Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
File: fkL5qpHFODs-cnVy67GVWRqHYM4.mft (raw, json)
Hash identifier: JfssseNt2nS6az/KegraQ651N6WiB27FZg/GszWr794=
Subject key identifier: 76:59:25:7A:E4:A5:E5:6E:37:E5:49:64:DF:E6:1A:10:36:1E:76:D3
Authority key identifier: 7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
Certificate issuer: /CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Certificate serial: 0194BBCE0E38AE69298E96C880D0D4DD2DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
Manifest number: 04C1
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: fkL5qpHFODs-cnVy67GVWRqHYM4.crl (hash: q0DT93SUEJI+4zVjlGmMQv12s+ah66XdyosNsjpQYgQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0e:38:ae:69:29:8e:96:c8:80:d0:d4:dd:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=7659257ae4a5e56e37e54964dfe61a10361e76d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:92:34:e4:57:6f:c3:53:4e:18:2a:e6:22:
ba:14:0a:f3:06:65:79:79:d8:9a:60:18:30:f3:aa:
4a:86:30:3d:9f:bd:f3:40:f8:27:7f:8f:99:f0:4f:
80:ca:2f:f1:62:f6:0b:7a:b6:d1:01:6b:98:f0:ad:
64:70:db:97:4d:77:c7:18:36:74:bd:bc:2b:e4:3f:
f0:76:c0:49:79:d4:cb:09:4e:42:5b:c9:dc:50:b2:
ed:ec:db:2a:1b:c5:e4:de:1c:cc:e2:57:73:d7:f4:
56:78:45:5b:d0:91:87:2a:80:87:98:e1:09:0d:cf:
99:1b:bd:f2:5d:16:13:c9:21:0a:1a:d6:ba:48:08:
b9:85:86:ba:d0:3e:7d:12:d3:33:0c:0f:a2:63:c2:
b8:26:11:7a:86:a2:a4:f6:13:8c:05:28:53:1e:b0:
6b:23:ab:14:3f:ca:d3:e0:f3:cc:c7:74:65:e6:e7:
81:f2:5c:54:31:0b:a4:3f:69:51:7a:f1:df:d1:e8:
ee:08:d2:1f:6c:9c:0c:08:57:75:92:81:62:9b:5f:
9a:7a:c7:7b:a2:22:eb:0e:d2:af:23:d7:b4:2f:a0:
90:ca:c3:89:8c:0b:d7:18:ba:ab:dd:17:bb:c0:44:
e0:fe:30:a0:f6:89:01:c2:e8:53:02:25:09:c2:05:
3f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:59:25:7A:E4:A5:E5:6E:37:E5:49:64:DF:E6:1A:10:36:1E:76:D3
X509v3 Authority Key Identifier:
keyid:7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b8:af:36:7c:7c:2f:04:73:7b:fc:c1:87:22:b6:24:32:00:
d9:dd:6b:65:8a:96:13:87:ac:b9:63:ce:87:4a:7f:dc:61:c3:
90:fd:57:b3:a5:99:d8:d8:3d:e1:08:26:cc:45:92:3d:49:54:
63:b2:2e:3b:6f:fc:cc:7b:34:9c:ec:d5:a8:ad:e2:9b:3a:6e:
52:5a:18:b6:3e:f5:cb:45:0a:7e:4a:ef:03:e5:c6:4d:41:13:
9c:b2:0d:2e:0a:7f:a3:3f:c6:ad:75:60:cd:23:e1:d4:06:a9:
fa:e8:01:b0:35:6f:61:dc:7d:5a:58:99:e9:f1:35:51:f5:84:
36:67:cb:6d:1b:16:57:86:01:fe:58:ae:38:30:f9:b5:59:88:
f2:67:49:b2:2f:16:67:44:ff:cf:32:e6:a7:d5:f4:cf:45:9c:
f6:f8:33:5b:6a:00:92:f4:d7:e8:c4:38:f8:ed:cf:0b:31:d2:
bc:35:93:a8:f3:df:c1:51:fa:bf:f4:87:4e:97:c0:4b:27:5e:
98:84:a7:15:40:dc:81:2d:c3:7e:41:db:94:cb:5c:f5:2c:2b:
2a:2c:88:de:a4:64:11:45:e3:7e:2f:db:9b:83:9b:7c:b4:32:
4d:73:d6:a8:5f:8d:d8:9a:5a:59:30:15:80:1d:eb:34:8b:d9:
18:90:c3:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zg44rmkpjpbIgNDU3S3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNDJmOWFhOTFjNTM4M2IzZTcyNzU3MmViYjE5NTU5MWE4
NzYwY2UwHhcNMjUwMTMxMTAwMDMwWhcNMjUwMjAxMTAwMDMwWjAzMTEwLwYDVQQD
Eyg3NjU5MjU3YWU0YTVlNTZlMzdlNTQ5NjRkZmU2MWExMDM2MWU3NmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy06SNORXb8NTThgq5iK6FArzBmV5
ediaYBgw86pKhjA9n73zQPgnf4+Z8E+Ayi/xYvYLerbRAWuY8K1kcNuXTXfHGDZ0
vbwr5D/wdsBJedTLCU5CW8ncULLt7NsqG8Xk3hzM4ldz1/RWeEVb0JGHKoCHmOEJ
Dc+ZG73yXRYTySEKGta6SAi5hYa60D59EtMzDA+iY8K4JhF6hqKk9hOMBShTHrBr
I6sUP8rT4PPMx3Rl5ueB8lxUMQukP2lRevHf0ejuCNIfbJwMCFd1koFim1+aesd7
oiLrDtKvI9e0L6CQysOJjAvXGLqr3Re7wETg/jCg9okBwuhTAiUJwgU/OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZZJXrkpeVuN+VJZN/mGhA2HnbTMB8GA1UdIwQY
MBaAFH5C+aqRxTg7PnJ1cuuxlVkah2DOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmtMNXFwSEZPRHMtY25WeTY3R1ZXUnFIWU00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC84MWQ4ZGQtNGNkMy00Mzc4LWIwNjct
N2NkNDcyODY0YmY4LzEvZmtMNXFwSEZPRHMtY25WeTY3R1ZXUnFIWU00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC84MWQ4ZGQtNGNkMy00Mzc4LWIwNjctN2NkNDcyODY0YmY4
LzEvZmtMNXFwSEZPRHMtY25WeTY3R1ZXUnFIWU00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLivNnx8
LwRze/zBhyK2JDIA2d1rZYqWE4esuWPOh0p/3GHDkP1Xs6WZ2Ng94QgmzEWSPUlU
Y7IuO2/8zHs0nOzVqK3imzpuUloYtj71y0UKfkrvA+XGTUETnLINLgp/oz/GrXVg
zSPh1Aap+ugBsDVvYdx9WliZ6fE1UfWENmfLbRsWV4YB/liuODD5tVmI8mdJsi8W
Z0T/zzLmp9X0z0Wc9vgzW2oAkvTX6MQ4+O3PCzHSvDWTqPPfwVH6v/SHTpfASyde
mISnFUDcgS3DfkHblMtc9SwrKiyI3qRkEUXjfi/bm4ObfLQyTXPWqF+N2JpaWTAV
gB3rNIvZGJDDgw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:08:13 2025 by rpki-client