Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
File: FmqYZpgAXVfnuS96ONIZu7gP4f8.mft (raw, json)
Hash identifier: gTXgIj8+J+oUgAWsfKN1QJI+duzel42Aa8C+GH2VItQ=
Subject key identifier: 8C:23:77:2E:20:B3:5A:0D:18:4C:10:90:2B:84:8E:0C:16:19:73:B8
Authority key identifier: 16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
Certificate issuer: /CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Certificate serial: 0194BBCE474A6F54569D24B95BCD22C2AE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
Manifest number: 0EB2
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: FmqYZpgAXVfnuS96ONIZu7gP4f8.crl (hash: PKBcrvRis04QTPbsW1PQV1QMlhmC41SwJUEJ/rQ2KZM=)
2: c4nEiNEeJD2vFf8wumBi1yYvs6E.roa (hash: aF0QKy6JcPOas0fgNBBJCKQQxMBB/xZccd3mvICIadY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:47:4a:6f:54:56:9d:24:b9:5b:cd:22:c2:ae:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=8c23772e20b35a0d184c10902b848e0c161973b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3c:cc:d3:88:c9:04:af:51:75:ac:aa:20:17:
79:0a:d0:d5:b0:e5:31:14:0a:da:9b:75:88:e9:67:
fd:25:b3:17:3e:69:da:dc:ed:4f:1d:17:73:66:94:
c7:06:46:19:3f:8e:2d:42:30:0e:db:f1:e4:3d:4b:
51:3f:49:19:84:c1:c3:68:b1:46:f3:65:e1:33:d0:
fb:96:41:d8:ea:e3:3b:00:e5:ca:45:23:d9:eb:05:
7d:b7:e6:15:01:56:69:3b:2e:72:d3:11:55:bd:ef:
ad:2b:60:cf:b6:50:06:65:27:2b:85:8d:69:ca:4a:
45:a5:da:fe:dc:fc:ff:7c:62:0c:a0:67:1b:32:ba:
03:33:2a:90:b5:77:23:89:2d:2b:48:3b:30:d7:3f:
b1:a1:f8:12:ca:21:c4:80:fa:c0:ef:e7:01:5a:30:
96:fc:e5:6f:2c:3a:82:f6:ee:ae:66:1e:4f:9a:45:
11:18:42:d5:21:76:4a:a0:96:35:6e:4c:ea:67:f6:
39:c1:9c:26:39:57:72:a6:97:75:98:f3:6f:99:e1:
62:89:58:43:3f:5e:75:c0:9e:80:b6:25:17:34:39:
1a:2c:93:5c:4b:32:a7:de:89:9a:33:6e:f2:0a:11:
d6:3d:bb:7e:7f:e4:31:15:50:48:6a:4b:69:98:6c:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:23:77:2E:20:B3:5A:0D:18:4C:10:90:2B:84:8E:0C:16:19:73:B8
X509v3 Authority Key Identifier:
keyid:16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d3:44:b8:7c:2d:88:4d:bc:b1:27:1b:17:1d:0b:d6:d0:a9:
58:ef:c2:5e:7c:73:d7:a6:d7:f6:24:d3:a0:fc:fa:80:95:58:
0e:8b:4d:f6:d7:65:c2:41:e2:56:7b:3a:6c:46:d5:6b:82:32:
68:c4:89:f4:91:df:2f:d5:60:fd:67:7e:b5:1f:2f:13:6d:71:
11:a9:26:41:a9:bb:e1:e7:7d:25:b3:69:64:9f:ef:28:5a:c8:
63:98:67:af:f6:82:24:af:28:22:1a:e8:14:19:47:1b:92:1d:
ba:54:1e:c5:6a:33:2c:c6:a4:e7:8a:de:a8:c1:d4:f0:d6:3b:
f8:d2:e2:b6:d7:56:2b:83:2f:a2:47:ad:b8:1c:5d:2e:fd:88:
e6:73:28:3c:24:64:e0:d5:90:f1:5f:c5:fd:d9:64:80:cf:c6:
6b:b6:dc:61:48:f3:ae:6c:de:63:18:8f:d6:cc:dd:16:c3:35:
94:54:e9:c1:44:3e:4b:1b:39:7e:4d:3a:c4:ac:ea:4f:61:fe:
ae:3b:3a:a9:0d:7b:d5:17:46:d8:50:24:e2:c8:8d:0c:a4:04:
2f:94:b5:15:ae:b3:a8:4f:b6:71:fa:0e:4f:ae:6b:83:a2:b6:
0e:d1:45:0e:71:81:e2:6f:90:bf:f7:37:0c:c6:04:8c:bb:26:
1d:a2:78:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zkdKb1RWnSS5W80iwq4uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmE5ODY2OTgwMDVkNTdlN2I5MmY3YTM4ZDIxOWJiYjgw
ZmUxZmYwHhcNMjUwMTMxMTAwMDQ1WhcNMjUwMjAxMTAwMDQ1WjAzMTEwLwYDVQQD
Eyg4YzIzNzcyZTIwYjM1YTBkMTg0YzEwOTAyYjg0OGUwYzE2MTk3M2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DzM04jJBK9RdayqIBd5CtDVsOUx
FAram3WI6Wf9JbMXPmna3O1PHRdzZpTHBkYZP44tQjAO2/HkPUtRP0kZhMHDaLFG
82XhM9D7lkHY6uM7AOXKRSPZ6wV9t+YVAVZpOy5y0xFVve+tK2DPtlAGZScrhY1p
ykpFpdr+3Pz/fGIMoGcbMroDMyqQtXcjiS0rSDsw1z+xofgSyiHEgPrA7+cBWjCW
/OVvLDqC9u6uZh5PmkURGELVIXZKoJY1bkzqZ/Y5wZwmOVdyppd1mPNvmeFiiVhD
P151wJ6AtiUXNDkaLJNcSzKn3omaM27yChHWPbt+f+QxFVBIaktpmGy8GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwjdy4gs1oNGEwQkCuEjgwWGXO4MB8GA1UdIwQY
MBaAFBZqmGaYAF1X57kvejjSGbu4D+H/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1xWVpwZ0FYVmZudVM5Nk9OSVp1N2dQNGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kN2RlZTYtYzc0My00MmQ3LTkwNjAt
ZGM3NzYyNTRjYmY2LzEvRm1xWVpwZ0FYVmZudVM5Nk9OSVp1N2dQNGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9kN2RlZTYtYzc0My00MmQ3LTkwNjAtZGM3NzYyNTRjYmY2
LzEvRm1xWVpwZ0FYVmZudVM5Nk9OSVp1N2dQNGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtNEuHwt
iE28sScbFx0L1tCpWO/CXnxz16bX9iTToPz6gJVYDotN9tdlwkHiVns6bEbVa4Iy
aMSJ9JHfL9Vg/Wd+tR8vE21xEakmQam74ed9JbNpZJ/vKFrIY5hnr/aCJK8oIhro
FBlHG5IdulQexWozLMak54reqMHU8NY7+NLittdWK4MvoketuBxdLv2I5nMoPCRk
4NWQ8V/F/dlkgM/Ga7bcYUjzrmzeYxiP1szdFsM1lFTpwUQ+Sxs5fk06xKzqT2H+
rjs6qQ171RdG2FAk4siNDKQEL5S1Fa6zqE+2cfoOT65rg6K2DtFFDnGB4m+Qv/c3
DMYEjLsmHaJ4lw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:22:42 2025 by rpki-client