Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/58a759-84ed-41b7-86cf-203560f26914/1/fFRTTErD0WMnanJb2Co6fYsuBEg.mft
File: fFRTTErD0WMnanJb2Co6fYsuBEg.mft (raw, json)
Hash identifier: ybzmJzH5fzCcSOUaQIzVFeYpmimCwIA+6XITbT/NHdY=
Subject key identifier: 29:41:CF:D0:DA:C4:23:28:D4:6C:73:AF:9D:0D:51:6F:39:D2:7B:DD
Authority key identifier: 7C:54:53:4C:4A:C3:D1:63:27:6A:72:5B:D8:2A:3A:7D:8B:2E:04:48
Certificate issuer: /CN=7c54534c4ac3d163276a725bd82a3a7d8b2e0448
Certificate serial: 0185704BC244BF10FD93E89076B5285AA315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFRTTErD0WMnanJb2Co6fYsuBEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/58a759-84ed-41b7-86cf-203560f26914/1/fFRTTErD0WMnanJb2Co6fYsuBEg.mft
Manifest number: 086B
Signing time: Mon 02 Jan 2023 02:24:51 +0000
Manifest this update: Mon 02 Jan 2023 02:24:51 +0000
Manifest next update: Tue 03 Jan 2023 02:24:51 +0000
Files and hashes: 1: fFRTTErD0WMnanJb2Co6fYsuBEg.crl (hash: L5MI1HDCpf62TemxQKnofA67KorSoiB0whlummTStds=)
2: robjy4ozJOQ7Uv3Ak6QffOmvD60.roa (hash: /KD9GcnvVQyvIzpNC8ac63wkQQ+jv657wrRODwQ7rmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:c2:44:bf:10:fd:93:e8:90:76:b5:28:5a:a3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c54534c4ac3d163276a725bd82a3a7d8b2e0448
Validity
Not Before: Jan 2 02:24:51 2023 GMT
Not After : Jan 3 02:24:51 2023 GMT
Subject: CN=2941cfd0dac42328d46c73af9d0d516f39d27bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:73:56:ea:32:8d:d5:d8:ed:55:fb:6a:f3:75:
a0:bc:35:45:a3:77:3d:ce:22:bd:5b:0b:90:b5:1b:
0e:b7:5f:6e:c5:34:4d:2b:98:d0:d3:ff:00:47:7d:
dd:00:5d:a1:65:55:a7:54:38:ea:98:f7:35:60:aa:
73:92:56:20:a9:2c:d4:59:d8:be:91:90:2f:b7:bf:
43:69:be:71:bd:95:56:a3:73:a9:60:85:72:49:ae:
f5:47:77:aa:e4:da:89:3e:51:b5:6b:c7:bf:4d:ed:
48:55:ff:ef:2b:f3:a6:51:c4:70:8e:22:ec:e0:65:
44:da:ea:3b:ad:ff:c8:dd:5a:a0:aa:56:3d:b1:a8:
ce:57:a9:7b:88:04:c1:70:e6:5c:40:5c:f7:65:a5:
48:04:1b:90:66:ec:8e:f5:da:62:f7:a2:0d:fa:cd:
e9:7d:4a:c5:34:7b:47:9e:5b:d0:ac:9c:4a:ec:49:
8d:b5:0e:02:c7:a5:49:8d:a5:cd:0a:4f:31:36:2c:
f5:44:27:d7:e1:de:bf:1a:36:1c:ba:d7:b7:d4:65:
3d:db:c3:69:78:5d:88:c3:05:9b:1c:7e:8e:20:33:
94:98:c4:97:4a:e4:15:09:bf:26:a4:ab:c4:97:54:
ca:f7:c4:bc:7b:7b:fd:96:7a:96:cd:2c:ea:cb:b3:
33:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:41:CF:D0:DA:C4:23:28:D4:6C:73:AF:9D:0D:51:6F:39:D2:7B:DD
X509v3 Authority Key Identifier:
