Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.mft
File: 21LN5wkMV9jpwx1Rh0jfkiueBM4.mft (raw, json)
Hash identifier: x7yCmDTTx0GxojF/BJvPAITi5Ndgbog8Cbgn5D7UVCs=
Subject key identifier: 3A:5D:58:50:1C:6A:D8:C2:E6:2A:24:8A:54:5A:A8:EE:3A:87:06:B6
Authority key identifier: DB:52:CD:E7:09:0C:57:D8:E9:C3:1D:51:87:48:DF:92:2B:9E:04:CE
Certificate issuer: /CN=db52cde7090c57d8e9c31d518748df922b9e04ce
Certificate serial: 0194BD17EA3CD15A581860F587A33901DA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21LN5wkMV9jpwx1Rh0jfkiueBM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.mft
Manifest number: 129E
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: 21LN5wkMV9jpwx1Rh0jfkiueBM4.crl (hash: yXFh149mZbu1Jhv662wjkD0BDrAHbY+5HASZwbxFpn0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ea:3c:d1:5a:58:18:60:f5:87:a3:39:01:da:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db52cde7090c57d8e9c31d518748df922b9e04ce
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=3a5d58501c6ad8c2e62a248a545aa8ee3a8706b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5d:87:98:44:2a:5c:9c:af:25:58:f6:4c:b8:
e2:b0:68:82:35:36:cd:d0:04:51:59:81:ee:6b:74:
9e:e4:82:82:50:b8:fa:e1:10:10:99:1c:42:f0:75:
6e:ca:b8:cd:92:18:04:d3:1f:7b:43:68:4e:4a:70:
b7:0d:87:38:61:a5:d6:a3:b9:28:42:57:8a:7f:bb:
53:a7:0c:40:e1:4b:08:54:b7:7a:c6:96:47:bf:5c:
2a:23:fe:b3:ad:91:05:54:10:60:55:64:10:c2:ff:
6e:e3:a7:93:06:b6:c5:23:fd:bd:70:96:5e:df:b1:
35:4a:04:6c:a9:b5:25:54:ed:56:40:84:df:77:50:
1d:ad:a3:f3:92:bf:cb:d9:86:6c:88:c1:93:df:1f:
34:1a:17:44:3c:05:b8:ca:ee:84:07:51:c7:cd:4e:
a2:c0:92:8d:39:f6:2f:29:ad:f8:2a:9c:28:2f:20:
a4:b9:97:8b:4e:b9:af:b4:a5:4c:33:ba:07:00:6c:
77:6d:78:a6:b3:6a:8b:dc:12:b2:30:68:06:69:50:
a8:3d:7f:d7:85:b4:dc:41:fc:8f:77:47:71:6f:01:
7a:d4:14:e0:84:1f:06:02:64:4c:4f:7e:57:3b:d1:
18:0e:f4:33:09:6b:17:bb:c9:d7:8d:88:6b:e9:66:
99:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5D:58:50:1C:6A:D8:C2:E6:2A:24:8A:54:5A:A8:EE:3A:87:06:B6
X509v3 Authority Key Identifier:
keyid:DB:52:CD:E7:09:0C:57:D8:E9:C3:1D:51:87:48:DF:92:2B:9E:04:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21LN5wkMV9jpwx1Rh0jfkiueBM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:47:5c:01:a3:f8:26:4c:62:8f:f9:d2:1b:53:b9:f7:da:d4:
cf:f6:0c:24:f8:59:d4:dc:37:f2:70:93:27:10:4b:ed:26:b8:
