Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c8d54b-e586-4595-93e2-868babc6dd32/1/fPWJoxF0uISmT9CRrVwsulVFu9w.mft
File: fPWJoxF0uISmT9CRrVwsulVFu9w.mft (raw, json)
Hash identifier: GpYr3d1F9NCS5BmRcp4smODYAzMoMv0oXw+Ake3r/Eg=
Subject key identifier: 50:7D:05:9F:E4:00:0B:6D:DD:4B:25:95:90:B0:F3:24:0D:BB:45:C9
Authority key identifier: 7C:F5:89:A3:11:74:B8:84:A6:4F:D0:91:AD:5C:2C:BA:55:45:BB:DC
Certificate issuer: /CN=7cf589a31174b884a64fd091ad5c2cba5545bbdc
Certificate serial: 018F2795253ABB04C244B2233D995B6578CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPWJoxF0uISmT9CRrVwsulVFu9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c8d54b-e586-4595-93e2-868babc6dd32/1/fPWJoxF0uISmT9CRrVwsulVFu9w.mft
Manifest number: 08B3
Signing time: Mon 29 Apr 2024 02:00:36 +0000
Manifest this update: Mon 29 Apr 2024 02:00:36 +0000
Manifest next update: Tue 30 Apr 2024 02:00:36 +0000
Files and hashes: 1: fPWJoxF0uISmT9CRrVwsulVFu9w.crl (hash: P7sPCggRT6YmVAPfPSUkgMkyeU06Ag9wjYl111yp8UM=)
2: l7gpHa6bLxNbNGbEySco-S3hVIg.roa (hash: XGmxfD0cNQWMmDYJ0G3iEkIiecyovXpHoExMfQFLC/Y=)
3: vixhGnmWI7JMMiZjm-UdvsaIMhY.roa (hash: ELb1Ma1bMVhIemvoF9B3eSpkJpK1kQxve7ZbAaAqocU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:27:95:25:3a:bb:04:c2:44:b2:23:3d:99:5b:65:78:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf589a31174b884a64fd091ad5c2cba5545bbdc
Validity
Not Before: Apr 29 02:00:36 2024 GMT
Not After : Apr 30 02:00:36 2024 GMT
Subject: CN=507d059fe4000b6ddd4b259590b0f3240dbb45c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:da:92:60:96:4e:8f:83:d5:3f:26:5e:43:25:
70:b5:a2:80:27:0c:ad:2c:d4:fb:c3:a4:60:3c:4e:
1f:32:d9:56:60:43:94:db:71:01:ca:c8:3d:c5:cb:
d2:65:7c:8a:cf:b1:dd:2f:41:cf:50:a8:b6:d4:14:
5b:c1:c1:1d:a7:fe:b6:3e:ad:e2:ea:83:72:c0:81:
7c:01:97:3e:04:2c:84:ba:0b:5c:35:5f:21:3b:4a:
86:d7:af:cf:49:d5:73:13:f2:66:c2:01:eb:5b:6c:
0b:fc:3f:84:bf:81:14:b5:65:be:54:6b:b6:3d:11:
13:bc:60:ad:86:ea:52:87:59:c3:df:d8:86:f0:e4:
6b:7c:da:b9:ed:2f:1f:13:a8:c3:bf:47:81:e1:57:
cb:d5:82:54:e8:4b:3e:0a:15:80:87:ef:6a:a4:da:
01:11:e3:f4:8e:1b:24:67:db:dd:a3:05:d6:2b:c0:
61:63:5c:c8:02:17:a6:18:bd:7d:ef:50:5a:52:f8:
76:6d:b9:ce:a7:2e:7c:98:23:1e:fc:d6:65:b9:f7:
3a:c8:ca:91:f3:74:09:83:91:bb:f5:b6:0d:d5:18:
03:72:08:6a:d8:33:71:a7:b9:28:32:e2:b6:ea:74:
1b:b9:51:4e:23:b3:0a:56:81:78:7e:57:5b:34:d9:
d8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7D:05:9F:E4:00:0B:6D:DD:4B:25:95:90:B0:F3:24:0D:BB:45:C9
X509v3 Authority Key Identifier:
