Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
File: Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft (raw, json)
Hash identifier: JHKGd4gAlAN7uQqg73dxzMpp4TXf4/nP360YvgxrVNQ=
Subject key identifier: 29:F7:87:5B:31:F6:8E:6E:BA:D2:45:8F:8C:9A:31:72:47:44:61:93
Authority key identifier: 46:EE:A0:5D:DB:D3:89:DE:CA:F1:8D:B8:0E:3E:11:BF:9C:28:5A:88
Certificate issuer: /CN=46eea05ddbd389decaf18db80e3e11bf9c285a88
Certificate serial: 0194BD17E197B40E314BC68F02E376D8210C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
Manifest number: 10D2
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl (hash: Bro9ljEn4ZQg9nlU4D6o14OZe0U6fsnjM+bPvWqw0ZA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e1:97:b4:0e:31:4b:c6:8f:02:e3:76:d8:21:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eea05ddbd389decaf18db80e3e11bf9c285a88
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=29f7875b31f68e6ebad2458f8c9a317247446193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:52:51:21:73:75:63:53:af:cf:3b:9f:5c:
b7:af:6b:4c:4b:7b:6a:64:fd:1c:9b:cb:84:85:f9:
b9:8f:3e:05:e4:b2:fb:15:e7:b4:55:b9:99:ec:94:
e7:5f:a5:26:bf:eb:78:07:a1:c4:49:eb:d2:ea:57:
61:11:b3:d3:d3:ff:23:7e:af:da:01:be:a1:1e:42:
d2:68:7f:07:cb:a4:4e:0e:d3:e7:69:2d:3f:02:d5:
12:d7:61:c9:8a:48:7d:dc:94:42:2c:8d:28:68:5d:
c4:25:cd:a5:93:4f:3a:3b:af:9c:1c:01:38:64:d0:
73:1b:76:d3:c3:1d:74:ac:0f:0d:29:5f:05:73:6c:
c8:71:d4:ca:82:b0:1d:5a:fc:19:f8:dd:43:48:aa:
e3:0d:15:ef:4f:90:dc:50:51:9e:de:66:b0:92:2f:
c2:3e:fb:2c:44:c4:ba:bf:93:de:65:2f:03:f2:42:
4d:c7:69:ac:46:6f:d6:54:0c:14:ec:89:c0:30:91:
8d:14:cc:2a:a0:d7:13:f7:29:55:a5:a0:82:58:85:
5d:29:40:81:9e:a7:e8:7c:35:36:6b:68:8f:c4:96:
19:4d:1c:19:30:2d:03:bd:e8:d0:2e:61:37:58:a8:
30:91:32:75:5e:68:99:65:d6:f1:88:f0:1c:2c:64:
00:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F7:87:5B:31:F6:8E:6E:BA:D2:45:8F:8C:9A:31:72:47:44:61:93
X509v3 Authority Key Identifier:
keyid:46:EE:A0:5D:DB:D3:89:DE:CA:F1:8D:B8:0E:3E:11:BF:9C:28:5A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f6:2d:f5:81:3c:ce:10:4d:49:7b:b6:f8:ae:cd:13:ae:7f:
74:4b:29:75:2f:ea:88:83:2e:24:46:11:71:a0:d9:cd:ec:ab:
2a:18:5e:9d:15:bf:89:bc:91:b8:71:33:22:37:5d:7d:5f:e0:
a3:9b:73:64:ca:bb:36:8e:6a:55:0f:d9:c4:df:5f:be:ee:98:
3a:ef:8f:df:0d:47:12:fa:94:5c:79:a5:2a:b9:8b:e8:55:ed:
fe:dd:5b:84:70:fe:86:64:ff:eb:57:38:bb:ed:1d:d9:1e:f9:
ee:5b:1d:ad:e8:db:a6:6b:98:1a:ae:d4:42:7a:7d:4c:52:70:
d2:73:e4:7d:88:88:86:57:d2:01:c2:90:c8:70:16:8a:a5:84:
2d:28:1d:33:f9:d2:61:50:8b:f3:ab:c4:7e:65:d3:f2:cf:83:
7f:df:03:b4:1a:77:82:7a:7c:95:30:fa:6e:c0:d0:44:57:cd:
da:15:f1:18:d8:47:fe:3d:73:a7:2c:a9:33:3f:ad:44:ca:f8:
67:da:bd:c5:e2:e9:90:8d:12:83:e5:c6:5b:06:ef:ed:e8:c8:
9b:a0:09:cd:de:bb:c2:bb:24:a4:ac:18:ef:bd:84:4d:b9:04:
41:af:5d:9e:08:33:28:35:0b:9b:5a:98:43:09:79:7c:81:d0:
94:39:2a:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+GXtA4xS8aPAuN22CEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZWVhMDVkZGJkMzg5ZGVjYWYxOGRiODBlM2UxMWJmOWMy
ODVhODgwHhcNMjUwMTMxMTYwMDQ2WhcNMjUwMjAxMTYwMDQ2WjAzMTEwLwYDVQQD
EygyOWY3ODc1YjMxZjY4ZTZlYmFkMjQ1OGY4YzlhMzE3MjQ3NDQ2MTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcBSUSFzdWNTr887n1y3r2tMS3tq
ZP0cm8uEhfm5jz4F5LL7Fee0VbmZ7JTnX6Umv+t4B6HESevS6ldhEbPT0/8jfq/a
Ab6hHkLSaH8Hy6RODtPnaS0/AtUS12HJikh93JRCLI0oaF3EJc2lk086O6+cHAE4
ZNBzG3bTwx10rA8NKV8Fc2zIcdTKgrAdWvwZ+N1DSKrjDRXvT5DcUFGe3mawki/C
PvssRMS6v5PeZS8D8kJNx2msRm/WVAwU7InAMJGNFMwqoNcT9ylVpaCCWIVdKUCB
nqfofDU2a2iPxJYZTRwZMC0DvejQLmE3WKgwkTJ1XmiZZdbxiPAcLGQAKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCn3h1sx9o5uutJFj4yaMXJHRGGTMB8GA1UdIwQY
MBaAFEbuoF3b04neyvGNuA4+Eb+cKFqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnU2Z1hkdlRpZDdLOFkyNERqNFJ2NXdvV29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iOTExNTAtZWY2Ni00NTBmLTg1NDQt
OTJlMWU5ZGFjYTJmLzEvUnU2Z1hkdlRpZDdLOFkyNERqNFJ2NXdvV29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iOTExNTAtZWY2Ni00NTBmLTg1NDQtOTJlMWU5ZGFjYTJm
LzEvUnU2Z1hkdlRpZDdLOFkyNERqNFJ2NXdvV29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/Yt9YE8
zhBNSXu2+K7NE65/dEspdS/qiIMuJEYRcaDZzeyrKhhenRW/ibyRuHEzIjddfV/g
o5tzZMq7No5qVQ/ZxN9fvu6YOu+P3w1HEvqUXHmlKrmL6FXt/t1bhHD+hmT/61c4
u+0d2R757lsdrejbpmuYGq7UQnp9TFJw0nPkfYiIhlfSAcKQyHAWiqWELSgdM/nS
YVCL86vEfmXT8s+Df98DtBp3gnp8lTD6bsDQRFfN2hXxGNhH/j1zpyypMz+tRMr4
Z9q9xeLpkI0Sg+XGWwbv7ejIm6AJzd67wrskpKwY772ETbkEQa9dnggzKDULm1qY
Qwl5fIHQlDkqIQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:59 2025 by rpki-client