Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
File: FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json)
Hash identifier: 3nTp+ScXwalACmP5Wrm9Sxj4og1jsWy64gWF3CRiwvo=
Subject key identifier: 2A:D2:43:79:61:40:A7:80:32:57:60:A4:BE:25:40:7B:B7:50:B9:F1
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 0194BBCE0E3743D900F8FE86C26AD67B2CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: 1hUWI8K88lX2CElK5Lswc93puOvZUrg2ro4vktMkGiI=)
2: tuMifPTkCbCL7ajrwo0EzPnXWPw.roa (hash: jC33EY0cA4p2GJTzlFhrTlf/kii333WPsx2l9xMoLj4=)
3: xrGACS-1hAxmap4Rb-Oc9S070js.roa (hash: mptaEeEJPbcTmStEp7RBmFaS5iUHgb9cGp/H5Fm+PGs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0e:37:43:d9:00:f8:fe:86:c2:6a:d6:7b:2c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=2ad243796140a780325760a4be25407bb750b9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:b3:2d:f1:64:67:83:07:9d:34:68:b3:ec:
65:97:37:6f:0e:10:77:16:0b:37:46:18:a9:00:d2:
7e:6b:0e:23:e1:33:c2:de:b1:c4:6a:6b:a5:42:27:
e9:46:23:4f:0d:8e:db:f9:1a:51:75:98:b3:10:d5:
51:fe:d1:f4:26:f0:d4:4e:ae:03:92:93:c7:54:00:
43:c3:60:c3:0a:c3:25:b2:fe:41:aa:53:d5:c4:57:
0d:07:e8:69:76:a9:d4:e8:4a:b5:c9:e4:26:bc:a5:
bc:c4:f2:41:7e:dc:46:88:0e:3a:f8:a3:c8:d6:db:
e5:ea:4e:5a:22:43:6c:ed:7a:96:74:b0:ad:e2:54:
60:cf:37:94:f5:cf:33:1b:77:b0:35:93:8c:fe:fa:
cc:bc:08:1a:ae:d7:22:34:51:1e:a5:2e:12:23:36:
29:28:ad:04:21:d5:88:65:81:d1:2e:34:47:e0:d3:
91:ef:10:48:f7:7f:56:78:b0:c5:cc:29:28:a3:e9:
1a:cf:72:75:46:10:02:42:e4:4d:9a:5f:e3:2e:25:
50:b9:f3:41:86:54:d5:73:0d:ca:d5:c2:ed:0e:89:
87:a7:7a:21:51:ee:e7:ce:bf:45:99:46:20:64:08:
b9:93:76:3d:31:28:29:27:c4:d3:f5:76:d9:97:55:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D2:43:79:61:40:A7:80:32:57:60:A4:BE:25:40:7B:B7:50:B9:F1
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e4:63:1f:b5:6a:0e:ac:e6:61:13:58:14:57:36:ec:a1:eb:
cd:4f:73:a6:a5:a1:e7:f9:24:6f:25:01:4e:2e:ca:db:4b:4c:
84:4a:7c:bc:01:61:8a:05:01:62:11:cc:8d:dd:65:88:b5:5b:
00:f3:64:e4:e3:f8:e4:0a:ce:66:02:ac:b2:70:e3:1f:db:06:
ef:91:21:fc:76:24:2e:7e:fd:ac:5c:b3:e3:3f:32:8f:ed:e8:
90:ad:40:8b:e4:e8:1a:79:39:04:ff:a5:55:bf:00:56:c8:d7:
c1:2d:b7:6a:54:13:eb:4a:bd:e4:a4:62:1d:28:11:f6:92:33:
cb:ea:26:58:2e:fe:6f:84:f0:71:1f:83:5b:af:e3:99:db:94:
2f:3f:8c:af:c6:6e:8e:31:80:88:47:04:96:d6:02:52:5e:f3:
b0:9a:52:e0:72:1c:29:e8:7e:b2:84:26:dd:75:68:ea:00:3c:
e0:f4:00:f9:c7:cd:e4:2a:8b:a0:14:41:18:6c:11:6c:f6:4a:
87:a2:e2:98:bf:00:4d:8e:49:79:f5:dc:ae:66:0d:fd:35:8e:
b3:55:ae:6d:a0:6e:9b:e2:42:a5:7d:b4:15:65:bf:b8:23:f3:
2c:8c:e1:3e:1a:65:cc:2d:eb:c2:03:04:ee:4a:84:b3:10:7f:
4c:8f:2a:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zg43Q9kA+P6GwmrWeyy5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MDJhZjcxM2UzNmU1MmM3MTg2NmM4YTllYmRhY2YzZDg2
MjliNjgwHhcNMjUwMTMxMTAwMDMwWhcNMjUwMjAxMTAwMDMwWjAzMTEwLwYDVQQD
EygyYWQyNDM3OTYxNDBhNzgwMzI1NzYwYTRiZTI1NDA3YmI3NTBiOWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva+zLfFkZ4MHnTRos+xllzdvDhB3
Fgs3RhipANJ+aw4j4TPC3rHEamulQifpRiNPDY7b+RpRdZizENVR/tH0JvDUTq4D
kpPHVABDw2DDCsMlsv5BqlPVxFcNB+hpdqnU6Eq1yeQmvKW8xPJBftxGiA46+KPI
1tvl6k5aIkNs7XqWdLCt4lRgzzeU9c8zG3ewNZOM/vrMvAgartciNFEepS4SIzYp
KK0EIdWIZYHRLjRH4NOR7xBI939WeLDFzCkoo+kaz3J1RhACQuRNml/jLiVQufNB
hlTVcw3K1cLtDomHp3ohUe7nzr9FmUYgZAi5k3Y9MSgpJ8TT9XbZl1XHSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrSQ3lhQKeAMldgpL4lQHu3ULnxMB8GA1UdIwQY
MBaAFBUCr3E+NuUscYZsip69rPPYYptoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85ZGNjMjUtNWIwYS00YzNlLTkxNDkt
NWE4MjMwZTc2NDNhLzEvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85ZGNjMjUtNWIwYS00YzNlLTkxNDktNWE4MjMwZTc2NDNh
LzEvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoORjH7Vq
DqzmYRNYFFc27KHrzU9zpqWh5/kkbyUBTi7K20tMhEp8vAFhigUBYhHMjd1liLVb
APNk5OP45ArOZgKssnDjH9sG75Eh/HYkLn79rFyz4z8yj+3okK1Ai+ToGnk5BP+l
Vb8AVsjXwS23alQT60q95KRiHSgR9pIzy+omWC7+b4TwcR+DW6/jmduULz+Mr8Zu
jjGAiEcEltYCUl7zsJpS4HIcKeh+soQm3XVo6gA84PQA+cfN5CqLoBRBGGwRbPZK
h6LimL8ATY5JefXcrmYN/TWOs1WubaBum+JCpX20FWW/uCPzLIzhPhplzC3rwgME
7kqEsxB/TI8qtA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:28:09 2025 by rpki-client