Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
File: FaevcHtYSLNTljanQxd51wFM2mE.mft (raw, json)
Hash identifier: 06AIvvlnQFyIgW45MglmUUb/fvVvuGelcaWCNt/Yir4=
Subject key identifier: A3:D2:23:1E:09:9B:30:50:41:EF:CE:E9:05:AE:75:54:DB:6B:C1:31
Authority key identifier: 15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
Certificate issuer: /CN=15a7af707b5848b3539636a7431779d7014cda61
Certificate serial: 0194BC3BF25D45CE4BBD83203BF75AAE9975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
Manifest number: 032F
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: FaevcHtYSLNTljanQxd51wFM2mE.crl (hash: 4JkIc8cUF2//f7vqq5eRCHix/98q4GsZ64vL1kBzCPc=)
2: bX3oZWjtTuzwx_xG-vCMVNG-cOc.roa (hash: d1VXe5ysdAxKyO5IduA6oLfO1V4ILKmPg+j75Lo6HnE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f2:5d:45:ce:4b:bd:83:20:3b:f7:5a:ae:99:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15a7af707b5848b3539636a7431779d7014cda61
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=a3d2231e099b305041efcee905ae7554db6bc131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:3f:22:cb:21:e8:45:83:7e:6e:28:0c:c0:
78:17:e9:3c:99:53:4c:14:7b:5f:af:6c:c0:75:a9:
85:9f:3c:bc:fa:1c:4d:d5:17:7b:8a:dc:a4:4b:b1:
23:99:86:86:f6:bc:d0:62:d7:79:d2:b5:23:39:80:
82:94:19:4e:d3:27:30:44:69:0b:f5:88:77:63:cb:
7f:fa:57:86:61:28:ec:31:e7:76:28:e5:19:ec:8b:
d1:40:4d:4d:f6:ce:c4:27:e9:0a:4b:24:7d:f0:5a:
7f:96:7d:d8:37:a4:91:da:35:6d:dd:3b:a5:a9:a3:
05:af:cc:e9:ce:69:2b:64:83:19:06:f6:c0:b9:74:
4f:65:23:00:d9:8a:2e:6b:d9:a2:35:77:d4:27:90:
7f:c4:15:fb:7c:86:5a:d5:48:e5:af:50:42:e4:fa:
d3:99:f4:a1:a0:0d:1e:c1:c5:7d:7f:fd:0b:51:df:
52:0f:2f:ae:3c:f9:6b:22:dd:63:98:79:8b:92:b9:
62:8a:1f:3e:3d:4d:c4:99:90:b4:31:b2:03:3d:9b:
4d:ce:92:8a:fa:9a:eb:b7:6a:ad:e8:d9:63:1f:6a:
61:a6:c6:c7:87:23:51:4a:b4:41:3b:d4:b4:f1:55:
df:ba:4c:a5:70:ee:31:1d:7b:e7:aa:2d:10:0f:f7:
36:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D2:23:1E:09:9B:30:50:41:EF:CE:E9:05:AE:75:54:DB:6B:C1:31
X509v3 Authority Key Identifier:
keyid:15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7a:91:d1:ff:11:18:b2:98:56:e2:26:40:6a:29:74:98:4b:
25:7e:78:e8:03:d4:f6:d4:3e:82:e5:f9:2b:0e:84:82:d6:fc:
b2:a0:f2:1f:37:82:3f:af:c5:0b:1e:72:bd:bd:8e:2e:b8:73:
6c:20:c5:a8:11:73:0a:e3:bf:d7:2e:86:47:1d:99:1c:d1:6c:
eb:9c:a9:02:59:26:5e:a8:79:09:2f:ce:6e:1a:2e:9f:49:d8:
b5:7d:76:6a:67:87:24:42:5f:eb:21:3d:78:c7:37:a2:c8:05:
13:d3:84:24:de:31:4b:2f:b5:72:8c:24:7e:5f:76:0b:54:2a:
77:85:26:8f:cc:f2:74:93:ad:1c:bc:5d:93:4a:0b:24:41:30:
d9:25:8a:50:01:f4:35:13:a7:64:e3:11:a0:c9:0a:b6:ab:9c:
55:ef:65:9a:5f:93:2c:08:a9:df:ce:4e:76:d1:e2:ba:56:25:
5d:ad:57:96:76:2f:4d:70:aa:91:39:92:74:24:3d:e0:49:b4:
a8:5d:c2:7c:72:2b:ca:3e:28:01:9a:20:e7:31:c1:06:d4:aa:
be:e3:a0:c5:42:e2:3c:69:15:b7:61:1f:34:fb:69:3b:59:0e:
32:b6:5b:72:a7:84:c1:5a:7a:49:1b:16:b2:84:bf:0d:c2:25:
7f:13:af:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/JdRc5LvYMgO/darpl1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YTdhZjcwN2I1ODQ4YjM1Mzk2MzZhNzQzMTc3OWQ3MDE0
Y2RhNjEwHhcNMjUwMTMxMTIwMDMyWhcNMjUwMjAxMTIwMDMyWjAzMTEwLwYDVQQD
EyhhM2QyMjMxZTA5OWIzMDUwNDFlZmNlZTkwNWFlNzU1NGRiNmJjMTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG8/Issh6EWDfm4oDMB4F+k8mVNM
FHtfr2zAdamFnzy8+hxN1Rd7itykS7EjmYaG9rzQYtd50rUjOYCClBlO0ycwRGkL
9Yh3Y8t/+leGYSjsMed2KOUZ7IvRQE1N9s7EJ+kKSyR98Fp/ln3YN6SR2jVt3Tul
qaMFr8zpzmkrZIMZBvbAuXRPZSMA2Youa9miNXfUJ5B/xBX7fIZa1Ujlr1BC5PrT
mfShoA0ewcV9f/0LUd9SDy+uPPlrIt1jmHmLkrliih8+PU3EmZC0MbIDPZtNzpKK
+prrt2qt6NljH2phpsbHhyNRSrRBO9S08VXfukylcO4xHXvnqi0QD/c2aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPSIx4JmzBQQe/O6QWudVTba8ExMB8GA1UdIwQY
MBaAFBWnr3B7WEizU5Y2p0MXedcBTNphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kZDUwZGUtOGUyYS00OTBjLWE0MTgt
NjAxMTY4NjI2MTZhLzEvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9kZDUwZGUtOGUyYS00OTBjLWE0MTgtNjAxMTY4NjI2MTZh
LzEvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHqR0f8R
GLKYVuImQGopdJhLJX546APU9tQ+guX5Kw6Egtb8sqDyHzeCP6/FCx5yvb2OLrhz
bCDFqBFzCuO/1y6GRx2ZHNFs65ypAlkmXqh5CS/Obhoun0nYtX12ameHJEJf6yE9
eMc3osgFE9OEJN4xSy+1cowkfl92C1Qqd4Umj8zydJOtHLxdk0oLJEEw2SWKUAH0
NROnZOMRoMkKtqucVe9lml+TLAip385OdtHiulYlXa1XlnYvTXCqkTmSdCQ94Em0
qF3CfHIryj4oAZog5zHBBtSqvuOgxULiPGkVt2EfNPtpO1kOMrZbcqeEwVp6SRsW
soS/DcIlfxOv7g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:17 2025 by rpki-client