Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
File: RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft (raw, json)
Hash identifier: uSUCJ3I5r3GoNREdJ7uNJUfK8pFIuQMlgi7ZlcT6SjU=
Subject key identifier: F6:E8:E2:F3:A9:EA:C0:D1:54:3A:D2:7C:A1:DE:94:47:33:71:DD:22
Authority key identifier: 45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F
Certificate issuer: /CN=45767054d193a3b8d6c2c009f59cf643e149e39f
Certificate serial: 0194BC04C8D24E7448988C6AD7F4FE162D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl (hash: dgkJmaqUGRNMz1YGIVVjrlY88G/Rdk2SKqTuUJd46CI=)
2: kpeNUrCjwD-bH5D8QQPXuEqA70c.roa (hash: /GB93CH2vpBaaqYNdlIMujujZ/LFvmv11CaA0a79OcU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c8:d2:4e:74:48:98:8c:6a:d7:f4:fe:16:2d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45767054d193a3b8d6c2c009f59cf643e149e39f
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=f6e8e2f3a9eac0d1543ad27ca1de94473371dd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0e:02:24:e4:97:9c:19:9e:f4:c3:8c:de:93:
00:c0:c6:8b:65:ed:ef:41:60:50:da:6a:bc:63:ae:
48:88:88:99:38:f9:b8:53:3d:c5:2b:21:05:5c:2f:
9c:c0:01:fd:c6:74:f6:70:df:4f:0d:02:1c:32:1f:
ba:05:fd:85:b6:f1:f6:38:2f:09:f8:cc:7a:9d:8e:
72:1e:c2:2f:18:47:c9:20:d8:c8:1f:bd:b1:a2:d2:
e0:45:c3:a5:bd:a4:7f:fc:dc:8b:0f:b5:2a:8c:a0:
55:c3:1e:f0:66:b7:3b:27:35:76:e6:e8:5d:9f:d8:
8f:d9:11:f7:06:24:20:65:41:f0:34:b9:48:6a:64:
6c:1d:ee:d0:6c:cd:f8:58:97:65:e4:14:df:c9:e0:
f9:c6:16:c4:3e:65:97:83:a4:56:25:25:04:70:4e:
00:30:82:e0:ef:23:92:82:03:80:03:ba:36:0e:87:
cb:ab:3c:5d:81:0a:52:9b:9b:fb:0c:36:62:28:c3:
d7:50:66:db:24:7a:9e:95:15:11:da:3e:58:83:22:
10:31:f5:0c:44:13:f1:96:a2:57:54:bf:90:44:e3:
3b:52:c2:af:93:0f:4a:e6:fe:df:7d:ec:a2:ab:51:
75:16:2c:cc:1f:38:98:85:c7:2d:29:48:e0:45:64:
fe:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E8:E2:F3:A9:EA:C0:D1:54:3A:D2:7C:A1:DE:94:47:33:71:DD:22
X509v3 Authority Key Identifier:
keyid:45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ed:7c:f2:50:af:cb:7f:11:e1:80:a0:d0:1e:e2:01:81:db:
16:5d:42:59:a8:95:7a:fb:3b:51:ac:2d:3d:13:39:73:ab:e6:
c9:ad:89:bc:f6:5f:de:9f:79:01:23:0a:d7:15:be:31:b9:df:
c8:9a:2e:49:de:da:52:97:1e:a1:68:3e:47:ec:19:11:b6:98:
ee:78:97:6a:5e:a8:5a:1c:fc:f9:29:bb:9d:3e:9b:57:65:07:
d6:65:c9:8a:c0:9c:0b:75:a9:21:fc:75:bd:ee:ea:2c:f0:a4:
f3:53:cf:ee:9b:8c:a5:76:0e:22:87:57:f5:67:11:d7:91:94:
07:75:08:62:af:95:dc:65:83:72:62:3b:cc:2b:48:9d:89:92:
a4:c2:0d:c6:1a:83:fc:96:17:ab:f7:34:70:6b:e3:1f:1d:67:
e2:37:78:ac:f1:4d:09:b3:55:15:64:f1:55:41:91:a6:f7:98:
78:7c:f0:35:76:06:9a:a8:6b:f5:09:80:ff:1a:84:e0:e6:94:
71:e1:c9:1e:64:7d:55:63:73:48:da:42:b3:68:97:46:92:57:
27:ae:07:2f:dc:e2:4c:16:a8:bf:b3:cc:82:9b:1c:03:6f:35:
fe:f1:ef:2b:ff:f9:23:7c:ef:95:ff:d9:f6:82:ef:c6:2e:fd:
0e:25:75:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BMjSTnRImIxq1/T+Fi02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NzY3MDU0ZDE5M2EzYjhkNmMyYzAwOWY1OWNmNjQzZTE0
OWUzOWYwHhcNMjUwMTMxMTEwMDE3WhcNMjUwMjAxMTEwMDE3WjAzMTEwLwYDVQQD
EyhmNmU4ZTJmM2E5ZWFjMGQxNTQzYWQyN2NhMWRlOTQ0NzMzNzFkZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w4CJOSXnBme9MOM3pMAwMaLZe3v
QWBQ2mq8Y65IiIiZOPm4Uz3FKyEFXC+cwAH9xnT2cN9PDQIcMh+6Bf2FtvH2OC8J
+Mx6nY5yHsIvGEfJINjIH72xotLgRcOlvaR//NyLD7UqjKBVwx7wZrc7JzV25uhd
n9iP2RH3BiQgZUHwNLlIamRsHe7QbM34WJdl5BTfyeD5xhbEPmWXg6RWJSUEcE4A
MILg7yOSggOAA7o2DofLqzxdgQpSm5v7DDZiKMPXUGbbJHqelRUR2j5YgyIQMfUM
RBPxlqJXVL+QROM7UsKvkw9K5v7ffeyiq1F1FizMHziYhcctKUjgRWT+lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbo4vOp6sDRVDrSfKHelEczcd0iMB8GA1UdIwQY
MBaAFEV2cFTRk6O41sLACfWc9kPhSeOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlhad1ZOR1RvN2pXd3NBSjlaejJRLUZKNDU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yOGEzYTktZmQ0My00ODljLWJjYzgt
YjgwYTIzYWM3ODkzLzEvUlhad1ZOR1RvN2pXd3NBSjlaejJRLUZKNDU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8yOGEzYTktZmQ0My00ODljLWJjYzgtYjgwYTIzYWM3ODkz
LzEvUlhad1ZOR1RvN2pXd3NBSjlaejJRLUZKNDU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAae188lCv
y38R4YCg0B7iAYHbFl1CWaiVevs7UawtPRM5c6vmya2JvPZf3p95ASMK1xW+Mbnf
yJouSd7aUpceoWg+R+wZEbaY7niXal6oWhz8+Sm7nT6bV2UH1mXJisCcC3WpIfx1
ve7qLPCk81PP7puMpXYOIodX9WcR15GUB3UIYq+V3GWDcmI7zCtInYmSpMINxhqD
/JYXq/c0cGvjHx1n4jd4rPFNCbNVFWTxVUGRpveYeHzwNXYGmqhr9QmA/xqE4OaU
ceHJHmR9VWNzSNpCs2iXRpJXJ64HL9ziTBaov7PMgpscA281/vHvK//5I3zvlf/Z
9oLvxi79DiV10w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:02 2025 by rpki-client