Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier: 7tIFIVAtANmChHPrQWQsQJqgTgIAFo/pMprvyfslcC0=
Subject key identifier: B0:B6:A5:A7:8F:4F:09:41:0C:25:3F:22:9B:01:00:E1:2B:93:83:BC
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 0194BCE09DE445C4B662593FA89F39060CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number: 0899
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: ACD72rE-jioyxPH9RAuGb5mC6oU.roa (hash: QtFylWnulCc2yQBn+mtJTIcyYgVI68tUvXBBF4rKnVc=)
2: _4IIJhtFlJdrkjSOppTsaFBNkrg.roa (hash: r5hI609ZhZ4xyXvkrk1Z26XwV02QOdDJJ0CIfMyhg7s=)
3: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: drvaOA2BgdRTTyHnGkn/JlnYgjURoAEKLeWFbuTdbYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9d:e4:45:c4:b6:62:59:3f:a8:9f:39:06:0c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=b0b6a5a78f4f09410c253f229b0100e12b9383bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:68:20:1c:b1:65:77:d2:39:01:9d:fe:ed:
2b:8f:e8:8b:9a:7f:e7:b4:88:b6:ad:35:00:e6:af:
0b:03:60:77:8f:1b:96:f0:9d:e2:22:3f:81:fa:a1:
1c:12:a6:f2:67:78:25:b5:79:6f:9e:90:4d:4c:ad:
7e:4e:5d:bb:92:cf:be:f1:ec:7b:71:a4:72:7c:cc:
90:53:f5:a6:c1:30:8d:7b:5b:cd:60:95:ff:82:90:
c1:19:2f:af:eb:8a:c8:20:44:4a:44:f4:fc:37:c1:
7c:03:a6:a0:68:78:2c:10:e3:aa:06:d7:b7:16:ce:
ea:b2:29:63:ee:11:9c:0a:c7:d8:e6:54:51:57:7c:
50:92:4c:59:d4:5a:27:00:2d:fb:7b:26:c5:89:16:
36:8d:8b:9c:f2:89:db:b0:66:c5:7d:a4:5d:8b:dd:
fe:cc:93:5a:65:74:5d:3a:3e:e1:82:92:f2:48:87:
ed:32:68:4c:d2:7c:5f:94:7d:c7:b5:52:c2:55:fd:
86:f7:53:9c:2f:45:c2:65:85:ea:64:8a:fb:95:b1:
d2:1e:a3:62:b5:bb:cd:63:be:97:93:8f:d2:51:55:
bb:e3:04:d5:27:87:68:55:eb:07:d4:51:4e:fe:0f:
28:dc:fd:72:06:73:07:6a:79:76:94:0e:3c:6a:ea:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B6:A5:A7:8F:4F:09:41:0C:25:3F:22:9B:01:00:E1:2B:93:83:BC
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:38:17:6b:90:d9:2a:2a:e6:a9:f9:11:66:b3:12:64:95:c3:
42:69:ce:03:20:8d:2e:10:ea:14:a6:b5:6b:63:5f:d6:1c:13:
7b:a2:31:5f:52:99:5a:bc:8f:d5:c3:ef:e5:c0:88:a5:79:2d:
8a:59:47:53:ec:39:25:1c:fe:9c:53:5b:bc:4a:51:cf:de:12:
a9:dd:4a:af:d7:a5:22:17:39:a6:0b:63:ff:f9:61:be:a1:64:
63:19:60:12:03:ca:63:60:f5:9d:a6:e3:e1:31:45:b7:cd:b6:
f0:6f:42:27:e0:39:79:df:15:49:53:00:e1:1a:2e:10:56:78:
dd:ae:56:2e:42:fd:03:93:02:15:86:71:11:20:77:c1:4e:8c:
71:33:e4:ab:1c:88:67:57:dc:9e:1b:1b:c3:df:d4:d9:cc:c2:
23:06:cf:f1:ae:37:ee:37:c4:f8:da:0e:e6:92:a5:bb:94:e4:
12:85:b8:da:f3:ec:53:d6:3d:ae:4d:ee:fe:88:bf:52:fe:7f:
0e:0b:b2:cd:76:83:3d:6f:50:c1:10:8c:a6:91:b1:75:65:c7:
8b:b5:98:08:14:21:f0:a1:90:39:98:cf:f5:e1:e7:c4:d7:6f:
a4:4f:14:6b:82:e6:37:dd:05:75:cc:14:62:26:18:52:42:ea:
01:e6:db:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84J3kRcS2Ylk/qJ85BgzYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMTY4MDI4ZWMwZGFiNjY4YTY3ZDViZjZmNTM1OGNhYWJl
MzM3YTgwHhcNMjUwMTMxMTUwMDI0WhcNMjUwMjAxMTUwMDI0WjAzMTEwLwYDVQQD
EyhiMGI2YTVhNzhmNGYwOTQxMGMyNTNmMjI5YjAxMDBlMTJiOTM4M2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtftoIByxZXfSOQGd/u0rj+iLmn/n
tIi2rTUA5q8LA2B3jxuW8J3iIj+B+qEcEqbyZ3gltXlvnpBNTK1+Tl27ks++8ex7
caRyfMyQU/WmwTCNe1vNYJX/gpDBGS+v64rIIERKRPT8N8F8A6agaHgsEOOqBte3
Fs7qsilj7hGcCsfY5lRRV3xQkkxZ1FonAC37eybFiRY2jYuc8onbsGbFfaRdi93+
zJNaZXRdOj7hgpLySIftMmhM0nxflH3HtVLCVf2G91OcL0XCZYXqZIr7lbHSHqNi
tbvNY76Xk4/SUVW74wTVJ4doVesH1FFO/g8o3P1yBnMHanl2lA48auo77QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLC2paePTwlBDCU/IpsBAOErk4O8MB8GA1UdIwQY
MBaAFH8WgCjsDatmimfVv29TWMqr4zeoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnhhQUtPd05xMmFLWjlXX2IxTll5cXZqTjZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iMTUyODYtZmQ0ZC00OWZlLWE2OWUt
N2ZhZGY1MGEyZTM3LzEvZnhhQUtPd05xMmFLWjlXX2IxTll5cXZqTjZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iMTUyODYtZmQ0ZC00OWZlLWE2OWUtN2ZhZGY1MGEyZTM3
LzEvZnhhQUtPd05xMmFLWjlXX2IxTll5cXZqTjZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTgXa5DZ
KirmqfkRZrMSZJXDQmnOAyCNLhDqFKa1a2Nf1hwTe6IxX1KZWryP1cPv5cCIpXkt
illHU+w5JRz+nFNbvEpRz94Sqd1Kr9elIhc5pgtj//lhvqFkYxlgEgPKY2D1nabj
4TFFt8228G9CJ+A5ed8VSVMA4RouEFZ43a5WLkL9A5MCFYZxESB3wU6McTPkqxyI
Z1fcnhsbw9/U2czCIwbP8a437jfE+NoO5pKlu5TkEoW42vPsU9Y9rk3u/oi/Uv5/
DguyzXaDPW9QwRCMppGxdWXHi7WYCBQh8KGQOZjP9eHnxNdvpE8Ua4LmN90FdcwU
YiYYUkLqAebbZg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:42 2025 by rpki-client