Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
File: Rii90MjhtQTSlPijkEyNV65jg_Q.mft (raw, json)
Hash identifier: hNKqqljUhfWBNv/g3j4SYnzsH0QWJ4LGXHYCD2Mdaq0=
Subject key identifier: 43:EE:90:D0:8A:C3:13:DA:B7:9E:13:40:40:73:E7:C0:A7:54:33:FF
Authority key identifier: 46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4
Certificate issuer: /CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
Certificate serial: 0194BBCEF52D0629C2C5AF6F5D44B083F4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: Rii90MjhtQTSlPijkEyNV65jg_Q.crl (hash: /s9NLGOPJ2xVbkKWDvcKCQoeOJCLtOWFmiSNaA2Mx/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f5:2d:06:29:c2:c5:af:6f:5d:44:b0:83:f4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=43ee90d08ac313dab79e13404073e7c0a75433ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:83:f9:fb:3c:cb:79:25:5e:0e:2f:09:4f:
eb:6b:0b:f6:ce:4a:29:19:75:ce:99:8c:d0:b9:5c:
00:0b:bd:a0:64:9c:c4:de:80:5d:ed:22:51:cc:e0:
94:8d:d0:87:cf:0b:a1:92:c1:d2:31:d7:c2:17:24:
c3:2e:c5:a9:9c:be:e7:12:3b:4d:c3:f5:28:a7:da:
d2:ca:8c:67:35:09:39:98:72:45:a2:b3:8f:b0:7d:
20:54:31:11:55:7d:61:15:02:00:e6:17:8f:5f:52:
df:fd:b6:ab:5d:e7:33:e4:f2:54:14:2b:3e:76:91:
a6:7e:b3:74:56:e4:55:99:d5:f0:fd:a1:6e:b5:28:
b6:f5:fd:98:2c:c6:89:c7:f5:40:65:b2:79:d7:d0:
0d:e5:c1:3d:19:f0:fe:f9:e4:79:0b:ae:eb:a5:70:
e2:eb:52:e0:95:f5:0a:e4:ad:ca:3b:37:ee:95:e5:
30:6c:76:b7:22:40:40:05:70:fa:19:17:f7:2c:4e:
48:c0:c4:7c:8b:34:a3:a2:79:5a:80:6c:fb:77:03:
c5:79:f8:f7:f2:ca:bb:47:e6:39:b5:ad:1e:85:6f:
19:f7:81:b0:8b:11:9d:b0:f6:a4:56:81:4b:3a:93:
1d:4d:92:08:08:28:89:a8:ff:82:74:ce:13:60:d1:
87:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EE:90:D0:8A:C3:13:DA:B7:9E:13:40:40:73:E7:C0:A7:54:33:FF
X509v3 Authority Key Identifier:
keyid:46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:92:43:39:56:dc:f8:01:36:dd:28:10:93:3c:d7:a1:44:3f:
69:09:4f:5b:7e:16:37:ab:1e:0f:83:88:05:30:30:73:fb:6f:
67:30:56:8a:2b:4a:ad:b3:81:32:eb:81:e7:f2:cb:4b:04:54:
fe:41:74:ea:7b:11:7c:25:fe:8e:bf:4c:2a:71:42:76:8d:1b:
ea:e5:92:b6:4e:98:d4:ed:31:2b:0b:2f:10:59:06:d8:cc:28:
df:b1:9b:6e:b9:b5:68:97:14:c3:a6:91:ab:52:77:42:8e:d6:
2b:83:b6:9f:88:48:e1:e1:ff:73:ef:96:8a:81:50:26:eb:13:
90:d9:b9:0e:f1:54:4e:b3:9f:f2:ad:71:44:da:3f:33:a7:53:
57:cf:6a:97:eb:04:00:d1:d8:b5:b4:35:10:03:8a:9b:d1:32:
2a:d0:13:de:89:52:76:e1:0a:e9:b2:17:10:a4:62:71:fe:5a:
bf:86:18:ed:51:df:90:ae:65:a3:5c:2e:c6:7a:d2:c9:54:ae:
f3:98:30:1a:5a:7c:69:07:b8:d4:d3:74:b1:b8:60:ff:80:60:
ac:7f:bf:ed:4b:88:4e:03:2d:8e:68:ce:5b:c3:71:b6:28:aa:
08:f7:3a:4e:f9:f0:19:4c:10:77:3a:e3:6e:54:1f:3f:0a:c9:
d8:1f:e9:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zvUtBinCxa9vXUSwg/TUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MjhiZGQwYzhlMWI1MDRkMjk0ZjhhMzkwNGM4ZDU3YWU2
MzgzZjQwHhcNMjUwMTMxMTAwMTI5WhcNMjUwMjAxMTAwMTI5WjAzMTEwLwYDVQQD
Eyg0M2VlOTBkMDhhYzMxM2RhYjc5ZTEzNDA0MDczZTdjMGE3NTQzM2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvKD+fs8y3klXg4vCU/rawv2zkop
GXXOmYzQuVwAC72gZJzE3oBd7SJRzOCUjdCHzwuhksHSMdfCFyTDLsWpnL7nEjtN
w/Uop9rSyoxnNQk5mHJForOPsH0gVDERVX1hFQIA5hePX1Lf/barXecz5PJUFCs+
dpGmfrN0VuRVmdXw/aFutSi29f2YLMaJx/VAZbJ519AN5cE9GfD++eR5C67rpXDi
61LglfUK5K3KOzfuleUwbHa3IkBABXD6GRf3LE5IwMR8izSjonlagGz7dwPFefj3
8sq7R+Y5ta0ehW8Z94GwixGdsPakVoFLOpMdTZIICCiJqP+CdM4TYNGH+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPukNCKwxPat54TQEBz58CnVDP/MB8GA1UdIwQY
MBaAFEYovdDI4bUE0pT4o5BMjVeuY4P0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmlpOTBNamh0UVRTbFBpamtFeU5WNjVqZ19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYTc1NzMtOTE2MS00NWJhLWI5M2It
NWY4YjYzYjExZjBiLzEvUmlpOTBNamh0UVRTbFBpamtFeU5WNjVqZ19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYTc1NzMtOTE2MS00NWJhLWI5M2ItNWY4YjYzYjExZjBi
LzEvUmlpOTBNamh0UVRTbFBpamtFeU5WNjVqZ19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZJDOVbc
+AE23SgQkzzXoUQ/aQlPW34WN6seD4OIBTAwc/tvZzBWiitKrbOBMuuB5/LLSwRU
/kF06nsRfCX+jr9MKnFCdo0b6uWStk6Y1O0xKwsvEFkG2Mwo37Gbbrm1aJcUw6aR
q1J3Qo7WK4O2n4hI4eH/c++WioFQJusTkNm5DvFUTrOf8q1xRNo/M6dTV89ql+sE
ANHYtbQ1EAOKm9EyKtAT3olSduEK6bIXEKRicf5av4YY7VHfkK5lo1wuxnrSyVSu
85gwGlp8aQe41NN0sbhg/4BgrH+/7UuITgMtjmjOW8NxtiiqCPc6TvnwGUwQdzrj
blQfPwrJ2B/pMA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:05:08 2025 by rpki-client