Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
File: FLcYAN3cSX9g-e23gzyUlzq33Bw.mft (raw, json)
Hash identifier: dt7S8KQQP9Ym5xHAvVX310gzrprp3iBgH3hY6Rtmfcw=
Subject key identifier: BE:8E:7C:8C:6C:E1:83:C9:76:B1:4E:BD:27:F3:E9:A3:3C:49:08:0B
Authority key identifier: 14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C
Certificate issuer: /CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
Certificate serial: 01962ECFA83A1BEA96D9E7273829A617ECBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
Manifest number: 13D6
Signing time: Sun 13 Apr 2025 11:01:22 +0000
Manifest this update: Sun 13 Apr 2025 11:01:22 +0000
Manifest next update: Mon 14 Apr 2025 11:01:22 +0000
Files and hashes: 1: FLcYAN3cSX9g-e23gzyUlzq33Bw.crl (hash: oVGsCg/7i41MoL4G6b4cmIDHNQiPUVyAM6ESb01Lopo=)
2: jh-TOxpxIUBWeRHqyE_TsQ3xZPw.roa (hash: h4140lmsN13+jNtLubDuYn8kTL6T4/sAQ4MD0yMdaVw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:a8:3a:1b:ea:96:d9:e7:27:38:29:a6:17:ec:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
Validity
Not Before: Apr 13 11:01:22 2025 GMT
Not After : Apr 14 11:01:22 2025 GMT
Subject: CN=be8e7c8c6ce183c976b14ebd27f3e9a33c49080b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:01:35:e9:8b:5c:50:11:e9:2a:fe:1e:a0:
aa:e7:67:0a:5e:6c:03:5b:7c:c5:f1:49:15:a1:d1:
94:76:40:fd:c2:40:86:f5:46:65:e4:35:50:78:28:
f8:57:e2:f1:29:c3:25:b7:d1:18:9e:72:84:33:fc:
5f:c6:94:95:e4:9e:35:09:61:3a:3e:6b:be:c6:fc:
50:e6:f6:cf:3a:b7:31:ee:e1:54:d9:3c:75:a6:a3:
ad:03:33:c0:6b:09:1b:35:cd:d5:9b:f3:4b:6c:0c:
ec:90:c0:cc:78:1b:f4:5f:fc:6a:9f:b2:e0:2c:c2:
51:a5:9f:83:49:ea:98:cc:2c:8a:fa:df:e4:5d:49:
40:d3:07:39:31:2a:45:fc:39:be:84:c7:12:7f:df:
a5:ba:1e:8e:55:fa:f4:14:c2:44:14:9f:ff:98:84:
4c:45:52:75:07:67:e8:2e:76:69:d9:bd:1a:fc:c0:
4f:95:3c:9d:53:96:bf:d6:0a:a6:2b:f7:47:22:18:
8d:d0:64:02:31:d7:94:3d:4c:62:3e:d6:33:c7:82:
ee:69:64:f6:34:24:2b:cb:b7:6d:ed:7d:f3:20:72:
06:86:3b:a9:d6:53:36:e4:ad:0f:d0:77:15:04:5b:
f8:33:e5:e1:96:2d:b5:a6:ce:bb:ce:b1:42:c3:50:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8E:7C:8C:6C:E1:83:C9:76:B1:4E:BD:27:F3:E9:A3:3C:49:08:0B
X509v3 Authority Key Identifier:
keyid:14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e7:e7:18:b5:aa:8b:69:a6:03:4e:1e:08:10:aa:7c:24:9b:
b1:5c:f2:9d:b7:c0:8d:47:9d:31:65:8e:b0:f8:48:6e:42:1c:
7b:34:0e:44:eb:0c:04:fe:e4:50:92:87:ba:43:a3:d0:99:7a:
f2:29:7b:a6:6f:c8:c1:69:e7:62:67:f5:9c:83:bf:6f:55:30:
82:1a:de:0d:d8:40:22:46:55:a6:71:28:33:80:fb:df:e7:57:
08:9c:60:92:5d:ba:8a:33:53:d0:ca:a1:bd:b0:53:da:a2:ca:
55:a5:aa:88:15:1a:46:db:21:4e:c8:3a:e7:72:3d:ed:0f:67:
3e:3c:8a:fd:29:6f:23:37:29:01:0c:92:e3:4c:90:cd:2f:23:
3e:23:34:95:aa:bd:59:02:db:e7:8c:4a:fb:01:f0:21:63:34:
64:98:02:a5:db:74:04:ea:bb:ee:f8:f5:9d:19:89:61:39:09:
3f:11:90:60:13:5e:b1:1e:06:72:1e:54:b7:b1:18:69:1c:b2:
0b:9f:b7:79:43:17:5c:d5:83:be:7e:00:ff:8b:aa:52:e9:d0:
c4:e8:e7:75:cb:eb:f3:d8:12:0e:94:12:2a:de:a7:53:63:dc:
38:5a:cf:21:8d:35:36:50:45:74:77:d7:1c:f9:17:c0:d0:28:
52:a5:7c:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz6g6G+qW2ecnOCmmF+y+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YjcxODAwZGRkYzQ5N2Y2MGY5ZWRiNzgzM2M5NDk3M2Fi
N2RjMWMwHhcNMjUwNDEzMTEwMTIyWhcNMjUwNDE0MTEwMTIyWjAzMTEwLwYDVQQD
EyhiZThlN2M4YzZjZTE4M2M5NzZiMTRlYmQyN2YzZTlhMzNjNDkwODBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXYBNemLXFAR6Sr+HqCq52cKXmwD
W3zF8UkVodGUdkD9wkCG9UZl5DVQeCj4V+LxKcMlt9EYnnKEM/xfxpSV5J41CWE6
Pmu+xvxQ5vbPOrcx7uFU2Tx1pqOtAzPAawkbNc3Vm/NLbAzskMDMeBv0X/xqn7Lg
LMJRpZ+DSeqYzCyK+t/kXUlA0wc5MSpF/Dm+hMcSf9+luh6OVfr0FMJEFJ//mIRM
RVJ1B2foLnZp2b0a/MBPlTydU5a/1gqmK/dHIhiN0GQCMdeUPUxiPtYzx4LuaWT2
NCQry7dt7X3zIHIGhjup1lM25K0P0HcVBFv4M+Xhli21ps67zrFCw1BpKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6OfIxs4YPJdrFOvSfz6aM8SQgLMB8GA1UdIwQY
MBaAFBS3GADd3El/YPntt4M8lJc6t9wcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkxjWUFOM2NTWDlnLWUyM2d6eVVsenEzM0J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80MTVkNGItZjdhNi00OWQ2LWE3YWQt
ZGRmMGI4YjA5NjE2LzEvRkxjWUFOM2NTWDlnLWUyM2d6eVVsenEzM0J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80MTVkNGItZjdhNi00OWQ2LWE3YWQtZGRmMGI4YjA5NjE2
LzEvRkxjWUFOM2NTWDlnLWUyM2d6eVVsenEzM0J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOfnGLWq
i2mmA04eCBCqfCSbsVzynbfAjUedMWWOsPhIbkIcezQOROsMBP7kUJKHukOj0Jl6
8il7pm/IwWnnYmf1nIO/b1UwghreDdhAIkZVpnEoM4D73+dXCJxgkl26ijNT0Mqh
vbBT2qLKVaWqiBUaRtshTsg653I97Q9nPjyK/SlvIzcpAQyS40yQzS8jPiM0laq9
WQLb54xK+wHwIWM0ZJgCpdt0BOq77vj1nRmJYTkJPxGQYBNesR4Gch5Ut7EYaRyy
C5+3eUMXXNWDvn4A/4uqUunQxOjndcvr89gSDpQSKt6nU2PcOFrPIY01NlBFdHfX
HPkXwNAoUqV89Q==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net