keyid:7C:F5:89:A3:11:74:B8:84:A6:4F:D0:91:AD:5C:2C:BA:55:45:BB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPWJoxF0uISmT9CRrVwsulVFu9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c8d54b-e586-4595-93e2-868babc6dd32/1/fPWJoxF0uISmT9CRrVwsulVFu9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c8d54b-e586-4595-93e2-868babc6dd32/1/fPWJoxF0uISmT9CRrVwsulVFu9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:93:80:58:bd:b3:9c:93:fa:52:6e:54:20:ab:b8:ec:ee:56:
d0:5c:b9:58:d2:d2:b8:4c:da:fc:22:fe:03:03:99:f2:1a:20:
a3:9a:71:e2:a5:f7:2a:30:00:13:84:a5:0e:4e:be:61:d5:47:
3e:72:d1:94:97:e2:ac:4f:b9:96:dd:37:55:a1:fe:5b:74:6c:
a5:3b:86:af:38:ac:44:0b:84:24:2d:85:bd:98:a8:20:43:28:
08:4f:18:80:dd:0f:c0:8c:9a:ad:16:a7:b3:ea:89:9a:d0:d3:
bc:a8:4c:34:35:bf:c1:8e:c6:4c:e6:ec:60:d6:94:fd:4a:db:
4d:f6:d8:d0:c1:6d:77:29:0a:d4:77:ad:e1:be:02:5e:0d:69:
40:55:73:2a:bd:8f:e2:aa:88:20:ff:14:b7:c0:4c:9e:b9:fe:
34:1e:fb:9f:78:be:e6:e2:4f:76:6f:c5:69:ce:68:33:ef:eb:
bf:96:ff:64:b7:5f:8d:26:08:24:d1:9c:1c:12:3e:cb:37:99:
fc:37:6d:30:fb:94:da:ae:43:da:e9:22:a0:f0:29:e5:f5:a4:
01:04:57:10:40:87:3b:6e:24:73:55:ee:08:c3:4b:b9:7f:c4:
71:1f:8d:46:7a:4a:7d:0a:a3:ec:73:68:32:cd:ed:0f:28:7f:
d6:d1:34:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8nlSU6uwTCRLIjPZlbZXjMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZjU4OWEzMTE3NGI4ODRhNjRmZDA5MWFkNWMyY2JhNTU0
NWJiZGMwHhcNMjQwNDI5MDIwMDM2WhcNMjQwNDMwMDIwMDM2WjAzMTEwLwYDVQQD
Eyg1MDdkMDU5ZmU0MDAwYjZkZGQ0YjI1OTU5MGIwZjMyNDBkYmI0NWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9qSYJZOj4PVPyZeQyVwtaKAJwyt
LNT7w6RgPE4fMtlWYEOU23EBysg9xcvSZXyKz7HdL0HPUKi21BRbwcEdp/62Pq3i
6oNywIF8AZc+BCyEugtcNV8hO0qG16/PSdVzE/JmwgHrW2wL/D+Ev4EUtWW+VGu2
PRETvGCthupSh1nD39iG8ORrfNq57S8fE6jDv0eB4VfL1YJU6Es+ChWAh+9qpNoB
EeP0jhskZ9vdowXWK8BhY1zIAhemGL1971BaUvh2bbnOpy58mCMe/NZlufc6yMqR
83QJg5G79bYN1RgDcghq2DNxp7koMuK26nQbuVFOI7MKVoF4fldbNNnYMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFB9BZ/kAAtt3UsllZCw8yQNu0XJMB8GA1UdIwQY
MBaAFHz1iaMRdLiEpk/Qka1cLLpVRbvcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlBXSm94RjB1SVNtVDlDUnJWd3N1bFZGdTl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jOGQ1NGItZTU4Ni00NTk1LTkzZTIt
ODY4YmFiYzZkZDMyLzEvZlBXSm94RjB1SVNtVDlDUnJWd3N1bFZGdTl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jOGQ1NGItZTU4Ni00NTk1LTkzZTItODY4YmFiYzZkZDMy
LzEvZlBXSm94RjB1SVNtVDlDUnJWd3N1bFZGdTl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJOAWL2z
nJP6Um5UIKu47O5W0Fy5WNLSuEza/CL+AwOZ8hogo5px4qX3KjAAE4SlDk6+YdVH
PnLRlJfirE+5lt03VaH+W3RspTuGrzisRAuEJC2FvZioIEMoCE8YgN0PwIyarRan
s+qJmtDTvKhMNDW/wY7GTObsYNaU/UrbTfbY0MFtdykK1Het4b4CXg1pQFVzKr2P
4qqIIP8Ut8BMnrn+NB77n3i+5uJPdm/Fac5oM+/rv5b/ZLdfjSYIJNGcHBI+yzeZ
/DdtMPuU2q5D2ukioPAp5fWkAQRXEECHO24kc1XuCMNLuX/EcR+NRnpKfQqj7HNo
Ms3tDyh/1tE07A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:59 2025 by rpki-client