Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
File: 0JTrDpiYeirfj5WgPnhlmRogGFU.mft (raw, json)
Hash identifier: xNs/WUMa6T8qfvMgoxUnVigEKijOUjVY8Qk67+/pYBk=
Subject key identifier: 68:11:45:E4:7B:40:0A:07:8E:1A:72:60:E7:39:A4:0C:B8:96:77:CC
Authority key identifier: D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
Certificate issuer: /CN=d094eb0e98987a2adf8f95a03e7865991a201855
Certificate serial: 0194BC052462DB95C274A6CA16E36B978A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: 0JTrDpiYeirfj5WgPnhlmRogGFU.crl (hash: 6HluIIxjrfqQ4pb7lRGIBTL5UkV47oY+JCouoKAJjz8=)
2: zWlbMie9smiEiWEP03iooF2NKYI.roa (hash: i3CosfERz9PWPOxFmY5jsq43lJm4fTA/Cty1Zgq6vks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:24:62:db:95:c2:74:a6:ca:16:e3:6b:97:8a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d094eb0e98987a2adf8f95a03e7865991a201855
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=681145e47b400a078e1a7260e739a40cb89677cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:91:60:97:60:1f:ee:1d:2f:d1:4c:58:e0:54:
28:73:3d:c3:54:04:bc:04:c9:13:1e:ea:76:fc:67:
44:60:47:11:b7:c7:b4:92:1e:4f:9e:56:bc:9a:e3:
4d:65:b1:eb:95:bd:01:b7:a7:69:90:f9:c2:83:91:
c1:e3:f5:a2:69:a4:47:70:cc:c9:36:25:06:de:af:
e0:c8:ad:98:97:65:d0:b5:4f:43:6c:d6:dc:fb:1c:
3b:c9:c1:d4:43:01:60:cf:c6:9c:31:a2:07:94:a5:
79:28:af:19:7b:6f:2d:34:ae:ea:b2:9c:41:78:4c:
af:6a:cb:5c:b0:31:21:a7:a0:00:19:fe:40:3e:d8:
34:23:62:0c:7d:c7:4e:25:db:9e:47:53:83:e8:84:
c8:c9:61:ba:32:d7:36:1d:9a:f8:7a:4a:b1:74:58:
cd:f3:7f:70:4c:92:d6:38:bb:f2:85:70:bd:96:85:
83:30:0e:3a:55:e1:c5:25:18:c2:7a:32:b2:c5:c7:
e3:8b:de:bc:ee:2a:99:7b:f4:22:7b:bd:14:53:71:
dc:84:f3:ec:61:53:28:d3:12:73:81:1c:81:1b:d3:
63:31:30:ed:f5:8b:bd:57:85:f0:6e:60:ca:a1:e3:
f0:99:ba:b4:81:00:f5:99:10:05:57:65:3d:f1:04:
db:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:11:45:E4:7B:40:0A:07:8E:1A:72:60:E7:39:A4:0C:B8:96:77:CC
X509v3 Authority Key Identifier:
keyid:D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:58:06:5c:ce:08:9a:f9:05:fa:05:14:8c:6c:eb:b2:7c:62:
bd:bb:c4:9b:0b:a3:ee:ba:64:16:65:32:a0:7d:6c:84:9b:1e:
0b:2c:e8:fd:35:be:ac:f2:45:1c:2f:8d:72:27:eb:fa:c1:00:
06:65:1a:08:04:e8:c0:c7:17:66:59:92:bd:b7:15:71:7d:94:
0a:2a:37:a6:49:fc:d6:f6:c0:54:73:b1:1b:d7:83:45:2b:59:
23:78:49:b2:f5:47:44:8b:f6:68:83:ab:63:20:12:7f:b2:b3:
b6:6e:6c:d7:fc:21:12:32:95:9c:66:ba:42:c5:01:06:ca:56:
8f:0e:5c:69:0e:7d:fe:7e:6c:f8:50:ad:03:f8:14:1a:f6:ef:
94:a0:15:1f:da:7d:3b:cb:64:b3:cd:0c:b5:63:2c:3b:2b:9e:
24:65:f5:ab:0d:95:38:b5:ac:54:50:f5:ef:76:c1:c0:61:ae:
4e:35:ea:57:1c:76:e6:4d:80:2e:a8:25:0f:4f:57:ef:d3:64:
08:fd:7a:ca:37:4f:cf:65:63:44:66:df:80:0a:00:0a:30:4c:
55:2e:42:48:90:df:c9:d4:7e:6b:6f:9b:a9:4e:f2:d8:b7:32:
f2:c3:19:8a:8a:e4:3b:3d:2b:db:64:51:d0:bf:ef:0e:da:d0:
e5:46:89:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BSRi25XCdKbKFuNrl4psMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTRlYjBlOTg5ODdhMmFkZjhmOTVhMDNlNzg2NTk5MWEy
MDE4NTUwHhcNMjUwMTMxMTEwMDQxWhcNMjUwMjAxMTEwMDQxWjAzMTEwLwYDVQQD
Eyg2ODExNDVlNDdiNDAwYTA3OGUxYTcyNjBlNzM5YTQwY2I4OTY3N2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25Fgl2Af7h0v0UxY4FQocz3DVAS8
BMkTHup2/GdEYEcRt8e0kh5Pnla8muNNZbHrlb0Bt6dpkPnCg5HB4/WiaaRHcMzJ
NiUG3q/gyK2Yl2XQtU9DbNbc+xw7ycHUQwFgz8acMaIHlKV5KK8Ze28tNK7qspxB
eEyvastcsDEhp6AAGf5APtg0I2IMfcdOJdueR1OD6ITIyWG6Mtc2HZr4ekqxdFjN
839wTJLWOLvyhXC9loWDMA46VeHFJRjCejKyxcfji9687iqZe/Qie70UU3HchPPs
YVMo0xJzgRyBG9NjMTDt9Yu9V4XwbmDKoePwmbq0gQD1mRAFV2U98QTb1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgRReR7QAoHjhpyYOc5pAy4lnfMMB8GA1UdIwQY
MBaAFNCU6w6YmHoq34+VoD54ZZkaIBhVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAt
ZTRhODZiMGZmZDJlLzEvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAtZTRhODZiMGZmZDJl
LzEvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsFgGXM4I
mvkF+gUUjGzrsnxivbvEmwuj7rpkFmUyoH1shJseCyzo/TW+rPJFHC+Ncifr+sEA
BmUaCATowMcXZlmSvbcVcX2UCio3pkn81vbAVHOxG9eDRStZI3hJsvVHRIv2aIOr
YyASf7Kztm5s1/whEjKVnGa6QsUBBspWjw5caQ59/n5s+FCtA/gUGvbvlKAVH9p9
O8tks80MtWMsOyueJGX1qw2VOLWsVFD173bBwGGuTjXqVxx25k2ALqglD09X79Nk
CP16yjdPz2VjRGbfgAoACjBMVS5CSJDfydR+a2+bqU7y2Lcy8sMZiorkOz0r22RR
0L/vDtrQ5UaJmQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:05:41 2025 by rpki-client