Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: hmb5zzJ0VT4XnFnoVBCdLhao3Q/WtOJH8LZVaCAX7Pk=
Subject key identifier: 91:F8:F7:1F:5E:86:DE:C0:8E:9A:4E:9B:9F:3D:B2:DE:1E:79:DC:82
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 0194BBCEDBE8B7839123F7E71096026582AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: 25H4Rkc1LMVOFOz0QDTJ5pB75nDjFmz6u9N2eLp2XVI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:db:e8:b7:83:91:23:f7:e7:10:96:02:65:82:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=91f8f71f5e86dec08e9a4e9b9f3db2de1e79dc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:07:ff:ad:35:4e:52:ff:94:f1:10:4b:d8:
75:d3:f7:f9:c5:35:e0:30:95:4c:ff:a4:f7:91:1f:
84:26:6a:7e:30:0d:dd:85:fc:3d:ae:b9:30:b0:0a:
82:9d:53:fc:65:16:c5:6d:b4:78:58:a0:12:7e:f1:
9d:3f:ac:2d:33:e2:9f:f2:f6:55:b4:d9:71:66:9a:
f7:1d:be:4c:61:43:a9:4e:49:a5:59:39:fd:a0:83:
8a:c4:8a:5e:3e:4e:ee:e4:ed:e2:fe:06:e9:5a:36:
87:dc:97:a5:e3:c1:19:9a:e8:c7:35:56:45:d5:3a:
83:a5:1a:88:ec:7c:07:db:b4:11:66:f9:d9:25:f1:
d2:ca:ce:4d:0c:72:ee:5b:f8:15:7b:14:34:30:55:
98:b5:b6:cd:e1:74:a2:f3:61:a0:10:33:d3:7d:f3:
fa:88:6c:8c:8d:19:a4:be:0f:59:0c:45:4e:fc:30:
f8:e3:6f:cf:4e:dd:e6:d0:c5:cb:1f:e8:70:0a:ee:
ef:62:1f:64:f5:3e:24:84:08:35:0d:87:57:1e:d3:
d0:db:d9:d2:30:e4:f7:3e:a6:79:32:48:51:42:3a:
1e:73:10:43:ac:5e:1d:3f:d9:df:d1:f3:37:4e:32:
b0:7d:57:2e:f0:86:2d:8f:a0:65:a3:cd:80:ea:05:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F8:F7:1F:5E:86:DE:C0:8E:9A:4E:9B:9F:3D:B2:DE:1E:79:DC:82
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6a:37:e1:53:23:ea:cf:e7:39:0c:66:ed:51:14:1a:71:42:
10:4a:37:0a:6a:03:47:c2:a3:ce:58:a3:e9:d4:49:d4:5a:ce:
bb:44:25:91:46:fc:7f:fe:11:16:9d:ee:30:d7:6e:a3:15:11:
fd:3e:8e:b1:cc:64:0a:17:5c:ee:cf:2c:e4:65:8e:ed:b7:d1:
24:3c:0b:80:e4:72:3f:1b:aa:eb:5f:40:68:e2:c0:b1:76:b1:
d6:b8:7d:c5:04:55:0c:c0:70:1e:a9:10:28:95:35:96:5d:a8:
40:22:52:ed:f5:28:b5:f6:86:e2:e7:7f:1a:e2:48:a0:5d:81:
b9:41:d1:75:b4:8e:c2:96:8d:02:ce:89:cf:9c:e4:49:52:20:
1c:f9:ce:32:1e:6e:88:57:54:c7:ef:c3:31:53:92:fc:98:b4:
58:f8:15:a8:ba:fd:74:09:62:1c:be:9f:e4:2f:59:33:0d:2d:
26:dd:15:15:6d:4c:3f:24:46:ca:08:82:c3:c4:46:8c:f0:b6:
1b:e3:55:cb:f6:f1:69:1c:81:93:72:85:4f:96:a3:04:c3:75:
9c:0f:b6:22:f0:f0:d0:15:03:9e:f5:0e:f4:27:15:f2:a8:c9:
f2:fe:5b:d7:ff:6a:db:1e:24:13:06:27:8f:a6:a8:9c:39:a7:
a1:c8:32:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztvot4ORI/fnEJYCZYKtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTUyYjQ4Yjk2MTY0OWIzN2MxZTg5ZjgxMTA2MTUzZGM3
YjE0MzUwHhcNMjUwMTMxMTAwMTIzWhcNMjUwMjAxMTAwMTIzWjAzMTEwLwYDVQQD
Eyg5MWY4ZjcxZjVlODZkZWMwOGU5YTRlOWI5ZjNkYjJkZTFlNzlkYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsEH/601TlL/lPEQS9h10/f5xTXg
MJVM/6T3kR+EJmp+MA3dhfw9rrkwsAqCnVP8ZRbFbbR4WKASfvGdP6wtM+Kf8vZV
tNlxZpr3Hb5MYUOpTkmlWTn9oIOKxIpePk7u5O3i/gbpWjaH3Jel48EZmujHNVZF
1TqDpRqI7HwH27QRZvnZJfHSys5NDHLuW/gVexQ0MFWYtbbN4XSi82GgEDPTffP6
iGyMjRmkvg9ZDEVO/DD442/PTt3m0MXLH+hwCu7vYh9k9T4khAg1DYdXHtPQ29nS
MOT3PqZ5MkhRQjoecxBDrF4dP9nf0fM3TjKwfVcu8IYtj6Blo82A6gWXywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJH49x9eht7AjppOm589st4eedyCMB8GA1UdIwQY
MBaAFPwVK0i5YWSbN8Hon4EQYVPcexQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGIt
YTQ3Njk1MTQxYTliLzEvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGItYTQ3Njk1MTQxYTli
LzEvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGo34VMj
6s/nOQxm7VEUGnFCEEo3CmoDR8Kjzlij6dRJ1FrOu0QlkUb8f/4RFp3uMNduoxUR
/T6OscxkChdc7s8s5GWO7bfRJDwLgORyPxuq619AaOLAsXax1rh9xQRVDMBwHqkQ
KJU1ll2oQCJS7fUotfaG4ud/GuJIoF2BuUHRdbSOwpaNAs6Jz5zkSVIgHPnOMh5u
iFdUx+/DMVOS/Ji0WPgVqLr9dAliHL6f5C9ZMw0tJt0VFW1MPyRGygiCw8RGjPC2
G+NVy/bxaRyBk3KFT5ajBMN1nA+2IvDw0BUDnvUO9CcV8qjJ8v5b1/9q2x4kEwYn
j6aonDmnocgysQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:10 2025 by rpki-client