Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier: VOEOcs6KOQ0JU1vjnW1IiJxPJePrWmaG7hzIOm/JCRI=
Subject key identifier: 06:02:B2:15:C2:D7:BA:E8:D1:8A:3F:1E:14:52:3E:93:B2:C3:54:96
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 0194BC04DFA32385A400C71602094D23B2CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number: 0AAD
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: 2+XfYLSoL3x0OJOiNmzgxAvP0ITiEsrHHxe7wKG44fk=)
2: xNx96Q3CalEzxDDmWGhbb3xTorI.roa (hash: gvLi2++gvNdVJ+GZ37QZOorhQSEvCo36oQwUoZic47Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:df:a3:23:85:a4:00:c7:16:02:09:4d:23:b2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=0602b215c2d7bae8d18a3f1e14523e93b2c35496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:81:77:a7:68:a8:cc:14:8c:28:e1:c4:5f:
4b:44:5b:e9:54:98:70:32:4b:02:64:33:23:98:fe:
43:f4:53:90:d0:2e:6d:98:a9:ca:fc:65:a8:ed:64:
56:cd:ce:e4:d1:9d:e3:75:83:a9:56:0d:57:dd:f4:
9e:a3:ac:2c:69:9d:66:48:92:74:61:e1:38:3d:4f:
78:2d:27:bc:07:2a:5f:23:88:01:0b:81:5e:0a:aa:
c4:e5:a3:1a:e0:5c:e2:9c:a6:6f:bb:19:2f:a5:a1:
f2:c0:5c:47:37:a7:a0:e2:0a:01:e6:0c:c1:69:be:
49:9f:00:b4:fc:92:31:ed:62:c0:76:05:c0:3f:88:
ed:d8:7b:b7:46:aa:b5:69:ce:74:1d:0a:88:0a:b2:
16:d0:84:fd:95:99:d6:ad:2b:98:ec:5d:e7:5f:39:
30:b2:78:19:1a:56:27:d8:4a:a5:cd:49:35:de:0d:
be:5d:0a:99:54:34:30:42:d9:71:02:92:9c:0c:03:
b6:93:ac:d7:91:23:e4:76:19:92:39:7a:b6:6f:e3:
ca:f5:a5:5e:a5:c5:e1:be:e4:c7:1e:73:ad:eb:ba:
ce:d3:80:bc:5f:97:04:15:d7:b6:eb:c3:58:8e:7f:
91:7a:8c:74:3f:f9:0a:53:96:8e:43:be:72:a0:b8:
d7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:02:B2:15:C2:D7:BA:E8:D1:8A:3F:1E:14:52:3E:93:B2:C3:54:96
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8d:dc:cb:75:7f:a9:f9:df:fb:01:2e:cf:99:74:f4:97:a1:
ce:8c:a2:41:0e:6f:f3:89:35:70:30:77:ba:80:72:31:d1:a4:
52:31:0d:94:d3:9f:82:24:0f:be:33:d6:26:e5:aa:8c:5e:d8:
ee:75:0f:52:91:5b:33:22:08:af:d7:10:f7:80:ca:5f:25:67:
25:fd:ef:12:9f:e9:03:ee:50:33:cb:c7:c6:6a:68:ab:93:0c:
ea:1b:d6:54:42:f6:39:bf:d9:62:b8:86:0b:1c:1b:66:68:1d:
08:50:b8:95:ba:df:86:28:f4:6f:42:55:3c:ce:74:f2:86:ba:
2e:e6:68:66:0a:81:a6:57:36:74:ee:e0:a5:83:32:6c:e8:3d:
3e:d8:b1:57:f0:5c:3b:77:91:0c:70:04:9d:c7:52:71:c8:c2:
cf:d7:3c:9b:d8:a4:30:25:c2:6a:bc:e6:b7:29:6f:d3:84:d8:
b3:fd:ec:a4:9c:4f:c1:cf:2a:ca:22:06:a4:b9:26:1d:7b:e8:
c2:e5:dc:cd:31:bc:c2:54:e3:51:a9:27:70:43:df:08:0e:b5:
fc:89:1b:aa:61:43:4d:ec:1f:8a:b2:df:0d:fe:53:d6:17:b3:
40:b0:58:70:48:64:1d:a3:e7:61:e9:c3:b7:fc:fe:35:29:2c:
87:8f:ce:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BN+jI4WkAMcWAglNI7LLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OTc3YWY1ODBjODUwY2M4YmY5MDY0OWY5YmRhOGE2YTQ4
YmYzOTYwHhcNMjUwMTMxMTEwMDIzWhcNMjUwMjAxMTEwMDIzWjAzMTEwLwYDVQQD
EygwNjAyYjIxNWMyZDdiYWU4ZDE4YTNmMWUxNDUyM2U5M2IyYzM1NDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua+Bd6doqMwUjCjhxF9LRFvpVJhw
MksCZDMjmP5D9FOQ0C5tmKnK/GWo7WRWzc7k0Z3jdYOpVg1X3fSeo6wsaZ1mSJJ0
YeE4PU94LSe8BypfI4gBC4FeCqrE5aMa4FzinKZvuxkvpaHywFxHN6eg4goB5gzB
ab5JnwC0/JIx7WLAdgXAP4jt2Hu3Rqq1ac50HQqICrIW0IT9lZnWrSuY7F3nXzkw
sngZGlYn2EqlzUk13g2+XQqZVDQwQtlxApKcDAO2k6zXkSPkdhmSOXq2b+PK9aVe
pcXhvuTHHnOt67rO04C8X5cEFde268NYjn+Reox0P/kKU5aOQ75yoLjXwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYCshXC17ro0Yo/HhRSPpOyw1SWMB8GA1UdIwQY
MBaAFPeXevWAyFDMi/kGSfm9qKaki/OWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTVkNjlZRElVTXlMLVFaSi1iMm9wcVNMODVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iMzYxZWYtNWY2OS00YmNiLTk4M2Mt
MjExMjgwMjcyNTVkLzEvOTVkNjlZRElVTXlMLVFaSi1iMm9wcVNMODVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9iMzYxZWYtNWY2OS00YmNiLTk4M2MtMjExMjgwMjcyNTVk
LzEvOTVkNjlZRElVTXlMLVFaSi1iMm9wcVNMODVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZI3cy3V/
qfnf+wEuz5l09JehzoyiQQ5v84k1cDB3uoByMdGkUjENlNOfgiQPvjPWJuWqjF7Y
7nUPUpFbMyIIr9cQ94DKXyVnJf3vEp/pA+5QM8vHxmpoq5MM6hvWVEL2Ob/ZYriG
CxwbZmgdCFC4lbrfhij0b0JVPM508oa6LuZoZgqBplc2dO7gpYMybOg9PtixV/Bc
O3eRDHAEncdSccjCz9c8m9ikMCXCarzmtylv04TYs/3spJxPwc8qyiIGpLkmHXvo
wuXczTG8wlTjUakncEPfCA61/IkbqmFDTewfirLfDf5T1hezQLBYcEhkHaPnYenD
t/z+NSksh4/OXg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:09 2025 by rpki-client