Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json)
Hash identifier: 3AhZ8RjIjq7uye4vMFvm9tV3iXNU54H4leS5KcHvdik=
Subject key identifier: 59:D0:CF:F9:DE:6A:01:24:A8:EA:0B:D3:8D:D8:3E:65:CC:A6:F6:BB
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 01962E2ADA457BE8BFDDE41512D533330438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
Manifest number: 0AF0
Signing time: Sun 13 Apr 2025 08:01:22 +0000
Manifest this update: Sun 13 Apr 2025 08:01:22 +0000
Manifest next update: Mon 14 Apr 2025 08:01:22 +0000
Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: a3m+OQczvkc5/hBw5Eypb+Zw3gO8M7fiwbuHFye2jHA=)
2: XnnmqXJoOR0rO9VDsOL9RjMpoEc.roa (hash: LgD69e+nouQ5z7eZNAgfyUxJCnIL4Pp/DimPZswYsNU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2a:da:45:7b:e8:bf:dd:e4:15:12:d5:33:33:04:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Apr 13 08:01:22 2025 GMT
Not After : Apr 14 08:01:22 2025 GMT
Subject: CN=59d0cff9de6a0124a8ea0bd38dd83e65cca6f6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8a:3a:8a:ea:92:39:01:c0:3c:56:a5:ed:a2:
6b:ab:53:27:91:cf:d2:90:b5:11:68:5b:c4:9a:91:
22:ff:fb:c8:43:e3:13:f6:c3:25:9b:87:3d:db:ed:
df:58:94:39:fc:5b:a3:58:30:e9:fc:68:98:db:99:
c4:94:e7:93:7f:68:c8:9c:16:5a:82:b5:7a:c1:33:
91:ca:fe:44:89:13:17:35:80:0f:bd:7a:3b:6b:ed:
3f:11:f6:45:85:6a:82:47:06:f4:fb:04:17:4f:f5:
bb:78:ae:fd:1a:06:19:5d:28:a0:26:00:a4:ba:80:
6d:24:1b:4b:63:8e:6d:60:63:a5:08:94:07:f9:f3:
2f:6b:9d:57:4a:5e:85:23:c6:3d:c8:c1:60:58:67:
80:38:67:6e:3b:99:a1:5f:dc:be:f9:cb:cc:3c:31:
d2:36:d1:12:d5:e8:bb:0f:26:45:f0:bc:92:76:aa:
be:05:69:3a:44:70:c5:19:84:f8:41:cb:5b:b0:44:
4d:cc:25:29:a4:26:2f:5b:8d:fc:05:c6:c3:c1:cb:
61:28:a0:a0:3a:ff:ca:e5:77:a9:78:c1:9d:da:2d:
9b:55:dd:a4:db:d9:e9:89:c1:73:98:a8:20:35:4e:
03:3e:b3:f6:eb:46:84:22:7d:64:dd:00:f5:a9:db:
3f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D0:CF:F9:DE:6A:01:24:A8:EA:0B:D3:8D:D8:3E:65:CC:A6:F6:BB
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e8:fe:72:17:6e:01:c2:db:8a:66:be:0a:43:f3:cd:a9:b5:
96:dd:74:f9:55:c5:21:9b:ad:e0:c6:fe:26:bc:3b:35:78:f2:
61:2a:fd:03:70:97:be:82:b8:e5:be:f6:32:2d:54:ba:84:4a:
50:16:e7:3a:1e:71:a0:2c:57:84:e6:b0:00:f4:42:8e:46:6e:
4a:1d:a9:c2:27:58:f0:c8:c9:17:80:b0:69:5e:c8:fd:97:1b:
f1:1c:8e:57:f0:71:c7:98:2e:35:10:43:6a:a7:32:2b:b3:6c:
ad:8a:ed:42:ab:ea:f2:de:fe:42:6f:e8:d2:0e:99:ac:ee:e7:
17:6c:ba:c6:d0:36:4a:fd:74:af:a3:8d:9c:36:c5:76:f6:e3:
17:42:a1:b1:ee:08:c8:85:e2:49:87:fc:d1:90:ba:ac:87:dc:
d4:69:69:f1:0d:1a:22:2a:f8:a8:7e:07:3b:d2:fe:c6:a6:c6:
0a:0f:75:55:64:9d:a7:ba:f7:df:b2:ac:6f:21:03:9e:f4:06:
bf:aa:4d:d2:da:d9:dc:54:f9:d7:19:e8:2c:e0:fd:18:19:cd:
66:4e:41:02:c5:dc:47:6f:fd:07:15:03:68:cd:20:58:9c:3b:
21:92:e4:aa:0d:09:cf:4e:d7:a5:93:9f:7b:9c:e6:d2:51:88:
1a:05:67:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKtpFe+i/3eQVEtUzMwQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDY5MjdiNWE3NWI3NjY5YjFmZTJhYzhmZGM3YjYxMzc3
YzkxMDEwHhcNMjUwNDEzMDgwMTIyWhcNMjUwNDE0MDgwMTIyWjAzMTEwLwYDVQQD
Eyg1OWQwY2ZmOWRlNmEwMTI0YThlYTBiZDM4ZGQ4M2U2NWNjYTZmNmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Io6iuqSOQHAPFal7aJrq1Mnkc/S
kLURaFvEmpEi//vIQ+MT9sMlm4c92+3fWJQ5/FujWDDp/GiY25nElOeTf2jInBZa
grV6wTORyv5EiRMXNYAPvXo7a+0/EfZFhWqCRwb0+wQXT/W7eK79GgYZXSigJgCk
uoBtJBtLY45tYGOlCJQH+fMva51XSl6FI8Y9yMFgWGeAOGduO5mhX9y++cvMPDHS
NtES1ei7DyZF8LySdqq+BWk6RHDFGYT4QctbsERNzCUppCYvW438BcbDwcthKKCg
Ov/K5XepeMGd2i2bVd2k29npicFzmKggNU4DPrP260aEIn1k3QD1qds/ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnQz/neagEkqOoL043YPmXMpva7MB8GA1UdIwQY
MBaAFBTWkntadbdmmx/irI/ce2E3fJEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYt
OGY1NGFiMTM0ZDgzLzEvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYtOGY1NGFiMTM0ZDgz
LzEvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+j+chdu
AcLbima+CkPzzam1lt10+VXFIZut4Mb+Jrw7NXjyYSr9A3CXvoK45b72Mi1UuoRK
UBbnOh5xoCxXhOawAPRCjkZuSh2pwidY8MjJF4CwaV7I/Zcb8RyOV/Bxx5guNRBD
aqcyK7NsrYrtQqvq8t7+Qm/o0g6ZrO7nF2y6xtA2Sv10r6ONnDbFdvbjF0Khse4I
yIXiSYf80ZC6rIfc1Glp8Q0aIir4qH4HO9L+xqbGCg91VWSdp7r337KsbyEDnvQG
v6pN0trZ3FT51xnoLOD9GBnNZk5BAsXcR2/9BxUDaM0gWJw7IZLkqg0Jz07XpZOf
e5zm0lGIGgVnXQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net