Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
File: sFRCxP_pwddh58VpNg6tBCQ4-QM.mft (raw, json)
Hash identifier: Xwi4l6hFZ7kIGCcZQ8HqcGP0hQY6dzoUQm+t5YYT+lQ=
Subject key identifier: 32:95:52:47:54:57:64:E9:A6:97:B1:3D:7C:AF:F7:B2:A7:A9:38:A1
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial: 0194BC72C2052FC9E311AB77EF9BBEA4DF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
Manifest number: 11E1
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: 3cIXV4csicuxADT5Y7RuYu5cw_A.roa (hash: aqXrqzZnI9uqQYFm5g0PJLj9zhFVOcXILWRNYrHFA9c=)
2: sFRCxP_pwddh58VpNg6tBCQ4-QM.crl (hash: jwo6KoZmMGB2Hjpc0kw1kG8CuuoFKCji2EwRAnGdci8=)
3: xvhaWBb3tvMQLpukd_f8RlDLU2Y.roa (hash: gJd09VzBoAlOJJupvrvcJYxnf407SVcdEGocSp2sjqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c2:05:2f:c9:e3:11:ab:77:ef:9b:be:a4:df:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=32955247545764e9a697b13d7caff7b2a7a938a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:82:af:a3:c3:85:22:1e:47:7c:7b:c0:9c:
b0:5d:32:84:a5:8b:2d:e0:37:8d:d6:28:a8:09:be:
53:5f:cd:47:47:57:88:f9:d7:e1:f8:31:a5:e4:ad:
63:fc:3b:ce:c6:a7:2b:ac:85:b8:b0:6c:2f:b4:39:
49:05:5e:e6:3b:23:95:bf:48:d8:a2:1b:03:14:7a:
4d:ed:bc:ad:18:5b:87:59:9a:5f:85:2b:a2:80:06:
e0:18:ff:8d:84:1c:d3:7a:d4:10:13:6e:84:3c:ab:
7e:ff:e7:09:61:1c:d2:7e:a6:cf:41:db:71:3a:3c:
ff:bd:08:09:b8:17:68:61:9d:67:ee:a0:39:f4:f2:
32:b1:d6:47:76:95:6a:be:17:0b:40:4a:bd:82:a0:
f0:be:ec:f9:01:fa:f9:da:7f:bb:b6:e0:f4:5f:54:
9c:75:65:ce:0d:ef:17:11:65:b3:ca:61:b8:56:e0:
c5:02:ff:d4:2c:e9:e8:7a:73:91:4c:4a:61:df:f9:
be:a1:51:e7:f3:f6:63:8e:1a:80:53:ca:bc:c9:4e:
69:22:cb:16:5c:9c:0b:cc:b9:13:fe:41:67:22:29:
0b:1d:81:e8:6f:66:0f:77:e0:66:6d:f9:29:27:0f:
a5:ae:07:09:b3:f1:8b:f0:d3:14:84:bc:43:b1:90:
25:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:95:52:47:54:57:64:E9:A6:97:B1:3D:7C:AF:F7:B2:A7:A9:38:A1
X509v3 Authority Key Identifier:
keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:80:1f:11:02:6e:4d:c7:e3:09:39:76:19:57:42:46:11:6c:
32:e4:4d:9a:e6:73:7b:f0:0f:11:e0:dd:00:ef:f4:16:6b:28:
25:6a:d9:28:82:3c:21:bd:b4:02:48:5f:de:4f:49:f7:b0:93:
47:04:7e:17:c8:bc:2a:9d:45:2c:5d:30:b8:2c:13:f1:c4:6a:
c6:8b:f9:47:76:9b:26:6d:fa:e5:0f:ba:5b:f5:ea:36:0c:1c:
06:14:dc:15:bd:fa:7c:81:4c:98:60:55:23:b7:06:a6:5a:21:
90:1d:31:aa:80:9d:d7:87:c5:53:2e:83:47:22:8d:df:b1:04:
f3:bb:ca:23:a1:bf:ac:93:70:c9:c0:cf:d5:ab:49:7e:4f:6f:
b1:86:25:08:66:1b:2f:23:df:cf:d8:ca:59:ee:8e:10:96:1b:
b2:54:4a:f4:9b:b1:da:c8:30:95:b0:a7:ca:54:d4:c4:fc:df:
9e:3a:9b:e9:de:34:4b:f2:b5:47:9c:fd:d6:17:09:14:46:2b:
7a:7f:37:b6:70:47:bb:c8:03:b3:86:68:02:13:06:6f:cd:af:
a7:47:77:74:ee:13:c7:c0:18:02:bb:a2:50:d1:32:c1:b4:87:
66:60:89:56:c4:8a:5a:fd:13:18:cd:c3:97:0e:fa:04:2e:ae:
34:ea:55:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8csIFL8njEat375u+pN8MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNTQ0MmM0ZmZlOWMxZDc2MWU3YzU2OTM2MGVhZDA0MjQz
OGY5MDMwHhcNMjUwMTMxMTMwMDI0WhcNMjUwMjAxMTMwMDI0WjAzMTEwLwYDVQQD
EygzMjk1NTI0NzU0NTc2NGU5YTY5N2IxM2Q3Y2FmZjdiMmE3YTkzOGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQOCr6PDhSIeR3x7wJywXTKEpYst
4DeN1iioCb5TX81HR1eI+dfh+DGl5K1j/DvOxqcrrIW4sGwvtDlJBV7mOyOVv0jY
ohsDFHpN7bytGFuHWZpfhSuigAbgGP+NhBzTetQQE26EPKt+/+cJYRzSfqbPQdtx
Ojz/vQgJuBdoYZ1n7qA59PIysdZHdpVqvhcLQEq9gqDwvuz5Afr52n+7tuD0X1Sc
dWXODe8XEWWzymG4VuDFAv/ULOnoenORTEph3/m+oVHn8/ZjjhqAU8q8yU5pIssW
XJwLzLkT/kFnIikLHYHob2YPd+BmbfkpJw+lrgcJs/GL8NMUhLxDsZAlTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKVUkdUV2TpppexPXyv97KnqTihMB8GA1UdIwQY
MBaAFLBUQsT/6cHXYefFaTYOrQQkOPkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80Yjc3ZTctMzQ3Yy00OWZhLTgwOGIt
NmVkMzMxZjMxZTA5LzEvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80Yjc3ZTctMzQ3Yy00OWZhLTgwOGItNmVkMzMxZjMxZTA5
LzEvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoAfEQJu
TcfjCTl2GVdCRhFsMuRNmuZze/APEeDdAO/0FmsoJWrZKII8Ib20Akhf3k9J97CT
RwR+F8i8Kp1FLF0wuCwT8cRqxov5R3abJm365Q+6W/XqNgwcBhTcFb36fIFMmGBV
I7cGplohkB0xqoCd14fFUy6DRyKN37EE87vKI6G/rJNwycDP1atJfk9vsYYlCGYb
LyPfz9jKWe6OEJYbslRK9Jux2sgwlbCnylTUxPzfnjqb6d40S/K1R5z91hcJFEYr
en83tnBHu8gDs4ZoAhMGb82vp0d3dO4Tx8AYAruiUNEywbSHZmCJVsSKWv0TGM3D
lw76BC6uNOpVIQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:58 2025 by rpki-client