Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
File: if4_e4M8MGAut5hY5-r67VVPTFs.mft (raw, json)
Hash identifier: WzNBTZqYzUE3x+1/nzXzrGbcxJG++PHRYdq2Ch78fbc=
Subject key identifier: 3B:35:BD:9A:5C:F7:63:7B:75:DC:F4:62:87:CE:43:F9:2C:BD:75:ED
Authority key identifier: 89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B
Certificate issuer: /CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
Certificate serial: 0194BC3C59839AB63317B29C498C1C94D8E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
Manifest number: 0686
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: if4_e4M8MGAut5hY5-r67VVPTFs.crl (hash: P0gXbY/YVEqK5PnmiZeM9t0BYATjbi6iH7V65ikMtRQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:59:83:9a:b6:33:17:b2:9c:49:8c:1c:94:d8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=3b35bd9a5cf7637b75dcf46287ce43f92cbd75ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:c2:79:42:21:53:da:41:94:1f:f4:1b:17:
bf:18:c4:8f:95:d3:1b:ed:b1:b7:24:3b:31:48:13:
e0:32:89:89:0c:c4:b8:08:6c:ec:bb:af:31:5f:05:
04:b7:b7:13:c5:64:c5:a4:e8:b1:d4:65:15:86:8a:
47:24:e2:a5:37:1d:26:d4:81:36:30:86:d0:53:f5:
41:a7:f6:4a:3b:35:be:58:ef:45:bf:9b:ab:69:50:
97:6f:69:37:c4:0a:e6:ea:ab:f5:23:09:9e:1f:ce:
b4:83:0b:3a:4c:e4:3a:98:dd:29:c2:1b:14:4e:46:
6a:35:22:3d:49:6e:6a:6e:f9:07:5f:7b:56:30:35:
4f:75:e2:d3:ea:77:46:0d:44:71:0f:95:16:a8:73:
c1:be:29:e8:3d:f3:ef:4c:37:ee:e0:49:8e:f0:67:
7a:bb:01:f8:36:4d:c6:6a:5e:2e:25:b9:ff:8d:03:
af:7a:c8:13:10:67:15:20:97:2d:39:23:68:29:14:
c3:85:d4:01:92:f8:1a:5b:a3:0b:45:29:04:4c:67:
1d:6d:36:2e:5a:d8:e5:23:db:35:4f:ed:75:ca:83:
1b:91:e9:23:8b:99:8b:61:2c:14:b4:c2:3b:9d:39:
f6:83:9d:a0:44:06:02:63:ca:33:fb:c8:77:18:e1:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:35:BD:9A:5C:F7:63:7B:75:DC:F4:62:87:CE:43:F9:2C:BD:75:ED
X509v3 Authority Key Identifier:
keyid:89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:43:ad:a9:0a:0d:43:18:48:64:2e:b0:49:9a:d5:41:c1:31:
9b:a2:26:f4:05:8a:79:cb:09:45:26:f5:b0:62:7e:1b:96:b1:
2f:ca:46:08:44:1f:95:04:34:83:17:6a:a6:5f:f4:13:02:6c:
1e:f4:7c:f8:28:c6:4d:35:80:cf:23:6d:dc:78:89:97:47:97:
a9:75:6a:99:1e:5b:b7:de:d2:2e:b7:28:e5:e6:a0:6d:63:d6:
8b:92:8b:6c:75:62:e1:d8:8b:a4:f5:6c:3f:ca:3e:dd:e3:f7:
d3:bb:fc:ff:07:e5:2c:89:ae:d1:99:81:ca:19:16:75:db:2a:
70:78:27:20:89:2b:1a:a9:06:71:f5:3d:52:13:8a:6a:5c:bb:
ab:21:cf:55:d6:05:3c:a9:77:08:5d:19:af:0c:65:3f:d3:79:
ac:1e:f4:4b:45:df:71:c3:70:dc:f1:ea:bd:f8:fe:fc:bb:88:
94:9f:f9:4d:91:bc:89:b8:9e:4b:b5:d8:af:c4:53:cd:ae:df:
52:d1:2a:7f:14:a0:d2:b6:95:db:5c:4f:08:c8:f3:82:f8:a1:
33:e0:a3:a7:77:6e:3a:b0:82:96:5c:cb:f8:64:62:ca:e2:2c:
2a:2e:73:95:a6:2e:bd:78:9e:81:95:c8:66:92:59:de:11:13:
92:2d:0f:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFmDmrYzF7KcSYwclNjiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZmUzZjdiODMzYzMwNjAyZWI3OTg1OGU3ZWFmYWVkNTU0
ZjRjNWIwHhcNMjUwMTMxMTIwMDU5WhcNMjUwMjAxMTIwMDU5WjAzMTEwLwYDVQQD
EygzYjM1YmQ5YTVjZjc2MzdiNzVkY2Y0NjI4N2NlNDNmOTJjYmQ3NWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCrCeUIhU9pBlB/0Gxe/GMSPldMb
7bG3JDsxSBPgMomJDMS4CGzsu68xXwUEt7cTxWTFpOix1GUVhopHJOKlNx0m1IE2
MIbQU/VBp/ZKOzW+WO9Fv5uraVCXb2k3xArm6qv1IwmeH860gws6TOQ6mN0pwhsU
TkZqNSI9SW5qbvkHX3tWMDVPdeLT6ndGDURxD5UWqHPBvinoPfPvTDfu4EmO8Gd6
uwH4Nk3Gal4uJbn/jQOvesgTEGcVIJctOSNoKRTDhdQBkvgaW6MLRSkETGcdbTYu
WtjlI9s1T+11yoMbkekji5mLYSwUtMI7nTn2g52gRAYCY8oz+8h3GOGMUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs1vZpc92N7ddz0YofOQ/ksvXXtMB8GA1UdIwQY
MBaAFIn+P3uDPDBgLreYWOfq+u1VT0xbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWY0X2U0TThNR0F1dDVoWTUtcjY3VlZQVEZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9iNjg5ZmQtYjEzZS00MzMyLTllYjct
NjVjYjYzYWZjZTVlLzEvaWY0X2U0TThNR0F1dDVoWTUtcjY3VlZQVEZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9iNjg5ZmQtYjEzZS00MzMyLTllYjctNjVjYjYzYWZjZTVl
LzEvaWY0X2U0TThNR0F1dDVoWTUtcjY3VlZQVEZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEOtqQoN
QxhIZC6wSZrVQcExm6Im9AWKecsJRSb1sGJ+G5axL8pGCEQflQQ0gxdqpl/0EwJs
HvR8+CjGTTWAzyNt3HiJl0eXqXVqmR5bt97SLrco5eagbWPWi5KLbHVi4diLpPVs
P8o+3eP307v8/wflLImu0ZmByhkWddsqcHgnIIkrGqkGcfU9UhOKaly7qyHPVdYF
PKl3CF0ZrwxlP9N5rB70S0XfccNw3PHqvfj+/LuIlJ/5TZG8ibieS7XYr8RTza7f
UtEqfxSg0raV21xPCMjzgvihM+Cjp3duOrCCllzL+GRiyuIsKi5zlaYuvXiegZXI
ZpJZ3hETki0P7Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:05:59 2025 by rpki-client