Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft
File: urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft (raw, json)
Hash identifier: GnGkIQ4kfuJp0byRsdc7L0Afsigk2rMt9zVbyvF+8CA=
Subject key identifier: 2D:CB:ED:C8:21:7E:8B:A5:87:D3:4A:19:64:18:92:48:76:0E:5F:B3
Authority key identifier: BA:B9:BB:C2:4E:9A:C3:D9:EC:7E:10:BF:95:74:7D:AB:5C:45:DD:2B
Certificate issuer: /CN=bab9bbc24e9ac3d9ec7e10bf95747dab5c45dd2b
Certificate serial: 0194BBCEB2EB23DD30B4D7F25128B0F88E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urm7wk6aw9nsfhC_lXR9q1xF3Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft
Manifest number: 0947
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: urm7wk6aw9nsfhC_lXR9q1xF3Ss.crl (hash: GlQpxc4vD5fprcA8OwN6z6CD50t9hdXFD7LEQKL2zoA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b2:eb:23:dd:30:b4:d7:f2:51:28:b0:f8:8e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab9bbc24e9ac3d9ec7e10bf95747dab5c45dd2b
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=2dcbedc8217e8ba587d34a1964189248760e5fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:25:0f:bf:09:ec:9c:71:80:5b:68:7d:6c:
64:51:08:7a:4c:d7:89:a5:86:a4:70:51:3e:93:e7:
3c:13:2d:fa:72:6c:9b:ce:fe:8a:8a:18:49:62:68:
7a:d6:c7:f0:d9:91:65:6b:c3:44:20:00:af:3a:ff:
22:6a:35:37:d5:d9:aa:1c:ad:db:ed:b1:d1:25:1f:
b2:f1:65:81:95:57:c5:33:ed:a4:e1:88:9b:97:8c:
da:79:05:d8:0f:f6:c5:d1:db:04:9c:d3:86:3c:32:
6a:9f:5a:bf:e8:54:61:17:9d:c9:78:44:7e:d4:87:
e0:af:f2:f8:cb:b4:3c:58:cc:ae:10:ab:5e:6f:17:
a5:dd:e5:83:ca:e7:1d:98:b2:ca:e3:29:42:71:30:
08:02:28:92:36:f3:22:96:27:14:9e:56:17:2b:ab:
38:5c:13:7a:36:b7:8f:18:86:4b:94:bb:b9:a9:c0:
f1:b2:6b:d7:04:91:d3:45:89:b3:85:52:1d:42:0a:
4c:8c:5e:5e:30:76:99:08:fd:3b:1c:ea:dc:2d:70:
ba:50:79:e2:f5:9d:08:ee:3e:b4:f0:7c:0e:55:98:
85:cc:c8:5f:f2:81:f0:ba:56:e7:b3:1b:e6:ed:b2:
bd:7e:dc:73:3c:a5:1b:1d:67:78:88:2f:db:22:f0:
e5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CB:ED:C8:21:7E:8B:A5:87:D3:4A:19:64:18:92:48:76:0E:5F:B3
X509v3 Authority Key Identifier:
keyid:BA:B9:BB:C2:4E:9A:C3:D9:EC:7E:10:BF:95:74:7D:AB:5C:45:DD:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urm7wk6aw9nsfhC_lXR9q1xF3Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:25:0a:38:76:e7:d4:17:16:ba:8d:d6:ae:1b:bc:89:cb:b7:
bd:10:70:87:e0:b0:3b:c9:c6:90:57:94:c6:e6:2d:2e:5c:e8:
