Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
File: FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json)
Hash identifier: xTi+gZymRoRuFuJRMXdFv37bszUByXcT62jIxF+1Jk0=
Subject key identifier: 30:B0:2B:44:74:62:CD:5B:07:12:09:66:DE:A3:FB:AE:82:EF:CD:F5
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial: 0194BD175682EBF0C41742CA0644A2F63CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
Manifest number: 0524
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: fhFieOnMbDBrdOsPfST5h/v9LVk0i8L3UFi9zD+yy68=)
2: MBq9_d6LT2vyQzQfNudTMEVPC5w.roa (hash: md4P7geg1tPk/NRWigzWi02Y2+T+SaZ3+I/C1pIam5U=)
3: cy2HmfHiWKhw02gOVemX6Q-EyWI.roa (hash: pBMd9/Wwh5+LF0AKR7vEH1nnu5nJ/I7HblShTTNl9LE=)
4: w6nyjw8CCPdGWE2r0om0qvXFyXo.roa (hash: 1O15ZgeKf2Rbzxb6TQY0MNC2RDhbgVcfZUfdxbDgya4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:56:82:eb:f0:c4:17:42:ca:06:44:a2:f6:3c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153f24183d6c95185919349e6e92533736437b94
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=30b02b447462cd5b07120966dea3fbae82efcdf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:34:ba:79:31:95:47:17:ab:5f:35:26:fd:af:
d2:74:93:1f:1b:67:89:c5:62:4c:a9:0e:5d:5b:e4:
37:a0:41:c8:b1:98:fe:43:11:49:dd:a1:66:20:8c:
d5:a8:64:2d:c4:bd:5c:02:6a:a6:a8:7a:f2:5d:c4:
e0:9a:b1:19:3c:3b:c1:64:bc:0b:d5:a0:94:c0:21:
1d:fa:e0:2f:7b:9e:13:8a:56:15:ce:a8:cc:8a:b8:
18:e5:03:b0:0b:a6:6c:0e:6b:78:dd:82:c4:73:be:
a2:fb:7c:f5:16:9b:86:33:27:59:20:36:f2:28:72:
63:8b:9c:91:21:d9:e9:15:3a:68:28:28:b7:e1:89:
7e:cc:ac:d9:4d:b7:f2:04:65:b6:b6:2c:7b:13:94:
42:86:fd:9c:f5:7a:8a:42:68:2f:12:a3:de:8e:35:
b5:cd:64:f6:2d:d7:a3:63:60:02:c1:83:00:dc:a0:
d8:a8:9c:4c:f3:8c:47:76:af:56:37:bf:7a:54:69:
4e:8c:9e:6e:9f:4c:bb:a8:cb:10:d1:2a:4a:8b:e5:
5c:3f:6f:c6:18:29:d8:8e:c6:7a:df:e2:9c:2f:00:
c0:b8:b3:c1:a8:d4:79:00:9a:57:ad:c5:f5:40:a1:
a7:eb:4c:02:ff:4c:e3:cf:58:28:50:c3:49:73:1f:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B0:2B:44:74:62:CD:5B:07:12:09:66:DE:A3:FB:AE:82:EF:CD:F5
X509v3 Authority Key Identifier:
keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7f:9c:cd:57:63:c4:55:53:dc:25:d1:23:de:62:0c:d8:f1:
35:72:44:bf:a1:7d:75:02:3e:0c:7f:96:01:97:81:10:e7:e0:
c6:67:a6:9e:a6:e1:93:09:22:5b:a9:70:dc:3e:c7:c0:a7:9f:
39:9e:d6:13:2f:cc:e1:78:98:40:df:c5:5c:e4:e8:6a:14:1e:
98:0f:5b:9a:0b:cc:00:d2:29:93:19:69:ec:62:8e:56:a7:ee:
3a:8b:fd:2c:56:39:ed:1c:59:31:1c:b0:cd:92:dd:80:ca:58:
90:8f:6e:02:1e:7b:f7:65:e3:07:a8:90:c9:aa:5a:99:73:f1:
dd:00:ad:89:e8:dc:be:de:d8:2b:5f:b4:f8:13:72:4c:64:8c:
ee:7a:30:55:ba:72:ab:cb:63:19:56:12:da:4f:22:d6:a4:0f:
dd:ab:8b:3b:86:46:29:90:bb:d3:0e:e8:d8:a2:2e:aa:f3:6a:
ff:70:34:eb:78:17:ad:f8:4e:61:0f:34:63:55:8a:7c:5c:d1:
d6:04:b6:3e:bc:91:81:ff:17:38:dd:f3:08:4c:d7:09:67:4f:
8c:b3:d8:de:7c:31:43:09:07:fd:c5:c9:72:c0:66:cd:14:ac:
c2:10:b6:f9:80:c1:be:37:51:82:7c:c3:e9:aa:15:b2:8a:8a:
ad:aa:8b:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F1aC6/DEF0LKBkSi9jzCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1M2YyNDE4M2Q2Yzk1MTg1OTE5MzQ5ZTZlOTI1MzM3MzY0
MzdiOTQwHhcNMjUwMTMxMTYwMDEwWhcNMjUwMjAxMTYwMDEwWjAzMTEwLwYDVQQD
EygzMGIwMmI0NDc0NjJjZDViMDcxMjA5NjZkZWEzZmJhZTgyZWZjZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jS6eTGVRxerXzUm/a/SdJMfG2eJ
xWJMqQ5dW+Q3oEHIsZj+QxFJ3aFmIIzVqGQtxL1cAmqmqHryXcTgmrEZPDvBZLwL
1aCUwCEd+uAve54TilYVzqjMirgY5QOwC6ZsDmt43YLEc76i+3z1FpuGMydZIDby
KHJji5yRIdnpFTpoKCi34Yl+zKzZTbfyBGW2tix7E5RChv2c9XqKQmgvEqPejjW1
zWT2LdejY2ACwYMA3KDYqJxM84xHdq9WN796VGlOjJ5un0y7qMsQ0SpKi+VcP2/G
GCnYjsZ63+KcLwDAuLPBqNR5AJpXrcX1QKGn60wC/0zjz1goUMNJcx+JOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCwK0R0Ys1bBxIJZt6j+66C7831MB8GA1UdIwQY
MBaAFBU/JBg9bJUYWRk0nm6SUzc2Q3uUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAt
NTgwNWQzZjNkYmIyLzEvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAtNTgwNWQzZjNkYmIy
LzEvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARH+czVdj
xFVT3CXRI95iDNjxNXJEv6F9dQI+DH+WAZeBEOfgxmemnqbhkwkiW6lw3D7HwKef
OZ7WEy/M4XiYQN/FXOToahQemA9bmgvMANIpkxlp7GKOVqfuOov9LFY57RxZMRyw
zZLdgMpYkI9uAh5792XjB6iQyapamXPx3QCtiejcvt7YK1+0+BNyTGSM7nowVbpy
q8tjGVYS2k8i1qQP3auLO4ZGKZC70w7o2KIuqvNq/3A063gXrfhOYQ80Y1WKfFzR
1gS2PryRgf8XON3zCEzXCWdPjLPY3nwxQwkH/cXJcsBmzRSswhC2+YDBvjdRgnzD
6aoVsoqKraqLCw==
-----END CERTIFICATE-----
Generated at Sun May 4 06:06:07 2025 by rpki-client