Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
File: FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json)
Hash identifier: AZ0AhxZZboJG9ZsIClw5aSMvbLcAh+PiiwzP5g9qa5w=
Subject key identifier: 0E:29:40:FE:49:F4:FC:5E:96:90:35:90:C4:06:B2:8C:29:B9:51:D9
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial: 0195E07DB536EFD2111D008B51F75E37D6AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
Manifest number: 14CE
Signing time: Sat 29 Mar 2025 06:01:29 +0000
Manifest this update: Sat 29 Mar 2025 06:01:29 +0000
Manifest next update: Sun 30 Mar 2025 06:01:29 +0000
Files and hashes: 1: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: HSU3C6bDjldzpRJfFMFjZlmlN7K8SA/J3+D2++UmRA0=)
2: UUcKOryc_ykhvD7v1VUPE00sScs.roa (hash: dAexA2neb3HcfI1bNYdykFIadotQ4NdMRRVIE6QTBe4=)
3: q7sVZrLDAVZQekWMRkAvaSDSl9g.roa (hash: RRTQ5jExs41DvyGCsYtTzal7l6KRuDTnah7ylDN5VEE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:b5:36:ef:d2:11:1d:00:8b:51:f7:5e:37:d6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Validity
Not Before: Mar 29 06:01:29 2025 GMT
Not After : Mar 30 06:01:29 2025 GMT
Subject: CN=0e2940fe49f4fc5e96903590c406b28c29b951d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:84:c6:41:8c:ae:96:51:6c:32:3e:fd:4c:7f:
ae:3c:e4:a5:75:ef:ea:dc:e3:60:e7:e1:ae:30:d0:
4a:0e:11:02:8c:fe:65:c7:e2:33:89:67:ce:26:b9:
69:83:41:fb:24:87:c0:89:85:7b:af:6c:79:fd:75:
19:b5:76:95:89:36:3f:1d:9f:77:ae:91:84:23:d4:
e6:70:6d:08:08:83:09:d2:a4:94:e3:93:71:3c:05:
cd:73:29:f9:44:1b:ac:fd:3c:a1:46:77:9c:9b:e9:
02:7c:b6:d1:48:e3:ac:91:87:ea:7d:3c:7a:f9:5a:
2e:32:bf:8e:18:36:81:6e:14:34:cf:ce:83:56:28:
4e:5b:bb:04:e9:04:39:b4:a2:9b:30:62:ac:0a:07:
81:88:80:5a:b4:3f:d0:7a:d0:54:57:00:54:aa:c4:
8d:50:cd:7a:ad:ac:9d:5c:a1:14:ce:10:6c:fb:35:
24:ee:4e:5b:55:29:54:9f:8d:10:45:d2:d3:a2:19:
68:98:30:74:13:fe:2f:4e:9a:98:03:7f:13:c9:5b:
c8:13:c5:a0:79:de:63:31:32:59:1e:a1:95:21:a4:
7d:14:3c:8b:84:5e:37:35:a1:16:b9:b3:7d:ea:6b:
da:94:f4:05:fa:b1:04:27:35:6e:60:df:fc:45:b1:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:29:40:FE:49:F4:FC:5E:96:90:35:90:C4:06:B2:8C:29:B9:51:D9
X509v3 Authority Key Identifier:
keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:54:a1:6e:18:91:87:58:83:92:fb:71:29:66:47:ff:2e:69:
40:b4:b0:58:46:4c:65:6d:22:7b:57:ea:fe:b5:f9:b8:af:2f:
