Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json)
Hash identifier: hpgqecBXJ7ZUZL+TNH8+DAu4DrXSpANCHK0QpzXXQDk=
Subject key identifier: 9E:44:C6:C7:E9:31:71:BD:40:38:5A:7E:FC:36:6E:EF:9D:75:C6:34
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 0194BD17C23088DBCBB68A8A4526EC14DD0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: Csk6MxobRULFjoV8vwBDWTrNIjY.roa (hash: /qSTaCee19sT1splpe2clgwA+iPwSFp3O0YpahxqTpY=)
2: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: aYcvfLkaDa0pdjMA0WYQRmF4DRoYpwa1Ac/kAYae9jA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c2:30:88:db:cb:b6:8a:8a:45:26:ec:14:dd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=9e44c6c7e93171bd40385a7efc366eef9d75c634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:76:82:bb:3b:11:32:19:35:52:74:08:ce:8b:
cc:8c:d2:83:ba:46:af:db:68:f7:9a:68:c4:ee:c7:
56:be:94:58:02:eb:4f:27:5a:e2:71:35:82:47:14:
dd:46:73:cf:e0:39:7f:81:77:68:37:39:94:9c:1f:
1f:35:e4:2a:70:79:a2:15:12:c1:f5:60:a5:01:d3:
d0:2c:b8:ef:df:2e:73:86:2d:7a:a8:0a:0f:03:7d:
d1:a0:ad:89:13:e7:61:e1:87:8e:14:40:53:4b:2b:
74:37:0e:c4:13:21:05:82:22:f5:e4:db:e7:f8:65:
0a:cf:12:d5:59:4e:69:6e:8f:f7:38:48:17:21:f1:
d0:04:28:6c:d8:24:87:82:1e:39:27:a0:e6:66:a4:
5f:d0:ac:be:54:52:e8:8d:92:af:65:35:96:46:b1:
2d:43:4f:fd:74:8b:78:b0:45:5c:68:b6:4c:ae:5e:
33:6c:31:6a:7e:e5:be:c0:b5:80:5f:36:62:9e:ee:
22:b4:1b:76:65:f8:3b:93:10:49:79:ed:30:0c:9c:
03:13:85:fb:3e:24:22:24:fa:4a:97:79:eb:a1:87:
8f:7e:5d:fe:89:96:02:f7:b2:d1:78:5a:c9:bd:78:
6a:6b:18:47:77:d2:22:9e:e2:49:fc:5d:f3:13:1b:
34:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:44:C6:C7:E9:31:71:BD:40:38:5A:7E:FC:36:6E:EF:9D:75:C6:34
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2e:b9:ba:ad:e6:25:5c:4d:85:8a:3b:ec:2f:db:45:50:b8:
ff:54:c7:bb:62:5a:fc:56:64:04:41:52:06:7c:09:8e:57:fd:
fb:16:ae:a3:76:5f:e8:76:66:d3:e4:ec:bf:f0:f1:c3:7e:20:
61:12:10:61:b0:79:6e:6e:4a:9e:29:e1:cc:e5:05:3e:94:73:
b9:25:8f:b7:d6:b6:27:d6:85:e7:3c:47:33:6e:41:31:61:62:
6c:06:f1:2d:ed:82:b2:cf:24:a0:2c:d9:99:29:03:50:a8:57:
68:47:3d:6f:a8:0f:dd:14:4d:53:a8:95:6e:8f:b8:7d:25:71:
2f:6d:fd:0b:e8:41:75:bd:ef:b1:42:dc:88:b7:9b:e8:d3:f2:
23:56:bf:e8:c1:68:a6:3a:25:e8:38:7c:71:31:f6:94:42:66:
e9:67:ae:d3:d2:88:40:d0:ed:f3:cc:1e:4f:de:bc:e3:67:74:
5b:ab:79:25:86:40:17:50:16:7f:af:e5:d4:91:92:7f:75:79:
83:20:99:50:8d:03:4b:bd:02:cb:dd:de:65:80:39:0b:98:e0:
1b:b8:75:59:e8:5d:59:4a:98:d3:0f:79:2d:7d:bf:4b:6a:b4:
d0:53:04:41:48:d1:f7:c2:92:63:4c:3c:f0:f6:1a:b9:f5:c7:
29:33:fb:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8IwiNvLtoqKRSbsFN0MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YmYwMGRmZjgwNjMyMzFiZDk5Njc2ODk5ZWFiZWFiYTMz
YmM1ZDkwHhcNMjUwMTMxMTYwMDM4WhcNMjUwMjAxMTYwMDM4WjAzMTEwLwYDVQQD
Eyg5ZTQ0YzZjN2U5MzE3MWJkNDAzODVhN2VmYzM2NmVlZjlkNzVjNjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknaCuzsRMhk1UnQIzovMjNKDukav
22j3mmjE7sdWvpRYAutPJ1ricTWCRxTdRnPP4Dl/gXdoNzmUnB8fNeQqcHmiFRLB
9WClAdPQLLjv3y5zhi16qAoPA33RoK2JE+dh4YeOFEBTSyt0Nw7EEyEFgiL15Nvn
+GUKzxLVWU5pbo/3OEgXIfHQBChs2CSHgh45J6DmZqRf0Ky+VFLojZKvZTWWRrEt
Q0/9dIt4sEVcaLZMrl4zbDFqfuW+wLWAXzZinu4itBt2Zfg7kxBJee0wDJwDE4X7
PiQiJPpKl3nroYePfl3+iZYC97LReFrJvXhqaxhHd9IinuJJ/F3zExs0LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5ExsfpMXG9QDhafvw2bu+ddcY0MB8GA1UdIwQY
MBaAFBS/AN/4BjIxvZlnaJnqvqujO8XZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85OTZjNzItYjRhOS00MDU4LWJkZjgt
YmQyZTc3Y2Q0NzkzLzEvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS85OTZjNzItYjRhOS00MDU4LWJkZjgtYmQyZTc3Y2Q0Nzkz
LzEvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiC65uq3m
JVxNhYo77C/bRVC4/1THu2Ja/FZkBEFSBnwJjlf9+xauo3Zf6HZm0+Tsv/Dxw34g
YRIQYbB5bm5KninhzOUFPpRzuSWPt9a2J9aF5zxHM25BMWFibAbxLe2Css8koCzZ
mSkDUKhXaEc9b6gP3RRNU6iVbo+4fSVxL239C+hBdb3vsULciLeb6NPyI1a/6MFo
pjol6Dh8cTH2lEJm6Weu09KIQNDt88weT96842d0W6t5JYZAF1AWf6/l1JGSf3V5
gyCZUI0DS70Cy93eZYA5C5jgG7h1WehdWUqY0w95LX2/S2q00FMEQUjR98KSY0w8
8PYaufXHKTP76A==
-----END CERTIFICATE-----
Generated at Thu May 1 14:31:05 2025 by rpki-client