Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6c2c7a-fc16-4911-83ff-13d9ba27e51f/1/hDGpmcvwQL00DSk12JlhtS8EpEU.mft
File: hDGpmcvwQL00DSk12JlhtS8EpEU.mft (raw, json)
Hash identifier: Hv6MUr4VJ45v140L5oNMTlrauVEYlph4cAxQJH9/x0g=
Subject key identifier: FD:6C:24:DE:DF:A9:0F:97:50:2F:83:78:E1:FF:C8:92:43:79:DF:08
Authority key identifier: 84:31:A9:99:CB:F0:40:BD:34:0D:29:35:D8:99:61:B5:2F:04:A4:45
Certificate issuer: /CN=8431a999cbf040bd340d2935d89961b52f04a445
Certificate serial: 0194BBCE5F2F5371E4BDDBE83347C7D7808D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hDGpmcvwQL00DSk12JlhtS8EpEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6c2c7a-fc16-4911-83ff-13d9ba27e51f/1/hDGpmcvwQL00DSk12JlhtS8EpEU.mft
Manifest number: 075C
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: hDGpmcvwQL00DSk12JlhtS8EpEU.crl (hash: 3kjLbMbUYZkS0qHKFyxb6NCzVdnnkOGHHbqYsHPDr1I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5f:2f:53:71:e4:bd:db:e8:33:47:c7:d7:80:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8431a999cbf040bd340d2935d89961b52f04a445
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=fd6c24dedfa90f97502f8378e1ffc8924379df08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:33:73:7a:d3:60:d0:0c:fb:f6:fb:99:fb:
89:80:c3:e8:85:e5:2a:3f:b4:13:64:9e:5f:d8:d1:
d9:cb:35:02:23:41:d5:e5:75:ac:64:fa:c8:c0:15:
b8:7e:9d:3b:bd:71:23:91:5b:ea:34:28:a7:7f:4c:
3c:62:62:a7:c2:b5:27:65:d6:53:b9:76:9c:c9:df:
2d:d7:c0:a3:b9:24:6b:f3:bc:cc:dc:c3:9a:42:56:
f7:4d:1c:1a:b4:87:50:07:9e:4b:36:be:d4:9b:a0:
85:4e:26:59:d2:97:36:07:a1:1e:e3:ed:2a:29:57:
28:e4:52:bf:e7:cf:7d:d1:aa:46:32:56:fa:eb:fa:
94:94:c0:bc:73:3a:d0:55:4c:f9:28:5e:ea:50:13:
35:c2:97:2e:c5:4b:96:80:f4:ec:55:ae:4e:32:f9:
b9:d6:01:79:db:a7:09:af:2b:5e:93:29:25:b4:bd:
b6:6f:8d:db:7a:05:48:c3:84:59:78:e1:80:93:77:
64:05:43:d4:96:02:20:91:25:53:eb:9e:c6:8d:aa:
60:be:ab:56:6e:fe:92:c8:7f:10:71:ee:45:a5:7c:
fb:02:a9:c8:de:24:45:81:80:80:04:04:00:60:73:
d2:3c:05:a5:dc:e0:c8:a3:0f:82:3c:21:08:12:26:
01:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6C:24:DE:DF:A9:0F:97:50:2F:83:78:E1:FF:C8:92:43:79:DF:08
X509v3 Authority Key Identifier:
keyid:84:31:A9:99:CB:F0:40:BD:34:0D:29:35:D8:99:61:B5:2F:04:A4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDGpmcvwQL00DSk12JlhtS8EpEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6c2c7a-fc16-4911-83ff-13d9ba27e51f/1/hDGpmcvwQL00DSk12JlhtS8EpEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6c2c7a-fc16-4911-83ff-13d9ba27e51f/1/hDGpmcvwQL00DSk12JlhtS8EpEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c6:6f:e6:2d:22:d0:bb:34:4a:35:3b:7d:fa:30:b1:22:f8:
