Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File: 47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier: HG+HaHkQoY10OR/i+5gVVNZ2OtmRZn3wWlw2DpkZIwU=
Subject key identifier: 72:DC:94:85:AC:60:1D:BB:B4:BF:01:4E:53:5C:94:28:C9:04:79:C1
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer: /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial: 0194BC3BBF4F188D2C297A57537A424461AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number: 0A28
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: Q/xEPMf2lnASVuhsKwAIStf1vJY2n5G7K5QNJSpI4e0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bf:4f:18:8d:2c:29:7a:57:53:7a:42:44:61:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=72dc9485ac601dbbb4bf014e535c9428c90479c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0b:71:01:35:3a:cc:a2:72:d7:d8:20:d5:61:
78:10:47:ee:cb:77:e5:33:1e:bf:e7:32:d0:7e:a9:
c7:13:25:35:2d:f0:fc:d0:af:ca:4f:4a:ec:67:d2:
89:4f:f0:5f:77:bf:3e:a6:62:f4:86:78:fc:c9:ac:
02:08:82:26:e1:a9:1b:71:ac:aa:9f:1b:b8:7d:5b:
86:d0:09:29:3e:83:0b:76:05:71:ee:14:c3:8f:d9:
95:77:cc:ab:e9:13:bb:2f:51:eb:f2:f8:38:4f:61:
19:3b:25:3a:2c:39:f9:92:35:90:eb:90:0d:1f:fe:
da:f5:0a:5a:dc:38:a3:53:cf:c2:85:02:6a:1d:9f:
00:d3:07:2e:59:14:b5:60:23:90:c1:9a:2a:aa:78:
05:d9:71:5f:b5:b2:04:79:82:97:88:ed:03:79:dc:
5a:20:2d:9f:3e:83:9a:7d:ad:dc:d4:e1:c8:66:05:
13:2c:0f:23:df:da:61:4e:82:bc:e3:59:6f:fd:82:
22:da:cc:0a:7a:36:e5:a7:5d:28:6c:66:8b:79:18:
8b:29:14:46:a0:73:c7:84:2e:7b:9a:28:94:26:1b:
f7:92:f0:a3:fc:e6:96:9e:3b:32:62:ce:13:ec:c3:
5b:d9:7f:85:f8:62:65:42:df:19:41:b1:13:3c:3e:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DC:94:85:AC:60:1D:BB:B4:BF:01:4E:53:5C:94:28:C9:04:79:C1
X509v3 Authority Key Identifier:
keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d5:56:96:a5:53:8c:2f:40:69:ba:9c:a0:6a:a3:33:69:b9:
80:7a:cc:74:f7:8c:9f:9b:ee:f1:c1:06:88:e8:8d:0a:6e:93:
20:b8:cc:61:0a:fd:84:bf:e0:90:74:26:94:d0:0e:98:62:49:
51:2a:b6:d7:c2:15:49:40:60:21:0a:f5:c3:37:3b:be:c9:40:
3d:10:7b:5f:fe:99:f4:da:13:5a:63:c5:cd:9a:95:60:6f:05:
03:33:c5:19:13:43:bc:6e:ce:c0:39:70:5d:53:7b:77:5d:43:
bc:c8:21:ee:65:f1:3f:84:1b:16:49:df:c1:7e:09:b6:a8:10:
d5:3e:1e:f5:35:2a:7a:ef:6f:a0:82:bd:c7:e2:29:c0:cc:ab:
a0:03:8e:da:56:03:33:51:55:44:39:c3:45:92:c9:aa:45:7d:
cc:8e:c0:da:71:3a:20:76:c8:74:e8:f9:64:e8:8a:fb:c6:3b:
36:fd:90:69:2f:ef:39:2e:66:8a:43:62:ce:b9:cb:c2:03:1d:
c3:e3:ea:13:c7:3b:c6:7f:5f:2c:d6:1a:e3:c5:f7:2a:a3:c2:
ca:43:4f:d4:75:6c:83:96:20:4d:c4:a2:43:bb:c8:be:9d:5e:
a6:91:43:77:1a:78:b0:3d:d4:10:ed:dc:03:b7:ce:e6:d0:9e:
21:cf:9a:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O79PGI0sKXpXU3pCRGGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYjhkODZmYWVmMzkzODFkNjlhMjE4MjU5NTgyYWYyODVl
YWI4ZGYwHhcNMjUwMTMxMTIwMDE5WhcNMjUwMjAxMTIwMDE5WjAzMTEwLwYDVQQD
Eyg3MmRjOTQ4NWFjNjAxZGJiYjRiZjAxNGU1MzVjOTQyOGM5MDQ3OWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggtxATU6zKJy19gg1WF4EEfuy3fl
Mx6/5zLQfqnHEyU1LfD80K/KT0rsZ9KJT/Bfd78+pmL0hnj8yawCCIIm4akbcayq
nxu4fVuG0AkpPoMLdgVx7hTDj9mVd8yr6RO7L1Hr8vg4T2EZOyU6LDn5kjWQ65AN
H/7a9Qpa3DijU8/ChQJqHZ8A0wcuWRS1YCOQwZoqqngF2XFftbIEeYKXiO0Dedxa
IC2fPoOafa3c1OHIZgUTLA8j39phToK841lv/YIi2swKejblp10obGaLeRiLKRRG
oHPHhC57miiUJhv3kvCj/OaWnjsyYs4T7MNb2X+F+GJlQt8ZQbETPD4xYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLclIWsYB27tL8BTlNclCjJBHnBMB8GA1UdIwQY
MBaAFOO42G+u85OB1pohgllYKvKF6rjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDdqWWI2N3prNEhXbWlHQ1dWZ3E4b1hxdU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82NTgzNzUtNDJjOC00ZmUyLTg1MDgt
YzI1YTJjODI4YzVmLzEvNDdqWWI2N3prNEhXbWlHQ1dWZ3E4b1hxdU44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82NTgzNzUtNDJjOC00ZmUyLTg1MDgtYzI1YTJjODI4YzVm
LzEvNDdqWWI2N3prNEhXbWlHQ1dWZ3E4b1hxdU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAatVWlqVT
jC9AabqcoGqjM2m5gHrMdPeMn5vu8cEGiOiNCm6TILjMYQr9hL/gkHQmlNAOmGJJ
USq218IVSUBgIQr1wzc7vslAPRB7X/6Z9NoTWmPFzZqVYG8FAzPFGRNDvG7OwDlw
XVN7d11DvMgh7mXxP4QbFknfwX4JtqgQ1T4e9TUqeu9voIK9x+IpwMyroAOO2lYD
M1FVRDnDRZLJqkV9zI7A2nE6IHbIdOj5ZOiK+8Y7Nv2QaS/vOS5mikNizrnLwgMd
w+PqE8c7xn9fLNYa48X3KqPCykNP1HVsg5YgTcSiQ7vIvp1eppFDdxp4sD3UEO3c
A7fO5tCeIc+a1Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:38 2025 by rpki-client