Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
File: fxePr2QB4vNxbjF2RWnfcx31jyI.mft (raw, json)
Hash identifier: WuDm+FWQZzALS3tVBQVOXBYgl/SW4miCpw2zqXD/bY0=
Subject key identifier: B8:EC:C5:DB:53:A0:42:11:E6:3B:CF:8E:17:07:51:52:9F:4A:92:CC
Authority key identifier: 7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
Certificate issuer: /CN=7f178faf6401e2f3716e31764569df731df58f22
Certificate serial: 0194BC3C8DCFD58CA9649CD1AEA0645E85AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
Manifest number: 0E9D
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: aO3R8Yo3eBCEfuvERnCJCw4GHKw.roa (hash: 0+s8Oxr+vc9N7zEky4ZV5zDnUpXVmpiBsxhTGsefbzg=)
2: fxePr2QB4vNxbjF2RWnfcx31jyI.crl (hash: 9Yw++L1pANVnHmOz0xyN9o3o0YnOnTOh8ivaMnqoPoA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8d:cf:d5:8c:a9:64:9c:d1:ae:a0:64:5e:85:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f178faf6401e2f3716e31764569df731df58f22
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=b8ecc5db53a04211e63bcf8e170751529f4a92cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:fa:99:c0:30:21:7c:52:21:81:54:cc:60:
3c:ee:a1:bb:0c:d3:e8:56:19:64:19:aa:eb:10:2b:
aa:a7:11:d1:e3:34:b7:76:db:55:13:90:60:41:b8:
d9:0d:37:76:d3:6d:0f:43:84:a2:e5:a7:7f:e0:98:
e8:02:3c:f7:9f:b4:6a:d4:df:a5:d6:8e:dc:4a:1b:
db:c5:4c:ed:f9:79:00:37:7f:55:a8:93:2e:fe:de:
a3:34:c5:5b:c9:fd:23:65:e4:25:ae:76:a3:3c:d3:
c7:1f:a4:c0:e6:18:aa:10:53:fa:b0:ab:da:7f:8d:
98:01:af:89:11:fb:24:4b:f9:d9:2a:ec:1b:f1:c5:
fd:a7:d6:3f:07:98:cf:93:33:da:9b:fa:85:05:4e:
7c:35:e5:c3:ea:f6:6c:b2:d2:9c:be:9f:32:e6:1b:
02:4b:bf:b8:b8:be:65:57:eb:a2:3a:94:95:b1:ee:
a2:66:08:bd:25:b4:84:8d:e1:3c:b1:8d:63:77:85:
a8:67:96:e9:16:9c:39:b1:c2:7c:5e:32:43:68:e4:
29:6f:a5:db:8f:c7:da:4a:4e:df:6e:8f:bb:fe:05:
c2:ad:c0:f1:b9:89:33:72:f5:68:59:9c:3c:26:d4:
fe:07:e4:60:85:f4:7c:b8:e9:06:9e:ce:f5:a2:01:
15:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EC:C5:DB:53:A0:42:11:E6:3B:CF:8E:17:07:51:52:9F:4A:92:CC
X509v3 Authority Key Identifier:
keyid:7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:70:0f:24:44:29:e8:79:7a:69:28:b1:0a:1f:82:20:b5:39:
32:d0:f5:8c:b6:78:72:c7:aa:54:f4:36:0b:58:20:c9:6e:99:
95:1d:10:06:88:b7:01:1c:93:b5:cc:97:c5:84:c4:5f:c6:89:
0f:9d:ed:c7:ac:49:e5:af:d6:a5:f7:bb:4c:c2:17:91:6b:d2:
ff:93:1e:58:83:30:94:7b:28:c2:9a:49:ef:b1:14:de:3b:af:
32:c4:09:a1:9c:77:31:16:9e:20:ae:98:d2:34:7c:a2:62:34:
d3:0e:0f:f3:34:c9:db:d4:25:5c:37:ab:19:3e:11:59:d6:35:
3e:71:5b:f4:13:a5:88:3d:6b:90:81:2a:d7:98:25:99:dc:71:
0d:fa:ea:86:89:76:11:a2:18:82:81:5d:ca:6d:6b:29:fa:7c:
ae:de:5f:2a:2d:1b:17:5e:71:89:ee:ca:45:dc:b3:af:30:e3:
e6:e4:8b:bc:39:69:59:43:e8:3e:55:1d:9e:b9:d8:f7:57:f3:
ec:a1:b5:45:35:c3:b5:4c:f1:4c:5f:9b:10:57:2e:54:f0:21:
19:d2:12:b9:92:95:83:e8:7e:76:ca:f5:6a:36:98:78:e1:d6:
4e:3a:19:8d:79:8a:0f:df:5c:9c:c5:1b:50:1f:d6:f4:73:0d:
0d:ab:da:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PI3P1YypZJzRrqBkXoWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMTc4ZmFmNjQwMWUyZjM3MTZlMzE3NjQ1NjlkZjczMWRm
NThmMjIwHhcNMjUwMTMxMTIwMTEyWhcNMjUwMjAxMTIwMTEyWjAzMTEwLwYDVQQD
EyhiOGVjYzVkYjUzYTA0MjExZTYzYmNmOGUxNzA3NTE1MjlmNGE5MmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs76mcAwIXxSIYFUzGA87qG7DNPo
VhlkGarrECuqpxHR4zS3dttVE5BgQbjZDTd2020PQ4Si5ad/4JjoAjz3n7Rq1N+l
1o7cShvbxUzt+XkAN39VqJMu/t6jNMVbyf0jZeQlrnajPNPHH6TA5hiqEFP6sKva
f42YAa+JEfskS/nZKuwb8cX9p9Y/B5jPkzPam/qFBU58NeXD6vZsstKcvp8y5hsC
S7+4uL5lV+uiOpSVse6iZgi9JbSEjeE8sY1jd4WoZ5bpFpw5scJ8XjJDaOQpb6Xb
j8faSk7fbo+7/gXCrcDxuYkzcvVoWZw8JtT+B+RghfR8uOkGns71ogEVvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjsxdtToEIR5jvPjhcHUVKfSpLMMB8GA1UdIwQY
MBaAFH8Xj69kAeLzcW4xdkVp33Md9Y8iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnhlUHIyUUI0dk54YmpGMlJXbmZjeDMxanlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xYjc5NjgtY2E0ZC00NWY0LWI2NzEt
MmU3Zjc4NDg5Y2QzLzEvZnhlUHIyUUI0dk54YmpGMlJXbmZjeDMxanlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xYjc5NjgtY2E0ZC00NWY0LWI2NzEtMmU3Zjc4NDg5Y2Qz
LzEvZnhlUHIyUUI0dk54YmpGMlJXbmZjeDMxanlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHAPJEQp
6Hl6aSixCh+CILU5MtD1jLZ4cseqVPQ2C1ggyW6ZlR0QBoi3ARyTtcyXxYTEX8aJ
D53tx6xJ5a/Wpfe7TMIXkWvS/5MeWIMwlHsowppJ77EU3juvMsQJoZx3MRaeIK6Y
0jR8omI00w4P8zTJ29QlXDerGT4RWdY1PnFb9BOliD1rkIEq15glmdxxDfrqhol2
EaIYgoFdym1rKfp8rt5fKi0bF15xie7KRdyzrzDj5uSLvDlpWUPoPlUdnrnY91fz
7KG1RTXDtUzxTF+bEFcuVPAhGdISuZKVg+h+dsr1ajaYeOHWTjoZjXmKD99cnMUb
UB/W9HMNDavang==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:49:44 2025 by rpki-client