Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/df52a4-e8f8-4740-8a54-eb54b5214bfd/1/fRI1wHdpFlB8FJGQpQR58GdQbww.mft
File: fRI1wHdpFlB8FJGQpQR58GdQbww.mft (raw, json)
Hash identifier: kG+KE8mW2pk7e+/sAEZIRuNTlGuzT6wl1VbnewxubA8=
Subject key identifier: 49:89:AC:34:19:F2:D0:6A:47:C1:AF:0D:C6:D9:38:0E:38:7D:63:64
Authority key identifier: 7D:12:35:C0:77:69:16:50:7C:14:91:90:A5:04:79:F0:67:50:6F:0C
Certificate issuer: /CN=7d1235c0776916507c149190a50479f067506f0c
Certificate serial: 01870DCD2F4D162111FEF04C50F80C3060C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRI1wHdpFlB8FJGQpQR58GdQbww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/df52a4-e8f8-4740-8a54-eb54b5214bfd/1/fRI1wHdpFlB8FJGQpQR58GdQbww.mft
Manifest number: 0CE8
Signing time: Thu 23 Mar 2023 09:29:23 +0000
Manifest this update: Thu 23 Mar 2023 09:29:23 +0000
Manifest next update: Fri 24 Mar 2023 09:29:23 +0000
Files and hashes: 1: Z7VfIaRDLMr5I_j2MxftYnJeXF8.roa (hash: B68wZB320dZ/GTJoifc0uuexjyPC/a8xjeGr57iBlAg=)
2: fRI1wHdpFlB8FJGQpQR58GdQbww.crl (hash: g2OOzKr5q1C0yrCax8O+ImAU4zEP9+iWdKyqOikw9LQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:cd:2f:4d:16:21:11:fe:f0:4c:50:f8:0c:30:60:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d1235c0776916507c149190a50479f067506f0c
Validity
Not Before: Mar 23 09:29:23 2023 GMT
Not After : Mar 24 09:29:23 2023 GMT
Subject: CN=4989ac3419f2d06a47c1af0dc6d9380e387d6364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2d:cb:e3:37:48:b8:7b:b2:35:1f:cf:6c:97:
d5:51:e3:5b:de:a5:ea:6a:33:83:87:1a:bb:43:61:
55:fd:42:d7:37:9b:d3:9e:92:af:91:76:20:aa:43:
c7:4b:51:dc:6a:34:1f:ff:5a:cb:44:07:3a:fe:3a:
90:35:4b:00:79:74:98:aa:e0:2c:8b:39:da:6a:62:
7d:ed:e7:91:7e:d8:7a:58:4f:79:0e:2d:8e:59:84:
54:3d:03:14:10:7b:67:7c:1c:86:63:0c:af:2f:6a:
c8:5d:68:60:66:08:4f:3f:bb:4e:f9:aa:14:a6:f6:
d1:bb:4d:02:1b:7d:5e:bf:23:02:de:cb:bc:7e:df:
38:e5:65:44:46:e6:f5:a2:c8:c9:e7:a5:3d:d0:51:
e3:2f:15:8f:11:f2:18:e4:69:9d:53:7d:41:25:cc:
9e:b6:c6:05:26:c3:1b:1f:8e:8a:e5:db:2a:db:2f:
c3:3f:f6:2f:41:80:c2:e7:e9:31:8c:c8:12:62:29:
6f:50:a9:be:cf:7d:10:73:cc:24:80:1f:76:f7:de:
3c:bb:03:db:33:ad:48:a7:21:25:cb:8e:0e:67:cc:
5f:96:f1:d5:4d:a7:7e:a7:87:70:fa:ec:54:48:79:
ff:15:29:0f:cd:dd:95:de:c8:21:ef:02:77:1a:cd:
3d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:89:AC:34:19:F2:D0:6A:47:C1:AF:0D:C6:D9:38:0E:38:7D:63:64
X509v3 Authority Key Identifier:
