Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
File: FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json)
Hash identifier: n6BBck4PQNsshCcB1eob18Em3IbI2hDDElEIK6j6kBU=
Subject key identifier: 4B:5B:42:FF:E8:5B:3F:93:3E:0B:AF:C5:D0:A3:DF:60:AF:4C:2E:D2
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial: 0194BCA9A8956C1FC98BA56BA79161102445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
Manifest number: 1301
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: 7b72R8YLb2SHH9MjZo55yK3DpuU.roa (hash: EOM+9zK0YudveaEnl18alhJ+F+Rk/QyUoYSZ9iQgFf4=)
2: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: S4cqEp9OnXuHqrC5hlIGz+UzNW68N6Sv8HJYmRaxQME=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a8:95:6c:1f:c9:8b:a5:6b:a7:91:61:10:24:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=4b5b42ffe85b3f933e0bafc5d0a3df60af4c2ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:01:79:b8:ea:25:24:43:20:8e:48:a0:35:
2b:c6:95:3a:fa:f2:96:f5:d2:4d:2d:84:2e:b1:d9:
ec:e0:2c:ce:ba:68:17:07:51:3e:df:1a:dc:10:be:
43:15:7a:39:9b:8f:9c:81:9c:4f:9d:e6:26:b1:77:
9a:57:95:1a:17:97:14:52:a0:20:31:5d:62:aa:0b:
89:ee:d6:e9:96:7d:b4:f4:1e:80:ca:c9:85:f2:23:
c7:03:48:47:48:3c:37:37:ac:0d:8e:3d:88:dc:6b:
15:20:d6:bc:29:4e:0b:bd:71:bc:04:89:65:9c:24:
c5:e0:fa:ee:65:14:e9:1d:8f:a6:c1:27:30:7e:94:
a6:30:4e:9f:c6:4f:dc:5d:90:28:5f:b5:8f:32:01:
3f:68:18:2f:ae:dc:ec:05:35:6f:8a:00:1c:db:92:
b8:c5:5c:7d:3c:85:74:09:57:b8:0a:80:d7:35:6f:
ca:5d:58:16:c7:5b:6e:40:78:74:6c:f5:a3:16:a2:
f6:e1:80:41:3c:67:af:d8:7d:4b:ee:3b:b2:b4:ae:
73:da:e4:e5:ec:9c:3e:ca:f3:f2:b9:34:d2:be:ec:
cb:ef:66:41:f4:f4:e8:cc:91:40:bb:2d:ea:ea:c1:
e0:ae:43:22:d5:62:fc:00:ab:31:b5:ed:11:a8:6b:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5B:42:FF:E8:5B:3F:93:3E:0B:AF:C5:D0:A3:DF:60:AF:4C:2E:D2
X509v3 Authority Key Identifier:
keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3e:cd:c4:5c:aa:91:f2:8e:0f:22:e2:00:18:a7:12:65:11:
f0:e7:8f:fa:91:9f:65:a4:ca:cd:3d:45:b8:f5:08:1f:af:75:
f2:a1:1c:03:e1:f8:1e:39:89:cb:16:2c:16:4c:72:cd:af:5e:
91:c0:c0:7e:b6:36:0f:65:a2:d8:04:60:36:84:b9:2e:bf:51:
bd:a3:b4:02:1d:8b:66:65:4b:75:6d:eb:4a:99:12:0b:84:f6:
6d:2e:3e:cb:f1:12:96:2b:b0:72:42:d0:f0:49:6d:04:8f:1d:
d1:65:ee:0c:0b:03:8d:86:02:91:fc:95:75:7a:14:ec:e5:e3:
4e:c5:2e:4f:69:09:c0:9e:f9:8e:ec:ad:52:97:f1:d0:8f:3e:
0e:f7:54:e0:20:b0:b6:5a:ad:cb:56:74:35:85:7e:30:0a:b6:
3b:81:58:8c:ff:35:ed:de:60:56:70:aa:ab:ef:03:12:12:69:
97:61:53:9c:6e:bc:35:e4:5b:40:d4:ad:a0:9c:3c:4a:8c:f6:
41:7a:38:84:54:1f:f2:f0:dc:23:c8:f2:6f:3a:74:19:81:ad:
fd:00:02:d5:14:ee:84:03:91:c9:9e:63:58:07:10:ec:1f:4d:
2b:04:b9:07:d2:18:28:c6:09:9a:ce:77:76:5c:65:da:0f:9d:
20:ca:94:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qaiVbB/Ji6Vrp5FhECRFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDljMjRkYWUzZWVmZmNiZWZhMzdhNjg4NjY0YWM5MzMw
MGVmNTgwHhcNMjUwMTMxMTQwMDIyWhcNMjUwMjAxMTQwMDIyWjAzMTEwLwYDVQQD
Eyg0YjViNDJmZmU4NWIzZjkzM2UwYmFmYzVkMGEzZGY2MGFmNGMyZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn8BebjqJSRDII5IoDUrxpU6+vKW
9dJNLYQusdns4CzOumgXB1E+3xrcEL5DFXo5m4+cgZxPneYmsXeaV5UaF5cUUqAg
MV1iqguJ7tbpln209B6AysmF8iPHA0hHSDw3N6wNjj2I3GsVINa8KU4LvXG8BIll
nCTF4PruZRTpHY+mwScwfpSmME6fxk/cXZAoX7WPMgE/aBgvrtzsBTVvigAc25K4
xVx9PIV0CVe4CoDXNW/KXVgWx1tuQHh0bPWjFqL24YBBPGev2H1L7juytK5z2uTl
7Jw+yvPyuTTSvuzL72ZB9PTozJFAuy3q6sHgrkMi1WL8AKsxte0RqGuw8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtbQv/oWz+TPguvxdCj32CvTC7SMB8GA1UdIwQY
MBaAFBYJwk2uPu/8vvo3pohmSskzAO9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNWYyYTQtYWRjYS00ZmM0LTg3YjIt
YmY0Yjc1ZTIwMGE3LzEvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNWYyYTQtYWRjYS00ZmM0LTg3YjItYmY0Yjc1ZTIwMGE3
LzEvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhT7NxFyq
kfKODyLiABinEmUR8OeP+pGfZaTKzT1FuPUIH6918qEcA+H4HjmJyxYsFkxyza9e
kcDAfrY2D2Wi2ARgNoS5Lr9RvaO0Ah2LZmVLdW3rSpkSC4T2bS4+y/ESliuwckLQ
8EltBI8d0WXuDAsDjYYCkfyVdXoU7OXjTsUuT2kJwJ75juytUpfx0I8+DvdU4CCw
tlqty1Z0NYV+MAq2O4FYjP817d5gVnCqq+8DEhJpl2FTnG68NeRbQNStoJw8Soz2
QXo4hFQf8vDcI8jybzp0GYGt/QAC1RTuhAORyZ5jWAcQ7B9NKwS5B9IYKMYJms53
dlxl2g+dIMqUSQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:01 2025 by rpki-client