Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
File: ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft (raw, json)
Hash identifier: lQPkY2GBiZnmPE3qOzbykuXeuX82WfqSCduZ/ODpBa0=
Subject key identifier: EC:97:D0:CD:64:FC:97:57:87:60:29:80:15:C2:CB:24:FE:B8:A1:B9
Authority key identifier: 6A:10:B7:C5:4E:6F:95:B1:D9:B8:4A:AC:3D:9D:A7:42:A0:E0:2A:6C
Certificate issuer: /CN=6a10b7c54e6f95b1d9b84aac3d9da742a0e02a6c
Certificate serial: 0194BBCE4FA558DA71A14E7377DDD18BDF64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
Manifest number: 0FE9
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: ahC3xU5vlbHZuEqsPZ2nQqDgKmw.crl (hash: ouXsTOoiFH+CtyH9omEiCCXliWUEPFLl7rrRyBq/GHA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4f:a5:58:da:71:a1:4e:73:77:dd:d1:8b:df:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a10b7c54e6f95b1d9b84aac3d9da742a0e02a6c
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=ec97d0cd64fc97578760298015c2cb24feb8a1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:30:04:d9:52:2d:d4:b6:8d:22:2e:ec:2f:
af:99:73:b2:cd:b3:17:bd:bf:72:52:46:19:4b:24:
b3:21:8f:62:92:cb:e9:3d:83:8c:ea:24:c8:90:ad:
5b:45:42:b0:f6:b5:56:58:1f:d2:b6:5e:14:2e:2e:
63:0a:51:8c:d2:8e:c9:47:2c:d8:06:e3:e0:9b:39:
56:40:09:3b:bd:36:01:ea:8a:96:08:c5:d6:eb:00:
02:db:2d:33:ff:11:ff:f2:90:67:9c:43:51:bd:64:
4e:a3:f0:90:d5:e4:61:52:9b:07:e3:4b:b3:5b:20:
0d:37:ec:5b:e7:14:ba:ed:6e:a3:37:62:fa:2b:32:
1d:a6:7b:20:a8:a6:19:f0:08:7c:a3:5c:2b:31:6d:
13:f4:6c:c0:c5:17:15:e4:fa:5d:c7:40:9d:a7:cb:
0c:b3:30:43:58:00:ac:79:23:81:78:a8:c1:cd:69:
f8:cc:ba:5e:50:45:6f:b3:71:b3:9c:13:b7:a4:30:
3c:85:b2:81:2d:5c:dc:38:08:b6:19:19:b7:41:33:
17:59:2c:5f:82:f7:26:1a:97:e1:2c:7a:8c:d8:06:
30:61:b6:c5:e2:33:de:41:d9:d2:65:e4:d1:14:b4:
c8:60:1f:1b:a1:24:f0:ac:fa:48:ce:c8:81:bf:fc:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:97:D0:CD:64:FC:97:57:87:60:29:80:15:C2:CB:24:FE:B8:A1:B9
X509v3 Authority Key Identifier:
keyid:6A:10:B7:C5:4E:6F:95:B1:D9:B8:4A:AC:3D:9D:A7:42:A0:E0:2A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7f:53:e0:4a:a3:6d:2c:db:56:e6:42:f2:d2:e5:1b:48:b9:
97:eb:56:98:89:79:9a:1b:04:61:8c:3f:46:10:18:60:3e:84:
f3:f6:9b:d1:89:a0:d7:84:1d:dd:37:58:82:d2:ab:2e:73:fe:
7c:af:ba:7f:17:0d:54:13:1b:d2:eb:a1:87:07:be:5f:54:5d:
57:7f:db:ce:a9:a2:ea:4e:b9:f8:ff:ba:4b:77:6b:ce:fc:b7:
5d:60:f6:82:14:79:0b:40:e5:3b:ea:c4:48:a1:fb:74:df:29:
ee:7a:f5:4c:44:cc:13:8b:bf:32:3a:6e:af:0b:64:8b:5d:15:
de:04:44:48:1d:37:8b:63:48:65:8a:ec:09:5b:3f:cf:92:ec:
25:6a:ca:94:99:57:cc:16:1a:fa:58:2c:ea:25:bb:b3:f0:1b:
c7:1a:6c:0e:81:ea:a7:5a:39:92:ce:b2:26:23:47:91:52:91:
4e:80:9b:dc:37:1f:be:98:33:76:f5:45:c0:2e:2d:6c:dd:8e:
96:f6:5a:62:25:31:8c:03:87:78:7e:78:7c:b2:30:c8:ec:b4:
23:0c:f4:00:41:4f:94:bf:b0:33:48:82:ca:f1:13:e6:f4:f8:
22:e3:fa:35:c8:48:8c:39:05:63:66:20:b2:65:e8:52:29:77:
d5:e9:12:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zk+lWNpxoU5zd93Ri99kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMTBiN2M1NGU2Zjk1YjFkOWI4NGFhYzNkOWRhNzQyYTBl
MDJhNmMwHhcNMjUwMTMxMTAwMDQ3WhcNMjUwMjAxMTAwMDQ3WjAzMTEwLwYDVQQD
EyhlYzk3ZDBjZDY0ZmM5NzU3ODc2MDI5ODAxNWMyY2IyNGZlYjhhMWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8YwBNlSLdS2jSIu7C+vmXOyzbMX
vb9yUkYZSySzIY9iksvpPYOM6iTIkK1bRUKw9rVWWB/Stl4ULi5jClGM0o7JRyzY
BuPgmzlWQAk7vTYB6oqWCMXW6wAC2y0z/xH/8pBnnENRvWROo/CQ1eRhUpsH40uz
WyANN+xb5xS67W6jN2L6KzIdpnsgqKYZ8Ah8o1wrMW0T9GzAxRcV5Ppdx0Cdp8sM
szBDWACseSOBeKjBzWn4zLpeUEVvs3GznBO3pDA8hbKBLVzcOAi2GRm3QTMXWSxf
gvcmGpfhLHqM2AYwYbbF4jPeQdnSZeTRFLTIYB8boSTwrPpIzsiBv/wS0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyX0M1k/JdXh2ApgBXCyyT+uKG5MB8GA1UdIwQY
MBaAFGoQt8VOb5Wx2bhKrD2dp0Kg4CpsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWhDM3hVNXZsYkhadUVxc1BaMm5RcURnS213LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS84YTJlODUtOTQ4MC00MWEyLWEyNTUt
MmRjYWQ2ZWU3MWZiLzEvYWhDM3hVNXZsYkhadUVxc1BaMm5RcURnS213Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS84YTJlODUtOTQ4MC00MWEyLWEyNTUtMmRjYWQ2ZWU3MWZi
LzEvYWhDM3hVNXZsYkhadUVxc1BaMm5RcURnS213LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW39T4Eqj
bSzbVuZC8tLlG0i5l+tWmIl5mhsEYYw/RhAYYD6E8/ab0Ymg14Qd3TdYgtKrLnP+
fK+6fxcNVBMb0uuhhwe+X1RdV3/bzqmi6k65+P+6S3drzvy3XWD2ghR5C0DlO+rE
SKH7dN8p7nr1TETME4u/Mjpurwtki10V3gRESB03i2NIZYrsCVs/z5LsJWrKlJlX
zBYa+lgs6iW7s/AbxxpsDoHqp1o5ks6yJiNHkVKRToCb3DcfvpgzdvVFwC4tbN2O
lvZaYiUxjAOHeH54fLIwyOy0Iwz0AEFPlL+wM0iCyvET5vT4IuP6NchIjDkFY2Yg
smXoUil31ekScw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:43 2025 by rpki-client