Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: enOFKIfTGYxG+DHJvRr46MgmMaeuCc2TPkLNnmrreBM=
Subject key identifier: 73:23:CC:E6:FA:E3:A1:F4:A4:87:A9:CC:89:93:69:CB:E3:DA:B2:05
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 0194BC3C1A49274C0904364FCB430C1C9D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 1293
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: 2GwCgnFjUkGGhajM159Ia+rAJaKHLvJbSj8tMfZHnqE=)
2: c3yz1Xm3fr649PuxzYeiC0GyqPg.roa (hash: I/Ccv5oKVG1j/z4cFdG/fafH2WD7P5MCyaFq+J+EQdU=)
3: cFc0gNIOK5WxBeuSF5eiQkXoOKE.roa (hash: GkH9aMuKOzi/6cYcKbTikX2OvYkhD9zkPc0LnUJCl1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1a:49:27:4c:09:04:36:4f:cb:43:0c:1c:9d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=7323cce6fae3a1f4a487a9cc899369cbe3dab205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:0a:10:d0:8a:5f:c4:07:8f:9e:0b:9f:99:
3c:df:a8:ee:f0:f4:c0:d6:83:63:5b:d7:70:64:da:
3a:d4:50:60:79:b8:74:22:45:1a:d5:03:62:61:64:
82:6c:94:ba:ed:8e:b0:ac:b5:f1:91:ac:91:da:4b:
5c:9d:cc:4b:7c:76:41:c8:e4:01:d1:7d:a0:63:7f:
54:ee:24:3f:fa:2f:25:81:95:79:b4:6d:53:a5:95:
ca:3f:d9:64:12:7e:2e:eb:98:af:de:9e:10:77:73:
24:2b:fc:ed:0b:cc:14:e1:f6:ce:63:e2:f3:0e:95:
ed:be:9e:6e:ff:f1:57:0b:cd:ce:b4:75:9f:02:4d:
88:e6:69:41:ec:91:f1:4a:92:78:68:1d:0d:7f:03:
7b:87:7f:7c:80:53:79:5d:84:e7:76:01:34:54:d7:
9a:fc:7a:d7:f8:21:54:1f:9d:79:2c:35:a4:69:ea:
8d:4f:7c:fd:73:ab:78:13:18:d4:3c:bf:80:96:f3:
0b:84:3f:6e:59:45:2c:da:f7:b0:35:90:5e:10:f0:
8d:aa:44:70:50:2f:dd:21:72:e7:23:ae:7a:52:6f:
60:62:e1:48:42:d8:da:c8:5a:a7:67:71:ab:5a:e9:
a7:70:9d:31:79:79:1c:44:48:24:0d:cc:f0:fc:1d:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:23:CC:E6:FA:E3:A1:F4:A4:87:A9:CC:89:93:69:CB:E3:DA:B2:05
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:09:f9:51:34:66:90:b4:a4:cb:78:9a:e7:21:1a:fb:cf:03:
9c:03:81:56:10:5f:65:3b:f7:12:0a:49:30:e8:9f:23:38:a3:
fe:98:7d:e3:6f:47:78:3e:9e:fd:9c:c1:73:20:19:6d:67:32:
66:cf:b8:81:01:da:50:1c:43:00:62:08:ba:1f:66:2c:8d:cf:
fb:b6:8b:21:09:e9:ee:8c:c1:de:79:e4:c6:07:76:2a:86:ab:
05:b0:01:30:92:32:3e:f7:e0:8f:4a:0f:a5:f5:be:36:44:5c:
9c:7e:3a:61:fd:0e:74:fa:8e:0a:0c:2d:bc:e0:52:ae:54:0d:
0e:20:a8:84:98:6b:13:3a:2c:41:d3:0f:64:78:b0:ec:08:d7:
ab:4c:94:ed:82:fe:88:84:d2:c6:54:8e:30:df:14:fb:09:15:
38:aa:90:07:23:32:9c:fd:72:e9:e2:a1:de:8d:a1:87:c5:9e:
48:83:61:d9:a1:83:9d:8c:15:b0:b4:70:9e:e0:a2:9e:bc:a5:
95:bd:7c:19:53:58:92:55:cc:9d:d5:a7:36:5c:cd:16:e9:92:
70:14:9c:20:33:e7:28:83:a8:a4:2a:fa:1d:bf:26:b9:e8:50:
55:8e:b0:05:c8:2b:03:0d:21:1c:2f:72:02:a1:7f:a5:51:11:
29:fb:26:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PBpJJ0wJBDZPy0MMHJ0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NTllYjYwNDAxOTNkZjA2ODEzNTA5MDVlNjM5ZDBlNThk
NWY5ZGYwHhcNMjUwMTMxMTIwMDQyWhcNMjUwMjAxMTIwMDQyWjAzMTEwLwYDVQQD
Eyg3MzIzY2NlNmZhZTNhMWY0YTQ4N2E5Y2M4OTkzNjljYmUzZGFiMjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntEKENCKX8QHj54Ln5k836ju8PTA
1oNjW9dwZNo61FBgebh0IkUa1QNiYWSCbJS67Y6wrLXxkayR2ktcncxLfHZByOQB
0X2gY39U7iQ/+i8lgZV5tG1TpZXKP9lkEn4u65iv3p4Qd3MkK/ztC8wU4fbOY+Lz
DpXtvp5u//FXC83OtHWfAk2I5mlB7JHxSpJ4aB0NfwN7h398gFN5XYTndgE0VNea
/HrX+CFUH515LDWkaeqNT3z9c6t4ExjUPL+AlvMLhD9uWUUs2vewNZBeEPCNqkRw
UC/dIXLnI656Um9gYuFIQtjayFqnZ3GrWumncJ0xeXkcREgkDczw/B1d1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMjzOb646H0pIepzImTacvj2rIFMB8GA1UdIwQY
MBaAFBZZ62BAGT3waBNQkF5jnQ5Y1fnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2Qt
NTQ0ODU1Y2M0ZjU3LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2QtNTQ0ODU1Y2M0ZjU3
LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAn5UTRm
kLSky3ia5yEa+88DnAOBVhBfZTv3EgpJMOifIzij/ph9429HeD6e/ZzBcyAZbWcy
Zs+4gQHaUBxDAGIIuh9mLI3P+7aLIQnp7ozB3nnkxgd2KoarBbABMJIyPvfgj0oP
pfW+NkRcnH46Yf0OdPqOCgwtvOBSrlQNDiCohJhrEzosQdMPZHiw7AjXq0yU7YL+
iITSxlSOMN8U+wkVOKqQByMynP1y6eKh3o2hh8WeSINh2aGDnYwVsLRwnuCinryl
lb18GVNYklXMndWnNlzNFumScBScIDPnKIOopCr6Hb8muehQVY6wBcgrAw0hHC9y
AqF/pVERKfsmog==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:38:00 2025 by rpki-client