Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
File: Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft (raw, json)
Hash identifier: 3Y88K4UXxOToDwTX3x1VszKTpM3EXVMZSTQEIacv/WU=
Subject key identifier: 75:43:3E:D0:F6:5A:D3:7C:14:97:3E:DC:C6:41:AB:5B:7B:9B:1F:5E
Authority key identifier: 17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
Certificate issuer: /CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Certificate serial: 0195E1907CD42121579FF20595D6E8E6BEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
Manifest number: 0D91
Signing time: Sat 29 Mar 2025 11:01:37 +0000
Manifest this update: Sat 29 Mar 2025 11:01:37 +0000
Manifest next update: Sun 30 Mar 2025 11:01:37 +0000
Files and hashes: 1: 1-7k1BSVErLFvFpR9s4khkCRgcx8.roa (hash: OjA0u5BcNw+jfDFu4scr2j7odbJKWBNkQN28Ky+RjrQ=)
2: Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl (hash: Nd90Jz085lqRG9J0/63iAECbRMeSz952Ipv5B4pPNKk=)
3: ZYpOnf_RMjUdQRpY5DSmoRhYWXo.roa (hash: 1MZ14FF0b6BfjlsKqzDJT2k9XMlDgyRHFf/YVDEx3LU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:7c:d4:21:21:57:9f:f2:05:95:d6:e8:e6:be:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Validity
Not Before: Mar 29 11:01:37 2025 GMT
Not After : Mar 30 11:01:37 2025 GMT
Subject: CN=75433ed0f65ad37c14973edcc641ab5b7b9b1f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d3:85:ec:97:4d:86:86:88:70:d6:6d:d6:fb:
83:08:22:d2:c5:63:55:d2:40:4e:8e:9f:81:a4:9b:
6a:7d:59:7b:7f:4a:34:94:fa:22:88:ac:32:f7:94:
3c:13:95:47:40:26:be:10:04:06:86:c5:ca:ba:b5:
d9:f1:23:63:3e:c4:1f:c1:19:9b:07:74:ed:9e:37:
f4:70:a1:94:bd:ec:4c:29:68:fa:5f:af:a0:95:1f:
b3:f3:5b:ee:63:39:b8:f8:e3:56:e9:0a:b3:ae:67:
2c:39:39:16:bb:8d:ee:09:14:aa:83:40:f3:cc:d5:
c6:71:c9:41:05:f0:15:ff:c8:5b:55:3b:8b:c6:52:
d7:3e:39:16:7d:65:b0:01:12:4e:60:80:05:dc:9f:
20:bf:fa:74:cd:e5:11:4b:4c:48:8f:67:1b:22:c9:
a1:64:1e:70:cf:25:e4:0d:4b:47:df:79:2d:7e:7b:
9d:33:a4:72:59:9a:00:51:1b:aa:8b:2f:6c:bf:fc:
eb:f4:14:a5:9e:98:9e:df:5e:cf:b3:9f:09:6b:9a:
1e:4c:2d:56:1a:76:36:e1:95:b0:db:83:e2:99:6b:
5b:9c:52:49:b0:45:3f:b5:e6:f6:f8:e1:be:65:fc:
2c:86:f3:a3:f4:d9:39:ff:6d:25:33:0d:ed:84:30:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:43:3E:D0:F6:5A:D3:7C:14:97:3E:DC:C6:41:AB:5B:7B:9B:1F:5E
X509v3 Authority Key Identifier:
keyid:17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:12:7c:90:8e:0c:9d:c0:5a:f0:ec:3b:e6:70:ac:89:db:bf:
