Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.mft
File: FhaeT1b0AaROVKG9hr8svYa4hnM.mft (raw, json)
Hash identifier: IMK4siQs8H2vl2pwSIZwQ4y7gKhycmhTavX6MK/T2CU=
Subject key identifier: 76:E0:EB:18:9C:39:0C:24:B0:F9:39:B1:6F:26:6E:98:D0:F3:EE:C2
Authority key identifier: 16:16:9E:4F:56:F4:01:A4:4E:54:A1:BD:86:BF:2C:BD:86:B8:86:73
Certificate issuer: /CN=16169e4f56f401a44e54a1bd86bf2cbd86b88673
Certificate serial: 01967FB435D7AFAD9D15E7710F595E544C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FhaeT1b0AaROVKG9hr8svYa4hnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.mft
Manifest number: 1161
Signing time: Tue 29 Apr 2025 04:00:38 +0000
Manifest this update: Tue 29 Apr 2025 04:00:38 +0000
Manifest next update: Wed 30 Apr 2025 04:00:38 +0000
Files and hashes: 1: FhaeT1b0AaROVKG9hr8svYa4hnM.crl (hash: 7m7GZb2MnfbPUKfX7DGjUkK0Xc+fq/Ame5Ish/eQqWU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:35:d7:af:ad:9d:15:e7:71:0f:59:5e:54:4c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16169e4f56f401a44e54a1bd86bf2cbd86b88673
Validity
Not Before: Apr 29 04:00:38 2025 GMT
Not After : Apr 30 04:00:38 2025 GMT
Subject: CN=76e0eb189c390c24b0f939b16f266e98d0f3eec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:4f:06:f3:8f:13:a3:53:52:64:0c:01:9b:
47:4e:af:35:34:3b:8f:24:48:d4:c1:00:e1:57:38:
e9:d8:3b:58:86:5a:d1:0e:07:68:fd:d7:8c:96:b1:
ea:f8:32:63:4e:5e:ac:a3:66:4a:1c:ff:42:ac:97:
a9:c2:a2:25:88:e9:a0:bb:f1:c7:20:86:25:54:ca:
09:57:54:4f:a6:a5:ff:95:a0:ac:3e:40:c3:ab:18:
d7:37:c2:4a:f4:4b:55:96:bc:7c:6a:5f:ed:43:a5:
b3:df:64:d2:4e:06:9f:a0:6c:de:e3:c6:2d:ca:73:
68:08:05:78:e2:f5:c6:97:7d:e9:1a:f0:28:01:87:
e9:c5:38:75:75:b9:ac:03:6c:23:16:00:c6:e5:19:
75:8e:5d:ad:c1:20:72:cc:79:a6:fd:72:99:a7:8e:
48:e0:6b:6f:b1:3a:d4:bd:60:6f:a2:46:71:cf:1a:
f0:b2:47:f1:73:1e:61:9c:5d:69:ad:8b:ca:d3:c8:
ed:a8:ce:59:e3:6a:98:6f:1f:1f:fa:19:14:23:84:
e9:7e:8d:55:00:e2:e4:12:2f:77:ea:fa:fc:b9:9c:
9e:1b:91:07:4c:8f:99:64:c1:8b:40:e1:06:8d:06:
c5:4a:9b:2e:44:df:01:00:fc:bb:15:17:37:89:8f:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E0:EB:18:9C:39:0C:24:B0:F9:39:B1:6F:26:6E:98:D0:F3:EE:C2
X509v3 Authority Key Identifier:
keyid:16:16:9E:4F:56:F4:01:A4:4E:54:A1:BD:86:BF:2C:BD:86:B8:86:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhaeT1b0AaROVKG9hr8svYa4hnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f1:80:1f:b3:a9:87:c6:56:c2:91:52:c2:26:bd:70:e3:8c:
