Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
File: FqBO4EsSgj6FP_JD02VR5M5oOnM.mft (raw, json)
Hash identifier: 9nQfq1sORpgSeeKL7s2sdMyOQrVjGlNav9wt3zoasck=
Subject key identifier: 95:E4:89:DD:0E:B9:52:F9:76:01:FF:CB:E1:80:BF:34:CE:D0:32:F4
Authority key identifier: 16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
Certificate issuer: /CN=16a04ee04b12823e853ff243d36551e4ce683a73
Certificate serial: 0194BD176EEC757844679D46A457E0304464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: 7yvWMV7T5eN6efasr2rdxP4qnTg.roa (hash: IQLAVcCJbXWjx9lqcgGZjEbAOQis8qmzfLoEHM8bDrs=)
2: FqBO4EsSgj6FP_JD02VR5M5oOnM.crl (hash: oSnFli3fpTX3V0ZXHkKCT8ZWWxtfn7q9Q/nTL17KnFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6e:ec:75:78:44:67:9d:46:a4:57:e0:30:44:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a04ee04b12823e853ff243d36551e4ce683a73
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=95e489dd0eb952f97601ffcbe180bf34ced032f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:ae:d4:28:a9:9e:a9:24:4b:76:dd:b7:1d:
d6:0c:ed:16:e1:3f:ad:f2:27:91:86:ac:b5:c5:04:
35:01:51:ed:79:82:8d:e5:41:03:ac:9e:2a:b9:99:
23:e0:96:98:8d:a7:41:e1:01:0a:62:ad:69:74:03:
f6:fe:ef:b2:02:a6:04:89:cc:38:0e:a6:b7:51:7c:
f2:f9:0b:07:8c:c9:2f:07:ae:e4:75:d8:83:90:48:
9a:fb:63:df:3b:df:ca:bb:39:11:fb:b2:27:7f:d3:
51:e9:6e:0c:96:0b:5f:16:99:7b:db:e6:6b:b0:3d:
77:50:1d:9e:b2:87:54:36:1f:61:d0:49:49:92:07:
c2:cf:53:73:1e:87:74:8c:72:f3:21:8b:dc:b2:1a:
59:5c:66:22:77:86:8c:d0:9e:8a:e5:b3:44:fb:a2:
d4:28:c7:b7:6f:be:6b:56:2e:e3:55:11:58:52:a7:
ce:08:56:56:86:a5:ba:d0:e1:d2:4f:fd:3f:4d:c2:
0c:7c:80:45:cb:74:16:00:af:e9:23:4a:a5:e9:fa:
cc:df:fc:3e:5c:41:1a:70:81:1d:f8:7f:93:1b:8d:
02:d0:6b:73:3e:5c:fd:e4:91:3f:ca:4c:41:4f:ed:
7a:f3:19:ae:69:c2:6c:02:2f:72:f3:6b:f2:18:b4:
aa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E4:89:DD:0E:B9:52:F9:76:01:FF:CB:E1:80:BF:34:CE:D0:32:F4
X509v3 Authority Key Identifier:
keyid:16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ee:4f:54:ad:b5:f7:9e:e7:e2:03:c4:e8:88:1a:67:33:cb:
0c:dc:5e:b2:69:bc:14:e2:83:7f:36:c4:93:7c:57:66:4c:19:
f9:d6:a5:5e:0d:91:33:10:4f:72:75:c3:8b:06:2e:7d:47:16:
b5:f0:5a:aa:48:0f:9c:8a:df:ed:2c:d6:11:22:56:63:aa:90:
b1:71:0e:af:d2:10:95:f3:37:8b:b3:b9:f7:0d:d6:da:8b:a5:
e4:ce:c2:c2:2e:d6:88:f3:f8:82:49:33:c1:50:91:3a:7f:ae:
e8:16:c0:21:49:d2:2a:c6:b3:e2:58:b2:7f:b4:08:be:41:9d:
f3:8f:5a:c6:6d:7c:bb:f1:0e:d8:f2:f8:65:78:45:dc:54:e4:
a9:d2:7d:6e:c8:3b:e0:9f:a9:db:52:7a:4e:89:25:2d:6b:50:
2a:96:16:c4:a6:77:ee:33:ac:24:a7:a6:f6:7d:3a:8e:a6:9b:
b2:c3:85:ae:a1:84:8c:11:21:db:23:cc:92:c7:01:c2:b7:ec:
64:0b:67:2a:36:9f:73:de:a7:b0:cb:d0:49:8e:05:52:9b:71:
ea:07:a1:eb:ea:a5:a2:f3:f7:86:9d:50:69:19:9e:57:91:4b:
94:71:32:dd:e3:5e:d1:59:56:4b:e7:ad:2f:49:1c:7b:9f:77:
dc:0a:85:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F27sdXhEZ51GpFfgMERkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YTA0ZWUwNGIxMjgyM2U4NTNmZjI0M2QzNjU1MWU0Y2U2
ODNhNzMwHhcNMjUwMTMxMTYwMDE2WhcNMjUwMjAxMTYwMDE2WjAzMTEwLwYDVQQD
Eyg5NWU0ODlkZDBlYjk1MmY5NzYwMWZmY2JlMTgwYmYzNGNlZDAzMmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPuu1CipnqkkS3bdtx3WDO0W4T+t
8ieRhqy1xQQ1AVHteYKN5UEDrJ4quZkj4JaYjadB4QEKYq1pdAP2/u+yAqYEicw4
Dqa3UXzy+QsHjMkvB67kddiDkEia+2PfO9/KuzkR+7Inf9NR6W4MlgtfFpl72+Zr
sD13UB2esodUNh9h0ElJkgfCz1NzHod0jHLzIYvcshpZXGYid4aM0J6K5bNE+6LU
KMe3b75rVi7jVRFYUqfOCFZWhqW60OHST/0/TcIMfIBFy3QWAK/pI0ql6frM3/w+
XEEacIEd+H+TG40C0GtzPlz95JE/ykxBT+168xmuacJsAi9y82vyGLSqZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXkid0OuVL5dgH/y+GAvzTO0DL0MB8GA1UdIwQY
MBaAFBagTuBLEoI+hT/yQ9NlUeTOaDpzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnFCTzRFc1NnajZGUF9KRDAyVlI1TTVvT25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wZTA4MjEtYWVlOS00Yjk2LTg3NzYt
NTkwZmI5NDlkMTA0LzEvRnFCTzRFc1NnajZGUF9KRDAyVlI1TTVvT25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wZTA4MjEtYWVlOS00Yjk2LTg3NzYtNTkwZmI5NDlkMTA0
LzEvRnFCTzRFc1NnajZGUF9KRDAyVlI1TTVvT25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfe5PVK21
957n4gPE6IgaZzPLDNxesmm8FOKDfzbEk3xXZkwZ+dalXg2RMxBPcnXDiwYufUcW
tfBaqkgPnIrf7SzWESJWY6qQsXEOr9IQlfM3i7O59w3W2oul5M7Cwi7WiPP4gkkz
wVCROn+u6BbAIUnSKsaz4liyf7QIvkGd849axm18u/EO2PL4ZXhF3FTkqdJ9bsg7
4J+p21J6ToklLWtQKpYWxKZ37jOsJKem9n06jqabssOFrqGEjBEh2yPMkscBwrfs
ZAtnKjafc96nsMvQSY4FUptx6geh6+qlovP3hp1QaRmeV5FLlHEy3eNe0VlWS+et
L0kce5933AqF9A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:24 2025 by rpki-client