Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier: v7IeaQwMVx0lzPi0uZ+q6Z9hm1dc+WIQSoN9Dsm6qh8=
Subject key identifier: 17:87:F2:69:D3:2F:2E:2B:73:EA:EE:D9:8A:7B:4E:60:78:7B:1B:0B
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial: 0194BBCDFEDF838298A30131C3A3347732E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: U5xEZcHY8jEJzeSIFVBYIPZp6slPRUue82SQ0oSgC04=)
2: ThMXbqzx9UxsJ7TnPmcwU32vPLA.roa (hash: 4NEDCtF2sgEdEat+pt3nEdPQAXszdJX/0mX9HFFwmgU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fe:df:83:82:98:a3:01:31:c3:a3:34:77:32:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=1787f269d32f2e2b73eaeed98a7b4e60787b1b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:df:33:45:fe:2f:92:a3:70:87:78:b3:98:
76:85:6f:42:a4:4d:16:c1:fa:87:32:e8:d0:2e:8f:
58:7c:ee:7b:44:86:c6:9f:63:05:40:06:0c:77:fa:
97:5d:fe:06:77:32:c6:36:60:c2:82:c5:87:36:93:
2a:72:47:4b:85:77:fa:9e:fb:b1:02:fe:ab:33:36:
eb:26:d8:99:e6:3a:81:ce:ed:29:12:4f:83:95:ee:
2d:70:8a:e3:d7:47:b0:f3:88:ee:ae:90:71:03:ae:
45:6c:21:03:3f:4a:38:1a:8c:c0:a6:80:90:ec:a1:
84:f1:0b:8c:fa:10:b1:80:0a:d5:9b:88:25:ca:de:
bc:46:bb:5f:9c:8d:2d:81:20:3f:a8:9b:e2:b7:78:
8c:c4:16:ae:f1:13:a3:33:ed:b3:0d:57:be:7b:79:
1d:f7:68:5f:97:fb:9e:cf:e7:5e:10:75:c5:71:3a:
97:32:aa:69:f4:69:93:91:13:f9:34:80:50:c2:8d:
85:74:0a:aa:3e:74:e7:a9:59:b6:86:ac:35:83:57:
af:91:45:0e:be:db:41:ac:32:3d:32:c8:15:60:b7:
19:e3:63:a3:74:c4:84:5f:20:e3:7d:f0:10:2d:27:
c5:6b:b0:78:83:b5:15:d9:fb:ff:43:f5:c3:93:d2:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:87:F2:69:D3:2F:2E:2B:73:EA:EE:D9:8A:7B:4E:60:78:7B:1B:0B
X509v3 Authority Key Identifier:
keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7f:38:0c:81:2e:89:a1:6c:44:24:44:0a:56:d7:f7:af:a5:
ff:a4:1d:ee:f6:c6:fb:1e:80:94:f8:96:e6:82:7c:52:3b:37:
2a:ee:ff:7c:f8:16:47:fd:ac:1d:4e:54:e8:2a:95:dd:51:b0:
0d:69:f0:ed:38:44:6e:1c:46:f4:a7:ac:3f:c0:0a:d6:cd:cc:
32:6f:44:0c:66:7b:31:24:96:fd:5a:ad:e9:33:69:08:8d:5c:
fd:0c:59:7b:40:90:37:1b:ea:a3:e3:17:6f:7d:f3:72:06:62:
66:86:14:47:96:3b:c3:55:86:74:f7:8b:97:f4:eb:9c:d7:60:
26:1d:cc:72:30:cf:2f:6e:a3:76:48:68:fa:c7:7a:cb:c2:eb:
ac:96:9b:f7:25:36:88:ed:0e:6b:15:bf:06:b2:9c:c4:57:74:
1e:fc:69:7e:df:e1:06:ce:72:51:3f:8a:35:2e:48:42:72:1f:
8a:a9:21:09:f0:88:65:f7:a4:b7:7b:a3:2a:e5:0c:cd:b6:a9:
cf:25:37:ea:8d:c4:6e:3b:c2:d9:99:89:11:1f:4d:76:cc:cf:
fe:2c:eb:ac:bb:b4:ad:67:30:44:2a:b6:63:2e:7b:4f:1e:e8:
3a:04:04:4f:70:7e:5f:5f:71:36:93:c8:83:7c:1c:39:a5:b4:
d6:16:10:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zf7fg4KYowExw6M0dzLmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MzllNjExYjU4YjdmNzA1NWRmNmE3Zjk5NWQwMWZiOTVk
NzkwYzkwHhcNMjUwMTMxMTAwMDI2WhcNMjUwMjAxMTAwMDI2WjAzMTEwLwYDVQQD
EygxNzg3ZjI2OWQzMmYyZTJiNzNlYWVlZDk4YTdiNGU2MDc4N2IxYjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlHfM0X+L5KjcId4s5h2hW9CpE0W
wfqHMujQLo9YfO57RIbGn2MFQAYMd/qXXf4GdzLGNmDCgsWHNpMqckdLhXf6nvux
Av6rMzbrJtiZ5jqBzu0pEk+Dle4tcIrj10ew84jurpBxA65FbCEDP0o4GozApoCQ
7KGE8QuM+hCxgArVm4glyt68RrtfnI0tgSA/qJvit3iMxBau8ROjM+2zDVe+e3kd
92hfl/uez+deEHXFcTqXMqpp9GmTkRP5NIBQwo2FdAqqPnTnqVm2hqw1g1evkUUO
vttBrDI9MsgVYLcZ42OjdMSEXyDjffAQLSfFa7B4g7UV2fv/Q/XDk9KjHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeH8mnTLy4rc+ru2Yp7TmB4exsLMB8GA1UdIwQY
MBaAFBY55hG1i39wVd9qf5ldAfuV15DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjct
MGNkZmExYzI5MWY2LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjctMGNkZmExYzI5MWY2
LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdH84DIEu
iaFsRCREClbX96+l/6Qd7vbG+x6AlPiW5oJ8Ujs3Ku7/fPgWR/2sHU5U6CqV3VGw
DWnw7ThEbhxG9KesP8AK1s3MMm9EDGZ7MSSW/Vqt6TNpCI1c/QxZe0CQNxvqo+MX
b33zcgZiZoYUR5Y7w1WGdPeLl/TrnNdgJh3McjDPL26jdkho+sd6y8LrrJab9yU2
iO0OaxW/BrKcxFd0Hvxpft/hBs5yUT+KNS5IQnIfiqkhCfCIZfekt3ujKuUMzbap
zyU36o3EbjvC2ZmJER9NdszP/izrrLu0rWcwRCq2Yy57Tx7oOgQET3B+X19xNpPI
g3wcOaW01hYQtQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:58 2025 by rpki-client