5e:f1:bd:26:
ba:91:07:2b:03:a5:83:0c:f6:88:57:31:3a:00:13:
a5:7e:ce:b5:ee:e0:5e:32:9f:ad:59:08:6c:02:8d:
be:c8:fd:89:43:f8:3b:25:10:ce:a9:5f:a1:3a:92:
0e:bc:e1:60:6d:55:c2:51:b8:40:0a:3d:73:55:45:
0f:0a:9e:80:0c:2b:f5:44:a0:a0:2e:04:8a:84:70:
04:68:c8:ae:30:14:bc:6e:34:9b:e0:b8:26:30:9b:
01:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9A:AB:1B:AC:A9:F4:59:BC:3B:53:21:1B:66:33:20:0A:50:A9:3C
X509v3 Authority Key Identifier:
keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:99:7f:92:82:51:50:37:fc:0c:5d:3b:49:8e:55:fb:49:2d:
a8:34:06:1b:ac:19:7c:17:bd:9f:28:4e:15:c2:fb:63:d9:df:
a8:bf:98:2f:02:48:b9:58:29:7c:95:99:a2:f9:22:e0:8e:6e:
42:a1:4f:ca:05:d7:80:4d:28:60:71:e8:2e:54:b0:0c:39:bc:
a2:12:97:67:af:ec:c2:ba:32:5b:9a:64:40:a2:03:d2:7d:62:
5d:e2:cb:b2:2f:97:44:4c:95:12:10:f4:f3:66:da:d7:c0:7d:
b4:7d:18:d6:8f:be:66:53:6d:b6:fa:dc:bd:d9:d0:ed:ba:39:
92:6a:a4:44:ba:10:e5:a4:ad:23:0a:4c:31:e1:16:3a:e8:54:
ca:e9:b2:e2:41:40:2b:66:bc:5d:0a:90:b4:be:fd:82:3f:04:
38:22:43:26:56:a6:5a:f8:87:72:8e:1e:ed:44:ca:7b:f6:e2:
b4:61:c1:fd:30:6a:d7:04:ec:41:97:4c:32:51:05:92:00:36:
c6:a2:03:d4:ca:42:7a:fb:e6:88:54:55:00:a4:96:a8:61:a3:
aa:8b:b1:e4:b2:5c:a3:f5:ce:a0:1a:de:66:e2:23:0e:9f:92:
a1:02:e6:b1:b9:cb:cf:98:a6:e1:60:8e:aa:6e:f6:3d:d7:02:
e5:a8:99:5c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZXgtHSPF9f0ndvE/4AltxK2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhOWI4OWYzNjdkNGZiOTUwMjg3NzAxZjYyZDRhMDM5Yjdm
NmNiMjAwHhcNMjUwMzI5MDcwMTE3WhcNMjUwMzMwMDcwMTE3WjAzMTEwLwYDVQQD
Eyg4MzlhYWIxYmFjYTlmNDU5YmMzYjUzMjExYjY2MzMyMDBhNTBhOTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIS1Tvb1arsjMc4XxNYU+11o7Sb3
AJNPr660I3ztQSM/5JQ0uidyohzwUs6jk7PZu3bDl+lAivePO/F62wh0ryFYaDrC
wwv3mwPqI9mcOgLMkxTI1286LIHhnNOgJyVwBHVLhoXpODCGzH2JebDsM3SDLO/s
p/hJt4vho6peiYZQEMTI/Ls+c75TDZCKBzf5hP81jVDH7rdiF8Heuw3gwF7xvSa6
kQcrA6WDDPaIVzE6ABOlfs617uBeMp+tWQhsAo2+yP2JQ/g7JRDOqV+hOpIOvOFg
bVXCUbhACj1zVUUPCp6ADCv1RKCgLgSKhHAEaMiuMBS8bjSb4LgmMJsBnQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIOaqxusqfRZvDtTIRtmMyAKUKk8MB8GA1UdIwQY
MBaAFPqbifNn1PuVAodwH2LUoDm39ssgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1wdUo4MmZVLTVVQ2gzQWZZdFNnT2JmMnl5QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvOTg5MzNhLTc1ODEtNDk3OS05MTIx
LTBlMWE2OGM3NTYzYi8xLzEtcHVKODJmVS01VUNoM0FmWXRTZ09iZjJ5eUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY1Lzk4OTMzYS03NTgxLTQ5NzktOTEyMS0wZTFhNjhjNzU2
M2IvMS8xLXB1SjgyZlUtNVVDaDNBZll0U2dPYmYyeXlBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5l/
koJRUDf8DF07SY5V+0ktqDQGG6wZfBe9nyhOFcL7Y9nfqL+YLwJIuVgpfJWZovki
4I5uQqFPygXXgE0oYHHoLlSwDDm8ohKXZ6/swroyW5pkQKID0n1iXeLLsi+XREyV
EhD082ba18B9tH0Y1o++ZlNttvrcvdnQ7bo5kmqkRLoQ5aStIwpMMeEWOuhUyumy
4kFAK2a8XQqQtL79gj8EOCJDJlamWviHco4e7UTKe/bitGHB/TBq1wTsQZdMMlEF
kgA2xqID1MpCevvmiFRVAKSWqGGjqoux5LJco/XOoBreZuIjDp+SoQLmsbnLz5im
4WCOqm72PdcC5aiZXA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:24:06 2025 by rpki-client