00:fe:43:a1:a5:f5:28:4a:f4:8b:85:8c:a8:4e:e3:ad:07:d4:
51:60:bd:e8:80:f3:8c:f6:d3:c0:75:22:51:36:41:12:83:cc:
72:a3:31:55:75:62:f7:8a:c1:9b:d8:8b:11:4c:46:79:2b:cd:
e6:20:c0:55:30:02:9c:5c:be:8c:76:42:6b:fd:d0:bc:21:ca:
71:6e:39:d8:ac:eb:99:4d:20:ac:09:20:64:26:8a:15:62:12:
af:a8:b8:26:ed:2f:f2:d9:3a:93:cd:23:1d:74:45:a5:04:ab:
08:f9:41:8b:0d:46:bb:a9:23:71:06:a4:a0:ec:57:13:3d:c6:
f0:32:82:a2:19:ee:07:ca:bd:24:0b:82:b0:50:81:d0:c4:e1:
ee:12:f0:c7:7a:8c:85:b5:b1:66:c5:1d:41:29:86:8e:97:58:
69:f5:7c:cb:84:8e:fd:a8:dc:77:4d:0f:c5:91:13:40:37:07:
54:70:f3:36:28:47:fc:a9:c2:02:a0:25:6c:e9:7c:0a:20:62:
7d:83:31:8e:34:5d:68:88:f2:5d:39:6c:5d:0b:91:3a:32:13:
b0:59:cb:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zrLrI90wtNfyUSiw+I6EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjliYmMyNGU5YWMzZDllYzdlMTBiZjk1NzQ3ZGFiNWM0
NWRkMmIwHhcNMjUwMTMxMTAwMTEzWhcNMjUwMjAxMTAwMTEzWjAzMTEwLwYDVQQD
EygyZGNiZWRjODIxN2U4YmE1ODdkMzRhMTk2NDE4OTI0ODc2MGU1ZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmUlD78J7JxxgFtofWxkUQh6TNeJ
pYakcFE+k+c8Ey36cmybzv6KihhJYmh61sfw2ZFla8NEIACvOv8iajU31dmqHK3b
7bHRJR+y8WWBlVfFM+2k4Yibl4zaeQXYD/bF0dsEnNOGPDJqn1q/6FRhF53JeER+
1Ifgr/L4y7Q8WMyuEKtebxel3eWDyucdmLLK4ylCcTAIAiiSNvMilicUnlYXK6s4
XBN6NrePGIZLlLu5qcDxsmvXBJHTRYmzhVIdQgpMjF5eMHaZCP07HOrcLXC6UHni
9Z0I7j608HwOVZiFzMhf8oHwulbnsxvm7bK9ftxzPKUbHWd4iC/bIvDlAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3L7cghfoulh9NKGWQYkkh2Dl+zMB8GA1UdIwQY
MBaAFLq5u8JOmsPZ7H4Qv5V0fatcRd0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJtN3drNmF3OW5zZmhDX2xYUjlxMXhGM1NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yODI5ZmEtYzBhMi00YTc4LTkyNjIt
MmViYzY0NDhmNjAyLzEvdXJtN3drNmF3OW5zZmhDX2xYUjlxMXhGM1NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8yODI5ZmEtYzBhMi00YTc4LTkyNjItMmViYzY0NDhmNjAy
LzEvdXJtN3drNmF3OW5zZmhDX2xYUjlxMXhGM1NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyUKOHbn
1BcWuo3Wrhu8icu3vRBwh+CwO8nGkFeUxuYtLlzoAP5DoaX1KEr0i4WMqE7jrQfU
UWC96IDzjPbTwHUiUTZBEoPMcqMxVXVi94rBm9iLEUxGeSvN5iDAVTACnFy+jHZC
a/3QvCHKcW452KzrmU0grAkgZCaKFWISr6i4Ju0v8tk6k80jHXRFpQSrCPlBiw1G
u6kjcQakoOxXEz3G8DKCohnuB8q9JAuCsFCB0MTh7hLwx3qMhbWxZsUdQSmGjpdY
afV8y4SO/ajcd00PxZETQDcHVHDzNihH/KnCAqAlbOl8CiBifYMxjjRdaIjyXTls
XQuROjITsFnL5A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:21:02 2025 by rpki-client