Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
File: 20bM9fil_kT0v9m6ZrpRJG2osYQ.mft (raw, json)
Hash identifier: 6Sd4tih3V0l8G8vIf3IGcej9pAY+NBxU9XS8ltnI00Q=
Subject key identifier: 98:F7:03:14:60:19:61:AB:F9:C6:A1:80:04:BD:39:1C:91:4D:9B:72
Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Certificate serial: 0194BC72CC8B5BBB5C5DD85E08C6A2129362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
Manifest number: 11EF
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: 20bM9fil_kT0v9m6ZrpRJG2osYQ.crl (hash: s0ddHpHvefjdnkn85ASKZqdCgOOvDPcsU+GQDw/wQ9U=)
2: tE13-Z8TEXFI2N_Q3eslEjXwYJ4.roa (hash: 7axnrMAdFOe7EcvPvTZA4mgDnvv0sfD7w1s1AvMo3bY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cc:8b:5b:bb:5c:5d:d8:5e:08:c6:a2:12:93:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=98f70314601961abf9c6a18004bd391c914d9b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:5b:08:5f:a6:4c:8c:bf:2e:d3:05:49:52:
9a:d2:be:f2:3c:80:58:f8:9c:26:78:75:ff:92:91:
24:0c:83:f4:13:98:08:39:ee:5b:69:f4:12:ac:fd:
19:55:86:9d:89:25:3c:9d:bd:94:bb:90:70:bf:af:
f6:b2:17:65:b0:87:7a:f0:1a:da:4e:d4:fd:ea:d3:
f6:30:67:f0:6c:d7:93:38:88:4f:d3:2d:46:b6:55:
f2:b8:bd:3c:4d:a5:bd:fe:1e:e5:09:35:db:00:bf:
60:2d:f3:7e:aa:a1:21:93:7a:c3:f5:2d:00:db:43:
a6:12:b5:58:fe:fc:c5:3f:e9:b2:57:9d:f0:b6:30:
70:c4:e4:c5:49:02:bc:34:ab:28:32:d8:98:70:eb:
db:a5:de:44:e4:44:cc:3b:4d:56:36:3b:73:4b:12:
95:d3:6d:f3:2f:49:52:14:7b:d8:3d:ad:e2:2b:4c:
31:36:9b:5a:7c:fa:05:de:1f:70:82:a1:a0:49:1e:
6d:e1:ad:47:18:3a:b5:6c:a3:57:70:29:e1:e0:17:
9b:bb:c0:bf:ed:0b:62:ff:6b:ce:eb:a4:c8:fe:e5:
86:ec:ff:49:66:a2:78:e4:81:d9:91:ff:9f:22:5d:
ab:19:0c:44:af:f5:cf:cc:03:fe:e9:25:f1:bb:7f:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F7:03:14:60:19:61:AB:F9:C6:A1:80:04:BD:39:1C:91:4D:9B:72
X509v3 Authority Key Identifier:
keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:47:79:16:8e:b6:58:b4:31:9f:6b:10:71:d6:f4:a7:f7:61:
f1:eb:2c:e2:1d:82:09:b0:00:76:47:29:2e:74:2c:42:fb:4d:
68:b4:68:75:d2:e9:ac:7a:cf:2e:0a:17:e9:89:57:e2:f7:8a:
e0:2e:61:cb:c2:54:d9:85:01:3a:32:1c:63:70:0e:e7:35:bd:
ab:d0:98:8d:3e:6c:29:d0:a0:32:32:39:8a:06:3a:ff:c1:fd:
7e:89:8d:d3:92:e3:3c:62:bf:2a:28:e1:e2:ea:0d:65:a1:0f:
69:08:79:60:b2:cf:5c:26:72:b8:a2:5e:e5:3a:a7:64:8f:b9:
ce:a9:9d:ad:15:3f:c9:ac:1f:27:f5:cd:93:96:82:5f:78:5d:
56:c0:2c:d5:61:b6:4b:1d:cd:7d:0a:85:4e:56:59:f9:e2:18:
ad:13:2e:29:2d:d5:ef:29:94:f5:8b:57:45:91:f7:6d:77:a5:
1e:d8:da:e8:07:b3:2f:40:d4:5d:82:a6:9f:6b:4d:df:7b:25:
99:da:e3:1b:7c:88:04:e8:d9:6b:f4:a9:4c:9a:57:11:ce:b2:
58:a0:38:e6:70:66:0c:08:a4:35:71:6b:4f:2e:c5:ff:70:4a:
e2:6f:b8:a7:f5:88:4d:51:5f:76:04:e8:9f:9f:9d:3b:a7:ba:
d3:93:47:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8csyLW7tcXdheCMaiEpNiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDZjY2Y1ZjhhNWZlNDRmNGJmZDliYTY2YmE1MTI0NmRh
OGIxODQwHhcNMjUwMTMxMTMwMDI3WhcNMjUwMjAxMTMwMDI3WjAzMTEwLwYDVQQD
Eyg5OGY3MDMxNDYwMTk2MWFiZjljNmExODAwNGJkMzkxYzkxNGQ5YjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy9bCF+mTIy/LtMFSVKa0r7yPIBY
+JwmeHX/kpEkDIP0E5gIOe5bafQSrP0ZVYadiSU8nb2Uu5Bwv6/2shdlsId68Bra
TtT96tP2MGfwbNeTOIhP0y1GtlXyuL08TaW9/h7lCTXbAL9gLfN+qqEhk3rD9S0A
20OmErVY/vzFP+myV53wtjBwxOTFSQK8NKsoMtiYcOvbpd5E5ETMO01WNjtzSxKV
023zL0lSFHvYPa3iK0wxNptafPoF3h9wgqGgSR5t4a1HGDq1bKNXcCnh4Bebu8C/
7Qti/2vO66TI/uWG7P9JZqJ45IHZkf+fIl2rGQxEr/XPzAP+6SXxu38w1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJj3AxRgGWGr+cahgAS9ORyRTZtyMB8GA1UdIwQY
MBaAFNtGzPX4pf5E9L/Zuma6USRtqLGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mNzJhMWUtNmFkYi00MzAyLWEwZTgt
ZDQyYTgxYjgxZTIzLzEvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9mNzJhMWUtNmFkYi00MzAyLWEwZTgtZDQyYTgxYjgxZTIz
LzEvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEd5Fo62
WLQxn2sQcdb0p/dh8ess4h2CCbAAdkcpLnQsQvtNaLRoddLprHrPLgoX6YlX4veK
4C5hy8JU2YUBOjIcY3AO5zW9q9CYjT5sKdCgMjI5igY6/8H9fomN05LjPGK/Kijh
4uoNZaEPaQh5YLLPXCZyuKJe5TqnZI+5zqmdrRU/yawfJ/XNk5aCX3hdVsAs1WG2
Sx3NfQqFTlZZ+eIYrRMuKS3V7ymU9YtXRZH3bXelHtja6AezL0DUXYKmn2tN33sl
mdrjG3yIBOjZa/SpTJpXEc6yWKA45nBmDAikNXFrTy7F/3BK4m+4p/WITVFfdgTo
n5+dO6e605NHHA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:58:23 2025 by rpki-client