Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
File: d1xabqkPXz0AfBDkROO5Y7bTDMU.mft (raw, json)
Hash identifier: 2Lpi0Th7iFV3jE0JwORlPtoyreKVS+dwoQ6X2pZAub0=
Subject key identifier: 71:E8:37:53:9B:FD:4E:E5:94:51:10:8B:B5:39:71:6F:ED:38:14:0E
Authority key identifier: 77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5
Certificate issuer: /CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
Certificate serial: 0194BCE0DE15E209CB2C1016A15BCB6D5FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
Manifest number: 0204
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: d1xabqkPXz0AfBDkROO5Y7bTDMU.crl (hash: cyGUN6FYQY++xTdlaPbJMUlfWNKO3toaNXLxD+YCETY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:de:15:e2:09:cb:2c:10:16:a1:5b:cb:6d:5f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=71e837539bfd4ee59451108bb539716fed38140e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:f9:d5:27:b1:df:66:18:65:22:41:fb:ab:
63:a6:76:ef:c1:36:a6:89:f8:e5:cb:c1:bb:cb:c1:
ab:67:d0:d4:ca:29:49:f2:eb:73:06:7c:fc:ca:c9:
9c:17:48:9d:ae:fd:a5:fe:36:90:27:12:a7:87:63:
af:9b:34:48:29:b5:fa:28:03:05:96:ff:28:db:ba:
30:69:a7:af:6d:9e:7b:14:fe:47:7a:1c:f7:bd:74:
1c:5f:cb:02:e6:19:49:6f:f5:b6:fd:39:9b:ff:0b:
e2:bd:75:04:75:67:66:12:44:69:34:c0:c5:28:d6:
a6:8d:3d:1a:8a:93:47:76:51:90:7b:00:2b:2c:be:
88:8d:b8:7d:c5:1a:28:e9:81:49:4c:e2:59:15:0d:
b2:17:e7:a0:e8:59:ac:22:c9:66:30:18:36:86:bd:
89:14:f8:0f:9b:31:2a:94:f3:e1:cb:dc:65:15:aa:
b0:07:82:8e:58:ba:67:9d:bb:cb:2f:a3:1b:86:14:
47:cd:a4:af:e2:3f:87:5c:4b:d1:78:c7:d8:10:34:
2f:28:61:14:26:7f:86:7c:03:f9:45:83:92:a3:85:
50:9e:32:7e:d0:98:0e:cb:b7:62:6b:1d:f8:b9:90:
00:29:b6:c8:b6:b0:31:9b:dc:dc:f0:85:09:45:ff:
cc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E8:37:53:9B:FD:4E:E5:94:51:10:8B:B5:39:71:6F:ED:38:14:0E
X509v3 Authority Key Identifier:
keyid:77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0d:a9:b9:0c:f0:8b:e8:5c:a2:93:6a:e4:f7:9f:25:1d:2d:
2b:c8:f2:84:44:75:4c:73:f3:7a:e3:06:7e:0e:15:c0:8f:e3:
ba:5b:ff:48:a9:08:21:05:81:26:00:c0:b5:92:0a:05:0d:4b:
ac:38:42:b5:28:8e:d1:65:13:ca:3e:c5:57:32:d4:38:a9:8d:
8c:fd:b8:2c:62:a3:98:9f:bb:81:6d:73:30:b3:e2:34:2a:5f:
ac:da:e2:52:5e:f5:fd:82:25:9b:cd:bc:05:5b:02:c1:c7:cf:
2f:95:a7:d3:b8:a8:eb:f9:d1:62:fc:f3:40:a8:b5:0a:32:27:
40:29:95:63:8b:d0:83:54:8c:a3:67:71:b0:d4:1a:30:51:28:
ac:31:be:80:5e:29:8c:6a:15:de:38:1c:c2:7c:e3:22:78:43:
59:9f:67:e1:b2:46:8c:52:a3:04:be:87:51:dd:4e:53:13:5f:
e3:64:09:03:a5:b2:e6:a7:45:97:48:09:6a:0d:c5:5b:e7:be:
da:96:10:c7:4b:60:eb:5e:10:56:dc:25:8d:97:c9:83:76:1f:
a9:0f:47:6c:ee:7b:f4:8b:99:36:77:21:12:f6:26:48:9e:7b:
cf:61:c8:51:b3:15:1d:89:d2:13:b2:28:cb:51:a6:b2:6d:4d:
49:fe:1c:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84N4V4gnLLBAWoVvLbV/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NWM1YTZlYTkwZjVmM2QwMDdjMTBlNDQ0ZTNiOTYzYjZk
MzBjYzUwHhcNMjUwMTMxMTUwMDQxWhcNMjUwMjAxMTUwMDQxWjAzMTEwLwYDVQQD
Eyg3MWU4Mzc1MzliZmQ0ZWU1OTQ1MTEwOGJiNTM5NzE2ZmVkMzgxNDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPn51Sex32YYZSJB+6tjpnbvwTam
ifjly8G7y8GrZ9DUyilJ8utzBnz8ysmcF0idrv2l/jaQJxKnh2OvmzRIKbX6KAMF
lv8o27owaaevbZ57FP5Hehz3vXQcX8sC5hlJb/W2/Tmb/wvivXUEdWdmEkRpNMDF
KNamjT0aipNHdlGQewArLL6Ijbh9xRoo6YFJTOJZFQ2yF+eg6FmsIslmMBg2hr2J
FPgPmzEqlPPhy9xlFaqwB4KOWLpnnbvLL6MbhhRHzaSv4j+HXEvReMfYEDQvKGEU
Jn+GfAP5RYOSo4VQnjJ+0JgOy7diax34uZAAKbbItrAxm9zc8IUJRf/MgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHoN1Ob/U7llFEQi7U5cW/tOBQOMB8GA1UdIwQY
MBaAFHdcWm6pD189AHwQ5ETjuWO20wzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDF4YWJxa1BYejBBZkJEa1JPTzVZN2JURE1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85Njg3MzItNmQ3Ni00NjRkLTk3YzQt
ZTQwYTMzNDY5MWM5LzEvZDF4YWJxa1BYejBBZkJEa1JPTzVZN2JURE1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My85Njg3MzItNmQ3Ni00NjRkLTk3YzQtZTQwYTMzNDY5MWM5
LzEvZDF4YWJxa1BYejBBZkJEa1JPTzVZN2JURE1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUA2puQzw
i+hcopNq5PefJR0tK8jyhER1THPzeuMGfg4VwI/julv/SKkIIQWBJgDAtZIKBQ1L
rDhCtSiO0WUTyj7FVzLUOKmNjP24LGKjmJ+7gW1zMLPiNCpfrNriUl71/YIlm828
BVsCwcfPL5Wn07io6/nRYvzzQKi1CjInQCmVY4vQg1SMo2dxsNQaMFEorDG+gF4p
jGoV3jgcwnzjInhDWZ9n4bJGjFKjBL6HUd1OUxNf42QJA6Wy5qdFl0gJag3FW+e+
2pYQx0tg614QVtwljZfJg3YfqQ9HbO579IuZNnchEvYmSJ57z2HIUbMVHYnSE7Io
y1Gmsm1NSf4c7A==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:43 2025 by rpki-client