Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
File: Fo8OK6LQk0M6S2EpVye5m7FF93s.mft (raw, json)
Hash identifier: d2d3u/oCUS4c5IDIK7SdHTytAxNCGkpWhETFlN7NYQ0=
Subject key identifier: 25:E9:3D:F8:98:78:59:6B:35:CD:C0:F3:97:08:DE:6D:34:EA:9E:39
Authority key identifier: 16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B
Certificate issuer: /CN=168f0e2ba2d093433a4b61295727b99bb145f77b
Certificate serial: 0194BD177B46F9A14C29CE31E581321A9935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
Manifest number: 03AB
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: 41Kf3SCwnWPoeI3gwt6SuiM3U8E.roa (hash: u7Hgq9t6aNSvvpN1ap2hOUlss087XACBIUhudiFtYGg=)
2: Fo8OK6LQk0M6S2EpVye5m7FF93s.crl (hash: w3I47DL9Z4yMJbFu9nA8Yr7toKatjcq+MgY6KltsKbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7b:46:f9:a1:4c:29:ce:31:e5:81:32:1a:99:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168f0e2ba2d093433a4b61295727b99bb145f77b
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=25e93df89878596b35cdc0f39708de6d34ea9e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:3c:28:fd:80:00:2f:a2:df:33:ee:f3:43:
1a:b5:23:4f:22:4b:47:a3:13:a0:c5:f3:de:0a:40:
28:9c:29:d8:16:35:16:d5:1b:c8:de:b2:42:0f:c6:
5c:19:03:58:86:e6:77:aa:74:0b:fc:03:ca:ce:69:
00:d2:0d:ec:95:3c:6a:63:3e:7f:6c:83:fe:65:54:
2e:a5:65:5f:22:45:0d:f8:e2:0b:41:17:18:f1:e1:
65:30:03:54:7f:09:3c:40:0d:fa:a3:e1:f9:71:85:
5f:18:52:c3:7b:db:e4:ba:45:3b:72:f2:4b:3d:42:
c7:1e:35:fc:c4:e9:81:b6:9a:41:27:8c:ef:5c:fc:
73:f1:79:58:7c:36:b1:3b:85:8b:ab:08:fa:b1:43:
b0:44:f2:41:36:17:96:31:20:4c:2d:64:49:70:06:
9b:47:d5:33:cb:ea:33:0e:87:9a:0a:9d:eb:5d:64:
3f:fa:a6:6a:af:78:fc:37:d4:77:bb:c6:37:06:e7:
e8:01:3f:5b:48:9b:38:6a:34:c7:0c:61:cb:c7:1c:
21:4b:c7:13:13:76:f4:f8:12:4a:02:24:22:11:b4:
98:c3:22:d3:68:e5:14:7f:24:0a:5e:bc:ce:47:b3:
e1:f4:13:ff:a5:bf:8b:b7:d3:58:9e:3c:e1:3a:e9:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E9:3D:F8:98:78:59:6B:35:CD:C0:F3:97:08:DE:6D:34:EA:9E:39
X509v3 Authority Key Identifier:
keyid:16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:22:2d:d7:a1:e6:c6:7d:48:d8:a6:b0:7e:a6:68:10:98:b7:
40:15:5e:b2:87:c5:9d:96:40:f6:aa:82:90:e4:35:59:7d:17:
1d:0c:cb:17:41:f2:08:6a:b2:4d:f3:b6:8e:12:49:f1:f5:2e:
8d:56:aa:7f:03:a4:37:cc:8b:88:49:67:ab:ce:ac:2a:06:76:
06:e0:ce:2c:c7:2d:5f:cc:9b:50:65:af:7d:d2:b4:8b:02:9e:
7a:a1:3c:81:43:d2:60:3b:34:0c:4c:11:6c:a6:31:51:5a:be:
5c:cb:dd:de:20:fd:1d:cc:57:00:1b:8d:88:f8:94:d8:35:a9:
9c:c6:e6:ab:d7:f0:c1:7a:dd:af:16:45:93:c5:b1:5c:67:48:
3a:cc:92:84:e4:c3:a0:98:00:12:be:4a:71:17:87:ee:be:0e:
61:25:05:3e:c0:c3:1a:d3:a5:3d:f1:f1:95:0b:58:d2:94:ee:
f2:92:1a:4e:68:bf:dc:73:5a:4b:05:48:7e:74:df:f0:c7:f7:
ec:b9:74:36:7e:52:8e:03:bc:ae:5f:0a:c6:3b:e5:9d:ac:46:
85:68:15:dd:a9:fc:4c:d0:6f:90:39:74:a5:89:2b:4b:04:f1:
df:d2:25:25:4a:e1:df:92:8e:4d:e3:07:73:bd:5c:22:2d:bc:
44:94:f7:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3tG+aFMKc4x5YEyGpk1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OGYwZTJiYTJkMDkzNDMzYTRiNjEyOTU3MjdiOTliYjE0
NWY3N2IwHhcNMjUwMTMxMTYwMDIwWhcNMjUwMjAxMTYwMDIwWjAzMTEwLwYDVQQD
EygyNWU5M2RmODk4Nzg1OTZiMzVjZGMwZjM5NzA4ZGU2ZDM0ZWE5ZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUg8KP2AAC+i3zPu80MatSNPIktH
oxOgxfPeCkAonCnYFjUW1RvI3rJCD8ZcGQNYhuZ3qnQL/APKzmkA0g3slTxqYz5/
bIP+ZVQupWVfIkUN+OILQRcY8eFlMANUfwk8QA36o+H5cYVfGFLDe9vkukU7cvJL
PULHHjX8xOmBtppBJ4zvXPxz8XlYfDaxO4WLqwj6sUOwRPJBNheWMSBMLWRJcAab
R9Uzy+ozDoeaCp3rXWQ/+qZqr3j8N9R3u8Y3BufoAT9bSJs4ajTHDGHLxxwhS8cT
E3b0+BJKAiQiEbSYwyLTaOUUfyQKXrzOR7Ph9BP/pb+Lt9NYnjzhOumNmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXpPfiYeFlrNc3A85cI3m006p45MB8GA1UdIwQY
MBaAFBaPDiui0JNDOkthKVcnuZuxRfd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm84T0s2TFFrME02UzJFcFZ5ZTVtN0ZGOTNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wODA4YjItMTYzMy00YzBkLWJjYmMt
ZjZmY2Y3M2NlZTcwLzEvRm84T0s2TFFrME02UzJFcFZ5ZTVtN0ZGOTNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8wODA4YjItMTYzMy00YzBkLWJjYmMtZjZmY2Y3M2NlZTcw
LzEvRm84T0s2TFFrME02UzJFcFZ5ZTVtN0ZGOTNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEyIt16Hm
xn1I2KawfqZoEJi3QBVesofFnZZA9qqCkOQ1WX0XHQzLF0HyCGqyTfO2jhJJ8fUu
jVaqfwOkN8yLiElnq86sKgZ2BuDOLMctX8ybUGWvfdK0iwKeeqE8gUPSYDs0DEwR
bKYxUVq+XMvd3iD9HcxXABuNiPiU2DWpnMbmq9fwwXrdrxZFk8WxXGdIOsyShOTD
oJgAEr5KcReH7r4OYSUFPsDDGtOlPfHxlQtY0pTu8pIaTmi/3HNaSwVIfnTf8Mf3
7Ll0Nn5SjgO8rl8KxjvlnaxGhWgV3an8TNBvkDl0pYkrSwTx39IlJUrh35KOTeMH
c71cIi28RJT3ZA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:48 2025 by rpki-client