Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
File: f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft (raw, json)
Hash identifier: HehqLg5zcLxnjYwmEZJdWuRVZjlMvIKz9qj2MEELvmA=
Subject key identifier: 4D:51:28:8C:4F:F6:E1:8A:52:E8:65:18:C9:E1:A5:11:05:38:40:23
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 0195E0464512B883B69EC46B8BC418702DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
Manifest number: 14D5
Signing time: Sat 29 Mar 2025 05:00:56 +0000
Manifest this update: Sat 29 Mar 2025 05:00:56 +0000
Manifest next update: Sun 30 Mar 2025 05:00:56 +0000
Files and hashes: 1: GKu-p3Q8C03WVkqTxeqIm4KQHug.roa (hash: 5kTKiqqZ4O9hXOBIdFP3srftx/gxN3ZsqUi1asP5Tl4=)
2: MIlrmDyeh2Gw5nZXpHwXA10utvs.roa (hash: p7ozlo1FzsyA0vjUlUQa269LV8guWlviSsPK/gn1xNc=)
3: eoD1wEJHLtPytux_2izY3N84WK0.roa (hash: JpmlQ8BeWdKkWA7+xPyhsWmh4I0l0qsO/IK1kw61GVo=)
4: f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl (hash: 7PFYejtrtlxEEc4TNOyxoKoyQBghaN0E4nd9BL26Kt4=)
5: jCogikP25zW8XDbjaGJp-8DJciE.roa (hash: uxIaj61u2xybHKQFuc4fFPvOnzNBMkarPjLP7RV8T50=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:45:12:b8:83:b6:9e:c4:6b:8b:c4:18:70:2d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Mar 29 05:00:56 2025 GMT
Not After : Mar 30 05:00:56 2025 GMT
Subject: CN=4d51288c4ff6e18a52e86518c9e1a51105384023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:41:44:e6:50:7c:8c:71:45:ac:d4:2b:60:
86:b5:d3:ff:13:59:c7:d9:e5:e2:0a:d4:3e:24:8e:
26:51:c1:f7:92:d3:be:e4:15:b6:a6:a1:13:dc:88:
ce:f4:55:3b:6c:3c:6c:54:dc:36:90:4a:83:95:17:
49:a1:1c:b9:5f:05:40:e6:7d:3f:6b:55:4b:4f:ac:
44:25:57:c9:51:3e:c3:2b:6c:46:e1:25:a5:87:62:
b0:cd:f9:ef:4e:1d:a8:8e:b4:43:87:bd:8a:a0:26:
a5:c7:df:b2:ef:6a:27:f5:39:ec:1c:b1:da:a0:8b:
95:79:dc:52:e8:ef:65:50:e2:e0:2b:69:89:e7:4c:
ef:1a:cf:e1:67:8a:8f:77:ac:f5:d7:49:af:74:b8:
4f:06:bc:2d:c5:e3:32:e8:dc:87:02:04:7f:52:71:
6d:6a:f7:09:c9:07:84:3e:af:bd:36:79:06:ad:c5:
10:03:31:c0:70:c8:50:9a:93:40:e8:3c:90:81:81:
be:84:78:a9:b3:a6:da:02:23:6d:8f:8c:7e:02:b5:
49:07:42:04:69:56:a7:1a:7d:7b:79:8d:8d:f5:fc:
b5:f6:20:4b:9e:74:d2:60:d1:a4:2f:3c:08:30:cb:
b8:c8:36:da:0f:bf:7c:ed:d9:e7:fa:eb:03:68:98:
fc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:51:28:8C:4F:F6:E1:8A:52:E8:65:18:C9:E1:A5:11:05:38:40:23
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6f:ca:4c:dc:2c:de:2f:ba:1e:85:60:8d:27:91:20:f5:bf:
9d:b8:16:87:08:90:8e:80:23:6f:1e:9f:1a:1d:9e:69:fa:62:
aa:fe:1a:50:fa:76:5e:2e:ce:cd:22:8b:83:e4:58:0b:4e:bd:
c0:c3:98:a1:10:87:12:9b:fb:8a:2b:80:38:9c:83:7d:f5:d5:
53:f9:a0:0d:1a:d4:8b:8a:9d:5b:09:8e:c2:90:44:0f:b0:15:
6f:59:96:3a:91:c8:b7:80:00:ae:09:0f:67:ba:c5:24:be:d2:
23:a2:8d:c9:94:c5:4f:4f:7b:67:a8:48:e5:26:6e:51:14:71:
6d:e9:ac:b4:d1:a3:9e:c1:3b:35:97:b8:aa:f8:77:1b:a8:0c:
e8:d9:87:4e:18:0c:81:ff:d8:1f:74:1b:d9:4d:7f:6e:e8:70:
33:04:4e:bb:5e:72:8f:ef:2e:d6:97:71:21:26:22:02:ad:9c:
63:74:54:93:d9:b0:ad:a7:e8:67:e8:f4:05:f7:57:3d:56:e1:
8d:bb:be:85:9f:90:0e:5a:98:ce:b0:30:03:7e:c2:c8:87:16:
4b:ca:6e:cb:93:fd:d6:9c:d4:e0:97:60:10:8e:36:30:ca:bc:
1c:d2:df:4b:a5:09:b7:c2:c7:ed:cb:b0:e7:e9:13:96:bc:91:
c2:c4:57:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRkUSuIO2nsRri8QYcC3PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTE1ZWFkMDk1ZWVkOWFjNGNhYmM1YWI0YWQwYjU4Njdk
OWYwMWIwHhcNMjUwMzI5MDUwMDU2WhcNMjUwMzMwMDUwMDU2WjAzMTEwLwYDVQQD
Eyg0ZDUxMjg4YzRmZjZlMThhNTJlODY1MThjOWUxYTUxMTA1Mzg0MDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkVBROZQfIxxRazUK2CGtdP/E1nH
2eXiCtQ+JI4mUcH3ktO+5BW2pqET3IjO9FU7bDxsVNw2kEqDlRdJoRy5XwVA5n0/
a1VLT6xEJVfJUT7DK2xG4SWlh2KwzfnvTh2ojrRDh72KoCalx9+y72on9TnsHLHa
oIuVedxS6O9lUOLgK2mJ50zvGs/hZ4qPd6z110mvdLhPBrwtxeMy6NyHAgR/UnFt
avcJyQeEPq+9NnkGrcUQAzHAcMhQmpNA6DyQgYG+hHips6baAiNtj4x+ArVJB0IE
aVanGn17eY2N9fy19iBLnnTSYNGkLzwIMMu4yDbaD7987dnn+usDaJj8PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1RKIxP9uGKUuhlGMnhpREFOEAjMB8GA1UdIwQY
MBaAFH9RXq0JXu2axMq8WrStC1hn2fAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFGZXJRbGU3WnJFeXJ4YXRLMExXR2ZaOEJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81YzJhNTktNjAyNS00MDBlLWFiMjgt
ZjBhNjI0ZDQwOTEyLzEvZjFGZXJRbGU3WnJFeXJ4YXRLMExXR2ZaOEJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81YzJhNTktNjAyNS00MDBlLWFiMjgtZjBhNjI0ZDQwOTEy
LzEvZjFGZXJRbGU3WnJFeXJ4YXRLMExXR2ZaOEJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2/KTNws
3i+6HoVgjSeRIPW/nbgWhwiQjoAjbx6fGh2eafpiqv4aUPp2Xi7OzSKLg+RYC069
wMOYoRCHEpv7iiuAOJyDffXVU/mgDRrUi4qdWwmOwpBED7AVb1mWOpHIt4AArgkP
Z7rFJL7SI6KNyZTFT097Z6hI5SZuURRxbemstNGjnsE7NZe4qvh3G6gM6NmHThgM
gf/YH3Qb2U1/buhwMwROu15yj+8u1pdxISYiAq2cY3RUk9mwrafoZ+j0BfdXPVbh
jbu+hZ+QDlqYzrAwA37CyIcWS8puy5P91pzU4JdgEI42MMq8HNLfS6UJt8LH7cuw
5+kTlryRwsRXfQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:05:11 2025 by rpki-client