Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
File: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json)
Hash identifier: eYbA5wo3b5PKOkBH/IN+MPR0fpo8Rh60SG+wFK3nik8=
Subject key identifier: A7:21:0F:80:2B:D4:42:11:00:E2:1E:11:9B:8F:04:EA:D0:5A:38:AC
Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
Certificate issuer: /CN=21de5947d9bdf6b08156a939bd20d93492c71104
Certificate serial: 0194BC3BFD46064F32C8B756B4D8514D8294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
Manifest number: 0A04
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: 3PIAescbs9wH4UBVwTbHFGju/uiZlA2IqFdTgJmLAGk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fd:46:06:4f:32:c8:b7:56:b4:d8:51:4d:82:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=a7210f802bd4421100e21e119b8f04ead05a38ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:82:0a:52:c1:d7:dd:31:94:a7:3a:83:6d:
ec:30:b7:20:39:81:db:ad:f9:32:38:cd:1c:2f:f5:
15:96:f4:1a:9a:b1:84:1e:99:f5:b4:7b:36:23:34:
1b:6d:4c:36:e4:90:09:e3:fb:40:85:8c:6c:2c:ab:
fd:1e:1f:58:19:98:e5:a3:1f:bf:ce:c2:82:a1:73:
6f:21:e8:3d:31:12:ab:f6:39:cb:f4:57:8d:a7:17:
04:d4:3e:1c:59:b6:32:81:9a:9c:f9:6f:ed:58:23:
64:86:70:94:f7:7f:13:0f:47:bc:12:ea:38:60:1c:
c4:9d:8f:3d:31:a3:a3:9e:8e:ee:bb:35:1b:71:eb:
cc:f6:ba:4c:d4:82:0d:5b:ff:1e:7b:8f:b1:12:41:
2f:4e:b2:1b:98:c9:d6:cd:60:4a:43:13:61:9d:1a:
31:98:b3:25:31:f7:14:fd:68:7d:cd:d0:64:3a:e0:
f6:77:6b:b4:a9:b2:0d:b1:62:c8:24:30:17:f8:d9:
48:ee:f9:43:cd:fe:2d:6d:6b:69:03:b5:83:ea:21:
b5:f3:95:86:37:67:75:fa:b3:56:15:15:56:b2:d0:
08:d5:cf:26:ac:83:e3:37:89:01:af:34:a7:12:db:
4f:a4:46:1a:60:fc:61:ae:c4:7e:d4:cd:bf:cb:43:
21:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:21:0F:80:2B:D4:42:11:00:E2:1E:11:9B:8F:04:EA:D0:5A:38:AC
X509v3 Authority Key Identifier:
keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fc:ee:8b:80:83:77:76:66:3e:fe:b3:cf:62:85:05:4b:11:
52:54:3a:0f:f5:47:76:8e:57:86:e6:5a:55:01:53:3d:ae:22:
f9:66:b7:0e:1b:93:38:21:76:78:7e:92:36:7e:9c:20:b1:21:
05:41:d5:e7:9c:3b:7f:e7:be:bb:6c:7e:0e:25:be:d0:4c:df:
cc:73:3b:db:54:5b:e7:e2:2d:22:ce:c9:72:96:93:6f:5a:be:
c3:29:c0:0e:e7:aa:f8:76:e6:eb:33:8e:ba:23:72:3a:eb:35:
8a:2a:d0:42:68:27:0f:3e:74:fe:b4:f5:97:e8:89:63:dd:3e:
9a:7d:60:6c:20:c5:5d:51:51:ee:d0:10:0d:8e:1c:47:66:30:
2c:d4:b3:34:cf:14:05:27:70:58:79:33:eb:52:82:dc:5f:3b:
7c:82:02:66:08:f1:ce:07:c9:b8:9c:01:08:52:45:7e:6d:47:
92:bd:88:e1:33:fd:74:c0:ab:fa:82:1f:58:11:31:16:21:60:
e7:84:43:ed:55:7b:fb:76:67:c5:cb:db:ec:84:8d:56:26:ca:
98:d0:d1:14:7b:54:16:a7:ab:c8:53:57:84:4c:5a:1e:f3:41:
26:d0:58:3e:80:f0:bb:db:b8:ca:88:d6:0e:31:c6:31:11:72:
20:86:d2:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/1GBk8yyLdWtNhRTYKUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZGU1OTQ3ZDliZGY2YjA4MTU2YTkzOWJkMjBkOTM0OTJj
NzExMDQwHhcNMjUwMTMxMTIwMDM1WhcNMjUwMjAxMTIwMDM1WjAzMTEwLwYDVQQD
EyhhNzIxMGY4MDJiZDQ0MjExMDBlMjFlMTE5YjhmMDRlYWQwNWEzOGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+mCClLB190xlKc6g23sMLcgOYHb
rfkyOM0cL/UVlvQamrGEHpn1tHs2IzQbbUw25JAJ4/tAhYxsLKv9Hh9YGZjlox+/
zsKCoXNvIeg9MRKr9jnL9FeNpxcE1D4cWbYygZqc+W/tWCNkhnCU938TD0e8Euo4
YBzEnY89MaOjno7uuzUbcevM9rpM1IINW/8ee4+xEkEvTrIbmMnWzWBKQxNhnRox
mLMlMfcU/Wh9zdBkOuD2d2u0qbINsWLIJDAX+NlI7vlDzf4tbWtpA7WD6iG185WG
N2d1+rNWFRVWstAI1c8mrIPjN4kBrzSnEttPpEYaYPxhrsR+1M2/y0MhEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKchD4Ar1EIRAOIeEZuPBOrQWjisMB8GA1UdIwQY
MBaAFCHeWUfZvfawgVapOb0g2TSSxxEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWQ1WlI5bTk5ckNCVnFrNXZTRFpOSkxIRVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84N2U1NTgtMDkzZi00MTUwLTkyOGQt
NDgyMzMxMTcxNzhjLzEvSWQ1WlI5bTk5ckNCVnFrNXZTRFpOSkxIRVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi84N2U1NTgtMDkzZi00MTUwLTkyOGQtNDgyMzMxMTcxNzhj
LzEvSWQ1WlI5bTk5ckNCVnFrNXZTRFpOSkxIRVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevzui4CD
d3ZmPv6zz2KFBUsRUlQ6D/VHdo5XhuZaVQFTPa4i+Wa3DhuTOCF2eH6SNn6cILEh
BUHV55w7f+e+u2x+DiW+0EzfzHM721Rb5+ItIs7JcpaTb1q+wynADueq+Hbm6zOO
uiNyOus1iirQQmgnDz50/rT1l+iJY90+mn1gbCDFXVFR7tAQDY4cR2YwLNSzNM8U
BSdwWHkz61KC3F87fIICZgjxzgfJuJwBCFJFfm1Hkr2I4TP9dMCr+oIfWBExFiFg
54RD7VV7+3Znxcvb7ISNVibKmNDRFHtUFqeryFNXhExaHvNBJtBYPoDwu9u4yojW
DjHGMRFyIIbS7Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:35 2025 by rpki-client