Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/803d45-c56e-4cce-975e-4d279158aed4/1/FumYOImalwSwCE5vbn7GvGaurVE.mft
File: FumYOImalwSwCE5vbn7GvGaurVE.mft (raw, json)
Hash identifier: WsbfOCgijjqxRZSXRpkad6ok6urB9gt74bXVxlWk2Zw=
Subject key identifier: AE:7E:39:3E:23:8B:77:E4:C4:D3:67:98:CF:6E:71:07:60:75:23:8F
Authority key identifier: 16:E9:98:38:89:9A:97:04:B0:08:4E:6F:6E:7E:C6:BC:66:AE:AD:51
Certificate issuer: /CN=16e99838899a9704b0084e6f6e7ec6bc66aead51
Certificate serial: 0194BD1791B627BFE8F6DA97BFEB38593472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FumYOImalwSwCE5vbn7GvGaurVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/803d45-c56e-4cce-975e-4d279158aed4/1/FumYOImalwSwCE5vbn7GvGaurVE.mft
Manifest number: 03D5
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: FumYOImalwSwCE5vbn7GvGaurVE.crl (hash: PIEz6rCejSwNn1ji3PLpRtfjnPJXTpsSQu7+5QmfN/w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:91:b6:27:bf:e8:f6:da:97:bf:eb:38:59:34:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16e99838899a9704b0084e6f6e7ec6bc66aead51
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=ae7e393e238b77e4c4d36798cf6e71076075238f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fd:5f:35:06:7e:73:d3:ed:f4:32:e4:54:4e:
63:70:a2:87:18:f2:f2:14:c2:d2:19:3c:03:1a:37:
c5:f3:44:a8:c1:7e:5f:18:4f:b8:10:e3:e9:a8:fa:
c1:b4:0c:e2:c0:04:2f:85:b4:49:54:e7:4a:f8:83:
b5:cb:d6:3b:f5:20:56:27:0d:ed:36:dc:e7:74:28:
93:1c:f8:c0:87:f3:5c:2e:0c:fe:db:87:d6:40:ea:
77:2b:f3:ef:28:82:c6:bd:cf:18:3b:71:e5:c1:5f:
e4:00:69:9e:53:14:d9:c2:00:1d:7a:05:49:c7:f2:
dd:2d:bb:b4:34:a3:95:49:35:56:ba:b7:d3:77:e8:
cf:2b:1b:0a:d0:a4:31:aa:38:e0:69:80:47:19:cd:
ce:31:ca:35:21:cc:b6:4b:93:7a:61:25:17:31:77:
25:f0:04:e1:28:dd:4c:7d:ad:e9:9c:5d:f0:ec:bb:
51:d5:81:ea:4d:bc:e8:e8:84:e3:6f:0f:e8:2a:a2:
a0:9e:1e:47:91:fd:7f:a7:22:57:00:61:25:69:0f:
09:6c:00:7a:46:8e:ee:c2:4f:6d:ee:6a:7b:a6:92:
53:6b:80:25:88:de:49:99:09:7b:53:ce:53:9a:8d:
32:68:a9:c2:40:3a:ec:34:e6:c5:83:ea:70:1b:0b:
61:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7E:39:3E:23:8B:77:E4:C4:D3:67:98:CF:6E:71:07:60:75:23:8F
X509v3 Authority Key Identifier:
keyid:16:E9:98:38:89:9A:97:04:B0:08:4E:6F:6E:7E:C6:BC:66:AE:AD:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumYOImalwSwCE5vbn7GvGaurVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/803d45-c56e-4cce-975e-4d279158aed4/1/FumYOImalwSwCE5vbn7GvGaurVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/803d45-c56e-4cce-975e-4d279158aed4/1/FumYOImalwSwCE5vbn7GvGaurVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f9:0a:d6:28:ea:57:73:c3:6f:53:27:cd:3f:27:07:98:f1:
