Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
File: FTyehIfJi0U_l08gMX7OPXD01d0.mft (raw, json)
Hash identifier: uf5HAsgsZS4EhEiyvFces2ijRNHXGFE6nZmbXKvidSY=
Subject key identifier: AD:A3:AF:25:E7:BB:B5:DF:B0:49:70:1A:AD:E4:68:46:BA:9B:DF:ED
Authority key identifier: 15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
Certificate issuer: /CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Certificate serial: 0194BC3BF1F41A6575D8379C3B559588ACF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
Manifest number: 0965
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: FAFOi_MWA5Fo0z_m3gqA-yNR33M.roa (hash: icR2KPf1nufIDLG/nPNr5vKSnrpkA3b1gplItzO6jeQ=)
2: FTyehIfJi0U_l08gMX7OPXD01d0.crl (hash: 564y9wWJpnppPya3WJ18VPHSJY+razzzOpmRau01DCQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f1:f4:1a:65:75:d8:37:9c:3b:55:95:88:ac:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=ada3af25e7bbb5dfb049701aade46846ba9bdfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7b:d7:64:e5:1f:bb:5a:9c:4d:30:e9:00:1b:
ec:15:f9:f1:a2:f6:9a:4a:b7:6f:fe:a1:d9:f1:f9:
12:2a:49:5f:91:ec:3a:35:c2:fc:1e:a2:53:5f:b7:
42:11:c8:42:1d:9d:63:c8:99:aa:1c:9a:8c:2f:b6:
17:23:bb:cb:b8:9b:e6:02:15:48:21:4c:b0:f0:96:
b3:56:e5:27:52:74:83:94:71:48:87:bc:15:fd:8c:
a1:05:11:7a:81:f3:1a:03:d3:97:01:61:c3:07:ef:
6c:f9:95:12:b0:db:31:92:9d:7f:a8:5f:8d:92:3f:
d8:4d:61:9f:a6:bd:91:03:d7:cd:4f:9d:dc:c1:97:
23:e3:1c:fc:64:ba:ef:48:8b:11:b4:88:60:47:16:
a3:1f:ba:45:8f:24:c4:75:6a:c2:eb:c4:39:de:21:
11:0e:f3:1b:11:d2:2d:6e:1c:f2:6c:3a:5b:ce:88:
90:1b:79:84:b4:33:cd:9a:34:bf:12:4b:0e:e8:5e:
45:f6:26:b2:5d:2d:48:ef:57:f2:18:3c:9f:81:f1:
0e:32:39:5d:92:d5:ad:09:04:26:85:ff:41:96:e1:
dc:fa:68:9c:80:fc:1e:a0:8d:eb:61:b2:59:48:52:
21:4a:44:ae:48:cb:86:45:b3:72:19:63:21:a1:8a:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A3:AF:25:E7:BB:B5:DF:B0:49:70:1A:AD:E4:68:46:BA:9B:DF:ED
X509v3 Authority Key Identifier:
keyid:15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:78:5a:a5:e6:ef:30:da:dd:87:70:0b:9c:6f:2a:dd:61:d4:
9a:6b:c3:8f:34:ca:07:ce:58:f8:88:ee:2f:7b:9a:f6:2f:af:
54:2f:b8:d2:7b:0e:db:15:7d:74:f2:f2:1c:2d:16:4f:b2:bb:
69:e1:8d:c7:41:56:e0:66:7f:67:72:3f:72:ef:d2:4b:ec:7f:
00:77:84:04:4a:ce:d5:cd:5b:14:ad:c1:07:af:b1:2f:d1:0b:
a0:e5:41:98:e8:61:3d:be:95:9b:3c:38:95:08:c5:53:79:be:
ca:12:8c:58:44:49:70:0c:b5:6c:ca:0e:85:90:c3:7a:1d:3a:
83:1e:04:b7:01:06:25:0e:be:3a:b8:ed:00:d1:a7:4d:91:5d:
4a:88:be:af:92:7e:ae:ba:54:7c:19:4d:65:11:3e:29:9a:ef:
96:33:79:7a:ea:66:d7:81:d9:c4:99:5a:6f:78:06:27:84:06:
ef:f4:cc:8a:02:a2:6a:fc:98:15:c5:95:c6:da:e2:64:3d:e2:
c5:bc:f8:51:bc:be:74:6f:92:a9:b1:12:66:9e:e0:33:73:c6:
d0:4b:1c:66:ae:18:98:67:c0:c9:c5:a4:86:1f:78:d3:17:75:
f6:d3:9b:06:75:78:1a:cd:d8:cf:37:b6:f9:7e:df:da:d7:b3:
39:da:51:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/H0GmV12DecO1WViKz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1M2M5ZTg0ODdjOThiNDUzZjk3NGYyMDMxN2VjZTNkNzBm
NGQ1ZGQwHhcNMjUwMTMxMTIwMDMyWhcNMjUwMjAxMTIwMDMyWjAzMTEwLwYDVQQD
EyhhZGEzYWYyNWU3YmJiNWRmYjA0OTcwMWFhZGU0Njg0NmJhOWJkZmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63vXZOUfu1qcTTDpABvsFfnxovaa
Srdv/qHZ8fkSKklfkew6NcL8HqJTX7dCEchCHZ1jyJmqHJqML7YXI7vLuJvmAhVI
IUyw8JazVuUnUnSDlHFIh7wV/YyhBRF6gfMaA9OXAWHDB+9s+ZUSsNsxkp1/qF+N
kj/YTWGfpr2RA9fNT53cwZcj4xz8ZLrvSIsRtIhgRxajH7pFjyTEdWrC68Q53iER
DvMbEdItbhzybDpbzoiQG3mEtDPNmjS/EksO6F5F9iayXS1I71fyGDyfgfEOMjld
ktWtCQQmhf9BluHc+micgPweoI3rYbJZSFIhSkSuSMuGRbNyGWMhoYoxgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2jryXnu7XfsElwGq3kaEa6m9/tMB8GA1UdIwQY
MBaAFBU8noSHyYtFP5dPIDF+zj1w9NXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlR5ZWhJZkppMFVfbDA4Z01YN09QWEQwMWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZmY2MzMtZWI0YS00ZTE4LWFkNTYt
MGQwMThkYmNjN2NiLzEvRlR5ZWhJZkppMFVfbDA4Z01YN09QWEQwMWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wZmY2MzMtZWI0YS00ZTE4LWFkNTYtMGQwMThkYmNjN2Ni
LzEvRlR5ZWhJZkppMFVfbDA4Z01YN09QWEQwMWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHhapebv
MNrdh3ALnG8q3WHUmmvDjzTKB85Y+IjuL3ua9i+vVC+40nsO2xV9dPLyHC0WT7K7
aeGNx0FW4GZ/Z3I/cu/SS+x/AHeEBErO1c1bFK3BB6+xL9ELoOVBmOhhPb6Vmzw4
lQjFU3m+yhKMWERJcAy1bMoOhZDDeh06gx4EtwEGJQ6+OrjtANGnTZFdSoi+r5J+
rrpUfBlNZRE+KZrvljN5eupm14HZxJlab3gGJ4QG7/TMigKiavyYFcWVxtriZD3i
xbz4Uby+dG+SqbESZp7gM3PG0EscZq4YmGfAycWkhh940xd19tObBnV4Gs3Yzze2
+X7f2tezOdpRFQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:53 2025 by rpki-client