Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
File: g_65rfwvZVEiBb1IETJMnX9qAiI.mft (raw, json)
Hash identifier: vI2uahZtAsO1UbHtmv6H632M9rhea6Jdq3dmAYqEtbU=
Subject key identifier: 3B:96:64:61:96:F2:B4:41:61:05:69:55:31:2D:7B:24:B0:17:57:86
Authority key identifier: 83:FE:B9:AD:FC:2F:65:51:22:05:BD:48:11:32:4C:9D:7F:6A:02:22
Certificate issuer: /CN=83feb9adfc2f65512205bd4811324c9d7f6a0222
Certificate serial: 0194BD8539F6B66E9F3B2826F7868ACAFD81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
Manifest number: 0224
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: g_65rfwvZVEiBb1IETJMnX9qAiI.crl (hash: ec37njJ/uk18XTEcv9D/19MKXK9up8/6G4IeuJ8grXo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:39:f6:b6:6e:9f:3b:28:26:f7:86:8a:ca:fd:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83feb9adfc2f65512205bd4811324c9d7f6a0222
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=3b96646196f2b44161056955312d7b24b0175786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5f:77:4a:a0:db:c8:23:a2:5a:14:9c:f3:ef:
65:4d:40:1f:1b:70:c9:35:97:b8:60:37:f1:e5:33:
b6:02:52:e8:3d:c7:26:08:b7:94:ef:83:64:1c:e2:
dc:e8:c9:f6:68:4e:06:fb:75:96:70:e4:0f:a2:fb:
59:3f:e8:39:2a:84:8a:16:33:40:75:5b:e7:f8:03:
cd:83:7d:ae:3e:e8:a3:da:83:eb:bf:a3:00:76:cd:
6f:a8:bc:e8:0e:39:db:e5:13:fe:46:1a:2b:b4:a1:
2c:6c:d3:9e:c9:c4:6c:69:ad:52:4e:b4:29:63:e6:
12:7e:40:d2:c4:25:1f:db:e5:63:0f:4b:33:23:44:
3e:f9:68:46:02:a1:21:1e:ca:b7:71:a3:a2:3a:07:
ac:b4:66:21:8d:2d:cf:e6:97:6f:29:de:cd:51:7c:
07:e8:2f:39:33:7c:b2:78:06:40:69:6c:82:4a:2b:
d2:9a:2b:ab:40:65:83:bf:d3:68:3a:0c:6d:1f:cc:
18:88:71:d1:24:4d:77:ba:fb:e3:05:59:3a:b9:b4:
55:9d:7f:f3:19:b4:29:fd:00:79:46:cf:9c:e7:28:
40:e8:f7:fb:0f:f7:07:09:93:ca:a0:a8:ee:8e:65:
0e:56:c7:5f:d7:ee:ef:94:dc:93:14:2a:14:4d:50:
8d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:96:64:61:96:F2:B4:41:61:05:69:55:31:2D:7B:24:B0:17:57:86
X509v3 Authority Key Identifier:
keyid:83:FE:B9:AD:FC:2F:65:51:22:05:BD:48:11:32:4C:9D:7F:6A:02:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d2:2f:38:31:e8:78:ea:23:eb:a0:6d:23:16:82:bb:5d:a9:
b3:9c:a4:cf:1b:90:18:a4:c3:6d:38:6d:2c:05:b0:a8:45:aa:
8f:82:89:41:9f:75:72:73:ca:f0:33:be:91:87:25:41:5a:80:
93:90:57:5a:bc:3e:78:90:29:6d:ba:a9:8b:0b:9e:db:be:6a:
2f:ad:ff:18:02:2b:af:57:84:d4:42:d6:c3:51:fc:e8:ea:68:
b4:21:11:0e:f5:0f:17:20:ac:32:a6:27:fc:72:f5:76:7f:c6:
82:37:3d:27:89:f8:af:ac:61:6f:3f:57:66:d1:8f:29:8d:fd:
4c:7a:84:6c:c8:1f:f1:7d:d5:ca:36:b1:e1:f1:3d:89:89:12:
a2:c6:38:75:4a:ec:4a:5b:a7:99:01:60:64:37:de:4c:f1:16:
68:99:25:e5:f7:9d:f1:82:70:17:b3:5e:b7:b4:f1:37:0d:46:
8f:c7:81:6d:a2:90:db:fc:af:64:48:a3:d0:c8:bc:b1:f8:bc:
66:03:d0:24:8b:f1:0e:b3:82:49:8c:fb:ca:33:b0:3d:2f:fb:
33:7e:06:a3:03:71:df:40:02:1c:76:52:c4:fb:20:9a:52:e8:
62:55:9e:b2:2b:0d:53:c7:b8:a1:00:08:47:bd:52:c4:0d:4d:
a3:df:e1:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hTn2tm6fOygm94aKyv2BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZmViOWFkZmMyZjY1NTEyMjA1YmQ0ODExMzI0YzlkN2Y2
YTAyMjIwHhcNMjUwMTMxMTgwMDEyWhcNMjUwMjAxMTgwMDEyWjAzMTEwLwYDVQQD
EygzYjk2NjQ2MTk2ZjJiNDQxNjEwNTY5NTUzMTJkN2IyNGIwMTc1Nzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV93SqDbyCOiWhSc8+9lTUAfG3DJ
NZe4YDfx5TO2AlLoPccmCLeU74NkHOLc6Mn2aE4G+3WWcOQPovtZP+g5KoSKFjNA
dVvn+APNg32uPuij2oPrv6MAds1vqLzoDjnb5RP+RhortKEsbNOeycRsaa1STrQp
Y+YSfkDSxCUf2+VjD0szI0Q++WhGAqEhHsq3caOiOgestGYhjS3P5pdvKd7NUXwH
6C85M3yyeAZAaWyCSivSmiurQGWDv9NoOgxtH8wYiHHRJE13uvvjBVk6ubRVnX/z
GbQp/QB5Rs+c5yhA6Pf7D/cHCZPKoKjujmUOVsdf1+7vlNyTFCoUTVCNUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuWZGGW8rRBYQVpVTEteySwF1eGMB8GA1UdIwQY
MBaAFIP+ua38L2VRIgW9SBEyTJ1/agIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ182NXJmd3ZaVkVpQmIxSUVUSk1uWDlxQWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9kYzUxNTktNDVmMC00MjZmLTllZjEt
OTZlMGMxYzQ0NDgzLzEvZ182NXJmd3ZaVkVpQmIxSUVUSk1uWDlxQWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9kYzUxNTktNDVmMC00MjZmLTllZjEtOTZlMGMxYzQ0NDgz
LzEvZ182NXJmd3ZaVkVpQmIxSUVUSk1uWDlxQWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9IvODHo
eOoj66BtIxaCu12ps5ykzxuQGKTDbThtLAWwqEWqj4KJQZ91cnPK8DO+kYclQVqA
k5BXWrw+eJApbbqpiwue275qL63/GAIrr1eE1ELWw1H86OpotCERDvUPFyCsMqYn
/HL1dn/Ggjc9J4n4r6xhbz9XZtGPKY39THqEbMgf8X3Vyjax4fE9iYkSosY4dUrs
SlunmQFgZDfeTPEWaJkl5fed8YJwF7Net7TxNw1Gj8eBbaKQ2/yvZEij0Mi8sfi8
ZgPQJIvxDrOCSYz7yjOwPS/7M34GowNx30ACHHZSxPsgmlLoYlWesisNU8e4oQAI
R71SxA1No9/hsA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:47:27 2025 by rpki-client