75:32:cc:3c:bc:26:59:3e:9d:58:dc:27:73:43:55:a0:db:35:
ca:3c:e8:f5:77:32:77:f6:8e:74:3b:67:0f:0c:a3:39:c7:01:
54:ac:90:28:18:d3:83:d6:ef:59:68:e9:d7:44:30:d2:0b:e3:
51:65:7d:50:21:37:a6:9d:13:37:0c:3d:ee:72:71:d1:d7:a3:
d3:bf:68:74:bf:67:22:16:bc:f0:37:e8:bb:d2:3c:b6:1d:33:
41:ab:b5:58:68:25:3c:5e:b3:56:24:60:d2:d1:21:e7:a7:3c:
52:2b:e9:23:48:4c:26:fe:59:37:6c:86:d6:31:91:ad:5d:44:
08:31:1f:49:ab:ab:b9:30:9e:4f:d3:90:bc:c2:bb:87:77:fb:
d9:0f:38:1d:e2:85:27:7d:3a:7f:31:f3:f0:84:49:2f:07:7b:
0b:15:24:80:f3:b7:ed:ae:fd:df:e0:1b:b1:a9:a3:2a:f1:c0:
9f:60:f5:15:3c:d5:ec:c9:bf:9c:9b:32:d9:41:ea:4d:7b:26:
90:19:14:9f:4a:94:39:3d:19:b2:2c:d2:05:bf:15:f5:97:16:
18:99:08:fd:23:bc:74:05:a6:e5:df:9d:0a:56:ff:c7:11:93:
9c:4a:a5:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F5G2J7/o9tqXv+s4WTRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZTk5ODM4ODk5YTk3MDRiMDA4NGU2ZjZlN2VjNmJjNjZh
ZWFkNTEwHhcNMjUwMTMxMTYwMDI1WhcNMjUwMjAxMTYwMDI1WjAzMTEwLwYDVQQD
EyhhZTdlMzkzZTIzOGI3N2U0YzRkMzY3OThjZjZlNzEwNzYwNzUyMzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/1fNQZ+c9Pt9DLkVE5jcKKHGPLy
FMLSGTwDGjfF80SowX5fGE+4EOPpqPrBtAziwAQvhbRJVOdK+IO1y9Y79SBWJw3t
NtzndCiTHPjAh/NcLgz+24fWQOp3K/PvKILGvc8YO3HlwV/kAGmeUxTZwgAdegVJ
x/LdLbu0NKOVSTVWurfTd+jPKxsK0KQxqjjgaYBHGc3OMco1Icy2S5N6YSUXMXcl
8AThKN1Mfa3pnF3w7LtR1YHqTbzo6ITjbw/oKqKgnh5Hkf1/pyJXAGElaQ8JbAB6
Ro7uwk9t7mp7ppJTa4AliN5JmQl7U85Tmo0yaKnCQDrsNObFg+pwGwthewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5+OT4ji3fkxNNnmM9ucQdgdSOPMB8GA1UdIwQY
MBaAFBbpmDiJmpcEsAhOb25+xrxmrq1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnVtWU9JbWFsd1N3Q0U1dmJuN0d2R2F1clZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy84MDNkNDUtYzU2ZS00Y2NlLTk3NWUt
NGQyNzkxNThhZWQ0LzEvRnVtWU9JbWFsd1N3Q0U1dmJuN0d2R2F1clZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy84MDNkNDUtYzU2ZS00Y2NlLTk3NWUtNGQyNzkxNThhZWQ0
LzEvRnVtWU9JbWFsd1N3Q0U1dmJuN0d2R2F1clZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvkK1ijq
V3PDb1MnzT8nB5jxdTLMPLwmWT6dWNwnc0NVoNs1yjzo9Xcyd/aOdDtnDwyjOccB
VKyQKBjTg9bvWWjp10Qw0gvjUWV9UCE3pp0TNww97nJx0dej079odL9nIha88Dfo
u9I8th0zQau1WGglPF6zViRg0tEh56c8UivpI0hMJv5ZN2yG1jGRrV1ECDEfSaur
uTCeT9OQvMK7h3f72Q84HeKFJ306fzHz8IRJLwd7CxUkgPO37a793+AbsamjKvHA
n2D1FTzV7Mm/nJsy2UHqTXsmkBkUn0qUOT0ZsizSBb8V9ZcWGJkI/SO8dAWm5d+d
Clb/xxGTnEql3g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:07 2025 by rpki-client