Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
File: Rns5TPikBRwWfUaLx7iSpx3uTQM.mft (raw, json)
Hash identifier: SEQ1Clw7WWL9cUkgPL1WDIRDGd7H+CS69R+wirqxQqM=
Subject key identifier: 34:F3:66:9C:3E:80:62:9A:99:53:79:61:12:6B:DC:99:B2:AF:F6:DC
Authority key identifier: 46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
Certificate issuer: /CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Certificate serial: 0194BCE0B2E630E8BE6927264A8FD5A87BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
Manifest number: 0819
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: Rns5TPikBRwWfUaLx7iSpx3uTQM.crl (hash: 7XQHsbWnbmKYM+ldT9UEI9WSTBRjTzHeuEinHlpyZv0=)
2: dgAEK4wIhzdNcfF05upWmZfXZZk.roa (hash: U/vt5a1C9rZX//TwbwJI8SM4gcB/oWBETRm681WJLz4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b2:e6:30:e8:be:69:27:26:4a:8f:d5:a8:7b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=34f3669c3e80629a99537961126bdc99b2aff6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:b4:2b:2d:b0:24:c2:77:44:c7:60:94:b3:
74:e6:26:14:76:16:b5:2a:34:a7:f1:47:c0:92:a4:
03:9e:59:f5:89:fe:ba:5b:dc:15:72:5c:18:22:ec:
01:3e:3e:89:8a:c5:eb:8f:76:cf:b6:0e:74:38:54:
90:1f:a2:23:cc:52:d7:48:e2:59:db:04:bf:72:cf:
d9:e3:01:7c:a8:a5:22:c4:ab:f0:21:b9:bc:66:6f:
36:64:83:0a:96:d7:bc:d1:e7:80:8d:db:93:30:74:
00:dc:5f:0d:99:80:e1:7a:bb:d8:70:07:0b:ca:69:
34:76:53:34:4d:ed:4f:a0:52:79:ca:98:df:b1:2b:
91:1e:3d:80:df:cf:63:18:83:68:cf:23:b4:fb:b3:
84:9e:a3:16:71:b0:6a:be:e9:b1:67:e8:2b:57:ca:
37:a3:ec:7a:0a:ce:e7:df:1c:0d:7f:43:e2:1f:44:
62:2f:0a:e8:24:82:88:db:bb:e2:55:37:d1:c5:32:
7f:ad:93:42:cf:6d:a6:e7:6a:a0:22:b5:66:16:3a:
00:14:6c:94:c2:a7:4d:08:cf:c5:69:2a:55:c9:17:
17:5b:9a:b5:c1:32:ca:3f:4f:de:ee:41:5a:f7:04:
5d:0e:36:97:37:b7:e7:aa:7d:7e:f5:cf:86:a9:24:
b3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F3:66:9C:3E:80:62:9A:99:53:79:61:12:6B:DC:99:B2:AF:F6:DC
X509v3 Authority Key Identifier:
keyid:46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b6:cc:10:c3:73:78:93:92:20:84:d2:7e:40:f0:5e:aa:32:
f6:bb:33:14:42:8e:4f:b5:bf:f4:4e:67:4c:a7:d9:84:e7:f8:
8d:a1:f2:47:9a:76:1f:1d:90:bf:7d:88:8b:60:3e:f6:a3:06:
87:e2:69:67:cc:d1:ca:24:23:78:e7:a0:ad:63:06:32:c1:45:
f9:0d:97:10:b5:35:5d:7a:3b:28:ee:e8:df:3c:c5:24:d3:13:
12:a0:d8:b2:81:a2:c1:c9:35:d6:62:7e:a5:b4:a7:f8:73:60:
54:1b:56:80:7b:f6:49:f5:38:94:53:8e:05:6c:27:9f:8f:1a:
70:57:db:c3:ca:99:4b:5a:76:ef:a2:4b:20:ec:89:c0:f0:be:
0a:53:36:61:fa:1e:3b:0d:84:74:f4:c2:c1:42:b7:76:f0:92:
24:f6:92:4d:30:e7:09:c8:5f:f3:3c:c8:a7:20:eb:e5:2d:a9:
a3:03:21:af:29:9d:21:31:cf:b8:72:1a:ed:8f:c7:d6:26:1f:
f0:8d:82:7d:6f:39:ab:51:98:11:67:ad:f9:53:77:1d:71:1d:
ab:d1:c9:ac:72:ea:92:52:2d:dc:ab:95:f5:13:d0:91:48:56:
e3:f5:03:a1:9c:36:84:da:99:89:d6:62:7f:95:cc:62:ce:7b:
bb:62:1a:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84LLmMOi+aScmSo/VqHuoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2N2IzOTRjZjhhNDA1MWMxNjdkNDY4YmM3Yjg5MmE3MWRl
ZTRkMDMwHhcNMjUwMTMxMTUwMDI5WhcNMjUwMjAxMTUwMDI5WjAzMTEwLwYDVQQD
EygzNGYzNjY5YzNlODA2MjlhOTk1Mzc5NjExMjZiZGM5OWIyYWZmNmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8S0Ky2wJMJ3RMdglLN05iYUdha1
KjSn8UfAkqQDnln1if66W9wVclwYIuwBPj6JisXrj3bPtg50OFSQH6IjzFLXSOJZ
2wS/cs/Z4wF8qKUixKvwIbm8Zm82ZIMKlte80eeAjduTMHQA3F8NmYDhervYcAcL
ymk0dlM0Te1PoFJ5ypjfsSuRHj2A389jGINozyO0+7OEnqMWcbBqvumxZ+grV8o3
o+x6Cs7n3xwNf0PiH0RiLwroJIKI27viVTfRxTJ/rZNCz22m52qgIrVmFjoAFGyU
wqdNCM/FaSpVyRcXW5q1wTLKP0/e7kFa9wRdDjaXN7fnqn1+9c+GqSSzRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTzZpw+gGKamVN5YRJr3Jmyr/bcMB8GA1UdIwQY
MBaAFEZ7OUz4pAUcFn1Gi8e4kqcd7k0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNWM4MDUtZjYwYy00NDJjLWFjNWQt
MGYwMWI1NjA2NTdjLzEvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zNWM4MDUtZjYwYy00NDJjLWFjNWQtMGYwMWI1NjA2NTdj
LzEvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrbMEMNz
eJOSIITSfkDwXqoy9rszFEKOT7W/9E5nTKfZhOf4jaHyR5p2Hx2Qv32Ii2A+9qMG
h+JpZ8zRyiQjeOegrWMGMsFF+Q2XELU1XXo7KO7o3zzFJNMTEqDYsoGiwck11mJ+
pbSn+HNgVBtWgHv2SfU4lFOOBWwnn48acFfbw8qZS1p276JLIOyJwPC+ClM2Yfoe
Ow2EdPTCwUK3dvCSJPaSTTDnCchf8zzIpyDr5S2powMhrymdITHPuHIa7Y/H1iYf
8I2CfW85q1GYEWet+VN3HXEdq9HJrHLqklIt3KuV9RPQkUhW4/UDoZw2hNqZidZi
f5XMYs57u2IaUw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:03 2025 by rpki-client