Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
File: sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft (raw, json)
Hash identifier: VFYgvNA+Swt03yyrZrxZLbzNnCwUzq/EwcGh/S2agDg=
Subject key identifier: FB:77:13:A1:2A:CC:3C:89:E3:9E:C7:5C:1F:6E:BC:AB:67:EB:30:C7
Authority key identifier: B0:52:4F:65:5B:A3:C9:CA:5D:98:B0:57:C2:4C:0F:08:B7:19:D4:A7
Certificate issuer: /CN=b0524f655ba3c9ca5d98b057c24c0f08b719d4a7
Certificate serial: 0194BCE0AFCE266EEBBCECEF8F904885B791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
Manifest number: 016C
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl (hash: DqNTZuJVpjrDBQ3y97cR2Dtnn8M8t17ltSc60k1Kee0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:af:ce:26:6e:eb:bc:ec:ef:8f:90:48:85:b7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0524f655ba3c9ca5d98b057c24c0f08b719d4a7
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=fb7713a12acc3c89e39ec75c1f6ebcab67eb30c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b2:2f:da:7c:a1:d0:f9:2c:d5:63:20:cf:ab:
c6:33:db:49:3b:cc:b8:97:25:a8:65:78:2b:70:e4:
54:e1:1d:7b:a7:17:02:e4:f4:f5:78:ca:a3:b9:f0:
d1:7c:67:b7:38:3c:64:e4:20:af:29:67:e9:ea:39:
78:58:62:e1:cc:bc:86:06:e8:37:50:cf:e8:05:e0:
be:52:be:cf:78:df:20:93:aa:86:19:7f:2d:f4:2c:
da:d8:ac:02:e5:a4:73:98:b5:90:ef:c8:47:a2:7b:
ec:00:ae:1e:e9:73:e0:66:40:70:fc:5d:ef:ed:c8:
57:c8:e0:ee:2a:e5:ec:dd:9b:ba:04:92:b7:36:1a:
7e:4b:e8:50:c1:51:1e:00:62:36:ba:79:4b:88:9b:
00:af:1e:54:ea:13:bf:aa:04:21:69:df:1c:73:05:
bf:25:c3:15:98:e4:40:33:a6:d6:ba:e4:3a:0f:e1:
05:7d:65:a6:15:73:bb:06:9c:c4:59:02:ab:99:30:
54:bb:39:8b:75:42:7c:fc:45:b8:d9:86:92:0e:80:
a5:ae:af:92:47:8d:ba:cf:98:f3:88:28:61:6a:7d:
a2:61:0d:2e:03:c2:a8:ce:df:21:2e:66:d8:e9:43:
6e:e5:62:5b:b6:ef:57:7d:74:ff:e4:a8:05:f8:4b:
b0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:77:13:A1:2A:CC:3C:89:E3:9E:C7:5C:1F:6E:BC:AB:67:EB:30:C7
X509v3 Authority Key Identifier:
keyid:B0:52:4F:65:5B:A3:C9:CA:5D:98:B0:57:C2:4C:0F:08:B7:19:D4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:80:a9:4c:8a:4d:15:f5:ce:2c:fb:86:1f:7f:e4:b8:22:08:
3e:30:b1:d1:c3:12:15:23:8f:b7:b3:f7:09:1e:90:bd:56:24:
ed:5e:4f:a5:1e:78:f4:2d:50:64:64:b0:a5:dd:4b:ac:b9:98:
49:0b:42:20:d5:d2:b5:9d:18:f3:b8:1d:a0:d8:ae:40:be:6c:
63:f5:32:68:f5:97:c5:d5:1a:ff:6d:a5:c2:dd:4d:08:40:88:
0c:f9:92:ce:35:dc:4b:a5:76:e6:be:1a:c4:f0:8f:13:e8:4a:
4c:84:95:11:ba:3b:8f:5b:c7:93:5f:de:90:de:1c:df:04:d8:
b5:7d:31:67:d0:92:74:8d:32:64:7c:ee:8d:df:33:ab:6e:fb:
15:df:38:e8:03:7a:0d:f1:b7:c7:46:8f:18:04:99:e3:39:db:
5d:2c:13:6d:67:cd:f6:49:e5:e0:3c:1e:a5:07:93:93:53:0c:
18:e3:00:35:cd:14:61:e8:17:56:a2:ee:42:0e:27:37:77:8d:
d5:7f:f5:5f:8e:9b:36:ac:9f:1f:38:76:ab:5b:64:93:ce:1a:
c9:51:8f:37:e3:e6:24:eb:80:2b:ed:c0:db:cd:df:88:a9:83:
da:72:ac:76:d4:93:10:38:59:3c:ac:be:13:e7:78:38:8d:7c:
79:0d:42:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84K/OJm7rvOzvj5BIhbeRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNTI0ZjY1NWJhM2M5Y2E1ZDk4YjA1N2MyNGMwZjA4Yjcx
OWQ0YTcwHhcNMjUwMTMxMTUwMDI5WhcNMjUwMjAxMTUwMDI5WjAzMTEwLwYDVQQD
EyhmYjc3MTNhMTJhY2MzYzg5ZTM5ZWM3NWMxZjZlYmNhYjY3ZWIzMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bIv2nyh0Pks1WMgz6vGM9tJO8y4
lyWoZXgrcORU4R17pxcC5PT1eMqjufDRfGe3ODxk5CCvKWfp6jl4WGLhzLyGBug3
UM/oBeC+Ur7PeN8gk6qGGX8t9Cza2KwC5aRzmLWQ78hHonvsAK4e6XPgZkBw/F3v
7chXyODuKuXs3Zu6BJK3Nhp+S+hQwVEeAGI2unlLiJsArx5U6hO/qgQhad8ccwW/
JcMVmORAM6bWuuQ6D+EFfWWmFXO7BpzEWQKrmTBUuzmLdUJ8/EW42YaSDoClrq+S
R426z5jziChhan2iYQ0uA8Kozt8hLmbY6UNu5WJbtu9XfXT/5KgF+EuwewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPt3E6EqzDyJ457HXB9uvKtn6zDHMB8GA1UdIwQY
MBaAFLBST2Vbo8nKXZiwV8JMDwi3GdSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0ZKUFpWdWp5Y3BkbUxCWHdrd1BDTGNaMUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80ODY5YjYtOWM2Ny00OTJjLWIxNWUt
Mzc0NGI0OGFmMWE4LzEvc0ZKUFpWdWp5Y3BkbUxCWHdrd1BDTGNaMUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80ODY5YjYtOWM2Ny00OTJjLWIxNWUtMzc0NGI0OGFmMWE4
LzEvc0ZKUFpWdWp5Y3BkbUxCWHdrd1BDTGNaMUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYCpTIpN
FfXOLPuGH3/kuCIIPjCx0cMSFSOPt7P3CR6QvVYk7V5PpR549C1QZGSwpd1LrLmY
SQtCINXStZ0Y87gdoNiuQL5sY/UyaPWXxdUa/22lwt1NCECIDPmSzjXcS6V25r4a
xPCPE+hKTISVEbo7j1vHk1/ekN4c3wTYtX0xZ9CSdI0yZHzujd8zq277Fd846AN6
DfG3x0aPGASZ4znbXSwTbWfN9knl4DwepQeTk1MMGOMANc0UYegXVqLuQg4nN3eN
1X/1X46bNqyfHzh2q1tkk84ayVGPN+PmJOuAK+3A283fiKmD2nKsdtSTEDhZPKy+
E+d4OI18eQ1Cgg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:27 2025 by rpki-client