99:90:8d:22:0c:d7:35:34:cf:e2:31:a7:21:68:cf:92:c8:24:
58:1e:9e:cd:dc:81:3e:5b:00:e7:5f:ec:ad:78:df:34:99:3a:
ef:bf:03:b9:31:5e:fb:6b:00:95:99:f5:aa:e5:0c:88:f5:1b:
57:d2:39:7e:10:ff:c1:d6:65:45:23:61:03:5a:93:a8:87:f4:
eb:23:8f:ae:1e:57:60:de:b5:9f:0b:8f:e4:95:8b:d8:13:2b:
25:ce:80:f3:d7:d7:35:9d:83:9d:c9:f7:91:fd:d6:7b:23:e8:
69:4e:b8:a7:ec:a7:14:26:f4:93:55:f0:a3:7c:77:50:0c:83:
d8:99:e1:21:26:61:77:73:88:16:b4:57:f0:cf:67:a2:05:9b:
8b:2e:a9:f5:70:49:97:b0:3d:4d:06:1e:ca:a8:33:a7:85:ef:
d8:d9:cf:de:66:70:00:06:e1:15:2c:37:81:bf:42:fe:3b:7d:
cf:b9:77:22:85:1f:c7:ad:56:43:28:e2:8a:60:56:31:3c:7a:
81:95:6a:e8:a5:6b:fd:5b:a6:81:3d:a2:7e:33:78:92:32:be:
1a:ec:14:ce:fc:08:ef:fe:2f:0a:96:2e:c3:5a:6b:6d:a0:b5:
a1:36:12:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhkHzUISFXn/IFldbo5r79MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MTZlYmQ0MGE3NDRhMGM4NGYyNTM1NDU3MDQ3ODA4YWQy
ZjE3YzQwHhcNMjUwMzI5MTEwMTM3WhcNMjUwMzMwMTEwMTM3WjAzMTEwLwYDVQQD
Eyg3NTQzM2VkMGY2NWFkMzdjMTQ5NzNlZGNjNjQxYWI1YjdiOWIxZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39OF7JdNhoaIcNZt1vuDCCLSxWNV
0kBOjp+BpJtqfVl7f0o0lPoiiKwy95Q8E5VHQCa+EAQGhsXKurXZ8SNjPsQfwRmb
B3Ttnjf0cKGUvexMKWj6X6+glR+z81vuYzm4+ONW6QqzrmcsOTkWu43uCRSqg0Dz
zNXGcclBBfAV/8hbVTuLxlLXPjkWfWWwARJOYIAF3J8gv/p0zeURS0xIj2cbIsmh
ZB5wzyXkDUtH33ktfnudM6RyWZoAURuqiy9sv/zr9BSlnpie317Ps58Ja5oeTC1W
GnY24ZWw24PimWtbnFJJsEU/teb2+OG+ZfwshvOj9Nk5/20lMw3thDC9VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVDPtD2WtN8FJc+3MZBq1t7mx9eMB8GA1UdIwQY
MBaAFBcW69QKdEoMhPJTVFcEeAitLxfEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnhicjFBcDBTZ3lFOGxOVVZ3UjRDSzB2RjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81ZjU1ODktNGMzMi00OTNmLTkyNGUt
YmFlN2FhMGExOGEwLzEvRnhicjFBcDBTZ3lFOGxOVVZ3UjRDSzB2RjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81ZjU1ODktNGMzMi00OTNmLTkyNGUtYmFlN2FhMGExOGEw
LzEvRnhicjFBcDBTZ3lFOGxOVVZ3UjRDSzB2RjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhJ8kI4M
ncBa8Ow75nCsidu/mZCNIgzXNTTP4jGnIWjPksgkWB6ezdyBPlsA51/srXjfNJk6
778DuTFe+2sAlZn1quUMiPUbV9I5fhD/wdZlRSNhA1qTqIf06yOPrh5XYN61nwuP
5JWL2BMrJc6A89fXNZ2Dncn3kf3WeyPoaU64p+ynFCb0k1Xwo3x3UAyD2JnhISZh
d3OIFrRX8M9nogWbiy6p9XBJl7A9TQYeyqgzp4Xv2NnP3mZwAAbhFSw3gb9C/jt9
z7l3IoUfx61WQyjiimBWMTx6gZVq6KVr/VumgT2ifjN4kjK+GuwUzvwI7/4vCpYu
w1prbaC1oTYSTA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:07 2025 by rpki-client