Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
File: FrGYtu469o3rwjR6Xpj3Efsw8os.mft (raw, json)
Hash identifier: EuB5NiS6F7PEsLburyTIw5qNEgZqs/cE8PEvmlXtRgU=
Subject key identifier: 5C:83:24:3B:72:7D:64:4A:C9:43:7C:C5:3B:65:E5:34:12:2D:4C:0F
Authority key identifier: 16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
Certificate issuer: /CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Certificate serial: 0194BBCEF947F163C5B163B6698D8698BF2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
Manifest number: 012E
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: FrGYtu469o3rwjR6Xpj3Efsw8os.crl (hash: dy4RtMweWrdlSyXe5HEmof3BwyyRp4JJTOJitBzSbGY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f9:47:f1:63:c5:b1:63:b6:69:8d:86:98:bf:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=5c83243b727d644ac9437cc53b65e534122d4c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:3b:30:f1:fd:c7:05:da:30:d4:90:7c:8d:
2f:a4:9f:11:94:fa:36:90:5a:9b:ce:ee:23:ae:d0:
81:92:18:d4:e7:09:57:13:ca:f5:83:81:0a:fd:68:
9e:f8:fb:7c:94:55:74:e6:db:e1:4d:f8:5d:01:99:
1b:4d:eb:04:3b:e0:c5:f8:59:22:57:b6:90:41:b1:
8c:9b:44:18:f3:47:81:7e:c4:53:91:4d:d7:24:bb:
76:f4:48:3f:0d:44:fe:92:12:6d:b8:4a:ad:51:86:
7e:46:2c:cf:ba:45:f7:cf:66:19:27:c6:49:ba:2d:
56:9c:d7:f3:e0:66:e3:0f:63:8b:8e:4c:74:3a:8c:
04:8c:85:18:09:10:51:9c:be:72:5f:ba:a6:e7:a7:
0a:33:ec:b8:b1:df:cf:e4:f1:5a:ae:de:ec:25:50:
40:46:cf:78:ad:7b:9d:48:9e:f6:56:93:f2:b5:34:
2c:86:b8:84:8b:ca:43:bd:ea:57:ce:bd:36:c7:5d:
8d:c9:b8:05:6c:69:85:ee:06:a8:21:43:8b:c6:35:
07:c9:cf:47:f7:94:9f:23:8d:34:67:d2:f8:c3:05:
71:0c:05:c5:04:41:9f:c0:bd:ca:68:eb:3d:7d:f5:
1b:01:5a:ab:dc:e3:3d:fb:1a:9b:2f:b3:f7:f7:78:
9a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:83:24:3B:72:7D:64:4A:C9:43:7C:C5:3B:65:E5:34:12:2D:4C:0F
X509v3 Authority Key Identifier:
keyid:16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2b:40:6d:be:28:68:6b:a9:07:f3:8b:e1:ee:21:58:e6:a5:
60:f1:a2:4a:11:2d:f2:4f:99:4b:24:36:11:c5:0c:82:bb:e7:
2d:37:d0:ec:6c:4a:d1:bc:ff:b9:bb:2f:64:c3:75:c6:bc:cf:
82:e7:08:ea:31:f7:ec:63:c7:0a:86:06:cf:e2:3b:7e:6f:99:
2c:aa:e1:2b:ef:a1:a6:d7:b1:41:8c:b8:9e:e6:fa:6e:12:b4:
dc:ed:e0:2a:cc:fa:63:33:f4:62:78:01:e7:81:19:97:89:30:
0a:59:81:de:84:19:93:c1:eb:2d:f1:4c:14:f9:53:d3:42:b8:
f8:9a:a6:7b:d9:c8:c7:bf:d1:33:59:f2:ae:34:17:6d:77:36:
4d:68:8d:06:da:bb:9d:35:7e:59:f1:d5:71:03:09:e9:8f:f8:
94:ad:7c:f9:40:61:1e:20:f7:78:df:30:a8:d0:5f:54:1c:7b:
ad:d3:d7:02:73:61:6b:8f:50:71:c1:71:56:f3:04:23:a3:f2:
88:73:56:c9:63:29:ae:12:8c:3d:ce:53:02:40:75:0e:25:bd:
d4:4c:cd:c7:33:d9:8e:e2:d6:85:4b:93:23:94:21:5e:06:82:
8d:75:68:f6:d9:6f:5b:1e:57:85:db:8d:8e:af:a4:21:a3:51:
06:d3:1a:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zvlH8WPFsWO2aY2GmL8vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YjE5OGI2ZWUzYWY2OGRlYmMyMzQ3YTVlOThmNzExZmIz
MGYyOGIwHhcNMjUwMTMxMTAwMTMxWhcNMjUwMjAxMTAwMTMxWjAzMTEwLwYDVQQD
Eyg1YzgzMjQzYjcyN2Q2NDRhYzk0MzdjYzUzYjY1ZTUzNDEyMmQ0YzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q47MPH9xwXaMNSQfI0vpJ8RlPo2
kFqbzu4jrtCBkhjU5wlXE8r1g4EK/Wie+Pt8lFV05tvhTfhdAZkbTesEO+DF+Fki
V7aQQbGMm0QY80eBfsRTkU3XJLt29Eg/DUT+khJtuEqtUYZ+RizPukX3z2YZJ8ZJ
ui1WnNfz4GbjD2OLjkx0OowEjIUYCRBRnL5yX7qm56cKM+y4sd/P5PFart7sJVBA
Rs94rXudSJ72VpPytTQshriEi8pDvepXzr02x12NybgFbGmF7gaoIUOLxjUHyc9H
95SfI400Z9L4wwVxDAXFBEGfwL3KaOs9ffUbAVqr3OM9+xqbL7P393iaQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyDJDtyfWRKyUN8xTtl5TQSLUwPMB8GA1UdIwQY
MBaAFBaxmLbuOvaN68I0el6Y9xH7MPKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnJHWXR1NDY5bzNyd2pSNlhwajNFZnN3OG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMmFlMTQtZTQ1ZS00ZWVlLWJkMDct
NDQ4MmFkYTIzMmUzLzEvRnJHWXR1NDY5bzNyd2pSNlhwajNFZnN3OG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMmFlMTQtZTQ1ZS00ZWVlLWJkMDctNDQ4MmFkYTIzMmUz
LzEvRnJHWXR1NDY5bzNyd2pSNlhwajNFZnN3OG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABStAbb4o
aGupB/OL4e4hWOalYPGiShEt8k+ZSyQ2EcUMgrvnLTfQ7GxK0bz/ubsvZMN1xrzP
gucI6jH37GPHCoYGz+I7fm+ZLKrhK++hptexQYy4nub6bhK03O3gKsz6YzP0YngB
54EZl4kwClmB3oQZk8HrLfFMFPlT00K4+Jqme9nIx7/RM1nyrjQXbXc2TWiNBtq7
nTV+WfHVcQMJ6Y/4lK18+UBhHiD3eN8wqNBfVBx7rdPXAnNha49QccFxVvMEI6Py
iHNWyWMprhKMPc5TAkB1DiW91EzNxzPZjuLWhUuTI5QhXgaCjXVo9tlvWx5XhduN
jq+kIaNRBtMa1g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:13 2025 by rpki-client