f1:aa:e1:27:38:3a:61:6d:23:5d:18:e6:ab:89:01:0e:f0:cb:
d5:bd:3f:a6:9a:3d:20:96:1c:68:4d:00:f3:01:f5:08:7e:41:
a1:cf:30:80:c9:4a:4f:ba:15:c3:60:2d:98:ff:3d:1f:a6:c6:
cf:c1:00:dc:e5:79:e9:10:f9:01:d4:aa:d3:c8:8a:55:42:5c:
ac:87:3a:46:f7:5d:2c:ae:b4:3a:e7:ef:c6:fa:b6:e0:d5:30:
55:b7:4f:4f:5a:38:9f:d4:ff:cc:8b:2b:6e:12:c3:01:d5:3e:
30:3d:af:31:d7:ac:14:e1:a4:3d:72:d4:f9:4c:74:0d:89:1e:
4b:19:8a:40:de:01:e7:4b:95:c0:3a:38:8f:29:87:c5:95:09:
b1:2b:bf:66:ae:db:db:82:50:59:ac:23:31:4d:27:9a:07:27:
f0:db:9e:d7:7e:cd:ce:82:7e:72:1e:27:32:e5:63:1d:45:b1:
fa:93:73:08:33:02:0e:67:43:8c:ad:ab:b5:00:df:fc:a7:f0:
39:b7:3a:63:5e:43:5e:90:24:11:9a:45:e7:ef:30:f4:08:12:
cf:b4:b7:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+o80VpYGGD1h6M5AdpmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNTJjZGU3MDkwYzU3ZDhlOWMzMWQ1MTg3NDhkZjkyMmI5
ZTA0Y2UwHhcNMjUwMTMxMTYwMDQ4WhcNMjUwMjAxMTYwMDQ4WjAzMTEwLwYDVQQD
EygzYTVkNTg1MDFjNmFkOGMyZTYyYTI0OGE1NDVhYThlZTNhODcwNmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4V2HmEQqXJyvJVj2TLjisGiCNTbN
0ARRWYHua3Se5IKCULj64RAQmRxC8HVuyrjNkhgE0x97Q2hOSnC3DYc4YaXWo7ko
QleKf7tTpwxA4UsIVLd6xpZHv1wqI/6zrZEFVBBgVWQQwv9u46eTBrbFI/29cJZe
37E1SgRsqbUlVO1WQITfd1AdraPzkr/L2YZsiMGT3x80GhdEPAW4yu6EB1HHzU6i
wJKNOfYvKa34KpwoLyCkuZeLTrmvtKVMM7oHAGx3bXims2qL3BKyMGgGaVCoPX/X
hbTcQfyPd0dxbwF61BTghB8GAmRMT35XO9EYDvQzCWsXu8nXjYhr6WaZTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpdWFAcatjC5iokilRaqO46hwa2MB8GA1UdIwQY
MBaAFNtSzecJDFfY6cMdUYdI35IrngTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjFMTjV3a01WOWpwd3gxUmgwamZraXVlQk00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC84ZjMwZWEtZWIyZS00NGNlLWE5M2Mt
ZDBjYWRmZTg0YjE5LzEvMjFMTjV3a01WOWpwd3gxUmgwamZraXVlQk00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC84ZjMwZWEtZWIyZS00NGNlLWE5M2MtZDBjYWRmZTg0YjE5
LzEvMjFMTjV3a01WOWpwd3gxUmgwamZraXVlQk00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUdcAaP4
Jkxij/nSG1O599rUz/YMJPhZ1Nw38nCTJxBL7Sa48arhJzg6YW0jXRjmq4kBDvDL
1b0/ppo9IJYcaE0A8wH1CH5Boc8wgMlKT7oVw2AtmP89H6bGz8EA3OV56RD5AdSq
08iKVUJcrIc6RvddLK60Oufvxvq24NUwVbdPT1o4n9T/zIsrbhLDAdU+MD2vMdes
FOGkPXLU+Ux0DYkeSxmKQN4B50uVwDo4jymHxZUJsSu/Zq7b24JQWawjMU0nmgcn
8Nue137NzoJ+ch4nMuVjHUWx+pNzCDMCDmdDjK2rtQDf/KfwObc6Y15DXpAkEZpF
5+8w9AgSz7S3SA==
-----END CERTIFICATE-----
Generated at Sun May 11 07:09:21 2025 by rpki-client