Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
File: b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json)
Hash identifier: XYF9/4FX9/S0hoJGwfYZFl+i5NBFLwl7NUdYpUZZokM=
Subject key identifier: 2F:A2:F1:A9:E4:07:CE:35:33:9D:4D:8C:8B:57:D9:AB:42:CA:EC:9C
Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
Certificate issuer: /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Certificate serial: 0194BBCDF29F53185E954D3944D591F27145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
Manifest number: 0904
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: FQ3IUDiio0ss3tgJru90DLdcvUt+h5QAE57hJNffVMQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f2:9f:53:18:5e:95:4d:39:44:d5:91:f2:71:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=2fa2f1a9e407ce35339d4d8c8b57d9ab42caec9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:a9:be:66:8e:a9:1f:b7:e1:23:d3:0c:e4:
d6:a2:52:c9:e3:c8:30:39:cb:a1:47:2d:14:41:c5:
e2:21:be:ea:89:b2:4f:3b:dd:16:d1:08:e4:3b:a1:
51:0f:52:4f:6b:5b:bf:60:e5:ad:c4:5b:98:53:71:
7d:ea:85:32:21:60:59:19:47:79:37:97:1f:48:b4:
af:54:26:cb:f6:cc:47:ee:55:6f:15:23:92:3a:d6:
db:fa:06:db:b6:83:74:f4:27:ed:27:8a:6c:a2:bf:
cd:f4:5f:d6:ea:29:cd:8d:a4:47:4f:ab:c5:36:1a:
f6:3f:8f:2a:83:f6:74:99:f3:c6:b0:42:2d:72:ca:
2a:b5:d6:ac:c3:ce:28:5e:f5:2b:a3:ca:75:36:bf:
30:ce:2d:f6:a8:6d:ab:b9:70:66:83:73:e1:14:d2:
4e:02:46:78:a5:3c:4c:b1:21:df:04:d5:a1:6f:93:
d6:1b:af:1b:ce:b8:be:d1:70:be:33:ac:76:9b:93:
6d:1d:43:bd:1a:49:fa:ce:bb:03:ba:b8:f1:63:f6:
4b:8c:fc:19:a6:9a:38:5c:db:36:b0:89:0e:28:51:
13:c9:fd:22:59:eb:cf:12:91:9a:34:c9:ff:13:fa:
2d:95:62:9d:dd:e1:f4:f7:3a:e3:0c:fd:fe:9c:2b:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A2:F1:A9:E4:07:CE:35:33:9D:4D:8C:8B:57:D9:AB:42:CA:EC:9C
X509v3 Authority Key Identifier:
keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d4:c1:f7:b1:ed:26:67:2e:fd:14:41:56:20:8d:6b:2b:7f:
55:cc:5e:12:32:5f:bf:9c:b8:ba:94:90:f2:59:2f:5b:a3:e4:
73:4a:9a:e5:67:9f:fe:3a:09:3d:5a:38:b7:e0:c9:d5:e4:43:
4f:1e:79:96:eb:d6:77:ec:d2:2b:71:2d:2a:ed:da:d7:aa:b8:
b7:5b:6d:ae:c6:7c:6b:06:4f:2f:8e:f5:06:4a:02:fb:9d:77:
a7:85:a2:79:e1:9e:50:b8:c6:7f:af:1c:47:9a:c1:41:45:4b:
4b:24:da:56:18:b0:f1:4d:53:66:66:88:78:6f:06:89:73:9b:
41:37:2b:35:a3:c0:67:e9:56:7c:7d:13:27:f5:26:68:a0:3b:
20:8a:6a:0d:75:9a:37:57:aa:c5:ca:e6:eb:c1:c6:a7:f2:77:
d6:39:a6:22:74:d4:15:19:c4:ad:f7:16:8f:a1:16:9a:5d:57:
a7:c8:f7:53:a1:3f:6b:cc:cb:83:80:0d:9e:9c:0a:3c:4a:2b:
ee:aa:63:71:b0:ba:00:47:14:e9:bd:87:40:21:33:6c:50:dd:
28:42:e1:ee:1a:ef:c8:82:db:4d:b7:bc:a3:7c:40:84:84:c0:
05:3f:38:52:13:97:49:e8:b2:1f:46:bc:a6:c9:0c:dd:b4:9f:
ef:99:61:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zfKfUxhelU05RNWR8nFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNDc3M2YyNDBjZDYyNjljMjUxYjY1MTcwYWE3ZTI5OGFl
OGM0MWYwHhcNMjUwMTMxMTAwMDIzWhcNMjUwMjAxMTAwMDIzWjAzMTEwLwYDVQQD
EygyZmEyZjFhOWU0MDdjZTM1MzM5ZDRkOGM4YjU3ZDlhYjQyY2FlYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEepvmaOqR+34SPTDOTWolLJ48gw
OcuhRy0UQcXiIb7qibJPO90W0QjkO6FRD1JPa1u/YOWtxFuYU3F96oUyIWBZGUd5
N5cfSLSvVCbL9sxH7lVvFSOSOtbb+gbbtoN09CftJ4psor/N9F/W6inNjaRHT6vF
Nhr2P48qg/Z0mfPGsEItcsoqtdasw84oXvUro8p1Nr8wzi32qG2ruXBmg3PhFNJO
AkZ4pTxMsSHfBNWhb5PWG68bzri+0XC+M6x2m5NtHUO9Gkn6zrsDurjxY/ZLjPwZ
ppo4XNs2sIkOKFETyf0iWevPEpGaNMn/E/otlWKd3eH09zrjDP3+nCuVDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+i8ankB841M51NjItX2atCyuycMB8GA1UdIwQY
MBaAFG9Hc/JAzWJpwlG2UXCqfimK6MQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjBkejhrRE5ZbW5DVWJaUmNLcC1LWXJveEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS85ZWQ0YjItMzJiOS00OThhLWI4ZGMt
NzY5Y2Q3ZGNjOTM4LzEvYjBkejhrRE5ZbW5DVWJaUmNLcC1LWXJveEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS85ZWQ0YjItMzJiOS00OThhLWI4ZGMtNzY5Y2Q3ZGNjOTM4
LzEvYjBkejhrRE5ZbW5DVWJaUmNLcC1LWXJveEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNTB97Ht
Jmcu/RRBViCNayt/VcxeEjJfv5y4upSQ8lkvW6Pkc0qa5Wef/joJPVo4t+DJ1eRD
Tx55luvWd+zSK3EtKu3a16q4t1ttrsZ8awZPL471BkoC+513p4WieeGeULjGf68c
R5rBQUVLSyTaVhiw8U1TZmaIeG8GiXObQTcrNaPAZ+lWfH0TJ/UmaKA7IIpqDXWa
N1eqxcrm68HGp/J31jmmInTUFRnErfcWj6EWml1Xp8j3U6E/a8zLg4ANnpwKPEor
7qpjcbC6AEcU6b2HQCEzbFDdKELh7hrvyILbTbe8o3xAhITABT84UhOXSeiyH0a8
pskM3bSf75lhkw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:39:58 2025 by rpki-client