b8:c0:4a:9d:71:cc:1e:75:ae:88:a4:50:89:db:de:89:a2:cb:
40:8c:20:b3:a6:af:fa:2e:45:04:1a:ee:99:1a:f3:5b:c5:46:
e9:16:12:8e:6e:07:2e:c7:4f:4f:37:b7:1e:e9:1c:a1:c9:86:
99:4e:e4:aa:95:7b:f2:b7:80:b0:69:0b:03:9e:6a:a2:57:fd:
1c:2f:8c:a8:77:cf:95:b3:02:b0:c5:d8:00:a4:6c:28:a9:3f:
f3:18:55:4b:3c:26:95:90:c8:e3:9c:ba:25:f5:81:57:dc:66:
b2:2e:1d:93:ec:90:17:27:04:48:65:8a:4c:9e:41:c3:e2:eb:
3a:f1:ab:fd:98:99:de:ad:6d:72:07:cd:60:04:4b:bf:54:d5:
fd:d1:57:36:36:b8:fc:05:51:d4:20:76:3a:c0:74:bf:ce:2d:
79:8f:c1:b2:83:d9:9d:0f:1e:31:d2:02:70:c8:f3:05:81:fe:
7b:14:48:ea:8b:4f:97:9c:00:83:6c:bd:63:d0:64:2e:9a:8a:
86:2b:8c:46:fa:67:73:e5:9e:7a:ca:62:f6:ac:36:8f:72:12:
b4:8e:02:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgfbU279IRHQCLUfdeN9avMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ODYwMGRmYWM5ZDNkMWE3NWU2NjMwZDY5NzEwMmYyZjIx
MzJjNDgwHhcNMjUwMzI5MDYwMTI5WhcNMjUwMzMwMDYwMTI5WjAzMTEwLwYDVQQD
EygwZTI5NDBmZTQ5ZjRmYzVlOTY5MDM1OTBjNDA2YjI4YzI5Yjk1MWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ITGQYyullFsMj79TH+uPOSlde/q
3ONg5+GuMNBKDhECjP5lx+IziWfOJrlpg0H7JIfAiYV7r2x5/XUZtXaViTY/HZ93
rpGEI9TmcG0ICIMJ0qSU45NxPAXNcyn5RBus/TyhRnecm+kCfLbRSOOskYfqfTx6
+VouMr+OGDaBbhQ0z86DVihOW7sE6QQ5tKKbMGKsCgeBiIBatD/QetBUVwBUqsSN
UM16raydXKEUzhBs+zUk7k5bVSlUn40QRdLTohlomDB0E/4vTpqYA38TyVvIE8Wg
ed5jMTJZHqGVIaR9FDyLhF43NaEWubN96mvalPQF+rEEJzVuYN/8RbHlQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4pQP5J9PxelpA1kMQGsowpuVHZMB8GA1UdIwQY
MBaAFBaGAN+snT0adeZjDWlxAvLyEyxIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm9ZQTM2eWRQUnAxNW1NTmFYRUM4dklUTEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hZjM1YzMtN2Y4MS00ODI5LThkYmEt
MThkYmU2NTA0YmI0LzEvRm9ZQTM2eWRQUnAxNW1NTmFYRUM4dklUTEVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9hZjM1YzMtN2Y4MS00ODI5LThkYmEtMThkYmU2NTA0YmI0
LzEvRm9ZQTM2eWRQUnAxNW1NTmFYRUM4dklUTEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVShbhiR
h1iDkvtxKWZH/y5pQLSwWEZMZW0ie1fq/rX5uK8vuMBKnXHMHnWuiKRQidveiaLL
QIwgs6av+i5FBBrumRrzW8VG6RYSjm4HLsdPTze3HukcocmGmU7kqpV78reAsGkL
A55qolf9HC+MqHfPlbMCsMXYAKRsKKk/8xhVSzwmlZDI45y6JfWBV9xmsi4dk+yQ
FycESGWKTJ5Bw+LrOvGr/ZiZ3q1tcgfNYARLv1TV/dFXNja4/AVR1CB2OsB0v84t
eY/BsoPZnQ8eMdICcMjzBYH+exRI6otPl5wAg2y9Y9BkLpqKhiuMRvpnc+Weespi
9qw2j3IStI4Ctw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:22:10 2025 by rpki-client