Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
File: X0cesf72NSCKxw5v4sVrAEd_C4w.mft (raw, json)
Hash identifier: JX2UwcBvkVcudNqN6ut2du5DhFYvdLVv7WmVmzNN5Go=
Subject key identifier: C9:5F:54:D8:51:8C:48:9B:81:74:81:3F:2B:23:B9:EC:B5:1A:A3:1F
Authority key identifier: 5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
Certificate issuer: /CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Certificate serial: 0194BC3C0D4230429A634EA2D70ED5EBFBC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
Manifest number: 1364
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: X0cesf72NSCKxw5v4sVrAEd_C4w.crl (hash: orifjwW1Syr69yCcp/UGFPVMEIRlU4wv1dDp3e1SRfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0d:42:30:42:9a:63:4e:a2:d7:0e:d5:eb:fb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=c95f54d8518c489b8174813f2b23b9ecb51aa31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:01:e7:a5:1f:97:55:5b:1e:8d:e0:81:72:a2:
4d:ac:d7:a6:15:bb:82:ba:76:e7:ff:ab:09:0f:ab:
63:67:aa:72:c3:68:46:3e:a2:20:2d:c3:c4:9c:a5:
07:68:7e:1e:c7:89:ae:0d:29:0f:31:90:d9:f0:f5:
2c:dd:20:9a:30:e8:5c:3d:75:3b:1e:a4:b4:fa:dc:
82:fb:e2:5b:6c:fe:86:e5:86:dd:2b:74:9e:61:2e:
ad:55:4f:fa:92:ba:02:4a:ee:cb:2d:25:e3:fc:a8:
52:30:29:38:78:93:3d:a5:70:0f:84:ab:f3:ee:d0:
e1:ad:7e:ee:2e:b2:00:a5:d6:8d:41:e7:12:cf:b1:
1f:2a:33:03:63:95:59:63:d2:9b:f1:f1:bc:ac:51:
cd:23:ba:d1:f8:c3:24:d2:e0:a5:18:e9:b5:8d:e9:
4a:0a:b8:df:0a:8b:af:80:64:09:e0:65:c5:a7:84:
dd:b5:2e:e4:2d:1c:de:a9:a2:c3:a0:53:04:61:da:
0e:55:f1:ee:ab:5a:67:ae:8c:e1:df:7d:2f:02:76:
8b:bb:42:a6:22:16:73:a0:92:46:e6:4d:43:c4:d2:
4f:d1:e5:48:e1:62:6b:12:9e:b5:05:b0:c0:7b:67:
29:7d:2e:3b:4b:f2:dc:6e:32:fa:ec:d4:f0:ad:22:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5F:54:D8:51:8C:48:9B:81:74:81:3F:2B:23:B9:EC:B5:1A:A3:1F
X509v3 Authority Key Identifier:
keyid:5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9c:88:56:b4:ae:fe:30:73:fe:12:5d:7b:5f:5e:f5:33:8e:
60:0a:62:49:c6:02:ad:c4:74:b3:eb:d0:1f:7d:ac:13:c7:fb:
b0:02:49:57:4e:40:b2:d3:59:30:1c:d0:f6:44:19:b4:7e:a7:
10:e9:e5:11:40:58:d7:55:40:b3:de:97:fe:2a:05:9b:3d:d8:
54:0d:bf:20:0c:71:2a:90:fb:ac:19:ef:8d:18:c1:50:81:6b:
6f:1e:73:a5:44:2e:5a:22:7d:32:7d:91:d3:d6:e9:0d:0e:a5:
6a:1f:de:56:89:b6:b1:97:61:39:50:77:9f:fc:76:cf:39:fb:
1d:cd:75:12:ca:0c:b2:b5:cc:59:43:e5:45:98:58:aa:9b:38:
9e:61:f6:89:4c:12:e5:b1:39:fe:0d:71:e4:c2:ab:db:50:ef:
be:78:a6:32:2d:f9:b6:78:01:f0:55:d6:8c:cc:dc:9d:83:d4:
28:14:9d:50:48:7a:88:09:b6:bd:7c:0c:de:ba:db:6e:81:1c:
69:9d:7b:49:32:c8:3a:a1:fc:b0:0e:35:0f:41:b0:10:9f:2f:
be:51:4b:d3:37:90:00:de:80:f0:57:3e:61:4c:02:8e:bd:c2:
53:a6:9c:8f:0c:92:ae:a4:2d:1b:75:de:24:65:5c:b0:66:3c:
a5:e7:14:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PA1CMEKaY06i1w7V6/vBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNDcxZWIxZmVmNjM1MjA4YWM3MGU2ZmUyYzU2YjAwNDc3
ZjBiOGMwHhcNMjUwMTMxMTIwMDM5WhcNMjUwMjAxMTIwMDM5WjAzMTEwLwYDVQQD
EyhjOTVmNTRkODUxOGM0ODliODE3NDgxM2YyYjIzYjllY2I1MWFhMzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gHnpR+XVVsejeCBcqJNrNemFbuC
unbn/6sJD6tjZ6pyw2hGPqIgLcPEnKUHaH4ex4muDSkPMZDZ8PUs3SCaMOhcPXU7
HqS0+tyC++JbbP6G5YbdK3SeYS6tVU/6kroCSu7LLSXj/KhSMCk4eJM9pXAPhKvz
7tDhrX7uLrIApdaNQecSz7EfKjMDY5VZY9Kb8fG8rFHNI7rR+MMk0uClGOm1jelK
CrjfCouvgGQJ4GXFp4TdtS7kLRzeqaLDoFMEYdoOVfHuq1pnrozh330vAnaLu0Km
IhZzoJJG5k1DxNJP0eVI4WJrEp61BbDAe2cpfS47S/LcbjL67NTwrSLXnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlfVNhRjEibgXSBPysjuey1GqMfMB8GA1UdIwQY
MBaAFF9HHrH+9jUgiscOb+LFawBHfwuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDBjZXNmNzJOU0NLeHc1djRzVnJBRWRfQzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hYmIyMGYtOGQ2Ni00ZTJiLWIxZGYt
OTZjN2NiODMzM2M4LzEvWDBjZXNmNzJOU0NLeHc1djRzVnJBRWRfQzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9hYmIyMGYtOGQ2Ni00ZTJiLWIxZGYtOTZjN2NiODMzM2M4
LzEvWDBjZXNmNzJOU0NLeHc1djRzVnJBRWRfQzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZyIVrSu
/jBz/hJde19e9TOOYApiScYCrcR0s+vQH32sE8f7sAJJV05AstNZMBzQ9kQZtH6n
EOnlEUBY11VAs96X/ioFmz3YVA2/IAxxKpD7rBnvjRjBUIFrbx5zpUQuWiJ9Mn2R
09bpDQ6lah/eVom2sZdhOVB3n/x2zzn7Hc11EsoMsrXMWUPlRZhYqps4nmH2iUwS
5bE5/g1x5MKr21DvvnimMi35tngB8FXWjMzcnYPUKBSdUEh6iAm2vXwM3rrbboEc
aZ17STLIOqH8sA41D0GwEJ8vvlFL0zeQAN6A8Fc+YUwCjr3CU6acjwySrqQtG3Xe
JGVcsGY8pecUAg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:57 2025 by rpki-client