Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier: UMKH1UJtnTilqNj/+XD8y53rXR/0gB1+L5WyH6ZHCTU=
Subject key identifier: 59:CA:A7:46:E1:15:DD:B5:70:53:30:75:2B:BB:15:8F:89:00:E8:DB
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer: /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial: 0194BD4E56569F37ED5E1FEAB8B1D61D1170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number: 0440
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: ZVN/LPcdYG+aVw9no/wCu53jYMuvPL/7nILKGvuf+J8=)
2: QkDfFPHioKn_HpsksL_NF9YS6vY.roa (hash: 1Lri5Ec30fDzCxdnmve0TUpmzcMOSjp4uMTpIup2clA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:56:56:9f:37:ed:5e:1f:ea:b8:b1:d6:1d:11:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=59caa746e115ddb5705330752bbb158f8900e8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:60:5d:eb:11:a7:d1:43:25:3c:30:ac:e1:
ec:87:24:93:8a:08:8e:26:9c:44:d3:ac:eb:8b:b9:
aa:11:3a:e7:72:06:65:12:45:10:37:f1:44:68:5a:
46:26:d4:48:c7:23:09:9c:36:ee:43:fc:1b:74:b3:
71:25:cc:0f:bd:d1:38:c4:e7:92:a1:8c:db:7b:ae:
2e:c4:83:12:95:df:aa:23:9f:19:1b:cb:d0:8b:f4:
c3:a9:8a:e3:fb:5e:fb:c2:22:04:3c:1a:73:6b:32:
7c:2e:98:2f:bd:ef:8b:2d:ac:d7:6c:ee:8a:ca:41:
3b:6a:50:bb:62:dc:a0:ec:9b:37:ce:95:22:d0:f3:
d5:b9:51:c1:00:a7:95:c8:b5:2d:85:af:73:5d:4f:
01:b5:e4:03:10:62:95:57:d7:73:e0:aa:f1:0d:4d:
c2:ef:03:ca:50:85:64:90:09:87:a2:54:cb:e3:e0:
75:e3:a8:68:bc:f1:ff:09:3e:0e:9f:af:18:21:0d:
1e:51:68:fe:7a:55:4d:ec:24:8b:c7:7b:1f:b3:db:
a5:0b:29:f2:ab:1c:7d:c7:58:0e:90:7c:da:36:c3:
56:d4:57:c9:bf:ce:ae:03:1d:98:e2:da:d1:b3:97:
da:c9:ae:f7:0f:ef:85:c3:d0:44:c8:5c:e1:88:a0:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CA:A7:46:E1:15:DD:B5:70:53:30:75:2B:BB:15:8F:89:00:E8:DB
X509v3 Authority Key Identifier:
keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:eb:ea:e5:26:33:a8:2f:7b:6b:9a:c8:4d:94:27:b8:81:89:
83:f5:fc:ce:be:f4:27:38:c7:8e:20:14:f9:3b:cf:ce:ce:de:
c1:a8:1f:30:17:93:e5:d7:c9:4f:15:c5:7b:26:f0:51:c9:6c:
bd:a1:06:55:85:43:8c:f5:45:45:51:88:74:c1:31:25:74:e2:
08:9d:40:eb:b6:f8:ae:2f:f3:0a:7c:ae:08:c9:b8:68:c2:84:
80:a2:a5:c1:16:84:f7:30:67:7a:5d:6f:9f:24:57:43:f8:37:
a7:0b:d1:4d:03:41:f3:8f:38:fc:43:26:31:d9:c2:e0:8e:66:
1d:2d:01:b2:4f:64:9e:81:f4:f3:44:50:17:b0:4e:01:01:48:
12:9f:16:c1:49:47:92:a7:70:39:d8:e8:b5:02:85:05:b4:f9:
e5:9e:83:59:4d:ca:d1:65:15:2c:bf:70:fa:93:22:18:5d:84:
3c:bc:b3:db:77:be:ae:9b:3d:87:db:bd:44:e5:5d:27:9d:12:
d9:5e:9f:7f:21:d0:66:6a:a7:7c:97:d8:cc:a8:d8:ee:40:46:
62:17:4f:0f:3a:e8:81:fb:03:51:80:ee:19:27:18:0a:4d:81:
55:f8:1c:2b:60:27:c0:02:0e:09:94:a2:13:ee:15:85:8a:78:
b6:26:db:a9
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS9TlZWnzftXh/quLHWHRFwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YjE2ODY4ZjMyMmFiNjc5YWVjNzMzNzAyYmYwNjhlOTYz
N2ZjNGYwHhcNMjUwMTMxMTcwMDE1WhcNMjUwMjAxMTcwMDE1WjAzMTEwLwYDVQQD
Eyg1OWNhYTc0NmUxMTVkZGI1NzA1MzMwNzUyYmJiMTU4Zjg5MDBlOGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus1gXesRp9FDJTwwrOHshySTigiO
JpxE06zri7mqETrncgZlEkUQN/FEaFpGJtRIxyMJnDbuQ/wbdLNxJcwPvdE4xOeS
oYzbe64uxIMSld+qI58ZG8vQi/TDqYrj+177wiIEPBpzazJ8Lpgvve+LLazXbO6K
ykE7alC7Ytyg7Js3zpUi0PPVuVHBAKeVyLUtha9zXU8BteQDEGKVV9dz4KrxDU3C
7wPKUIVkkAmHolTL4+B146hovPH/CT4On68YIQ0eUWj+elVN7CSLx3sfs9ulCyny
qxx9x1gOkHzaNsNW1FfJv86uAx2Y4trRs5faya73D++Fw9BEyFzhiKC1ZQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFnKp0bhFd21cFMwdSu7FY+JAOjbMB8GA1UdIwQY
MBaAFPmxaGjzIqtnmuxzNwK/Bo6WN/xPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1iRm9hUE1pcTJlYTdITTNBcjhHanBZM19FOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvOGI1Zjg4LTMwNzEtNGE0NC05ZjBj
LTI0MmEyOTQ1OTRlMC8xLzEtYkZvYVBNaXEyZWE3SE0zQXI4R2pwWTNfRTgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI0LzhiNWY4OC0zMDcxLTRhNDQtOWYwYy0yNDJhMjk0NTk0
ZTAvMS8xLWJGb2FQTWlxMmVhN0hNM0FyOEdqcFkzX0U4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOvq
5SYzqC97a5rITZQnuIGJg/X8zr70JzjHjiAU+TvPzs7ewagfMBeT5dfJTxXFeybw
UclsvaEGVYVDjPVFRVGIdMExJXTiCJ1A67b4ri/zCnyuCMm4aMKEgKKlwRaE9zBn
el1vnyRXQ/g3pwvRTQNB8484/EMmMdnC4I5mHS0Bsk9knoH080RQF7BOAQFIEp8W
wUlHkqdwOdjotQKFBbT55Z6DWU3K0WUVLL9w+pMiGF2EPLyz23e+rps9h9u9ROVd
J50S2V6ffyHQZmqnfJfYzKjY7kBGYhdPDzrogfsDUYDuGScYCk2BVfgcK2AnwAIO
CZSiE+4VhYp4tibbqQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:55 2025 by rpki-client