Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
File: DbD591Ww4wPMFtGmM_lYwDYDSUU.mft (raw, json)
Hash identifier: bLbU9Gd/7vtQ6rBCOAQA/rGzTw5vYNesi4CBorVyV9s=
Subject key identifier: 18:4B:73:8A:8E:AB:F9:CC:AD:43:C2:B3:F1:8E:40:0E:3C:3E:85:D7
Authority key identifier: 0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
Certificate issuer: /CN=0db0f9f755b0e303cc16d1a633f958c036034945
Certificate serial: 0194BBCDC0004446E99CF62FF83108C349D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
Manifest number: 090E
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: DbD591Ww4wPMFtGmM_lYwDYDSUU.crl (hash: fnRnWppvwcvQpXGleDklj7WJh213oWRC3lbK2SZMzSs=)
2: s3TIKJMGO-H8fbbN5SX9DjrKZbg.roa (hash: nJZCH4ElBXirrkbsvqmvn6OniRKSBo6O3OjFqSqnuAA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c0:00:44:46:e9:9c:f6:2f:f8:31:08:c3:49:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db0f9f755b0e303cc16d1a633f958c036034945
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=184b738a8eabf9ccad43c2b3f18e400e3c3e85d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:35:1a:89:7b:e1:7d:24:1a:3c:ec:10:9b:
f5:4f:bd:fa:71:97:82:be:19:3a:a9:f9:42:e9:47:
40:79:44:03:ab:a7:24:13:23:cb:a0:31:f1:95:b9:
05:75:cc:6c:8e:62:56:77:63:a2:36:85:b5:b6:ef:
af:97:e1:f3:94:fc:f3:3d:a1:f7:ff:3d:2d:d3:b5:
b8:c6:f3:3e:17:0a:ba:51:e0:c7:39:42:9f:93:13:
cc:f3:0f:c2:c6:d1:3c:a8:cc:d1:17:d0:12:ae:c8:
b4:fe:89:fa:40:97:f4:b2:b2:62:06:e6:90:d4:04:
11:83:8b:76:0f:e1:75:f4:22:07:31:6a:4f:5c:fa:
63:1f:92:8e:30:d4:ea:61:99:99:ad:b8:80:d5:28:
3b:84:61:a5:23:55:aa:b2:a9:94:a2:76:ea:10:9d:
fa:e6:da:5a:61:83:be:48:3b:7c:fb:bb:91:4c:88:
75:e4:67:1f:47:c6:e0:50:61:a8:a5:de:b2:6f:73:
19:97:73:ab:3a:24:85:60:90:b6:58:3c:c2:0c:99:
e9:e9:af:9d:18:05:13:ee:2a:e7:a4:20:9b:6a:5a:
51:ab:77:83:2a:14:c2:e5:29:f0:4b:c9:6d:9d:cb:
4a:31:46:a8:eb:f8:f5:b3:20:04:a0:59:08:f0:7d:
7e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4B:73:8A:8E:AB:F9:CC:AD:43:C2:B3:F1:8E:40:0E:3C:3E:85:D7
X509v3 Authority Key Identifier:
keyid:0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:99:f2:f7:73:44:9e:dc:ed:d7:f3:62:a0:6e:33:f9:b4:27:
55:83:c8:35:bf:31:f9:ca:be:6a:8a:68:fb:d6:0c:97:f1:b0:
9a:23:1c:c2:c8:79:71:d8:07:98:7e:8b:41:f4:79:bd:a8:71:
2a:94:26:f2:b0:10:7c:f7:35:7f:01:15:3e:2f:34:84:5a:90:
f1:5e:1f:d7:f0:01:ab:a0:3b:d0:c2:db:d7:d3:e6:d2:3d:63:
77:df:a2:03:bf:76:e6:8f:d7:c7:d7:c9:1a:e1:6d:8c:c0:bc:
5e:ba:07:f8:7b:f6:34:9c:95:bc:7c:1a:d3:b7:62:af:44:f3:
c0:0a:f0:20:98:4b:c0:7a:07:da:89:59:1c:b3:33:9d:8f:68:
a3:ad:02:84:13:56:29:96:de:77:28:4a:4b:4f:10:9f:ba:76:
98:fa:b3:aa:bc:23:e7:4c:15:0d:65:88:b6:01:91:7f:dc:42:
3a:91:2e:21:14:8d:cd:7b:b8:dc:12:8a:7f:44:98:19:b8:37:
35:0b:60:11:e4:70:b6:e0:1b:18:bc:e1:ce:92:c6:26:0c:1d:
86:60:4c:88:23:a7:12:2a:fc:66:1b:f1:8e:db:b8:80:fb:b8:
fc:80:fa:a7:69:70:01:9a:bf:65:55:20:c9:fb:48:d6:7d:d3:
fa:4b:96:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zcAAREbpnPYv+DEIw0nTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYjBmOWY3NTViMGUzMDNjYzE2ZDFhNjMzZjk1OGMwMzYw
MzQ5NDUwHhcNMjUwMTMxMTAwMDEwWhcNMjUwMjAxMTAwMDEwWjAzMTEwLwYDVQQD
EygxODRiNzM4YThlYWJmOWNjYWQ0M2MyYjNmMThlNDAwZTNjM2U4NWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAo1Gol74X0kGjzsEJv1T736cZeC
vhk6qflC6UdAeUQDq6ckEyPLoDHxlbkFdcxsjmJWd2OiNoW1tu+vl+HzlPzzPaH3
/z0t07W4xvM+Fwq6UeDHOUKfkxPM8w/CxtE8qMzRF9ASrsi0/on6QJf0srJiBuaQ
1AQRg4t2D+F19CIHMWpPXPpjH5KOMNTqYZmZrbiA1Sg7hGGlI1WqsqmUonbqEJ36
5tpaYYO+SDt8+7uRTIh15GcfR8bgUGGopd6yb3MZl3OrOiSFYJC2WDzCDJnp6a+d
GAUT7irnpCCbalpRq3eDKhTC5SnwS8ltnctKMUao6/j1syAEoFkI8H1+qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhLc4qOq/nMrUPCs/GOQA48PoXXMB8GA1UdIwQY
MBaAFA2w+fdVsOMDzBbRpjP5WMA2A0lFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wM2FmYzYtODhmNS00NjYwLTgwMTUt
NjRjOWMyY2M5NjA5LzEvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wM2FmYzYtODhmNS00NjYwLTgwMTUtNjRjOWMyY2M5NjA5
LzEvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZny93NE
ntzt1/NioG4z+bQnVYPINb8x+cq+aopo+9YMl/GwmiMcwsh5cdgHmH6LQfR5vahx
KpQm8rAQfPc1fwEVPi80hFqQ8V4f1/ABq6A70MLb19Pm0j1jd9+iA7925o/Xx9fJ
GuFtjMC8XroH+Hv2NJyVvHwa07dir0TzwArwIJhLwHoH2olZHLMznY9oo60ChBNW
KZbedyhKS08Qn7p2mPqzqrwj50wVDWWItgGRf9xCOpEuIRSNzXu43BKKf0SYGbg3
NQtgEeRwtuAbGLzhzpLGJgwdhmBMiCOnEir8Zhvxjtu4gPu4/ID6p2lwAZq/ZVUg
yftI1n3T+kuWww==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:49:45 2025 by rpki-client