Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4946d9-bdb6-45b4-9a9c-4abe6550920a/1/C8cxNTcx0n2JxXgoVGnGjF1XrQk.mft
File: C8cxNTcx0n2JxXgoVGnGjF1XrQk.mft (raw, json)
Hash identifier: llDUdmtjC9NWb6Hy2uZ0QY1FjqOLyhRXau1zOfZrSVc=
Subject key identifier: B8:34:4D:63:B2:72:E3:B9:21:B6:46:4B:5F:46:07:B6:79:D6:83:47
Authority key identifier: 0B:C7:31:35:37:31:D2:7D:89:C5:78:28:54:69:C6:8C:5D:57:AD:09
Certificate issuer: /CN=0bc731353731d27d89c578285469c68c5d57ad09
Certificate serial: 0194BC3C08634F8857EB051BC5E6C4D71960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cxNTcx0n2JxXgoVGnGjF1XrQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4946d9-bdb6-45b4-9a9c-4abe6550920a/1/C8cxNTcx0n2JxXgoVGnGjF1XrQk.mft
Manifest number: 05B9
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: C8cxNTcx0n2JxXgoVGnGjF1XrQk.crl (hash: 2e7e6fRCphXuZlPmXs3aUSDAK0WXO0GbalZquBLAS28=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:08:63:4f:88:57:eb:05:1b:c5:e6:c4:d7:19:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc731353731d27d89c578285469c68c5d57ad09
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=b8344d63b272e3b921b6464b5f4607b679d68347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:06:d6:1b:3c:cd:3f:7c:7c:e4:24:94:a7:
8d:f0:c7:33:ac:c9:3e:09:58:e7:c5:d0:08:b7:fa:
88:d5:5f:50:96:8b:3e:42:58:7f:73:46:63:ef:97:
f8:f0:61:f1:70:5d:d0:a8:46:3d:d5:e8:ca:3d:a8:
36:be:a1:6a:56:ef:58:26:d9:a5:ca:0c:9b:b1:28:
02:e8:03:f5:88:f6:3c:9a:af:a3:36:b0:7b:ee:cd:
24:34:4d:bb:03:98:35:f2:5a:56:b6:cb:52:7d:8c:
ee:cb:09:4f:2e:8f:a4:96:c6:0c:ab:de:5a:94:40:
77:7b:98:94:b4:37:15:d3:65:98:64:d5:09:70:b0:
85:1a:e3:d5:6b:e8:0e:b1:a1:52:48:4d:cd:99:b7:
fa:ed:1e:22:d1:95:26:bb:ae:e1:1e:58:d6:32:21:
72:5c:2c:73:bb:94:1d:d5:05:e0:53:d2:f4:89:94:
28:7e:0f:94:00:d1:c4:32:34:d3:91:fc:ba:35:c0:
8f:91:53:02:d6:6d:71:65:36:70:21:08:b9:ec:ae:
49:c2:7f:66:1f:a0:39:c9:21:93:e4:42:dc:5c:79:
ec:77:3a:65:fb:05:eb:8d:da:c7:e8:8a:20:e5:dd:
03:72:a2:4a:5e:75:fd:09:68:3c:8f:27:97:4e:61:
e0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:34:4D:63:B2:72:E3:B9:21:B6:46:4B:5F:46:07:B6:79:D6:83:47
X509v3 Authority Key Identifier:
keyid:0B:C7:31:35:37:31:D2:7D:89:C5:78:28:54:69:C6:8C:5D:57:AD:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cxNTcx0n2JxXgoVGnGjF1XrQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4946d9-bdb6-45b4-9a9c-4abe6550920a/1/C8cxNTcx0n2JxXgoVGnGjF1XrQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4946d9-bdb6-45b4-9a9c-4abe6550920a/1/C8cxNTcx0n2JxXgoVGnGjF1XrQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5f:1b:0c:e5:b1:0a:98:35:1f:e0:b6:f6:20:28:08:ab:71:
