Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: /0eQS8J9YGnPrWYzifXCWz3bAjnZfHnPCPSTWp2HQxE=
Subject key identifier: EC:E7:0E:1A:25:9F:8A:02:D1:7F:B7:E5:41:CA:98:4D:28:43:FD:5E
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 0194BC04CA1B2B2DD62E0838B2289E995568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0838
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: KokorLWhkOYG9QeK9EeTbnrbbiLhdi1AAcuuBPGzKtI=)
2: TO36gbkW8COMg60JGW_q2Qlywo0.roa (hash: 2OdoAiYhktu2AQ1JAmSAkg5zx91Aj8ZuNYg+AMvWEQg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ca:1b:2b:2d:d6:2e:08:38:b2:28:9e:99:55:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=ece70e1a259f8a02d17fb7e541ca984d2843fd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:8b:c1:a8:05:0a:e0:39:10:e1:0d:c6:2d:
e8:18:39:be:c0:ca:72:21:10:56:55:40:2a:8e:57:
e0:4f:b9:1c:3f:ed:a7:27:df:2c:ad:04:78:98:b5:
5c:b1:d5:b9:e9:24:c9:65:0a:4d:96:5f:05:56:8b:
80:73:ab:de:67:26:07:97:ba:05:9c:f6:19:0a:6f:
73:46:15:ca:28:9d:ea:85:6c:b9:4b:2e:46:f4:b1:
8b:84:0a:fe:9a:22:2d:b5:f4:2e:bb:b1:f3:58:bd:
0d:9d:ee:dd:67:5e:8f:59:5f:7e:a7:15:de:51:90:
e2:70:41:cb:49:b0:78:87:a5:07:80:e6:66:3b:78:
29:d0:3b:4b:f2:3c:5e:8c:20:b9:c2:59:35:12:f1:
fd:3e:ab:36:e7:99:19:f4:c2:f1:0e:91:99:81:0a:
1f:70:ff:e4:65:93:6f:05:ee:fb:e6:9a:e2:04:c4:
22:ad:93:8b:47:9e:6a:6f:22:d9:c7:c4:ae:a8:21:
4a:7e:f8:ba:83:b1:07:90:43:7f:64:cd:80:a8:a7:
c0:75:e2:65:fb:c2:9b:95:95:fa:dd:ee:d4:f9:ed:
1b:d1:ae:eb:18:4b:b8:24:e7:ca:0c:13:d2:1c:c5:
75:b0:e6:79:11:c7:59:8d:59:d0:1e:0b:37:46:a7:
34:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E7:0E:1A:25:9F:8A:02:D1:7F:B7:E5:41:CA:98:4D:28:43:FD:5E
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:79:b2:51:76:93:49:26:ef:8c:48:30:48:95:ae:41:4f:e5:
c1:2c:52:8f:02:8f:08:e9:da:e1:d7:2c:14:42:0e:4b:86:66:
cc:21:e4:4e:55:7c:68:c8:4f:0e:32:0a:c5:18:a0:ab:dc:63:
d2:85:91:ba:0a:8a:09:60:ba:c6:4b:4a:5d:bf:c2:0d:ed:ad:
9e:36:8e:6a:fc:74:9e:34:fa:a0:96:d6:f8:3d:65:ab:67:41:
1d:4b:2f:41:bd:86:0d:50:82:8c:30:df:1d:69:a4:13:85:42:
8f:7b:cb:ca:85:d1:f2:95:ec:24:c3:11:cd:19:d5:6c:f8:b9:
af:07:32:17:a8:5d:08:5e:af:c9:ea:7f:d7:1e:83:9a:d0:3e:
61:44:8e:16:c6:7f:09:a6:02:8b:5e:b7:0b:cf:78:86:ca:15:
af:ce:ca:15:94:88:67:47:9f:ff:0d:32:8e:2f:14:fa:09:85:
6e:9c:81:3c:ea:96:09:d5:1c:c5:dc:02:d1:8a:85:2b:a4:10:
d9:d9:79:a1:f0:c3:61:db:ca:c4:75:9a:35:c0:7f:d7:88:ba:
b5:c6:e6:75:5c:a6:00:86:bb:46:0c:47:dd:f0:55:52:b0:6b:
81:25:fc:31:7d:03:ef:7d:ed:48:22:1f:eb:e7:07:74:a7:e8:
43:99:22:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BMobKy3WLgg4siiemVVoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWFmOTFlOWViMTViNjc2YTk2ZjBhZjY1NGNjMDMyODgx
NTRhMWEwHhcNMjUwMTMxMTEwMDE3WhcNMjUwMjAxMTEwMDE3WjAzMTEwLwYDVQQD
EyhlY2U3MGUxYTI1OWY4YTAyZDE3ZmI3ZTU0MWNhOTg0ZDI4NDNmZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/OLwagFCuA5EOENxi3oGDm+wMpy
IRBWVUAqjlfgT7kcP+2nJ98srQR4mLVcsdW56STJZQpNll8FVouAc6veZyYHl7oF
nPYZCm9zRhXKKJ3qhWy5Sy5G9LGLhAr+miIttfQuu7HzWL0Nne7dZ16PWV9+pxXe
UZDicEHLSbB4h6UHgOZmO3gp0DtL8jxejCC5wlk1EvH9Pqs255kZ9MLxDpGZgQof
cP/kZZNvBe775priBMQirZOLR55qbyLZx8SuqCFKfvi6g7EHkEN/ZM2AqKfAdeJl
+8KblZX63e7U+e0b0a7rGEu4JOfKDBPSHMV1sOZ5EcdZjVnQHgs3Rqc0gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOznDholn4oC0X+35UHKmE0oQ/1eMB8GA1UdIwQY
MBaAFNua+R6esVtnapbwr2VMwDKIFUoaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZGJmZWItN2FjMS00ZGExLThkNDAt
ZjkzNWZjMGYyMGQ1LzEvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jZGJmZWItN2FjMS00ZGExLThkNDAtZjkzNWZjMGYyMGQ1
LzEvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHmyUXaT
SSbvjEgwSJWuQU/lwSxSjwKPCOna4dcsFEIOS4ZmzCHkTlV8aMhPDjIKxRigq9xj
0oWRugqKCWC6xktKXb/CDe2tnjaOavx0njT6oJbW+D1lq2dBHUsvQb2GDVCCjDDf
HWmkE4VCj3vLyoXR8pXsJMMRzRnVbPi5rwcyF6hdCF6vyep/1x6DmtA+YUSOFsZ/
CaYCi163C894hsoVr87KFZSIZ0ef/w0yji8U+gmFbpyBPOqWCdUcxdwC0YqFK6QQ
2dl5ofDDYdvKxHWaNcB/14i6tcbmdVymAIa7RgxH3fBVUrBrgSX8MX0D733tSCIf
6+cHdKfoQ5ki9w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:07 2025 by rpki-client