Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a4b45-dac0-4c79-8e14-7f3eb7546102/1/FlNvx1alhkqqLB53u3ZCSNq-Jgg.mft
File: FlNvx1alhkqqLB53u3ZCSNq-Jgg.mft (raw, json)
Hash identifier: nejzKevfdRTBowY2C6cut7hvqvcx4Z+4keBEDPZI8l0=
Subject key identifier: 93:16:10:57:93:7A:D7:F2:44:DD:21:01:E9:DA:72:E6:A0:7A:6D:6A
Authority key identifier: 16:53:6F:C7:56:A5:86:4A:AA:2C:1E:77:BB:76:42:48:DA:BE:26:08
Certificate issuer: /CN=16536fc756a5864aaa2c1e77bb764248dabe2608
Certificate serial: 01962F07116F202302CA0AF4E0B409EB2902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlNvx1alhkqqLB53u3ZCSNq-Jgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a4b45-dac0-4c79-8e14-7f3eb7546102/1/FlNvx1alhkqqLB53u3ZCSNq-Jgg.mft
Manifest number: 053C
Signing time: Sun 13 Apr 2025 12:01:54 +0000
Manifest this update: Sun 13 Apr 2025 12:01:54 +0000
Manifest next update: Mon 14 Apr 2025 12:01:54 +0000
Files and hashes: 1: FlNvx1alhkqqLB53u3ZCSNq-Jgg.crl (hash: gBcz2YZtMEMZDnKnr1CFclwIhwq2xD8vSpTlf9O9es4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:07:11:6f:20:23:02:ca:0a:f4:e0:b4:09:eb:29:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16536fc756a5864aaa2c1e77bb764248dabe2608
Validity
Not Before: Apr 13 12:01:54 2025 GMT
Not After : Apr 14 12:01:54 2025 GMT
Subject: CN=93161057937ad7f244dd2101e9da72e6a07a6d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:f2:42:94:fe:06:37:a9:78:8c:41:e3:20:
3e:51:90:8c:a2:01:0f:95:07:3b:a0:bd:aa:ed:76:
0b:e6:ba:4c:9f:b6:e1:ee:e8:d8:3b:40:2e:db:a0:
d1:d6:61:e3:49:78:25:7e:6c:f4:f4:9b:33:91:f7:
fc:95:36:5b:d5:f5:0a:3c:7b:3c:24:99:c0:96:3d:
00:97:74:a8:e2:20:74:38:ce:d2:79:76:7e:9b:f6:
e9:f3:1e:a5:38:06:fd:4b:70:bb:e6:9c:b2:11:0a:
60:2c:a2:9c:e3:7f:de:fb:8b:1b:77:55:fa:4a:11:
b8:d0:c5:ee:40:3d:cc:f1:2e:20:c9:a3:28:08:2b:
9c:06:87:ab:3b:6f:01:2e:81:76:0f:6b:bc:6f:16:
79:9a:1b:75:61:80:e9:bd:3e:a3:19:92:f9:67:b7:
11:83:87:88:9b:d7:d0:7e:0a:ea:20:c1:de:ea:eb:
08:d8:e0:0f:ec:6d:f5:12:f3:6c:f7:ec:ca:e3:72:
69:36:b5:fe:b7:1c:d8:06:8c:4d:50:5c:cd:f2:ca:
b3:f7:b5:e8:fb:14:d6:8e:51:7e:9f:e6:9e:90:81:
17:02:1d:4b:40:9d:95:9d:9c:27:84:ea:83:cb:ca:
e0:e5:2a:5a:58:65:93:c6:8c:80:a6:92:0f:1b:47:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:16:10:57:93:7A:D7:F2:44:DD:21:01:E9:DA:72:E6:A0:7A:6D:6A
X509v3 Authority Key Identifier:
keyid:16:53:6F:C7:56:A5:86:4A:AA:2C:1E:77:BB:76:42:48:DA:BE:26:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlNvx1alhkqqLB53u3ZCSNq-Jgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a4b45-dac0-4c79-8e14-7f3eb7546102/1/FlNvx1alhkqqLB53u3ZCSNq-Jgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a4b45-dac0-4c79-8e14-7f3eb7546102/1/FlNvx1alhkqqLB53u3ZCSNq-Jgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b5:e4:a1:0f:73:c7:12:f8:f4:75:98:a9:99:9b:5a:90:35:
