Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier: lSfB+6HsvLCZrHgfq5D6f9K4FxPCkPEUIxIeAaR6PDE=
Subject key identifier: 92:4C:4D:4C:62:0A:EB:C7:3D:7A:C9:4F:01:BD:09:47:12:A9:3C:F3
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 0194BBCE33F835FE96167A56FE5E6A937EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number: 0353
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: GV1xzJ2tCnpoH5L/VkmVjHhRONaImszRYN0M6Bq6Zfc=)
2: Wg4PDoD95oP20hNGU-XkM4hA54s.roa (hash: hP+gBGGdpot5xyTsmAcY1OY8gqZua3LHwTIZrj4KFro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:33:f8:35:fe:96:16:7a:56:fe:5e:6a:93:7e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=924c4d4c620aebc73d7ac94f01bd094712a93cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:78:33:1f:ac:14:60:89:a2:ed:52:65:18:
86:29:e3:97:2f:40:93:9e:00:29:65:c2:06:e7:1a:
f4:1b:83:6c:f4:31:b6:f6:0d:25:c1:ab:da:51:d9:
38:f4:b3:62:60:6e:64:9b:2c:6b:a2:c2:25:88:f0:
27:0c:38:57:41:85:d5:31:62:f5:59:0f:c8:9b:bc:
ea:62:0c:55:d8:1d:6d:6a:87:e6:5f:ce:11:f5:ec:
61:7c:e8:c4:fb:24:5a:d5:7a:4d:b9:e2:8b:50:08:
25:87:7e:01:30:e9:19:12:67:fc:ef:8b:15:e7:47:
d5:3d:83:b5:37:02:16:9b:ee:19:7c:e3:85:c9:52:
b7:d9:44:8a:c6:8b:39:98:1e:3e:8b:a3:72:57:a6:
6b:35:dc:0f:2f:ac:a6:08:44:9a:f1:a0:af:24:72:
a9:2e:6c:c0:c8:7d:ab:3e:76:3a:2f:9b:9e:89:c7:
a8:42:72:67:e3:c2:1b:b1:07:80:f1:e3:ef:d1:06:
e6:c2:b7:16:f7:5f:fa:2f:f8:33:62:f8:d9:3e:b8:
f3:49:37:9f:6a:b5:43:cb:26:19:7f:e7:36:c6:c0:
fd:86:bc:c7:24:e3:b7:08:73:3e:38:d9:80:c4:0f:
27:05:3d:e3:1a:31:ab:60:76:6b:41:aa:ff:c0:cf:
81:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4C:4D:4C:62:0A:EB:C7:3D:7A:C9:4F:01:BD:09:47:12:A9:3C:F3
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7f:49:b1:8d:6a:55:85:98:c5:9e:99:37:eb:7b:dc:29:ce:
05:33:b7:78:e9:c1:01:8a:e7:4d:ee:7e:f0:1a:90:54:33:dc:
88:c2:fb:d7:81:c6:c3:7b:b9:61:29:43:de:cf:70:8a:58:4c:
f0:c4:32:25:60:5e:fd:d9:8b:e5:30:34:88:55:b7:4c:e1:43:
00:45:f2:8d:e0:7c:73:2d:50:2e:47:96:13:6f:95:34:a5:00:
73:63:4b:21:a1:c3:c3:ce:1d:5f:89:7b:e2:53:4d:df:69:8d:
ab:87:a7:1d:75:3e:5f:98:24:9d:82:cf:e7:dc:f3:fc:a3:c9:
74:7c:3c:ca:dc:d8:6f:6b:58:80:0c:af:a1:b7:1f:9c:0c:0b:
22:1a:3b:e0:06:19:8d:3b:21:e5:11:0f:be:62:90:10:91:83:
aa:df:22:93:cb:7c:c0:4b:2c:c9:08:80:71:01:97:b4:9f:4e:
e4:f6:86:49:40:e9:7e:2d:24:44:01:3f:a0:7d:ef:18:1f:78:
0f:85:63:a4:c4:a5:ce:e9:a5:9b:6e:3b:37:6d:b5:87:2e:71:
dd:70:4c:9b:c8:71:80:a7:cb:5e:e0:77:64:fb:d3:95:32:d3:
8b:13:58:ca:0a:00:5f:0c:f1:8a:d6:f9:83:b9:95:63:64:b6:
eb:85:1d:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjP4Nf6WFnpW/l5qk37yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4Y2Q2N2I1Zjk3YmE3OTVhNmJmODY5MDZiNzcxYzFkZDJj
YjFkYzkwHhcNMjUwMTMxMTAwMDQwWhcNMjUwMjAxMTAwMDQwWjAzMTEwLwYDVQQD
Eyg5MjRjNGQ0YzYyMGFlYmM3M2Q3YWM5NGYwMWJkMDk0NzEyYTkzY2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrJ4Mx+sFGCJou1SZRiGKeOXL0CT
ngApZcIG5xr0G4Ns9DG29g0lwavaUdk49LNiYG5kmyxrosIliPAnDDhXQYXVMWL1
WQ/Im7zqYgxV2B1taofmX84R9exhfOjE+yRa1XpNueKLUAglh34BMOkZEmf874sV
50fVPYO1NwIWm+4ZfOOFyVK32USKxos5mB4+i6NyV6ZrNdwPL6ymCESa8aCvJHKp
LmzAyH2rPnY6L5ueiceoQnJn48IbsQeA8ePv0QbmwrcW91/6L/gzYvjZPrjzSTef
arVDyyYZf+c2xsD9hrzHJOO3CHM+ONmAxA8nBT3jGjGrYHZrQar/wM+BEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJMTUxiCuvHPXrJTwG9CUcSqTzzMB8GA1UdIwQY
MBaAFAjNZ7X5e6eVpr+GkGt3HB3Syx3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMt
NTc0NjJjMjgzMjk0LzEvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMtNTc0NjJjMjgzMjk0
LzEvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlH9JsY1q
VYWYxZ6ZN+t73CnOBTO3eOnBAYrnTe5+8BqQVDPciML714HGw3u5YSlD3s9wilhM
8MQyJWBe/dmL5TA0iFW3TOFDAEXyjeB8cy1QLkeWE2+VNKUAc2NLIaHDw84dX4l7
4lNN32mNq4enHXU+X5gknYLP59zz/KPJdHw8ytzYb2tYgAyvobcfnAwLIho74AYZ
jTsh5REPvmKQEJGDqt8ik8t8wEssyQiAcQGXtJ9O5PaGSUDpfi0kRAE/oH3vGB94
D4VjpMSlzumlm247N221hy5x3XBMm8hxgKfLXuB3ZPvTlTLTixNYygoAXwzxitb5
g7mVY2S264Uddw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:09 2025 by rpki-client