33:bd:fc:e6:fd:24:82:16:0b:42:98:ef:4f:a1:18:4f:33:12:
32:80:9f:a2:e0:14:8d:a3:f7:18:86:1f:cb:09:05:95:82:be:
d5:86:b9:a2:f3:12:61:9a:e5:6e:35:e6:60:fb:65:f2:e3:a6:
4a:f2:b6:32:f3:a4:7c:00:1d:d0:02:cf:16:59:26:e5:f6:e0:
7b:df:20:a6:59:d2:c4:49:e4:35:4f:cf:a4:d4:b7:7e:d4:b5:
a3:18:da:c0:07:70:92:21:f2:60:72:fd:2a:4a:64:a5:2d:ff:
cb:ed:4e:40:fa:9c:25:af:c7:11:b6:8a:7f:1f:6e:b9:e2:ac:
b1:03:0d:32:eb:44:7f:d3:ad:63:4a:ea:f3:d5:67:51:1c:0a:
7f:ea:c8:75:72:2c:c9:79:9e:9c:5c:62:fe:14:96:92:75:74:
ad:4a:9c:8e:cd:19:dd:ff:82:d5:87:a1:65:ba:5a:00:1c:1e:
38:dd:53:c2:90:e1:89:6c:58:3f:bc:d5:cb:d0:48:c2:c9:f1:
a7:5b:0d:91:7f:bc:04:5e:6b:18:9d:79:e2:fa:2f:2a:56:5e:
88:d3:9c:a9:ad:10:6a:b1:aa:83:c9:84:b2:b0:58:93:93:5c:
43:32:81:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zl8vU3HkvdvoM0fH14CNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MzFhOTk5Y2JmMDQwYmQzNDBkMjkzNWQ4OTk2MWI1MmYw
NGE0NDUwHhcNMjUwMTMxMTAwMDUxWhcNMjUwMjAxMTAwMDUxWjAzMTEwLwYDVQQD
EyhmZDZjMjRkZWRmYTkwZjk3NTAyZjgzNzhlMWZmYzg5MjQzNzlkZjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZszc3rTYNAM+/b7mfuJgMPoheUq
P7QTZJ5f2NHZyzUCI0HV5XWsZPrIwBW4fp07vXEjkVvqNCinf0w8YmKnwrUnZdZT
uXacyd8t18CjuSRr87zM3MOaQlb3TRwatIdQB55LNr7Um6CFTiZZ0pc2B6Ee4+0q
KVco5FK/58990apGMlb66/qUlMC8czrQVUz5KF7qUBM1wpcuxUuWgPTsVa5OMvm5
1gF526cJrytekykltL22b43begVIw4RZeOGAk3dkBUPUlgIgkSVT657GjapgvqtW
bv6SyH8Qce5FpXz7AqnI3iRFgYCABAQAYHPSPAWl3ODIow+CPCEIEiYBUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1sJN7fqQ+XUC+DeOH/yJJDed8IMB8GA1UdIwQY
MBaAFIQxqZnL8EC9NA0pNdiZYbUvBKRFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaERHcG1jdndRTDAwRFNrMTJKbGh0UzhFcEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82YzJjN2EtZmMxNi00OTExLTgzZmYt
MTNkOWJhMjdlNTFmLzEvaERHcG1jdndRTDAwRFNrMTJKbGh0UzhFcEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS82YzJjN2EtZmMxNi00OTExLTgzZmYtMTNkOWJhMjdlNTFm
LzEvaERHcG1jdndRTDAwRFNrMTJKbGh0UzhFcEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMZv5i0i
0Ls0SjU7ffowsSL4M7385v0kghYLQpjvT6EYTzMSMoCfouAUjaP3GIYfywkFlYK+
1Ya5ovMSYZrlbjXmYPtl8uOmSvK2MvOkfAAd0ALPFlkm5fbge98gplnSxEnkNU/P
pNS3ftS1oxjawAdwkiHyYHL9KkpkpS3/y+1OQPqcJa/HEbaKfx9uueKssQMNMutE
f9OtY0rq89VnURwKf+rIdXIsyXmenFxi/hSWknV0rUqcjs0Z3f+C1YehZbpaABwe
ON1TwpDhiWxYP7zVy9BIwsnxp1sNkX+8BF5rGJ154vovKlZeiNOcqa0QarGqg8mE
srBYk5NcQzKB4w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:18 2025 by rpki-client