
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
File: 46GMDHrbmEtfd5d-CAComlHvu2M.mft (raw, json)
Hash identifier: 8+mo6sQq19u/R0ED1dDosn/t7y7a26CafuQrGNdNuWo=
Subject key identifier: 0C:80:55:C8:97:4A:80:35:6D:F2:C1:21:D1:9C:17:98:74:62:DD:FD
Authority key identifier: E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
Certificate issuer: /CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Certificate serial: 0194BC7303C74FF231CADDD96FAF40F99125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
Manifest number: 0516
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: 46GMDHrbmEtfd5d-CAComlHvu2M.crl (hash: R4KjxJhwN4IvVOeS4m7ckvealBmVIA5xfIwRzTzmL18=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:03:c7:4f:f2:31:ca:dd:d9:6f:af:40:f9:91:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=0c8055c8974a80356df2c121d19c17987462ddfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:ae:1c:31:5b:e0:52:35:de:f7:86:03:62:
51:da:fd:af:ff:89:f2:a5:b6:8b:60:3d:19:df:09:
41:24:be:99:98:51:e0:1b:0b:f1:6a:00:ee:c8:a1:
c6:7e:c3:c2:0f:45:c6:d9:a2:1f:6e:fc:33:7d:31:
4c:75:6b:bb:e4:7b:b2:2e:1f:68:91:15:e9:a1:6b:
0c:17:d6:0f:ba:02:86:05:99:e0:c9:74:f7:83:ef:
b5:31:68:7b:5e:c6:bb:69:a1:6a:9f:bb:0d:24:b5:
ec:42:dc:72:34:59:b3:1f:f5:22:15:09:e4:12:1a:
78:3e:07:fb:35:da:cf:d5:9e:10:3e:1d:da:4b:f8:
e4:9b:7b:33:a8:e2:e9:d5:31:04:f6:b0:54:43:4e:
c3:17:22:9d:11:c4:bc:da:85:7a:b0:79:5c:dd:c5:
9e:d4:8b:08:da:4b:d9:25:2d:02:4a:59:7e:3a:ec:
f0:5f:0b:01:cb:2f:b4:48:77:03:4b:b7:86:1c:f8:
5f:63:f9:be:7d:72:ae:c0:02:86:ee:77:7a:cc:cb:
c9:4d:64:e8:a1:aa:d5:0b:42:87:bd:c0:12:43:e6:
dd:61:07:3f:9b:27:07:7f:77:9e:0f:a9:41:a8:18:
44:23:fb:54:83:33:6e:2c:4b:06:09:13:64:4c:bd:
ca:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:80:55:C8:97:4A:80:35:6D:F2:C1:21:D1:9C:17:98:74:62:DD:FD
X509v3 Authority Key Identifier:
keyid:E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:39:24:74:ea:e8:83:b1:05:1f:e0:2c:e7:82:71:9c:1c:be:
03:cb:34:83:f6:61:05:2f:2d:ef:71:a5:d6:82:35:9d:dd:b3:
7b:b6:97:ad:5d:fa:36:88:18:3d:2b:70:ce:8d:2d:6b:d8:8e:
f7:a1:ea:ac:a1:ba:05:8e:fb:42:4a:dc:f2:fe:22:44:96:36:
23:c2:ce:be:7c:07:48:50:67:f1:31:ac:bc:de:4b:ce:29:9e:
5b:86:a2:1a:ab:e4:9f:f7:05:0b:c7:a0:1b:b8:eb:31:64:5d:
33:2a:82:ac:72:6b:d1:cd:5a:68:d4:52:a9:ed:7e:40:d0:75:
60:fa:25:e1:c1:20:b8:99:84:a6:a8:6b:ff:3d:ab:a9:55:ea:
ed:51:a8:c3:22:bc:de:3f:0f:78:1e:54:42:9a:f4:d5:88:74:
df:fd:0e:78:f6:b6:f5:7e:d6:13:7d:fa:52:90:bc:b7:65:4b:
e8:88:c5:d4:fb:32:cb:7d:8b:61:e4:fd:04:3b:80:b0:14:16:
6a:b1:b1:e0:d2:39:2e:cb:e8:d4:fa:23:4b:5e:8e:16:8e:a0:
64:7b:bf:9d:62:68:cd:c1:a8:8b:f5:8f:4b:25:fb:66:4f:d0:
db:0e:81:24:8c:37:5a:74:12:b0:71:71:ad:3d:7d:54:f7:d5:
34:d8:0a:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cwPHT/Ixyt3Zb69A+ZElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYTE4YzBjN2FkYjk4NGI1Zjc3OTc3ZTA4MDBhODlhNTFl
ZmJiNjMwHhcNMjUwMTMxMTMwMDQxWhcNMjUwMjAxMTMwMDQxWjAzMTEwLwYDVQQD
EygwYzgwNTVjODk3NGE4MDM1NmRmMmMxMjFkMTljMTc5ODc0NjJkZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss+uHDFb4FI13veGA2JR2v2v/4ny
pbaLYD0Z3wlBJL6ZmFHgGwvxagDuyKHGfsPCD0XG2aIfbvwzfTFMdWu75HuyLh9o
kRXpoWsMF9YPugKGBZngyXT3g++1MWh7Xsa7aaFqn7sNJLXsQtxyNFmzH/UiFQnk
Ehp4Pgf7NdrP1Z4QPh3aS/jkm3szqOLp1TEE9rBUQ07DFyKdEcS82oV6sHlc3cWe
1IsI2kvZJS0CSll+OuzwXwsByy+0SHcDS7eGHPhfY/m+fXKuwAKG7nd6zMvJTWTo
oarVC0KHvcASQ+bdYQc/mycHf3eeD6lBqBhEI/tUgzNuLEsGCRNkTL3KeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyAVciXSoA1bfLBIdGcF5h0Yt39MB8GA1UdIwQY
MBaAFOOhjAx625hLX3eXfggAqJpR77tjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDZHTURIcmJtRXRmZDVkLUNBQ29tbEh2dTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kOTlmMmYtY2VlMS00MDI0LTgyMDgt
YmNmMzAyNjBjZTYwLzEvNDZHTURIcmJtRXRmZDVkLUNBQ29tbEh2dTJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9kOTlmMmYtY2VlMS00MDI0LTgyMDgtYmNmMzAyNjBjZTYw
LzEvNDZHTURIcmJtRXRmZDVkLUNBQ29tbEh2dTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDkkdOro
g7EFH+As54JxnBy+A8s0g/ZhBS8t73Gl1oI1nd2ze7aXrV36NogYPStwzo0ta9iO
96HqrKG6BY77Qkrc8v4iRJY2I8LOvnwHSFBn8TGsvN5LzimeW4aiGqvkn/cFC8eg
G7jrMWRdMyqCrHJr0c1aaNRSqe1+QNB1YPol4cEguJmEpqhr/z2rqVXq7VGowyK8
3j8PeB5UQpr01Yh03/0OePa29X7WE336UpC8t2VL6IjF1Psyy32LYeT9BDuAsBQW
arGx4NI5Lsvo1PojS16OFo6gZHu/nWJozcGoi/WPSyX7Zk/Q2w6BJIw3WnQSsHFx
rT19VPfVNNgK2g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:28 2025 by rpki-client