d0:88:c9:b9:9a:34:e6:b6:1c:8a:ce:57:bc:59:db:d5:13:8f:
12:ff:38:e1:9d:22:56:fc:a2:02:e4:e6:11:e3:d1:b1:c1:da:
b6:96:8e:bd:f2:5f:0b:ee:13:4e:b0:ba:9f:0b:5d:9d:e1:1b:
44:19:ed:fd:8d:ec:de:8e:ba:78:11:a3:48:5b:29:b9:f2:67:
82:88:94:e8:a6:6c:6c:e5:ae:81:9a:26:de:4d:de:7f:c4:2e:
19:f9:d7:75:67:88:f5:83:8d:c1:3d:eb:b1:76:e9:be:99:a1:
8a:7f:51:1c:83:c2:b3:ed:16:03:19:fd:b6:f6:06:a6:c9:95:
56:4c:9f:2e:c7:1d:86:c3:a2:f4:97:b0:fc:48:8f:f5:98:9b:
f0:39:de:16:52:98:af:39:b1:76:3f:71:22:6a:34:7b:0a:06:
e5:4b:21:f3:65:05:ec:5c:7e:76:05:f0:ba:ba:fd:35:f7:c3:
5b:32:28:e1:59:23:4d:ea:fd:3a:5a:36:63:4e:47:97:41:5e:
de:b5:96:10:08:a3:41:52:a2:28:16:08:f4:d6:a4:d1:bc:ce:
6d:b5:cc:61:d2:44:6d:43:28:11:54:11:5e:e6:30:e2:45:f4:
ac:bf:96:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBxFvICMCygr04LQJ6ykCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NTM2ZmM3NTZhNTg2NGFhYTJjMWU3N2JiNzY0MjQ4ZGFi
ZTI2MDgwHhcNMjUwNDEzMTIwMTU0WhcNMjUwNDE0MTIwMTU0WjAzMTEwLwYDVQQD
Eyg5MzE2MTA1NzkzN2FkN2YyNDRkZDIxMDFlOWRhNzJlNmEwN2E2ZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GPyQpT+BjepeIxB4yA+UZCMogEP
lQc7oL2q7XYL5rpMn7bh7ujYO0Au26DR1mHjSXglfmz09Jszkff8lTZb1fUKPHs8
JJnAlj0Al3So4iB0OM7SeXZ+m/bp8x6lOAb9S3C75pyyEQpgLKKc43/e+4sbd1X6
ShG40MXuQD3M8S4gyaMoCCucBoerO28BLoF2D2u8bxZ5mht1YYDpvT6jGZL5Z7cR
g4eIm9fQfgrqIMHe6usI2OAP7G31EvNs9+zK43JpNrX+txzYBoxNUFzN8sqz97Xo
+xTWjlF+n+aekIEXAh1LQJ2VnZwnhOqDy8rg5SpaWGWTxoyAppIPG0fUIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMWEFeTetfyRN0hAenacuagem1qMB8GA1UdIwQY
MBaAFBZTb8dWpYZKqiwed7t2QkjaviYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmxOdngxYWxoa3FxTEI1M3UzWkNTTnEtSmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85YTRiNDUtZGFjMC00Yzc5LThlMTQt
N2YzZWI3NTQ2MTAyLzEvRmxOdngxYWxoa3FxTEI1M3UzWkNTTnEtSmdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS85YTRiNDUtZGFjMC00Yzc5LThlMTQtN2YzZWI3NTQ2MTAy
LzEvRmxOdngxYWxoa3FxTEI1M3UzWkNTTnEtSmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLXkoQ9z
xxL49HWYqZmbWpA10IjJuZo05rYcis5XvFnb1ROPEv844Z0iVvyiAuTmEePRscHa
tpaOvfJfC+4TTrC6nwtdneEbRBnt/Y3s3o66eBGjSFspufJngoiU6KZsbOWugZom
3k3ef8QuGfnXdWeI9YONwT3rsXbpvpmhin9RHIPCs+0WAxn9tvYGpsmVVkyfLscd
hsOi9Jew/EiP9Zib8DneFlKYrzmxdj9xImo0ewoG5Ush82UF7Fx+dgXwurr9NffD
WzIo4VkjTer9Olo2Y05Hl0Fe3rWWEAijQVKiKBYI9Nak0bzObbXMYdJEbUMoEVQR
XuYw4kX0rL+W2Q==
-----END CERTIFICATE-----