
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
File: fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json)
Hash identifier: 4Tp8VNT4fp50Sld3Kblu2RbIFaPV6EcrxwmbTKcncHY=
Subject key identifier: BE:C7:78:60:62:77:45:A8:C2:92:12:4D:9A:5D:4D:8E:25:EE:01:3B
Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
Certificate issuer: /CN=7f11416ae3929df37bf66a459cd3aca63891e946
Certificate serial: 0194BBCF0AA1BCFA81B0D841F31B9B641D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:01:35 +0000
Manifest this update: Fri 31 Jan 2025 10:01:35 +0000
Manifest next update: Sat 01 Feb 2025 10:01:35 +0000
Files and hashes: 1: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: +3GJ0g8xwHlqquG12wSyfvRLAAlVdPctmZkelRf/Vxk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:0a:a1:bc:fa:81:b0:d8:41:f3:1b:9b:64:1d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946
Validity
Not Before: Jan 31 10:01:35 2025 GMT
Not After : Feb 1 10:01:35 2025 GMT
Subject: CN=bec77860627745a8c292124d9a5d4d8e25ee013b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f1:9c:e8:54:cc:76:aa:1e:57:79:46:9f:9c:
42:1a:45:f4:14:40:b2:76:53:9d:5e:f3:ac:fa:08:
51:42:f2:46:eb:fb:50:01:66:f9:bb:b0:ec:c6:27:
77:6f:42:58:0b:79:83:52:0f:51:fa:30:53:65:d1:
96:e6:fa:da:e8:ca:31:a0:5c:de:2c:25:05:88:4d:
91:45:5f:03:83:ce:8c:af:75:be:6b:c9:80:8f:fc:
18:a5:f8:81:a5:ae:e6:7c:c6:95:bc:97:99:e4:e3:
8c:e9:0b:fe:32:fd:61:d2:7d:66:f7:d6:2f:3d:01:
83:9f:dc:67:03:3b:e9:a6:e7:cc:d3:40:b5:16:0c:
57:63:89:ec:75:e9:af:1e:ed:60:cb:1c:67:73:8a:
37:57:85:b8:4e:b4:a0:76:da:2b:3c:6a:83:15:93:
82:2e:02:a8:fa:74:0d:00:d0:89:f3:7a:4f:0f:57:
e4:2b:12:c6:a6:92:12:0d:9a:27:4d:a9:99:42:30:
1b:08:42:91:75:dc:21:dc:30:41:4f:34:0a:da:3c:
c7:75:66:ce:d6:45:f0:f0:7e:9c:d5:00:1f:19:6f:
66:0d:7c:94:f1:ef:8e:d3:a2:e0:78:69:47:a6:05:
d6:28:df:ef:1e:6b:0b:fe:08:4a:e0:ac:fd:73:cb:
10:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C7:78:60:62:77:45:A8:C2:92:12:4D:9A:5D:4D:8E:25:EE:01:3B
X509v3 Authority Key Identifier:
keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:98:44:6c:fe:27:9d:b2:72:04:f1:d0:41:f0:eb:13:2a:7f:
5f:73:69:75:79:68:25:3c:75:88:5d:71:04:15:62:3f:2a:c6:
a0:6d:66:0f:31:9f:7a:19:c6:91:31:1a:5e:79:d2:96:fb:c2:
20:24:c8:90:ad:db:23:87:b5:cf:97:bb:c9:e0:6a:df:4a:e2:
88:69:ff:5b:d6:53:c4:63:d1:e1:45:ad:c7:f9:3d:7e:58:a7:
c4:c1:64:84:be:b6:f0:9d:a7:e6:11:41:72:93:3a:2a:60:d9:
36:16:39:83:dc:d3:80:27:f5:14:a3:07:3e:f3:74:0e:cc:62:
ca:01:1e:39:b3:b4:0f:a4:0a:ac:c3:61:79:09:2e:08:e8:b8:
5c:d2:4c:db:b4:65:03:5b:22:c5:82:74:fd:78:6a:c0:8d:93:
95:8e:23:87:1a:14:f4:c3:5c:9f:8d:b5:5e:4e:dd:0d:01:48:
fe:f0:b8:78:8d:ae:95:ec:a6:f4:7f:b2:50:a4:46:65:5c:10:
61:b6:8b:89:90:59:e8:35:ee:cc:c7:46:e1:0c:ab:12:8d:5c:
03:56:97:93:f8:18:78:eb:b4:df:86:37:e4:cc:7b:ca:17:83:
2d:3a:fd:4e:5d:32:4c:23:dc:5a:1a:d7:53:7a:5a:98:c7:d5:
7b:01:58:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zwqhvPqBsNhB8xubZB0QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMTE0MTZhZTM5MjlkZjM3YmY2NmE0NTljZDNhY2E2Mzg5
MWU5NDYwHhcNMjUwMTMxMTAwMTM1WhcNMjUwMjAxMTAwMTM1WjAzMTEwLwYDVQQD
EyhiZWM3Nzg2MDYyNzc0NWE4YzI5MjEyNGQ5YTVkNGQ4ZTI1ZWUwMTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vGc6FTMdqoeV3lGn5xCGkX0FECy
dlOdXvOs+ghRQvJG6/tQAWb5u7Dsxid3b0JYC3mDUg9R+jBTZdGW5vra6MoxoFze
LCUFiE2RRV8Dg86Mr3W+a8mAj/wYpfiBpa7mfMaVvJeZ5OOM6Qv+Mv1h0n1m99Yv
PQGDn9xnAzvppufM00C1FgxXY4nsdemvHu1gyxxnc4o3V4W4TrSgdtorPGqDFZOC
LgKo+nQNANCJ83pPD1fkKxLGppISDZonTamZQjAbCEKRddwh3DBBTzQK2jzHdWbO
1kXw8H6c1QAfGW9mDXyU8e+O06LgeGlHpgXWKN/vHmsL/ghK4Kz9c8sQzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7HeGBid0WowpISTZpdTY4l7gE7MB8GA1UdIwQY
MBaAFH8RQWrjkp3ze/ZqRZzTrKY4kelGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82YjIyZTgtM2RjZC00NGRkLTk1MTQt
Njc1NmY3YjBjMGRiLzEvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82YjIyZTgtM2RjZC00NGRkLTk1MTQtNjc1NmY3YjBjMGRi
LzEvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJhEbP4n
nbJyBPHQQfDrEyp/X3NpdXloJTx1iF1xBBViPyrGoG1mDzGfehnGkTEaXnnSlvvC
ICTIkK3bI4e1z5e7yeBq30riiGn/W9ZTxGPR4UWtx/k9flinxMFkhL628J2n5hFB
cpM6KmDZNhY5g9zTgCf1FKMHPvN0DsxiygEeObO0D6QKrMNheQkuCOi4XNJM27Rl
A1sixYJ0/XhqwI2TlY4jhxoU9MNcn421Xk7dDQFI/vC4eI2uleym9H+yUKRGZVwQ
YbaLiZBZ6DXuzMdG4QyrEo1cA1aXk/gYeOu034Y35Mx7yheDLTr9Tl0yTCPcWhrX
U3pamMfVewFY+A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:23 2025 by rpki-client