Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
File: n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json)
Hash identifier: OT7qxzOHq/6b6QqkkFnwyQK5qMKk2IQvWtQKV9BMhiA=
Subject key identifier: B0:E2:3D:A0:5F:34:F8:AA:59:13:0B:66:2D:1E:B1:B5:02:88:61:2F
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial: 0194BC3C91FDC17DAF375D2B56D9A2E97DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
Manifest number: 0EE0
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: dWB5v_50s28dCnQL8B8bFn58q18.roa (hash: pyj99aGAlWW7KJ5ZJq2AB9ncbyLG79M0Bh7ShdPddh0=)
2: j_XqF64iz4GYIzZvlNkdHl3Bcyw.roa (hash: gUUMcn2OS1CjAHJ461JzjHDHPLV0LbxBhsBiO5l6IuY=)
3: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: qycZ7dRw/W+/acsATZVR18HCQV6yAQoeBjAiOyQOaJk=)
4: vtIvq3lk3sRiDcgDlTRS2VVt5yE.roa (hash: jiLu70KHLH7RIt7BqnR2plfyr+sz9effpqeTpZHZCpI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:91:fd:c1:7d:af:37:5d:2b:56:d9:a2:e9:7d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=b0e23da05f34f8aa59130b662d1eb1b50288612f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:8f:05:39:57:d6:81:cf:1f:a6:2b:c4:61:
2e:4f:1e:4c:3c:3b:79:1f:b4:64:80:99:18:11:5b:
01:fa:4f:58:f5:42:cd:f7:da:22:d8:39:cd:f9:3e:
7b:aa:da:b1:9a:38:78:a1:69:f2:37:bd:24:be:47:
23:61:ea:06:c6:d1:6f:62:49:5d:93:e0:2e:7f:be:
a1:b7:af:f7:62:44:da:9c:1b:5c:e5:39:d1:5b:b2:
a4:70:72:d8:e2:9b:c5:cd:58:2f:a9:76:26:69:dd:
64:6b:6a:7c:4d:cd:8d:f8:0d:0d:e1:70:ff:fb:21:
2b:52:ae:09:e7:c1:ad:4b:b7:a5:d8:6d:8a:68:52:
2e:f6:94:33:bf:14:06:df:a4:1e:80:69:3c:ec:5e:
aa:a9:89:b1:e1:b9:e6:56:4a:f9:ed:7e:ae:61:b3:
26:10:dc:02:08:0f:26:50:ed:38:5c:ca:57:6a:7b:
a9:2d:60:83:07:64:47:2f:ba:ba:f0:a0:4b:69:49:
ab:af:de:76:bf:0b:27:02:93:31:71:23:34:9d:11:
d8:0c:70:52:ad:f4:45:bc:3c:6c:63:b9:ea:2f:7b:
b1:72:3b:50:c1:20:4f:d5:2a:52:25:02:e2:52:3b:
83:b5:d6:e5:54:cf:a1:c5:cc:39:0e:40:37:53:bb:
d9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E2:3D:A0:5F:34:F8:AA:59:13:0B:66:2D:1E:B1:B5:02:88:61:2F
X509v3 Authority Key Identifier:
keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:13:86:c1:9c:27:2d:37:d0:ba:37:e4:39:15:46:57:b2:74:
1f:b2:49:e6:a4:e0:7e:a2:54:e9:03:34:02:8d:32:74:7e:54:
a0:e9:cd:db:25:f6:4e:28:f4:be:ab:f2:9c:c2:29:13:77:4b:
c0:b9:50:59:d4:49:3b:f2:ac:76:2f:d7:cf:71:42:dc:d6:d7:
bf:13:2c:86:b6:29:89:5d:5d:4c:97:5c:bd:75:25:07:3b:71:
48:a1:b9:e5:57:90:dd:0c:22:33:0a:8d:c9:71:f1:58:d9:dd:
eb:9d:6a:77:d9:d2:0b:83:1e:96:e7:8f:83:d5:53:ca:79:4a:
16:76:c3:1e:aa:70:75:51:a6:cb:4c:9e:88:76:8b:57:33:35:
ea:c0:9a:a9:29:13:4c:d8:f7:b5:09:e6:de:85:e0:b0:6a:bb:
2e:64:2f:e6:de:f9:a8:82:c3:d3:74:94:bf:0e:e2:74:c2:90:
91:c0:0c:ae:84:91:34:9b:61:6f:dc:8a:c9:34:25:b8:4b:5d:
8f:7d:f8:2e:73:35:7b:51:f7:1b:d4:ad:43:91:c9:37:88:ca:
1a:34:20:34:f1:a6:45:7a:63:b0:93:8c:7d:74:a2:b5:9e:3b:
0b:fb:8b:5f:9e:35:a8:a2:23:61:51:95:01:1c:14:26:97:02:
c4:88:93:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJH9wX2vN10rVtmi6X2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjE1MDMyMTBmZTA2ZWQzNTQ5MGIwMjMxZGJkYjU5Njdl
MTI5ODcwHhcNMjUwMTMxMTIwMTEzWhcNMjUwMjAxMTIwMTEzWjAzMTEwLwYDVQQD
EyhiMGUyM2RhMDVmMzRmOGFhNTkxMzBiNjYyZDFlYjFiNTAyODg2MTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKuPBTlX1oHPH6YrxGEuTx5MPDt5
H7RkgJkYEVsB+k9Y9ULN99oi2DnN+T57qtqxmjh4oWnyN70kvkcjYeoGxtFvYkld
k+Auf76ht6/3YkTanBtc5TnRW7KkcHLY4pvFzVgvqXYmad1ka2p8Tc2N+A0N4XD/
+yErUq4J58GtS7el2G2KaFIu9pQzvxQG36QegGk87F6qqYmx4bnmVkr57X6uYbMm
ENwCCA8mUO04XMpXanupLWCDB2RHL7q68KBLaUmrr952vwsnApMxcSM0nRHYDHBS
rfRFvDxsY7nqL3uxcjtQwSBP1SpSJQLiUjuDtdblVM+hxcw5DkA3U7vZIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDiPaBfNPiqWRMLZi0esbUCiGEvMB8GA1UdIwQY
MBaAFJ/xUDIQ/gbtNUkLAjHb21ln4SmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAt
NDYzMjJlMDJmMDhkLzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAtNDYzMjJlMDJmMDhk
LzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxOGwZwn
LTfQujfkORVGV7J0H7JJ5qTgfqJU6QM0Ao0ydH5UoOnN2yX2Tij0vqvynMIpE3dL
wLlQWdRJO/Ksdi/Xz3FC3NbXvxMshrYpiV1dTJdcvXUlBztxSKG55VeQ3QwiMwqN
yXHxWNnd651qd9nSC4MeluePg9VTynlKFnbDHqpwdVGmy0yeiHaLVzM16sCaqSkT
TNj3tQnm3oXgsGq7LmQv5t75qILD03SUvw7idMKQkcAMroSRNJthb9yKyTQluEtd
j334LnM1e1H3G9StQ5HJN4jKGjQgNPGmRXpjsJOMfXSitZ47C/uLX541qKIjYVGV
ARwUJpcCxIiTvA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:14 2025 by rpki-client