Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
File: FxMSnvT6RU4PCsQH4AjpV6G3laA.mft (raw, json)
Hash identifier: RkuCBtjJqcOH0EJ9w9GICtiX+6vr4S2AjO4i7vcCkNI=
Subject key identifier: 4C:17:0C:A0:00:86:15:98:C7:06:19:12:A6:D4:25:68:91:B9:88:2E
Authority key identifier: 17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
Certificate issuer: /CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Certificate serial: 0194BD17B7B12F8CD63394A2613B44FA6454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: Awd1yGOmw0G9ufYkJyOwIDHo3Qk.roa (hash: NpDJRKt/f4syIfXokbOL4x73rCHTvURrkdu0Yrl2tN4=)
2: BIIEZlMRbg4gFcs3vd0E2vnjAC0.roa (hash: dLd9sOD+PRZDAt8utITG0xeDO7qLojT8kdoKvMI+HQ0=)
3: FxMSnvT6RU4PCsQH4AjpV6G3laA.crl (hash: qUB5FpknB0H4abk0oeohxI/VzuZIf3dLQ6aAFpb6UP4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b7:b1:2f:8c:d6:33:94:a2:61:3b:44:fa:64:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=4c170ca000861598c7061912a6d4256891b9882e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:58:18:e8:bd:38:e4:77:a7:9d:5e:b9:1d:ea:
9c:fc:f8:0b:82:7b:02:15:25:19:4a:f6:a0:e5:22:
d9:2d:15:6f:3e:52:e8:67:ad:1b:22:91:f3:1c:26:
8b:68:b9:18:b8:af:5d:2e:d6:c5:39:c5:0c:be:f4:
e7:46:40:24:94:c7:28:9a:38:66:be:5e:9d:53:e1:
16:78:f6:29:ab:49:1e:e8:25:ed:dc:0e:0e:e8:0e:
ae:52:1e:ae:8c:d9:bf:68:af:aa:e3:40:48:be:0a:
60:c8:e9:86:2d:36:fd:70:e9:ee:db:65:82:48:97:
9f:23:fe:3b:d9:df:fe:97:ca:74:cf:2c:a0:6d:49:
6b:92:d0:d0:29:51:39:ea:c6:79:89:3c:c0:35:9e:
b5:85:c7:2e:30:c3:0e:0a:cc:a7:ae:25:61:81:1a:
90:19:0f:5c:3d:f5:09:e7:97:a4:cf:0b:6b:18:d9:
8f:be:eb:63:48:9e:74:07:13:7f:cb:ed:a5:eb:62:
23:a4:85:d2:1b:8f:08:f3:73:a0:97:e3:a8:e8:f0:
6c:43:e4:17:46:48:20:36:25:89:43:7c:6c:49:6a:
b4:ed:b6:1b:25:c3:c3:25:95:4b:20:39:cb:00:64:
67:d6:e5:61:24:e4:ad:88:7a:ad:d6:ec:e2:b5:bc:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:17:0C:A0:00:86:15:98:C7:06:19:12:A6:D4:25:68:91:B9:88:2E
X509v3 Authority Key Identifier:
keyid:17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:de:6d:eb:af:a2:6a:89:b3:e2:99:f5:7a:f9:1e:c1:5e:21:
58:7d:4c:39:a9:21:9e:e3:54:25:bc:eb:ce:f5:e5:fd:77:db:
fc:05:10:e5:04:76:36:35:75:58:e7:74:9c:9e:67:9f:95:f9:
bd:bb:94:88:97:c8:b2:1f:0e:b5:ff:f5:f8:cd:c4:9c:9c:3e:
df:d9:af:8b:88:a7:63:29:a9:e5:97:0f:60:55:4a:1d:b6:46:
98:99:7d:4b:5d:49:42:3f:8f:5b:91:84:45:cd:b4:01:a9:ae:
3f:04:9e:a9:9f:72:cc:64:84:ee:34:9e:06:95:8c:d3:24:b4:
f4:00:4f:26:29:43:b2:e6:53:af:79:73:73:de:20:40:93:ed:
f6:c3:f9:7b:bc:e0:91:27:6b:66:63:62:94:2e:89:8c:6b:d8:
b3:4b:56:44:4a:ef:e7:b4:69:38:33:c7:02:07:61:f8:1a:29:
44:ff:47:0f:87:ff:da:e9:d0:a6:2d:b4:11:0b:96:49:8e:9c:
eb:eb:12:6c:0f:e5:f3:41:0c:7f:f4:60:60:ff:3e:c9:89:23:
ae:29:93:cb:cb:4d:e9:22:8e:52:ff:90:f7:b4:f5:29:93:46:
df:fa:24:1c:f8:d6:dc:63:7e:4a:83:13:36:95:ef:9e:39:c2:
41:dd:3d:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7exL4zWM5SiYTtE+mRUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MTMxMjllZjRmYTQ1NGUwZjBhYzQwN2UwMDhlOTU3YTFi
Nzk1YTAwHhcNMjUwMTMxMTYwMDM1WhcNMjUwMjAxMTYwMDM1WjAzMTEwLwYDVQQD
Eyg0YzE3MGNhMDAwODYxNTk4YzcwNjE5MTJhNmQ0MjU2ODkxYjk4ODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1gY6L045HennV65Heqc/PgLgnsC
FSUZSvag5SLZLRVvPlLoZ60bIpHzHCaLaLkYuK9dLtbFOcUMvvTnRkAklMcomjhm
vl6dU+EWePYpq0ke6CXt3A4O6A6uUh6ujNm/aK+q40BIvgpgyOmGLTb9cOnu22WC
SJefI/472d/+l8p0zyygbUlrktDQKVE56sZ5iTzANZ61hccuMMMOCsynriVhgRqQ
GQ9cPfUJ55ekzwtrGNmPvutjSJ50BxN/y+2l62IjpIXSG48I83Ogl+Oo6PBsQ+QX
RkggNiWJQ3xsSWq07bYbJcPDJZVLIDnLAGRn1uVhJOStiHqt1uzitbzXbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwXDKAAhhWYxwYZEqbUJWiRuYguMB8GA1UdIwQY
MBaAFBcTEp70+kVODwrEB+AI6Veht5WgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xNTcyOTktOWQxYy00YzViLTlhNDEt
YzI1ZmRjNGNhMmY2LzEvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xNTcyOTktOWQxYy00YzViLTlhNDEtYzI1ZmRjNGNhMmY2
LzEvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa95t66+i
aomz4pn1evkewV4hWH1MOakhnuNUJbzrzvXl/Xfb/AUQ5QR2NjV1WOd0nJ5nn5X5
vbuUiJfIsh8Otf/1+M3EnJw+39mvi4inYymp5ZcPYFVKHbZGmJl9S11JQj+PW5GE
Rc20AamuPwSeqZ9yzGSE7jSeBpWM0yS09ABPJilDsuZTr3lzc94gQJPt9sP5e7zg
kSdrZmNilC6JjGvYs0tWRErv57RpODPHAgdh+BopRP9HD4f/2unQpi20EQuWSY6c
6+sSbA/l80EMf/RgYP8+yYkjrimTy8tN6SKOUv+Q97T1KZNG3/okHPjW3GN+SoMT
NpXvnjnCQd09gQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:11 2025 by rpki-client