Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
File: FXM_-CvgC0GpkN7WtysEy3v1gNc.mft (raw, json)
Hash identifier: IdHQvysFJj8OUUJVC/QWBcNRkBzWW5Jc2XfeR8IBsuY=
Subject key identifier: 87:8C:B6:EA:88:BF:B6:ED:30:39:1F:A0:B9:32:E1:68:75:69:9B:EF
Authority key identifier: 15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
Certificate issuer: /CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Certificate serial: 0194BC7280F2024C5AD21880469D0DC8915A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: 64zRShTV31-oIpx-wKCS8H98LZE.roa (hash: BgDFhrJmyJFk7YH+jYYjlsS94cvZOyBrU+0fh461ZcY=)
2: FXM_-CvgC0GpkN7WtysEy3v1gNc.crl (hash: dkjzT3POxKyPq9Ol/edhVCClYIetnkPFY/2m6deFDOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:80:f2:02:4c:5a:d2:18:80:46:9d:0d:c8:91:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=878cb6ea88bfb6ed30391fa0b932e16875699bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:21:33:7f:be:89:8d:8c:a0:11:fb:32:c1:
26:ea:03:93:17:bd:ba:50:1f:2e:55:5d:b3:f2:7e:
71:cf:0d:33:66:44:25:c2:78:2a:97:c4:f9:90:02:
31:98:99:c0:61:5b:d2:f2:1a:ca:fc:38:cc:a4:89:
21:11:73:fb:f1:4c:c6:3a:ef:fa:52:f8:af:44:72:
da:3b:93:be:07:48:fb:b3:46:c0:cd:89:2b:85:65:
3d:84:07:7a:85:36:ce:29:c1:b9:55:94:d1:c2:ef:
22:48:92:74:22:af:4b:1c:8d:4c:cb:5a:eb:90:36:
d6:e2:a7:73:08:3b:e8:28:48:46:88:89:14:4e:1d:
8f:69:3b:43:b7:99:da:91:8f:26:ef:0b:17:6d:5a:
bd:f4:d6:2e:35:25:28:1f:56:75:7f:64:d3:81:ff:
48:8d:08:a2:6e:a0:b3:08:97:ca:7b:88:e5:80:a6:
35:d8:a5:19:b6:4b:1e:07:9e:3f:a5:56:41:b7:0b:
6b:72:b5:f2:a5:22:77:6d:9e:92:a6:46:aa:2e:85:
d3:ec:b3:79:cf:c2:21:8f:1b:69:83:e7:5b:ff:50:
45:68:cc:ba:7e:d8:7e:df:bf:a9:fa:f8:0e:c8:65:
ae:cb:4f:08:45:f4:fb:f3:96:31:35:4b:c5:fc:d1:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8C:B6:EA:88:BF:B6:ED:30:39:1F:A0:B9:32:E1:68:75:69:9B:EF
X509v3 Authority Key Identifier:
keyid:15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c9:14:2d:59:0b:02:f7:24:47:b7:81:5b:3b:72:e9:55:92:
85:2f:73:60:cc:53:4b:13:c2:13:c5:0e:31:04:43:7a:a5:8f:
28:84:a5:75:01:1e:cd:5c:9a:4a:42:17:5e:1d:11:ce:c4:9b:
16:15:17:dc:97:9e:1a:b4:f3:e7:2e:f8:92:1c:73:bd:e5:ab:
7c:ea:6d:7b:4b:7b:ec:d8:5d:aa:75:25:b6:dc:bc:c5:6e:7a:
a3:ba:95:94:0f:e6:2f:df:bd:54:b5:2f:30:b8:67:5d:71:3c:
fc:06:c8:0b:6a:35:17:e9:78:d1:51:7a:d1:bd:48:29:61:76:
85:88:44:10:4d:e6:03:89:6a:3e:df:72:70:8f:f7:72:42:d1:
86:ec:54:7a:06:95:00:c0:cf:e1:50:92:6c:eb:b0:e6:0e:56:
1b:71:bc:f6:74:6b:84:9d:3b:df:51:e5:fc:16:1b:5e:fd:92:
5e:bb:9b:d1:83:12:9f:b7:94:0b:6d:ac:d9:13:46:d6:f7:f2:
ef:48:56:c1:01:0c:0e:72:e6:7a:b6:e0:43:7e:29:4b:40:a1:
ed:16:30:f3:8b:8f:f3:b8:ce:18:cd:10:53:1a:30:a4:9a:e2:
ff:42:88:77:0d:f4:6e:dc:23:01:38:80:66:c4:2b:01:d1:64:
5a:63:d0:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8coDyAkxa0hiARp0NyJFaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NzMzZmY4MmJlMDBiNDFhOTkwZGVkNmI3MmIwNGNiN2Jm
NTgwZDcwHhcNMjUwMTMxMTMwMDA4WhcNMjUwMjAxMTMwMDA4WjAzMTEwLwYDVQQD
Eyg4NzhjYjZlYTg4YmZiNmVkMzAzOTFmYTBiOTMyZTE2ODc1Njk5YmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQIhM3++iY2MoBH7MsEm6gOTF726
UB8uVV2z8n5xzw0zZkQlwngql8T5kAIxmJnAYVvS8hrK/DjMpIkhEXP78UzGOu/6
UvivRHLaO5O+B0j7s0bAzYkrhWU9hAd6hTbOKcG5VZTRwu8iSJJ0Iq9LHI1My1rr
kDbW4qdzCDvoKEhGiIkUTh2PaTtDt5nakY8m7wsXbVq99NYuNSUoH1Z1f2TTgf9I
jQiibqCzCJfKe4jlgKY12KUZtkseB54/pVZBtwtrcrXypSJ3bZ6SpkaqLoXT7LN5
z8Ihjxtpg+db/1BFaMy6fth+37+p+vgOyGWuy08IRfT785YxNUvF/NFtXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeMtuqIv7btMDkfoLky4Wh1aZvvMB8GA1UdIwQY
MBaAFBVzP/gr4AtBqZDe1rcrBMt79YDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhNXy1DdmdDMEdwa043V3R5c0V5M3YxZ05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lYjVkY2UtZDI4Ni00ODI1LWE0MWMt
YjJiZDY2ODg5YzI5LzEvRlhNXy1DdmdDMEdwa043V3R5c0V5M3YxZ05jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lYjVkY2UtZDI4Ni00ODI1LWE0MWMtYjJiZDY2ODg5YzI5
LzEvRlhNXy1DdmdDMEdwa043V3R5c0V5M3YxZ05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8kULVkL
AvckR7eBWzty6VWShS9zYMxTSxPCE8UOMQRDeqWPKISldQEezVyaSkIXXh0RzsSb
FhUX3JeeGrTz5y74khxzveWrfOpte0t77NhdqnUltty8xW56o7qVlA/mL9+9VLUv
MLhnXXE8/AbIC2o1F+l40VF60b1IKWF2hYhEEE3mA4lqPt9ycI/3ckLRhuxUegaV
AMDP4VCSbOuw5g5WG3G89nRrhJ0731Hl/BYbXv2SXrub0YMSn7eUC22s2RNG1vfy
70hWwQEMDnLmerbgQ34pS0Ch7RYw84uP87jOGM0QUxowpJri/0KIdw30btwjATiA
ZsQrAdFkWmPQXg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:53 2025 by rpki-client