Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
File: g2elJH2fTpT3vVcc8T01q0iwHSQ.mft (raw, json)
Hash identifier: Zt0ljZ8uLXN+1Uq/e4lBuub2LbrcuGPUIlKXUcYNjvY=
Subject key identifier: F8:BC:27:E4:6D:EF:1D:29:09:68:87:7A:04:12:9A:5F:40:B3:8B:F7
Authority key identifier: 83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
Certificate issuer: /CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Certificate serial: 0194BCA9F8CF3C75EE17C45EA5B8F68873AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
Manifest number: 03B9
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: g2elJH2fTpT3vVcc8T01q0iwHSQ.crl (hash: abdRhFUPBoC4ciVImIslT3RIN9mn1pE2x0/LJ8EN35I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f8:cf:3c:75:ee:17:c4:5e:a5:b8:f6:88:73:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=f8bc27e46def1d290968877a04129a5f40b38bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:4e:d6:08:59:21:e8:13:1d:6f:00:27:c5:
fd:16:bc:bc:4b:45:c6:4c:e5:54:0c:9c:30:be:77:
dc:07:a4:5b:5c:5b:e9:06:47:3b:e7:ef:45:5a:fa:
2a:f3:45:57:6f:99:1e:14:d5:84:64:32:1d:08:d5:
e8:31:fd:42:59:62:4f:e0:da:f7:dc:10:bf:36:76:
70:4e:53:74:87:c2:ab:c0:86:49:95:d5:26:72:a1:
bf:c9:8f:76:5e:af:91:4d:0c:a2:2b:24:1b:c2:7a:
0e:d4:7a:b9:81:a7:e3:be:f7:77:e7:26:8a:7b:bb:
31:86:f8:bf:f2:10:c6:e2:c2:69:51:c2:ec:34:d6:
fe:a1:79:b8:fc:66:89:af:4d:96:28:73:6f:7f:70:
98:6c:f3:16:d4:0a:3b:0a:68:13:e3:3f:e3:fe:8e:
27:0c:f5:9a:da:a6:13:e5:d0:d8:12:da:93:24:2f:
e4:18:74:56:bd:34:72:70:83:d4:fd:4b:b1:24:60:
b1:df:ab:86:b2:98:e6:1e:d4:b9:cb:4c:18:da:ef:
5c:f6:ba:dc:e0:2f:7a:a7:6d:ad:a8:2a:b0:08:d0:
af:48:97:ae:de:7a:fa:1c:48:88:68:15:f7:61:64:
e7:f5:12:88:9d:44:c4:d5:b1:53:56:be:8c:cf:8e:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BC:27:E4:6D:EF:1D:29:09:68:87:7A:04:12:9A:5F:40:B3:8B:F7
X509v3 Authority Key Identifier:
keyid:83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:23:2c:31:81:82:1e:7f:34:87:50:da:4f:e0:3e:d6:2f:92:
ad:d4:05:c5:19:cf:32:75:e2:e1:a6:6b:74:03:cf:0f:60:53:
34:3d:69:5d:e8:b3:3e:2e:b5:5f:5f:73:01:cb:af:66:31:ac:
71:25:aa:9c:f7:80:b5:4b:bd:3e:d4:55:e9:99:e1:de:12:f1:
cc:20:0e:a4:ae:fd:91:0a:12:9a:5b:e7:9b:cb:a9:dc:53:20:
fc:10:72:39:c9:b9:30:96:d9:9e:78:14:47:d4:57:f3:55:4c:
27:6f:93:0a:40:75:1c:d6:d9:29:7f:a2:06:a6:0c:ee:98:c1:
d5:71:4e:1c:86:52:55:f9:ba:b5:eb:6d:f5:af:84:be:a7:5a:
2b:ff:e5:15:2a:e3:03:8d:c6:8f:21:b1:e3:18:de:12:61:60:
b4:7a:7f:08:33:ac:34:37:e1:66:b9:97:fa:52:92:02:26:4d:
4b:0e:5d:b5:80:a5:ab:08:25:7f:e1:00:31:30:a5:fb:d4:87:
15:61:51:01:35:d2:91:b3:74:75:b7:a4:d3:20:12:3a:a2:bb:
f4:a3:ab:bb:c5:b6:da:d0:53:33:59:9d:89:07:ea:ed:3e:b5:
fb:5a:75:6b:80:bb:b8:e5:b3:3c:08:64:ad:3f:3d:59:8f:d1:
ac:bc:d9:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qfjPPHXuF8Repbj2iHOuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjdhNTI0N2Q5ZjRlOTRmN2JkNTcxY2YxM2QzNWFiNDhi
MDFkMjQwHhcNMjUwMTMxMTQwMDQzWhcNMjUwMjAxMTQwMDQzWjAzMTEwLwYDVQQD
EyhmOGJjMjdlNDZkZWYxZDI5MDk2ODg3N2EwNDEyOWE1ZjQwYjM4YmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9JO1ghZIegTHW8AJ8X9Fry8S0XG
TOVUDJwwvnfcB6RbXFvpBkc75+9FWvoq80VXb5keFNWEZDIdCNXoMf1CWWJP4Nr3
3BC/NnZwTlN0h8KrwIZJldUmcqG/yY92Xq+RTQyiKyQbwnoO1Hq5gafjvvd35yaK
e7sxhvi/8hDG4sJpUcLsNNb+oXm4/GaJr02WKHNvf3CYbPMW1Ao7CmgT4z/j/o4n
DPWa2qYT5dDYEtqTJC/kGHRWvTRycIPU/UuxJGCx36uGspjmHtS5y0wY2u9c9rrc
4C96p22tqCqwCNCvSJeu3nr6HEiIaBX3YWTn9RKInUTE1bFTVr6Mz46xewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPi8J+Rt7x0pCWiHegQSml9As4v3MB8GA1UdIwQY
MBaAFINnpSR9n06U971XHPE9NatIsB0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJlbEpIMmZUcFQzdlZjYzhUMDFxMGl3SFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mOGJlOWItNThmMC00NTQ0LWIyM2Yt
NjM1NGVmMDc3MWM5LzEvZzJlbEpIMmZUcFQzdlZjYzhUMDFxMGl3SFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9mOGJlOWItNThmMC00NTQ0LWIyM2YtNjM1NGVmMDc3MWM5
LzEvZzJlbEpIMmZUcFQzdlZjYzhUMDFxMGl3SFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCMsMYGC
Hn80h1DaT+A+1i+SrdQFxRnPMnXi4aZrdAPPD2BTND1pXeizPi61X19zAcuvZjGs
cSWqnPeAtUu9PtRV6Znh3hLxzCAOpK79kQoSmlvnm8up3FMg/BByOcm5MJbZnngU
R9RX81VMJ2+TCkB1HNbZKX+iBqYM7pjB1XFOHIZSVfm6tett9a+EvqdaK//lFSrj
A43GjyGx4xjeEmFgtHp/CDOsNDfhZrmX+lKSAiZNSw5dtYClqwglf+EAMTCl+9SH
FWFRATXSkbN0dbek0yASOqK79KOru8W22tBTM1mdiQfq7T61+1p1a4C7uOWzPAhk
rT89WY/RrLzZ6w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:10 2025 by rpki-client