Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
File: FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft (raw, json)
Hash identifier: NkYdVk3J05I8rKTCIQanmKt6Q0kSialgbzBophTWi4M=
Subject key identifier: 9D:8D:C0:4F:AA:96:7F:85:8C:39:B0:D3:CA:B0:74:3B:9D:B5:B2:01
Authority key identifier: 16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
Certificate issuer: /CN=167782bea46fd271768ff46d9b45c057a9df5481
Certificate serial: 0194BC728519E00B7F5B3686423F40BBA9F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: 86pmQhR3tumm6aKpKa5tR6sKn2Y.roa (hash: y1UamkXET5HMaJBK7pe7q3lox6X+V75MRSuUUTK6f04=)
2: FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl (hash: adPAoYNgrFIjZQR5tPbIawRSjBduT4bqiWNGNuLZyW4=)
3: Zg3SfPJqyJJ2sN5UVgE8M6UTOjo.roa (hash: vyUE4iE6P3VunHQn7CBSp04IcceuNcHP3wF8npQ/Nvg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:85:19:e0:0b:7f:5b:36:86:42:3f:40:bb:a9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167782bea46fd271768ff46d9b45c057a9df5481
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=9d8dc04faa967f858c39b0d3cab0743b9db5b201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:62:72:6e:55:05:ea:4f:50:4c:60:a5:b8:
7e:5a:48:aa:23:0f:9c:ab:38:cb:18:14:49:1f:43:
7e:dd:c9:a6:4d:c7:f5:b2:4f:73:f9:da:d0:2f:0b:
2d:de:40:2c:d3:44:7e:14:56:4c:67:a4:fb:d1:71:
e9:7e:ef:22:c9:d4:15:e8:d2:77:01:28:8f:1b:f6:
db:62:a6:a3:e4:45:fd:72:68:ec:e1:52:95:5f:bc:
16:ca:37:35:b6:cc:e3:d5:e8:36:88:d2:fe:cf:01:
4e:eb:af:26:d1:68:5e:82:59:c2:6d:a7:7e:d3:c4:
2d:6d:24:c5:94:8a:c4:5b:bd:a9:3a:f4:5a:74:ba:
82:1a:df:21:85:1e:53:66:ee:60:8f:5a:3d:d8:bf:
d5:07:6c:51:91:8f:e0:36:cb:64:e1:f9:47:e2:7d:
2d:cc:f6:66:70:ed:e4:cd:81:ff:5d:f5:a6:d9:2f:
6a:c4:8b:92:a5:b8:b6:a8:1f:e7:97:65:cf:ff:27:
f7:0e:4a:31:85:1b:bd:de:ba:2e:de:d0:45:71:fc:
c7:ad:b7:b5:28:30:52:41:02:2d:11:ec:a7:79:81:
75:50:de:93:67:17:4d:ac:03:06:ba:bf:b8:88:6f:
c1:0c:df:79:76:db:e4:a1:43:e0:61:06:ff:86:16:
e0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8D:C0:4F:AA:96:7F:85:8C:39:B0:D3:CA:B0:74:3B:9D:B5:B2:01
X509v3 Authority Key Identifier:
keyid:16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c8:19:1f:e1:ba:61:4e:11:30:bb:92:08:09:20:41:45:a3:
2d:78:8e:38:5d:ef:39:56:bf:83:31:f7:28:68:b7:e5:27:28:
0d:ec:ea:76:d5:3a:5e:55:eb:35:63:eb:86:1c:f4:8f:88:45:
e4:42:c5:63:9f:2f:2f:c9:f8:51:ac:6c:56:a9:76:7d:0b:50:
a4:e2:94:6e:a3:85:89:78:b8:4f:13:98:ed:a9:63:b6:6e:f6:
da:a6:ad:d6:98:33:aa:ac:b2:ed:a2:eb:bc:c2:05:db:b5:cc:
0c:9d:8a:d0:c9:6b:f8:d8:84:f6:21:4f:b7:00:94:93:99:10:
32:4b:70:43:02:81:12:e0:c0:ba:05:aa:1f:52:07:dc:aa:b9:
c2:0d:d4:a1:49:52:cc:35:c4:0e:ca:b1:05:8d:a5:4d:89:50:
04:4f:d9:a2:09:be:87:e5:e0:60:33:03:11:91:52:c2:43:e9:
d4:81:cc:e4:de:79:71:1e:ed:eb:5b:01:72:1a:42:84:0e:bd:
90:a1:6a:95:46:31:60:79:18:0a:93:b0:6b:49:37:4a:3e:da:
30:44:fa:28:3f:4b:f1:44:2e:cf:7b:7a:c5:a1:6d:68:95:75:
38:21:c6:fa:ce:7c:ce:e9:06:83:33:7b:39:c1:67:aa:a5:bd:
05:5e:a2:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8coUZ4At/WzaGQj9Au6nwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2Nzc4MmJlYTQ2ZmQyNzE3NjhmZjQ2ZDliNDVjMDU3YTlk
ZjU0ODEwHhcNMjUwMTMxMTMwMDA5WhcNMjUwMjAxMTMwMDA5WjAzMTEwLwYDVQQD
Eyg5ZDhkYzA0ZmFhOTY3Zjg1OGMzOWIwZDNjYWIwNzQzYjlkYjViMjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+Ricm5VBepPUExgpbh+WkiqIw+c
qzjLGBRJH0N+3cmmTcf1sk9z+drQLwst3kAs00R+FFZMZ6T70XHpfu8iydQV6NJ3
ASiPG/bbYqaj5EX9cmjs4VKVX7wWyjc1tszj1eg2iNL+zwFO668m0WheglnCbad+
08QtbSTFlIrEW72pOvRadLqCGt8hhR5TZu5gj1o92L/VB2xRkY/gNstk4flH4n0t
zPZmcO3kzYH/XfWm2S9qxIuSpbi2qB/nl2XP/yf3DkoxhRu93rou3tBFcfzHrbe1
KDBSQQItEeyneYF1UN6TZxdNrAMGur+4iG/BDN95dtvkoUPgYQb/hhbg9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2NwE+qln+FjDmw08qwdDudtbIBMB8GA1UdIwQY
MBaAFBZ3gr6kb9Jxdo/0bZtFwFep31SBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lZjBiOTItNWQ4NS00NzkyLWI1NTEt
OWEzNTgzNjI4MjljLzEvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lZjBiOTItNWQ4NS00NzkyLWI1NTEtOWEzNTgzNjI4Mjlj
LzEvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncgZH+G6
YU4RMLuSCAkgQUWjLXiOOF3vOVa/gzH3KGi35ScoDezqdtU6XlXrNWPrhhz0j4hF
5ELFY58vL8n4UaxsVql2fQtQpOKUbqOFiXi4TxOY7aljtm722qat1pgzqqyy7aLr
vMIF27XMDJ2K0Mlr+NiE9iFPtwCUk5kQMktwQwKBEuDAugWqH1IH3Kq5wg3UoUlS
zDXEDsqxBY2lTYlQBE/Zogm+h+XgYDMDEZFSwkPp1IHM5N55cR7t61sBchpChA69
kKFqlUYxYHkYCpOwa0k3Sj7aMET6KD9L8UQuz3t6xaFtaJV1OCHG+s58zukGgzN7
OcFnqqW9BV6inA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:22 2025 by rpki-client