keyid:7C:54:53:4C:4A:C3:D1:63:27:6A:72:5B:D8:2A:3A:7D:8B:2E:04:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFRTTErD0WMnanJb2Co6fYsuBEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/58a759-84ed-41b7-86cf-203560f26914/1/fFRTTErD0WMnanJb2Co6fYsuBEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/58a759-84ed-41b7-86cf-203560f26914/1/fFRTTErD0WMnanJb2Co6fYsuBEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:44:73:53:b7:61:37:a7:fd:38:c5:45:83:02:81:39:2a:c4:
24:ef:37:a2:46:ed:17:b0:64:78:81:32:8e:6b:5f:44:38:39:
31:d3:d1:94:3a:02:cf:1d:bf:95:7e:4a:03:4f:91:8e:25:0f:
40:a2:d6:da:c9:3e:3f:01:49:26:ae:8e:f4:a4:e8:59:55:7b:
24:5d:1d:a0:a5:22:fd:36:99:f2:db:7e:34:2e:6c:65:d0:a4:
e0:c9:64:64:33:c8:46:10:e2:f2:11:82:3d:61:85:0f:25:6b:
f5:15:57:50:7f:5a:c6:45:50:9b:37:07:76:88:a8:f7:15:ab:
f3:4f:cd:bb:af:38:f3:8c:68:62:f9:4e:a4:d2:8d:47:3e:3a:
e9:9a:b7:1d:93:18:ca:d2:76:3f:31:3d:ed:56:35:01:22:31:
91:3e:2b:8a:e6:3c:a5:75:a9:66:0f:32:63:1e:08:6a:93:a1:
dd:2d:4d:5a:83:1c:a0:f2:af:30:8f:36:42:9a:c3:43:73:a9:
fb:f6:f8:2d:34:8c:fe:eb:b7:66:db:b5:2a:7f:be:c5:5b:6a:
2f:89:7d:86:4c:a7:6b:4d:4f:fe:33:0e:71:d2:df:37:9c:25:
84:c8:fd:d6:cb:f7:6d:f2:e1:6c:56:f0:8b:78:9c:75:86:b9:
a1:e7:00:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYVwS8JEvxD9k+iQdrUoWqMVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNTQ1MzRjNGFjM2QxNjMyNzZhNzI1YmQ4MmEzYTdkOGIy
ZTA0NDgwHhcNMjMwMTAyMDIyNDUxWhcNMjMwMTAzMDIyNDUxWjAzMTEwLwYDVQQD
EygyOTQxY2ZkMGRhYzQyMzI4ZDQ2YzczYWY5ZDBkNTE2ZjM5ZDI3YmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XNW6jKN1djtVftq83WgvDVFo3c9
ziK9WwuQtRsOt19uxTRNK5jQ0/8AR33dAF2hZVWnVDjqmPc1YKpzklYgqSzUWdi+
kZAvt79Dab5xvZVWo3OpYIVySa71R3eq5NqJPlG1a8e/Te1IVf/vK/OmUcRwjiLs
4GVE2uo7rf/I3VqgqlY9sajOV6l7iATBcOZcQFz3ZaVIBBuQZuyO9dpi96IN+s3p
fUrFNHtHnlvQrJxK7EmNtQ4Cx6VJjaXNCk8xNiz1RCfX4d6/GjYcute31GU928Np
eF2IwwWbHH6OIDOUmMSXSuQVCb8mpKvEl1TK98S8e3v9lnqWzSzqy7MzwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClBz9DaxCMo1Gxzr50NUW850nvdMB8GA1UdIwQY
MBaAFHxUU0xKw9FjJ2pyW9gqOn2LLgRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkZSVFRFckQwV01uYW5KYjJDbzZmWXN1QkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81OGE3NTktODRlZC00MWI3LTg2Y2Yt
MjAzNTYwZjI2OTE0LzEvZkZSVFRFckQwV01uYW5KYjJDbzZmWXN1QkVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81OGE3NTktODRlZC00MWI3LTg2Y2YtMjAzNTYwZjI2OTE0
LzEvZkZSVFRFckQwV01uYW5KYjJDbzZmWXN1QkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkRzU7dh
N6f9OMVFgwKBOSrEJO83okbtF7BkeIEyjmtfRDg5MdPRlDoCzx2/lX5KA0+RjiUP
QKLW2sk+PwFJJq6O9KToWVV7JF0doKUi/TaZ8tt+NC5sZdCk4MlkZDPIRhDi8hGC
PWGFDyVr9RVXUH9axkVQmzcHdoio9xWr80/Nu68484xoYvlOpNKNRz466Zq3HZMY
ytJ2PzE97VY1ASIxkT4riuY8pXWpZg8yYx4IapOh3S1NWoMcoPKvMI82QprDQ3Op
+/b4LTSM/uu3Ztu1Kn++xVtqL4l9hkyna01P/jMOcdLfN5wlhMj91sv3bfLhbFbw
i3icdYa5oecAhw==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:39 2025 by rpki-client