4b:5d:a2:6f:e5:32:56:5e:78:dc:35:38:df:15:ff:5e:49:f3:
52:47:bb:c3:26:41:ac:86:36:93:a8:b7:92:d6:a4:c1:4d:76:
36:49:a0:b0:3b:8c:67:e7:2d:ab:af:c9:13:c2:ce:12:16:b5:
66:3b:f0:8a:d1:8f:f0:f8:e3:43:51:a1:aa:a5:67:d3:12:d2:
1f:e8:31:99:18:9f:e1:5a:c8:a4:e0:a0:97:1d:9d:b7:e9:c3:
a7:c1:ba:d7:4e:d7:bb:e9:99:dc:81:11:15:4e:32:e4:14:73:
a8:90:c5:67:58:3e:67:64:63:0e:0b:3e:dc:90:d0:cb:70:68:
06:45:7e:f3:2a:a1:c8:c6:5c:21:42:9f:2f:36:36:76:ea:cb:
a0:38:31:24:d5:0f:18:ea:3c:3d:df:de:76:8b:10:b2:fd:0f:
b0:68:ee:e5:e5:35:40:87:c8:69:8e:82:02:d0:a9:05:14:e1:
13:84:b7:d9:06:f9:ab:4c:6a:7e:09:54:fa:a4:a7:6f:de:f5:
cc:12:96:bd:68:78:56:e7:ee:28:2c:31:e4:ba:67:87:c4:9f:
a0:f8:fa:27:74:a3:33:43:43:32:f4:3e:a0:49:a3:b8:a3:ac:
1e:36:51:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tDXXr62dFedxD1leVEyXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MTY5ZTRmNTZmNDAxYTQ0ZTU0YTFiZDg2YmYyY2JkODZi
ODg2NzMwHhcNMjUwNDI5MDQwMDM4WhcNMjUwNDMwMDQwMDM4WjAzMTEwLwYDVQQD
Eyg3NmUwZWIxODljMzkwYzI0YjBmOTM5YjE2ZjI2NmU5OGQwZjNlZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSVPBvOPE6NTUmQMAZtHTq81NDuP
JEjUwQDhVzjp2DtYhlrRDgdo/deMlrHq+DJjTl6so2ZKHP9CrJepwqIliOmgu/HH
IIYlVMoJV1RPpqX/laCsPkDDqxjXN8JK9EtVlrx8al/tQ6Wz32TSTgafoGze48Yt
ynNoCAV44vXGl33pGvAoAYfpxTh1dbmsA2wjFgDG5Rl1jl2twSByzHmm/XKZp45I
4GtvsTrUvWBvokZxzxrwskfxcx5hnF1prYvK08jtqM5Z42qYbx8f+hkUI4Tpfo1V
AOLkEi936vr8uZyeG5EHTI+ZZMGLQOEGjQbFSpsuRN8BAPy7FRc3iY8fVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbg6xicOQwksPk5sW8mbpjQ8+7CMB8GA1UdIwQY
MBaAFBYWnk9W9AGkTlShvYa/LL2GuIZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmhhZVQxYjBBYVJPVktHOWhyOHN2WWE0aG5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zN2VmZDItNTc3MC00OTZhLWIxNTQt
NDA4ZTBmNTcwZmJkLzEvRmhhZVQxYjBBYVJPVktHOWhyOHN2WWE0aG5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zN2VmZDItNTc3MC00OTZhLWIxNTQtNDA4ZTBmNTcwZmJk
LzEvRmhhZVQxYjBBYVJPVktHOWhyOHN2WWE0aG5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfGAH7Op
h8ZWwpFSwia9cOOMS12ib+UyVl543DU43xX/XknzUke7wyZBrIY2k6i3ktakwU12
NkmgsDuMZ+ctq6/JE8LOEha1ZjvwitGP8PjjQ1GhqqVn0xLSH+gxmRif4VrIpOCg
lx2dt+nDp8G6107Xu+mZ3IERFU4y5BRzqJDFZ1g+Z2RjDgs+3JDQy3BoBkV+8yqh
yMZcIUKfLzY2durLoDgxJNUPGOo8Pd/edosQsv0PsGju5eU1QIfIaY6CAtCpBRTh
E4S32Qb5q0xqfglU+qSnb971zBKWvWh4VufuKCwx5Lpnh8SfoPj6J3SjM0NDMvQ+
oEmjuKOsHjZRTg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:58:09 2025 by rpki-client