keyid:7D:12:35:C0:77:69:16:50:7C:14:91:90:A5:04:79:F0:67:50:6F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRI1wHdpFlB8FJGQpQR58GdQbww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/df52a4-e8f8-4740-8a54-eb54b5214bfd/1/fRI1wHdpFlB8FJGQpQR58GdQbww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/df52a4-e8f8-4740-8a54-eb54b5214bfd/1/fRI1wHdpFlB8FJGQpQR58GdQbww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b3:ec:00:e7:4b:8e:5a:68:c5:c5:a0:c2:57:97:05:59:b5:
85:76:3c:28:7d:ff:f3:42:1c:e6:4a:33:ce:fc:7a:d6:2d:5e:
12:cf:d2:b1:84:17:f5:3f:99:b1:e0:cd:33:10:06:10:59:d3:
a5:79:53:72:f9:64:55:b8:a7:f9:f2:4e:f6:d7:63:36:64:0b:
f9:e0:ea:a1:79:97:e3:f2:08:66:17:dd:92:c4:65:36:a7:de:
67:26:24:dd:66:7a:9b:54:a0:30:2f:ce:48:1b:fd:2c:96:5a:
da:2b:b1:fe:d5:6b:0b:da:ef:68:64:a9:92:63:76:c1:08:54:
36:b0:64:44:0f:b0:88:99:83:53:1b:38:5a:18:3e:09:16:86:
e6:b8:93:31:ac:7f:0c:73:46:91:14:53:76:39:8d:22:c4:78:
28:09:d3:76:4f:8b:c9:3b:5e:fc:11:87:fa:c9:e7:3f:0e:a2:
89:a4:fb:32:1d:be:88:d9:7a:78:be:3d:87:6d:69:f6:22:76:
06:bb:94:3d:2f:72:8c:6a:52:63:b8:f2:61:35:b6:4b:3a:d1:
03:1a:39:14:fc:e4:fd:07:9c:63:6d:a2:55:32:9c:11:b5:37:
b5:a6:69:1b:f7:9c:23:d5:df:7a:5e:f6:36:36:f4:63:27:e4:
df:69:36:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYcNzS9NFiER/vBMUPgMMGDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMTIzNWMwNzc2OTE2NTA3YzE0OTE5MGE1MDQ3OWYwNjc1
MDZmMGMwHhcNMjMwMzIzMDkyOTIzWhcNMjMwMzI0MDkyOTIzWjAzMTEwLwYDVQQD
Eyg0OTg5YWMzNDE5ZjJkMDZhNDdjMWFmMGRjNmQ5MzgwZTM4N2Q2MzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S3L4zdIuHuyNR/PbJfVUeNb3qXq
ajODhxq7Q2FV/ULXN5vTnpKvkXYgqkPHS1HcajQf/1rLRAc6/jqQNUsAeXSYquAs
iznaamJ97eeRfth6WE95Di2OWYRUPQMUEHtnfByGYwyvL2rIXWhgZghPP7tO+aoU
pvbRu00CG31evyMC3su8ft845WVERub1osjJ56U90FHjLxWPEfIY5GmdU31BJcye
tsYFJsMbH46K5dsq2y/DP/YvQYDC5+kxjMgSYilvUKm+z30Qc8wkgB929948uwPb
M61IpyEly44OZ8xflvHVTad+p4dw+uxUSHn/FSkPzd2V3sgh7wJ3Gs09KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmJrDQZ8tBqR8GvDcbZOA44fWNkMB8GA1UdIwQY
MBaAFH0SNcB3aRZQfBSRkKUEefBnUG8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlJJMXdIZHBGbEI4RkpHUXBRUjU4R2RRYnd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kZjUyYTQtZThmOC00NzQwLThhNTQt
ZWI1NGI1MjE0YmZkLzEvZlJJMXdIZHBGbEI4RkpHUXBRUjU4R2RRYnd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9kZjUyYTQtZThmOC00NzQwLThhNTQtZWI1NGI1MjE0YmZk
LzEvZlJJMXdIZHBGbEI4RkpHUXBRUjU4R2RRYnd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbPsAOdL
jlpoxcWgwleXBVm1hXY8KH3/80Ic5kozzvx61i1eEs/SsYQX9T+ZseDNMxAGEFnT
pXlTcvlkVbin+fJO9tdjNmQL+eDqoXmX4/IIZhfdksRlNqfeZyYk3WZ6m1SgMC/O
SBv9LJZa2iux/tVrC9rvaGSpkmN2wQhUNrBkRA+wiJmDUxs4Whg+CRaG5riTMax/
DHNGkRRTdjmNIsR4KAnTdk+LyTte/BGH+snnPw6iiaT7Mh2+iNl6eL49h21p9iJ2
BruUPS9yjGpSY7jyYTW2SzrRAxo5FPzk/QecY22iVTKcEbU3taZpG/ecI9Xfel72
Njb0Yyfk32k27A==
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:58:56 2025 by rpki-client