Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier: LkzoaQQqJzzzTJOaNf3kFJnoJrs3SQKdvssiI18ZmiU=
Subject key identifier: DF:42:2E:0C:F1:98:53:DF:FE:37:EA:C3:0A:23:42:7C:E0:B3:BA:2C
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial: 0194BBCED6508BF551CE25634CC8CE9DFA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number: 0C45
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: Sv8K8sVWtE0+4r/MUKP0x35+8xAzyXnGRycqpvEyobU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d6:50:8b:f5:51:ce:25:63:4c:c8:ce:9d:fa:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=df422e0cf19853dffe37eac30a23427ce0b3ba2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d3:2b:99:a1:ae:7b:ce:bc:77:d2:c3:a0:d9:
b8:e7:58:27:bf:40:cd:67:b1:eb:72:1f:06:d3:e9:
d7:6c:b1:d9:ad:9e:42:73:90:a5:e3:ea:21:ee:22:
1c:2e:8d:dc:85:72:eb:ed:01:42:38:35:ff:4f:a7:
f8:fd:0a:5c:fa:04:7d:07:1c:55:c8:20:22:df:28:
fe:90:08:39:58:d0:82:a0:a9:29:d2:5d:c4:60:59:
7f:9a:63:c0:fb:0a:ea:51:ef:2a:2e:67:e9:9b:80:
ac:cd:56:49:99:5f:8e:13:84:18:fd:bf:7b:c4:78:
56:cf:0a:63:76:b2:85:94:b2:cc:17:06:0b:16:85:
0d:07:61:4b:93:63:0d:0e:93:22:8a:67:8d:da:cd:
8b:84:73:81:43:17:02:39:7c:54:61:ad:41:f0:a5:
b6:cf:8b:89:e3:c6:25:ee:41:2f:2e:1f:c3:54:ee:
6e:2f:ed:6b:0d:af:2b:12:43:f3:4d:f3:56:3a:3a:
2d:c0:22:cb:74:c8:6e:96:64:73:3d:2e:41:69:8a:
58:c1:96:9b:d3:29:00:b9:f4:eb:ae:d6:f3:7a:07:
67:75:82:5f:11:6d:8b:33:5b:99:88:2f:cb:1b:7f:
e3:a4:b6:9a:cc:67:ce:c1:fe:8f:f3:9d:b7:cc:2b:
2c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:42:2E:0C:F1:98:53:DF:FE:37:EA:C3:0A:23:42:7C:E0:B3:BA:2C
X509v3 Authority Key Identifier:
keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ff:e4:5d:99:6c:ab:d6:bb:d9:08:de:02:3f:bd:58:0d:2c:
c7:7a:4b:ef:42:ff:cf:fd:eb:d6:50:bf:8f:35:8a:f5:a2:f5:
4b:26:81:51:0c:66:d6:75:1f:a2:2c:94:85:5c:7b:96:6c:0c:
45:3f:40:12:3a:3e:ec:8f:b8:ae:3a:ae:59:e7:c5:12:6c:0e:
86:05:ef:64:8c:78:e5:a9:06:79:14:af:21:5b:4c:c7:46:55:
fe:e6:6d:42:d4:cb:f3:bb:e5:b8:bb:fe:0a:3f:55:e9:d7:25:
cb:90:8e:4d:74:c7:3e:d1:2f:02:ec:2f:d1:20:74:8b:c0:e4:
28:6f:bf:56:80:3b:6c:5f:bb:cb:d8:ef:fb:51:40:83:8e:7f:
99:a9:e9:a1:c5:e9:25:43:9b:6f:09:69:d1:0b:55:2d:10:b1:
03:80:e1:6e:af:45:88:5c:51:1e:b5:23:c4:2b:69:3f:a3:4c:
a9:10:8e:3b:8a:2d:62:11:fd:25:a4:e4:ca:16:65:cf:24:5f:
69:93:d5:c5:ce:e5:66:e8:1f:d4:6c:1a:43:ab:88:ab:8c:71:
09:51:c2:93:97:d6:59:39:c3:fe:c3:ca:17:9e:cb:fb:ce:86:
df:9e:e3:52:5c:c2:52:17:3e:a3:c9:0a:10:e5:2d:8e:a2:a0:
25:b6:d9:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztZQi/VRziVjTMjOnfonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZjhhYjVmNzRkYzkwZTlmZmJhOGQ0Mjk4OGVkNWE3NzQ4
YzFkMDUwHhcNMjUwMTMxMTAwMTIyWhcNMjUwMjAxMTAwMTIyWjAzMTEwLwYDVQQD
EyhkZjQyMmUwY2YxOTg1M2RmZmUzN2VhYzMwYTIzNDI3Y2UwYjNiYTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNMrmaGue868d9LDoNm451gnv0DN
Z7Hrch8G0+nXbLHZrZ5Cc5Cl4+oh7iIcLo3chXLr7QFCODX/T6f4/Qpc+gR9BxxV
yCAi3yj+kAg5WNCCoKkp0l3EYFl/mmPA+wrqUe8qLmfpm4CszVZJmV+OE4QY/b97
xHhWzwpjdrKFlLLMFwYLFoUNB2FLk2MNDpMiimeN2s2LhHOBQxcCOXxUYa1B8KW2
z4uJ48Yl7kEvLh/DVO5uL+1rDa8rEkPzTfNWOjotwCLLdMhulmRzPS5BaYpYwZab
0ykAufTrrtbzegdndYJfEW2LM1uZiC/LG3/jpLaazGfOwf6P8523zCssRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9CLgzxmFPf/jfqwwojQnzgs7osMB8GA1UdIwQY
MBaAFN74q1903JDp/7qNQpiO1ad0jB0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82YTcyNWEtNDJlNC00MjcwLWI1YWYt
NDUzZmMxYmNiY2Q1LzEvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82YTcyNWEtNDJlNC00MjcwLWI1YWYtNDUzZmMxYmNiY2Q1
LzEvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ//kXZls
q9a72QjeAj+9WA0sx3pL70L/z/3r1lC/jzWK9aL1SyaBUQxm1nUfoiyUhVx7lmwM
RT9AEjo+7I+4rjquWefFEmwOhgXvZIx45akGeRSvIVtMx0ZV/uZtQtTL87vluLv+
Cj9V6dcly5COTXTHPtEvAuwv0SB0i8DkKG+/VoA7bF+7y9jv+1FAg45/manpocXp
JUObbwlp0QtVLRCxA4Dhbq9FiFxRHrUjxCtpP6NMqRCOO4otYhH9JaTkyhZlzyRf
aZPVxc7lZugf1GwaQ6uIq4xxCVHCk5fWWTnD/sPKF57L+86G357jUlzCUhc+o8kK
EOUtjqKgJbbZ7Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:10 2025 by rpki-client