Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
File: Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft (raw, json)
Hash identifier: VMnRh6FMzNbOsWzDRcqqE9S49kDmvDjU5eBlALGfrw0=
Subject key identifier: 65:25:E0:D6:84:AF:8B:D1:8D:99:4F:E8:0B:71:CD:C3:C8:71:AB:D3
Authority key identifier: 16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
Certificate issuer: /CN=16f9f928b0ac67731991f374b8e194eb6542ac24
Certificate serial: 0194BCAA2B44D68AE61D84327BDF3D28AB44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
Manifest number: 1210
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl (hash: dRMNCCxCMDaDIj1NcxuBQDo4oIysKRaHkZyDBFchqrs=)
2: M6kd2OZVwbLsznfkTpr9P9tvc9U.roa (hash: Jp9yH5OnFSN9zDtKINo+7/MzPgxLUFZmRYughYu+MLQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2b:44:d6:8a:e6:1d:84:32:7b:df:3d:28:ab:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f9f928b0ac67731991f374b8e194eb6542ac24
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=6525e0d684af8bd18d994fe80b71cdc3c871abd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:f9:2d:eb:b1:56:58:38:fd:3d:f9:73:cd:
8b:8f:5d:ee:e0:a2:3f:d8:e2:bc:e0:08:89:57:40:
d1:a5:df:58:07:48:44:de:f3:8a:c6:ff:2e:05:34:
92:4c:e6:d6:2b:65:e6:5a:a0:4f:77:4d:6f:85:31:
9f:70:8a:61:71:b6:ab:78:d7:ef:d4:38:87:fd:0d:
75:01:a5:88:dd:53:12:24:47:ca:1d:fe:d2:67:75:
56:40:49:3e:f4:87:12:15:1c:67:54:62:30:99:1c:
9b:dd:dd:d7:66:17:0a:15:a7:15:c8:43:ea:f9:5f:
3b:d4:92:ba:ee:4b:70:bd:cf:12:a6:df:ec:e7:f3:
ff:dd:e3:d5:17:f3:59:2c:0c:3c:17:8b:04:ef:0f:
fb:fc:36:f6:7e:43:c5:21:37:35:af:39:e2:a5:7e:
a7:86:30:96:66:05:07:02:37:00:a5:47:97:2c:5a:
63:b7:3b:66:db:02:2a:73:54:84:4f:1c:90:da:f3:
4e:8c:05:c9:48:13:7f:0d:3b:18:08:85:d8:95:22:
db:71:6f:b3:ff:92:f7:6b:f1:57:71:b2:c1:c8:69:
c8:09:4c:d1:15:89:41:4f:53:5f:03:5c:38:fe:38:
05:c7:f3:b4:0e:72:da:ae:8c:25:5e:d7:82:4c:d8:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:25:E0:D6:84:AF:8B:D1:8D:99:4F:E8:0B:71:CD:C3:C8:71:AB:D3
X509v3 Authority Key Identifier:
keyid:16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8c:2c:ca:a2:34:3f:fa:a7:b6:42:1b:16:ee:fa:d6:12:12:
fa:de:2c:ce:6a:12:77:ba:a3:c2:1a:ad:39:26:e2:f1:de:c0:
d6:a9:76:ea:3e:68:f2:7f:a3:11:14:3d:a6:3f:4e:38:f1:6c:
af:36:ce:9f:c1:f1:08:fb:62:bc:1a:c5:43:c0:34:d0:a7:d9:
f7:ff:33:3b:34:07:0f:49:12:4e:4c:90:a2:bf:6a:20:5b:c6:
60:a5:da:6d:01:5f:d1:13:6c:69:a3:1a:24:84:99:e8:06:86:
d7:34:4d:69:94:31:b1:e6:50:92:90:35:89:53:97:a8:7c:0a:
46:8c:02:66:f1:d3:2d:0b:b3:28:26:ce:84:85:2d:2c:e0:85:
0f:d7:4e:ce:7c:0c:cd:e9:17:2f:97:1d:70:00:cb:5a:f5:cf:
da:1e:67:74:10:04:47:6e:73:45:a5:bb:63:9f:50:0b:aa:59:
07:49:7b:94:54:4b:f9:4b:73:02:02:06:09:76:44:a2:05:46:
47:12:8a:83:38:c6:09:c3:c1:4c:ab:2b:46:cd:28:48:50:a1:
8d:d7:68:94:5d:d8:8b:11:4a:e6:da:54:59:6f:2d:ad:43:12:
ac:94:05:3e:1d:45:09:c1:58:eb:22:ab:9c:69:4c:a2:68:83:
bc:2f:68:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qitE1ormHYQye989KKtEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZjlmOTI4YjBhYzY3NzMxOTkxZjM3NGI4ZTE5NGViNjU0
MmFjMjQwHhcNMjUwMTMxMTQwMDU2WhcNMjUwMjAxMTQwMDU2WjAzMTEwLwYDVQQD
Eyg2NTI1ZTBkNjg0YWY4YmQxOGQ5OTRmZTgwYjcxY2RjM2M4NzFhYmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYH5LeuxVlg4/T35c82Lj13u4KI/
2OK84AiJV0DRpd9YB0hE3vOKxv8uBTSSTObWK2XmWqBPd01vhTGfcIphcbareNfv
1DiH/Q11AaWI3VMSJEfKHf7SZ3VWQEk+9IcSFRxnVGIwmRyb3d3XZhcKFacVyEPq
+V871JK67ktwvc8Spt/s5/P/3ePVF/NZLAw8F4sE7w/7/Db2fkPFITc1rznipX6n
hjCWZgUHAjcApUeXLFpjtztm2wIqc1SETxyQ2vNOjAXJSBN/DTsYCIXYlSLbcW+z
/5L3a/FXcbLByGnICUzRFYlBT1NfA1w4/jgFx/O0DnLarowlXteCTNgQ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUl4NaEr4vRjZlP6AtxzcPIcavTMB8GA1UdIwQY
MBaAFBb5+SiwrGdzGZHzdLjhlOtlQqwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnZuNUtMQ3NaM01aa2ZOMHVPR1U2MlZDckNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kNWMwNDItNWI0ZC00YjEwLWJjNzYt
NDJlYWFiYmZiZmQyLzEvRnZuNUtMQ3NaM01aa2ZOMHVPR1U2MlZDckNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kNWMwNDItNWI0ZC00YjEwLWJjNzYtNDJlYWFiYmZiZmQy
LzEvRnZuNUtMQ3NaM01aa2ZOMHVPR1U2MlZDckNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4wsyqI0
P/qntkIbFu761hIS+t4szmoSd7qjwhqtOSbi8d7A1ql26j5o8n+jERQ9pj9OOPFs
rzbOn8HxCPtivBrFQ8A00KfZ9/8zOzQHD0kSTkyQor9qIFvGYKXabQFf0RNsaaMa
JISZ6AaG1zRNaZQxseZQkpA1iVOXqHwKRowCZvHTLQuzKCbOhIUtLOCFD9dOznwM
zekXL5cdcADLWvXP2h5ndBAER25zRaW7Y59QC6pZB0l7lFRL+UtzAgIGCXZEogVG
RxKKgzjGCcPBTKsrRs0oSFChjddolF3YixFK5tpUWW8trUMSrJQFPh1FCcFY6yKr
nGlMomiDvC9oZw==
-----END CERTIFICATE-----
Generated at Thu May 1 10:40:42 2025 by rpki-client