Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/_u-XLlu2tt8FUhC0sD8HdImK7LM.mft
File: _u-XLlu2tt8FUhC0sD8HdImK7LM.mft (raw, json)
Hash identifier: dhQnX9nwYhgJNuSSE9+PfkTG/gJHg8Z6cCzdjCD6XqY=
Subject key identifier: B7:C4:9D:39:6B:CC:9C:E2:BA:0F:90:C4:45:7E:00:82:86:C1:B6:94
Authority key identifier: FE:EF:97:2E:5B:B6:B6:DF:05:52:10:B4:B0:3F:07:74:89:8A:EC:B3
Certificate issuer: /CN=feef972e5bb6b6df055210b4b03f0774898aecb3
Certificate serial: 0194BC3BBBBEA7ECDA3E739CD50806D80DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u-XLlu2tt8FUhC0sD8HdImK7LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/_u-XLlu2tt8FUhC0sD8HdImK7LM.mft
Manifest number: 0324
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: _u-XLlu2tt8FUhC0sD8HdImK7LM.crl (hash: 5epa5mOE4J7nHn0QK4klM/DhXfrSzw1aAMbAXQsZqfE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bb:be:a7:ec:da:3e:73:9c:d5:08:06:d8:0d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feef972e5bb6b6df055210b4b03f0774898aecb3
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=b7c49d396bcc9ce2ba0f90c4457e008286c1b694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:84:b5:e8:98:d6:84:0e:1b:bc:0b:6a:c9:
60:09:eb:75:6e:d6:18:8b:dd:ae:3c:f4:62:19:32:
55:d1:e0:02:ee:1e:32:08:41:3e:49:b8:06:3a:08:
b9:01:53:42:a9:5a:80:33:77:cb:4c:4d:14:e0:cb:
c7:7d:52:d8:a4:f4:9c:66:fa:c9:12:54:bc:4d:2b:
50:39:b4:dd:98:d8:81:82:a7:9f:6f:40:61:6a:a5:
29:27:52:8f:e7:97:26:be:bc:3b:f4:bd:65:5e:4a:
bc:3f:ac:5f:7a:3b:d7:6e:3a:5f:ca:b7:0c:cd:25:
b0:7b:5c:bd:32:0e:80:f1:87:35:5c:5f:dc:67:ce:
38:86:f2:ca:f8:75:8a:14:d7:64:d1:17:75:2f:8e:
4c:d1:79:71:70:f6:cc:ab:a9:d6:92:d2:2c:12:47:
ad:b7:f3:5e:21:8b:8c:0e:ce:74:1a:a8:60:9b:29:
9f:fc:ac:ec:9b:dc:45:3b:da:c3:65:87:f9:b3:20:
58:ac:8c:9d:2b:c6:88:cf:8f:db:5f:3e:b1:e6:69:
63:4f:29:10:6b:89:69:f2:d7:74:2f:7a:b0:3a:a5:
c5:13:55:dd:c3:ca:0e:e8:c1:5d:2b:d5:45:a0:e5:
d8:10:45:ca:82:8d:32:b1:6f:28:6a:58:d1:f7:98:
db:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C4:9D:39:6B:CC:9C:E2:BA:0F:90:C4:45:7E:00:82:86:C1:B6:94
X509v3 Authority Key Identifier:
keyid:FE:EF:97:2E:5B:B6:B6:DF:05:52:10:B4:B0:3F:07:74:89:8A:EC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u-XLlu2tt8FUhC0sD8HdImK7LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/_u-XLlu2tt8FUhC0sD8HdImK7LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/_u-XLlu2tt8FUhC0sD8HdImK7LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:9c:28:d7:7c:4a:d2:e7:89:c4:9a:41:31:fc:dc:5a:ed:67:
63:ec:b5:f4:be:94:79:23:7d:66:ea:2a:fb:a0:e7:95:ff:38:
92:86:8e:8f:a2:97:37:c7:a0:fa:99:aa:f2:6e:63:86:35:55:
1c:03:6d:b7:75:a3:58:65:d3:ec:17:51:f7:4b:17:6c:11:bc:
3b:af:db:14:37:43:5e:6b:ae:e9:64:e8:81:56:41:12:80:75:
f9:12:4f:32:93:0e:fb:aa:8f:77:0f:b9:b4:9d:8b:37:b8:eb:
31:ca:ba:33:80:e7:ab:64:91:ee:94:b5:10:cc:a7:90:12:66:
70:26:93:d6:f1:6b:82:04:46:c0:68:c1:e7:79:73:df:59:7f:
72:82:ed:4a:90:8a:0b:88:4f:47:a0:1b:a0:2e:99:63:ad:80:
a3:13:9c:bd:e0:87:ea:b2:91:39:2a:99:ac:93:fa:68:e2:da:
6d:b8:3d:31:96:a2:16:4a:3b:ae:1f:d5:86:5a:b3:f4:ba:dd:
10:0d:8a:67:bf:31:fe:18:36:74:88:3e:2e:8c:ac:32:e1:df:
b4:c4:4a:e9:2b:bb:3f:38:cc:a2:6c:cf:8a:cd:ec:64:a7:6e:
55:63:6d:70:3e:2f:83:d7:d2:9b:60:88:32:6d:3e:23:f7:ec:
7c:01:2c:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O7u+p+zaPnOc1QgG2A3IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZWY5NzJlNWJiNmI2ZGYwNTUyMTBiNGIwM2YwNzc0ODk4
YWVjYjMwHhcNMjUwMTMxMTIwMDE4WhcNMjUwMjAxMTIwMDE4WjAzMTEwLwYDVQQD
EyhiN2M0OWQzOTZiY2M5Y2UyYmEwZjkwYzQ0NTdlMDA4Mjg2YzFiNjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz16EteiY1oQOG7wLaslgCet1btYY
i92uPPRiGTJV0eAC7h4yCEE+SbgGOgi5AVNCqVqAM3fLTE0U4MvHfVLYpPScZvrJ
ElS8TStQObTdmNiBgqefb0BhaqUpJ1KP55cmvrw79L1lXkq8P6xfejvXbjpfyrcM
zSWwe1y9Mg6A8Yc1XF/cZ844hvLK+HWKFNdk0Rd1L45M0XlxcPbMq6nWktIsEket
t/NeIYuMDs50Gqhgmymf/Kzsm9xFO9rDZYf5syBYrIydK8aIz4/bXz6x5mljTykQ
a4lp8td0L3qwOqXFE1Xdw8oO6MFdK9VFoOXYEEXKgo0ysW8oaljR95jbiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfEnTlrzJziug+QxEV+AIKGwbaUMB8GA1UdIwQY
MBaAFP7vly5btrbfBVIQtLA/B3SJiuyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3UtWExsdTJ0dDhGVWhDMHNEOEhkSW1LN0xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMWM3MGItNTcxNy00MWRhLWJjZmQt
NjBhOTJlYWQzYWY2LzEvX3UtWExsdTJ0dDhGVWhDMHNEOEhkSW1LN0xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMWM3MGItNTcxNy00MWRhLWJjZmQtNjBhOTJlYWQzYWY2
LzEvX3UtWExsdTJ0dDhGVWhDMHNEOEhkSW1LN0xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwpwo13xK
0ueJxJpBMfzcWu1nY+y19L6UeSN9Zuoq+6Dnlf84koaOj6KXN8eg+pmq8m5jhjVV
HANtt3WjWGXT7BdR90sXbBG8O6/bFDdDXmuu6WTogVZBEoB1+RJPMpMO+6qPdw+5
tJ2LN7jrMcq6M4Dnq2SR7pS1EMynkBJmcCaT1vFrggRGwGjB53lz31l/coLtSpCK
C4hPR6AboC6ZY62AoxOcveCH6rKROSqZrJP6aOLabbg9MZaiFko7rh/Vhlqz9Lrd
EA2KZ78x/hg2dIg+LoysMuHftMRK6Su7PzjMomzPis3sZKduVWNtcD4vg9fSm2CI
Mm0+I/fsfAEszQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:16 2025 by rpki-client