Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
File: RmSgU4XAYmgVApGX6xUGSF09bRw.mft (raw, json)
Hash identifier: hhygfVF3WAKknGoVMuReozkBFD7mhjDagSXE5MvDCd0=
Subject key identifier: 2B:11:91:32:06:B1:0F:3B:F8:44:EB:68:46:AD:7F:C0:67:A2:40:0F
Authority key identifier: 46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
Certificate issuer: /CN=4664a05385c0626815029197eb1506485d3d6d1c
Certificate serial: 0194BD17CECF7027FF38CA764A58172C64E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
Manifest number: 0580
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: RmSgU4XAYmgVApGX6xUGSF09bRw.crl (hash: O3RO0y3O2M/YyhxZkLrhtiAdAwPUqPQvuPZA+q2UVFo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ce:cf:70:27:ff:38:ca:76:4a:58:17:2c:64:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4664a05385c0626815029197eb1506485d3d6d1c
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=2b11913206b10f3bf844eb6846ad7fc067a2400f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:d3:22:54:3c:4e:2c:ee:50:e4:06:eb:a7:
02:07:88:0b:36:be:93:92:3b:aa:62:c6:8f:46:02:
22:c7:6d:fd:48:8e:df:67:53:25:65:b2:19:5a:5e:
e6:51:51:49:f9:f9:96:41:c7:8f:1c:e7:e4:25:23:
7d:2b:5e:f9:64:7f:81:2f:22:3c:3f:19:34:90:da:
28:cb:08:eb:00:3f:d7:2a:21:2d:14:52:55:c5:84:
f8:cb:9f:df:1f:57:6c:75:b4:91:cb:20:8a:e1:f9:
83:79:3d:5a:9f:2b:40:22:2e:6e:e7:62:cf:c7:20:
24:cb:06:33:76:e9:09:4e:07:d3:07:fe:ee:6a:ba:
39:b6:a9:a0:47:a3:74:d4:22:ee:77:1b:37:3e:c8:
f0:2c:27:9d:09:bc:69:4f:96:14:65:24:3b:d1:07:
eb:2e:82:ce:cb:1f:8b:ad:e2:ff:92:83:f0:4e:a0:
42:28:09:65:23:54:41:98:d6:25:54:ea:9e:fb:bd:
37:78:7b:01:d8:4b:de:2d:96:83:ec:ac:27:0e:c4:
46:1e:c4:a0:40:71:19:33:ee:cc:3c:8e:ec:08:d5:
bf:3b:cf:73:e6:95:ed:31:ea:05:da:b6:fd:22:17:
7d:d4:69:53:f9:bd:e0:3c:1b:27:86:0a:1b:c3:29:
79:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:11:91:32:06:B1:0F:3B:F8:44:EB:68:46:AD:7F:C0:67:A2:40:0F
X509v3 Authority Key Identifier:
keyid:46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ce:ad:66:fe:0f:ef:30:f3:6b:70:b1:ba:fa:1d:67:0e:bf:
7a:a3:c8:a3:18:03:f6:97:3e:01:66:dc:99:e0:f0:75:3f:f3:
55:a3:ad:79:7d:3f:d6:f9:49:7b:23:08:52:e5:02:a5:cb:f0:
54:5d:d0:05:eb:66:4b:dc:ef:49:9a:35:51:df:60:bd:5b:8e:
52:2a:32:7e:5c:db:f0:65:c8:32:f1:6e:d5:cb:f9:38:6c:e7:
9b:b4:bd:e1:5c:b4:bc:59:63:cc:ef:f9:e1:89:88:0b:b5:e7:
86:c7:b9:31:b1:72:1d:ae:5c:bd:60:fc:92:d6:bd:21:b4:08:
49:db:98:55:a5:f9:59:b3:13:85:60:97:4b:b0:4b:34:c9:92:
75:a1:ea:72:84:a9:4b:aa:c9:d4:df:3b:20:76:d4:11:64:cf:
8f:3f:0f:31:50:d3:e9:1f:09:1e:ae:c9:e5:b9:46:dd:cd:b9:
57:c9:b9:d2:eb:6a:46:99:f9:10:93:cd:a2:84:36:3d:cf:b6:
83:e8:f1:1c:26:65:2a:9f:c6:f8:70:5a:7d:72:94:69:0d:56:
fb:71:29:ba:73:98:cb:40:d0:af:22:38:c8:25:e8:86:3e:4b:
61:0d:f3:c6:4c:ee:94:b8:45:b7:d1:cc:57:74:14:e3:bb:dd:
de:f3:91:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F87PcCf/OMp2SlgXLGTlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjRhMDUzODVjMDYyNjgxNTAyOTE5N2ViMTUwNjQ4NWQz
ZDZkMWMwHhcNMjUwMTMxMTYwMDQxWhcNMjUwMjAxMTYwMDQxWjAzMTEwLwYDVQQD
EygyYjExOTEzMjA2YjEwZjNiZjg0NGViNjg0NmFkN2ZjMDY3YTI0MDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZnTIlQ8TizuUOQG66cCB4gLNr6T
kjuqYsaPRgIix239SI7fZ1MlZbIZWl7mUVFJ+fmWQcePHOfkJSN9K175ZH+BLyI8
Pxk0kNooywjrAD/XKiEtFFJVxYT4y5/fH1dsdbSRyyCK4fmDeT1anytAIi5u52LP
xyAkywYzdukJTgfTB/7uaro5tqmgR6N01CLudxs3PsjwLCedCbxpT5YUZSQ70Qfr
LoLOyx+LreL/koPwTqBCKAllI1RBmNYlVOqe+703eHsB2EveLZaD7KwnDsRGHsSg
QHEZM+7MPI7sCNW/O89z5pXtMeoF2rb9Ihd91GlT+b3gPBsnhgobwyl5dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsRkTIGsQ87+ETraEatf8BnokAPMB8GA1UdIwQY
MBaAFEZkoFOFwGJoFQKRl+sVBkhdPW0cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1TZ1U0WEFZbWdWQXBHWDZ4VUdTRjA5YlJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iZDc2NDYtYWRkOS00ODU5LTlkZTkt
OWM4NDg1NDgzZDU5LzEvUm1TZ1U0WEFZbWdWQXBHWDZ4VUdTRjA5YlJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9iZDc2NDYtYWRkOS00ODU5LTlkZTktOWM4NDg1NDgzZDU5
LzEvUm1TZ1U0WEFZbWdWQXBHWDZ4VUdTRjA5YlJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH86tZv4P
7zDza3CxuvodZw6/eqPIoxgD9pc+AWbcmeDwdT/zVaOteX0/1vlJeyMIUuUCpcvw
VF3QBetmS9zvSZo1Ud9gvVuOUioyflzb8GXIMvFu1cv5OGznm7S94Vy0vFljzO/5
4YmIC7Xnhse5MbFyHa5cvWD8kta9IbQISduYVaX5WbMThWCXS7BLNMmSdaHqcoSp
S6rJ1N87IHbUEWTPjz8PMVDT6R8JHq7J5blG3c25V8m50utqRpn5EJPNooQ2Pc+2
g+jxHCZlKp/G+HBafXKUaQ1W+3EpunOYy0DQryI4yCXohj5LYQ3zxkzulLhFt9HM
V3QU47vd3vORSw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:40:44 2025 by rpki-client