Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
File: fsgd4tovClqrQYJhS7zF5BPVUhs.mft (raw, json)
Hash identifier: redwAjEuRTsMJlGY37PspGZAOZVP375VY9ZcpyY1HNo=
Subject key identifier: 03:AD:31:F4:AC:04:FB:54:B0:DF:E4:D1:0E:A1:34:AD:3C:BC:3C:9C
Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
Certificate issuer: /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Certificate serial: 0194BD4E50D44657871CCAF335369892BE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: Bm4fWDiAgtSgEEDsoqVp0hZs-1U.roa (hash: 4AYDFkMaa0ydrctcy3Ily/9B1nza0T1CPUGQdlaU1vk=)
2: fsgd4tovClqrQYJhS7zF5BPVUhs.crl (hash: LO0si02AQI6l8mMyupU72MIULkreBRLNHaxkb7oqq8k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:50:d4:46:57:87:1c:ca:f3:35:36:98:92:be:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=03ad31f4ac04fb54b0dfe4d10ea134ad3cbc3c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:21:77:cb:43:12:86:84:86:e9:a1:6e:ed:
c3:99:1e:5b:36:6d:99:0e:1d:36:79:f6:06:87:25:
ee:e1:32:6b:17:93:36:2d:2c:d9:44:78:5a:27:a8:
88:dd:ba:ff:c3:63:dd:2b:34:26:c2:5a:3b:89:57:
5f:f0:ad:bc:1d:8a:49:46:11:f1:99:7a:3b:44:2f:
13:c7:b0:3c:f6:fa:7a:08:6a:fe:21:81:b0:00:d7:
c5:69:69:f5:13:37:bf:8b:fb:66:a1:5e:47:1b:b8:
79:e2:89:28:81:54:d4:10:04:c3:e9:6d:b6:31:ed:
fe:43:2d:fd:a9:27:b5:88:a7:e3:3c:99:56:80:06:
f8:92:8b:49:ed:85:9b:0b:fa:f0:d4:2a:3e:dc:2d:
89:c8:ae:d2:10:c1:e5:b7:fa:5b:63:7a:7b:90:78:
f2:05:49:08:ae:e9:21:40:98:3d:15:5b:4d:ee:3d:
a6:6e:a8:9d:2f:2a:2c:a4:31:5a:9f:d9:a4:2d:98:
a5:b8:6f:c0:72:19:34:62:79:1a:da:12:72:63:73:
76:3c:99:88:22:4a:9e:86:f6:1d:92:55:32:2a:a2:
6e:de:cd:fb:d4:29:8c:27:6c:ae:df:20:74:85:90:
9a:a6:a0:57:68:2e:e3:be:8d:50:ab:41:75:ec:25:
60:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AD:31:F4:AC:04:FB:54:B0:DF:E4:D1:0E:A1:34:AD:3C:BC:3C:9C
X509v3 Authority Key Identifier:
keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:41:5a:1c:31:5a:39:31:75:e7:84:c6:5b:1f:cc:98:da:dd:
ea:82:68:39:12:d5:17:43:c2:5e:85:e9:ff:e4:a5:01:02:d2:
f8:c0:35:b0:8b:c9:f5:ef:fe:31:c3:c3:e4:4a:a7:58:ee:7f:
16:0f:f7:97:f7:79:3b:c9:b9:c5:76:e0:7f:63:f6:ba:67:f6:
90:a0:b9:ed:4a:e8:26:06:e2:6b:b1:6a:21:6a:7a:35:64:da:
dc:3f:35:85:da:1d:7c:2b:f4:39:c6:7b:0e:d4:b5:a4:b7:5d:
d8:9a:2e:d9:23:33:b1:46:32:42:1b:b0:71:cc:3d:b5:b9:bb:
8f:b4:5c:cf:e1:c0:71:39:f5:05:08:ed:ab:ac:ac:91:7d:e3:
b7:d9:60:da:3d:e2:6b:a1:40:81:b9:09:c2:e5:aa:da:29:db:
29:4d:aa:46:87:5f:d4:2e:7f:66:5e:75:79:9c:39:ed:07:2d:
c8:92:51:cc:25:dd:9f:45:5e:5d:ea:b3:96:88:ee:9f:fb:22:
42:00:59:90:5a:8f:aa:92:ff:d0:c3:a3:57:2e:84:f3:43:5f:
b8:c2:f6:27:58:23:b2:a7:e9:8f:b3:04:b1:6c:6b:c8:95:7f:
f2:cb:cd:8d:b9:49:4d:11:75:7c:03:d8:74:f3:6c:08:a5:37:
2d:73:74:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TlDURleHHMrzNTaYkr4mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzgxZGUyZGEyZjBhNWFhYjQxODI2MTRiYmNjNWU0MTNk
NTUyMWIwHhcNMjUwMTMxMTcwMDEzWhcNMjUwMjAxMTcwMDEzWjAzMTEwLwYDVQQD
EygwM2FkMzFmNGFjMDRmYjU0YjBkZmU0ZDEwZWExMzRhZDNjYmMzYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YEhd8tDEoaEhumhbu3DmR5bNm2Z
Dh02efYGhyXu4TJrF5M2LSzZRHhaJ6iI3br/w2PdKzQmwlo7iVdf8K28HYpJRhHx
mXo7RC8Tx7A89vp6CGr+IYGwANfFaWn1Eze/i/tmoV5HG7h54okogVTUEATD6W22
Me3+Qy39qSe1iKfjPJlWgAb4kotJ7YWbC/rw1Co+3C2JyK7SEMHlt/pbY3p7kHjy
BUkIrukhQJg9FVtN7j2mbqidLyospDFan9mkLZiluG/Achk0Ynka2hJyY3N2PJmI
IkqehvYdklUyKqJu3s371CmMJ2yu3yB0hZCapqBXaC7jvo1Qq0F17CVgWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOtMfSsBPtUsN/k0Q6hNK08vDycMB8GA1UdIwQY
MBaAFH7IHeLaLwpaq0GCYUu8xeQT1VIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wOTg1ZTctZGYwOC00MmE1LTlhODYt
YmQ5MWU5MmFjYTkwLzEvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wOTg1ZTctZGYwOC00MmE1LTlhODYtYmQ5MWU5MmFjYTkw
LzEvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0FaHDFa
OTF154TGWx/MmNrd6oJoORLVF0PCXoXp/+SlAQLS+MA1sIvJ9e/+McPD5EqnWO5/
Fg/3l/d5O8m5xXbgf2P2umf2kKC57UroJgbia7FqIWp6NWTa3D81hdodfCv0OcZ7
DtS1pLdd2Jou2SMzsUYyQhuwccw9tbm7j7Rcz+HAcTn1BQjtq6yskX3jt9lg2j3i
a6FAgbkJwuWq2inbKU2qRodf1C5/Zl51eZw57QctyJJRzCXdn0VeXeqzlojun/si
QgBZkFqPqpL/0MOjVy6E80NfuML2J1gjsqfpj7MEsWxryJV/8svNjblJTRF1fAPY
dPNsCKU3LXN0tw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:02 2025 by rpki-client