Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
File: cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft (raw, json)
Hash identifier: fyeyL77rFIm46YrO2y8fRjpCTXOFPKsA3WVeFgSA2e0=
Subject key identifier: F3:C1:CB:79:4C:99:AF:E9:C5:F9:8A:83:8A:DC:73:BF:1C:65:9E:06
Authority key identifier: 72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
Certificate issuer: /CN=726f9448a910d2574157a30403f46c1172aeedb6
Certificate serial: 0194BD17864DAF33826629E4BCAAAC4C90CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl (hash: /TBfXcnDy8RlgwBbvF7BgNmUhdJ9eNhPCqF9fKPPUTw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:86:4d:af:33:82:66:29:e4:bc:aa:ac:4c:90:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726f9448a910d2574157a30403f46c1172aeedb6
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=f3c1cb794c99afe9c5f98a838adc73bf1c659e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:e0:f8:51:c5:7c:e5:84:fc:02:39:52:ae:
42:84:d4:0a:ab:85:85:2a:74:94:93:39:11:66:da:
dc:80:a3:30:8c:e0:45:26:9d:a6:48:69:1e:a5:d5:
ca:f9:fa:3a:bf:d7:83:fd:55:ff:e8:3e:de:31:2c:
f8:8e:cf:e3:94:65:aa:a1:ec:c0:9a:26:f6:5a:bd:
22:42:f7:35:20:81:b1:63:36:f3:72:67:71:b6:3c:
2d:28:fe:c9:f8:42:5a:ce:a6:e6:89:a3:c4:6f:77:
0e:35:23:c9:a5:c2:d1:eb:17:7e:78:72:db:b8:40:
d5:07:df:35:bc:94:ee:83:c7:d3:93:e4:7a:5e:69:
b2:b8:c8:ef:e2:60:80:c3:21:27:cd:8f:fb:07:82:
ba:83:87:82:63:93:0c:f6:d7:69:5f:ef:ae:50:8b:
93:fe:15:4c:58:b0:bf:ba:ed:1c:a6:b6:fd:e0:e9:
58:8a:90:ac:97:5b:2f:b7:64:43:c8:41:25:f0:24:
c7:dc:56:28:e1:cd:44:8c:c5:5c:42:9f:28:65:d1:
39:84:f4:22:6b:e1:eb:1e:ea:50:bb:fe:6c:e6:cb:
57:4f:74:79:bc:64:c8:81:72:70:04:a0:ab:8b:9f:
99:7d:92:f0:93:a5:74:1c:78:c5:80:97:6e:29:66:
18:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C1:CB:79:4C:99:AF:E9:C5:F9:8A:83:8A:DC:73:BF:1C:65:9E:06
X509v3 Authority Key Identifier:
keyid:72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c2:e5:14:8a:6f:0d:aa:4a:56:7a:61:73:b6:44:8e:6c:f0:
2c:26:f3:8f:cc:6d:e0:8b:75:29:ee:8c:fb:ec:d4:e9:8a:0f:
66:87:4a:59:e5:e8:78:eb:9e:39:3e:21:8c:b1:a5:74:d8:d5:
8d:6b:0c:66:eb:23:f4:89:18:6e:9e:61:26:fa:24:9a:a3:8d:
3e:6c:6f:d3:67:ed:3d:8c:86:e2:6d:bb:e9:bb:da:d5:cc:db:
2f:43:db:63:31:a3:b4:e3:7a:6b:8b:bd:eb:0c:b5:93:f0:a0:
bf:c5:fe:6e:c6:af:2a:2d:be:78:e8:36:cf:fc:8a:3a:5a:aa:
6f:4d:c3:e5:02:c0:81:54:95:e2:2e:24:43:27:e3:c3:26:32:
a1:08:64:dd:80:ec:7b:fb:59:60:b2:fc:58:ee:a3:0b:75:7f:
0e:60:c8:1d:d5:33:52:d9:d1:e4:0d:cc:7d:0f:aa:5b:f1:04:
49:13:79:37:ff:3f:46:b7:7f:31:01:19:ff:94:d1:a2:19:13:
6e:27:79:bb:d8:e0:df:48:8d:8b:d7:9d:25:cc:6a:69:00:2d:
89:a5:46:e9:d8:dc:18:4b:f8:cc:06:49:ec:07:ff:0d:0e:b1:
46:5b:4b:68:94:12:f8:40:c8:2d:45:cb:7d:6d:de:b5:4f:ab:
32:26:67:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F4ZNrzOCZinkvKqsTJDMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNmY5NDQ4YTkxMGQyNTc0MTU3YTMwNDAzZjQ2YzExNzJh
ZWVkYjYwHhcNMjUwMTMxMTYwMDIyWhcNMjUwMjAxMTYwMDIyWjAzMTEwLwYDVQQD
EyhmM2MxY2I3OTRjOTlhZmU5YzVmOThhODM4YWRjNzNiZjFjNjU5ZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVLg+FHFfOWE/AI5Uq5ChNQKq4WF
KnSUkzkRZtrcgKMwjOBFJp2mSGkepdXK+fo6v9eD/VX/6D7eMSz4js/jlGWqoezA
mib2Wr0iQvc1IIGxYzbzcmdxtjwtKP7J+EJazqbmiaPEb3cONSPJpcLR6xd+eHLb
uEDVB981vJTug8fTk+R6XmmyuMjv4mCAwyEnzY/7B4K6g4eCY5MM9tdpX++uUIuT
/hVMWLC/uu0cprb94OlYipCsl1svt2RDyEEl8CTH3FYo4c1EjMVcQp8oZdE5hPQi
a+HrHupQu/5s5stXT3R5vGTIgXJwBKCri5+ZfZLwk6V0HHjFgJduKWYYXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPBy3lMma/pxfmKg4rcc78cZZ4GMB8GA1UdIwQY
MBaAFHJvlEipENJXQVejBAP0bBFyru22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY20tVVNLa1EwbGRCVjZNRUFfUnNFWEt1N2JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lN2UzNmUtYTMyMy00ZjQ3LWE3NzYt
NjZiMTQxMTk0ZmQyLzEvY20tVVNLa1EwbGRCVjZNRUFfUnNFWEt1N2JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9lN2UzNmUtYTMyMy00ZjQ3LWE3NzYtNjZiMTQxMTk0ZmQy
LzEvY20tVVNLa1EwbGRCVjZNRUFfUnNFWEt1N2JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsLlFIpv
DapKVnphc7ZEjmzwLCbzj8xt4It1Ke6M++zU6YoPZodKWeXoeOueOT4hjLGldNjV
jWsMZusj9IkYbp5hJvokmqONPmxv02ftPYyG4m276bva1czbL0PbYzGjtON6a4u9
6wy1k/Cgv8X+bsavKi2+eOg2z/yKOlqqb03D5QLAgVSV4i4kQyfjwyYyoQhk3YDs
e/tZYLL8WO6jC3V/DmDIHdUzUtnR5A3MfQ+qW/EESRN5N/8/Rrd/MQEZ/5TRohkT
bid5u9jg30iNi9edJcxqaQAtiaVG6djcGEv4zAZJ7Af/DQ6xRltLaJQS+EDILUXL
fW3etU+rMiZn7g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:32 2025 by rpki-client