c5:28:62:6d:0c:34:33:67:40:cc:f3:96:c6:9e:47:1c:39:4a:
ff:0e:19:8e:24:a3:f8:46:35:b2:d8:54:ba:e1:67:04:bd:38:
25:c1:f8:7f:86:f3:17:cf:eb:ef:08:84:4c:9b:2f:e0:5b:73:
20:01:cb:1a:d7:e6:e4:82:82:29:77:94:fd:44:61:ce:4d:08:
98:50:69:bc:3b:09:06:ed:3b:f9:a4:15:94:fa:1f:f0:83:27:
15:95:c6:e9:37:6d:6e:73:0f:3d:bc:53:9b:48:ca:fc:5c:3f:
d2:c6:f6:e5:3e:87:2a:87:7d:3a:c4:a5:88:92:73:75:20:7d:
b6:5e:b0:44:67:6c:0c:a4:4d:3a:23:3b:b2:e9:59:f1:17:1a:
ba:12:e1:5c:12:8a:11:4c:5a:61:c6:04:97:e8:9d:91:b2:d1:
ec:15:10:31:01:a9:a9:be:c2:8f:02:87:24:b2:07:4a:8f:fc:
6a:5e:ec:e8:55:2a:76:21:ad:ef:40:86:2f:6e:33:e3:78:47:
c0:55:19:c6:06:ec:9f:4f:e4:cf:a9:06:ab:6e:37:9c:b0:6b:
a7:b4:89:6c:26:53:e2:7f:c8:4a:57:5e:95:7b:9c:e7:dc:6f:
ac:45:60:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PAhjT4hX6wUbxebE1xlgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzczMTM1MzczMWQyN2Q4OWM1NzgyODU0NjljNjhjNWQ1
N2FkMDkwHhcNMjUwMTMxMTIwMDM4WhcNMjUwMjAxMTIwMDM4WjAzMTEwLwYDVQQD
EyhiODM0NGQ2M2IyNzJlM2I5MjFiNjQ2NGI1ZjQ2MDdiNjc5ZDY4MzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoEG1hs8zT98fOQklKeN8MczrMk+
CVjnxdAIt/qI1V9Qlos+Qlh/c0Zj75f48GHxcF3QqEY91ejKPag2vqFqVu9YJtml
ygybsSgC6AP1iPY8mq+jNrB77s0kNE27A5g18lpWtstSfYzuywlPLo+klsYMq95a
lEB3e5iUtDcV02WYZNUJcLCFGuPVa+gOsaFSSE3Nmbf67R4i0ZUmu67hHljWMiFy
XCxzu5Qd1QXgU9L0iZQofg+UANHEMjTTkfy6NcCPkVMC1m1xZTZwIQi57K5Jwn9m
H6A5ySGT5ELcXHnsdzpl+wXrjdrH6Iog5d0DcqJKXnX9CWg8jyeXTmHgrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLg0TWOycuO5IbZGS19GB7Z51oNHMB8GA1UdIwQY
MBaAFAvHMTU3MdJ9icV4KFRpxoxdV60JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhjeE5UY3gwbjJKeFhnb1ZHbkdqRjFYclFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80OTQ2ZDktYmRiNi00NWI0LTlhOWMt
NGFiZTY1NTA5MjBhLzEvQzhjeE5UY3gwbjJKeFhnb1ZHbkdqRjFYclFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My80OTQ2ZDktYmRiNi00NWI0LTlhOWMtNGFiZTY1NTA5MjBh
LzEvQzhjeE5UY3gwbjJKeFhnb1ZHbkdqRjFYclFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPV8bDOWx
Cpg1H+C29iAoCKtxxShibQw0M2dAzPOWxp5HHDlK/w4ZjiSj+EY1sthUuuFnBL04
JcH4f4bzF8/r7wiETJsv4FtzIAHLGtfm5IKCKXeU/URhzk0ImFBpvDsJBu07+aQV
lPof8IMnFZXG6TdtbnMPPbxTm0jK/Fw/0sb25T6HKod9OsSliJJzdSB9tl6wRGds
DKRNOiM7sulZ8RcauhLhXBKKEUxaYcYEl+idkbLR7BUQMQGpqb7CjwKHJLIHSo/8
al7s6FUqdiGt70CGL24z43hHwFUZxgbsn0/kz6kGq243nLBrp7SJbCZT4n/ISlde
lXuc59xvrEVg3A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:34 2025 by rpki-client