Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
File: 25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json)
Hash identifier: +OBP5GfVGsmuP1GIIX1JXDuv0229mQ3CQxSThKwCL74=
Subject key identifier: 24:66:52:0A:A2:80:67:46:EE:64:AA:5C:2D:95:7F:2A:1F:79:68:EC
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial: 0194BD17ABFA259D74E6F77E2C89F05246BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
Manifest number: 07BD
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: GRERU5PhAD8ous22sGXRuPEfM0msL7yjmX1QHIQBm20=)
2: kQI24cv0NZjcs-NoEtkNWQr945M.roa (hash: lv4kdfvUyBf5e1wmjHgM1hbCJlTmhLUys8Yvw75WiAo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ab:fa:25:9d:74:e6:f7:7e:2c:89:f0:52:46:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=2466520aa2806746ee64aa5c2d957f2a1f7968ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:66:9f:3c:dd:77:50:0b:92:c8:17:17:e7:
6d:1d:61:fa:a0:ef:e6:c0:ca:77:b7:c2:dc:eb:c1:
a2:7c:07:64:18:fd:1c:51:95:cb:95:ec:ed:ba:00:
cc:39:be:85:96:65:30:ca:f0:78:23:e8:f4:5e:46:
8e:ae:68:37:ac:e2:7e:77:9e:c0:3c:4e:09:5c:6e:
70:7c:58:8d:c5:aa:4e:2f:57:31:66:5b:db:d4:5b:
ff:3c:66:72:7d:04:fe:27:56:1c:93:d6:b0:ca:81:
9b:32:67:f2:ba:44:5a:ae:b2:1c:dc:f3:e6:82:ef:
43:6e:17:f2:e8:79:10:4d:bf:42:98:51:5d:21:55:
08:f3:9a:b7:1c:55:a2:d5:0c:8f:ab:e4:8d:a3:a9:
87:a7:2a:72:0d:aa:9b:1d:f9:42:1f:fe:fb:70:20:
fb:e9:3c:38:28:1e:cc:96:53:af:ea:d5:a9:c6:64:
ba:34:18:d2:65:d7:79:03:41:56:35:87:5e:e7:09:
21:9e:f9:1b:1b:85:90:9a:d9:6e:27:e7:cc:ea:f9:
55:18:68:36:ff:2f:d4:78:00:93:24:95:0c:cb:33:
37:20:61:ae:aa:3c:fc:b1:84:35:21:ef:ec:57:93:
e3:c5:42:c4:2c:47:fa:cc:27:8a:21:79:8c:02:42:
c0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:66:52:0A:A2:80:67:46:EE:64:AA:5C:2D:95:7F:2A:1F:79:68:EC
X509v3 Authority Key Identifier:
keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d8:17:66:de:30:1c:20:2b:0d:13:3b:76:4b:ba:e7:0a:25:
b0:29:f2:3c:27:63:b0:86:0e:a0:63:cf:5d:9f:04:e5:d5:bd:
65:63:62:6e:40:38:c5:a6:d5:de:62:1a:79:92:db:a0:d7:c3:
42:ee:03:51:a8:67:87:a7:36:b6:d4:ff:df:e1:87:d6:09:72:
3c:43:0b:10:98:c0:e5:44:5e:c1:4a:eb:91:66:b9:10:7d:d8:
1b:0a:bb:c9:97:66:d1:25:6b:af:26:53:be:2e:8f:96:c0:79:
09:97:ef:5a:6d:90:80:86:24:f1:2c:3b:49:50:0b:ca:00:16:
e4:89:dd:93:6f:45:9a:10:45:7b:cf:d2:2a:f7:a7:02:8a:ac:
30:1d:3e:66:94:af:3f:09:66:fa:8b:51:57:c4:d0:e6:fc:c9:
7a:27:c8:94:ed:a1:da:bd:df:65:22:bd:17:ff:b6:08:d8:9b:
ef:67:1e:71:b0:39:99:bb:a9:6e:04:82:c0:f6:05:71:7f:88:
a1:01:65:c4:b4:12:55:30:b4:ef:54:82:d9:ba:c7:7d:01:93:
05:3c:b1:de:a4:08:ac:48:fe:fd:35:2b:d1:60:6e:9c:b0:30:
0f:f2:1d:0f:64:60:96:a0:91:ca:b6:00:68:27:00:a7:1a:32:
2c:a4:31:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6v6JZ105vd+LInwUka9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOTc5Yjg5OGMwZjU4MzRjYmM4MzhhNjlhMDVlM2FiZThj
MDI5MDMwHhcNMjUwMTMxMTYwMDMyWhcNMjUwMjAxMTYwMDMyWjAzMTEwLwYDVQQD
EygyNDY2NTIwYWEyODA2NzQ2ZWU2NGFhNWMyZDk1N2YyYTFmNzk2OGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJBmnzzdd1ALksgXF+dtHWH6oO/m
wMp3t8Lc68GifAdkGP0cUZXLleztugDMOb6FlmUwyvB4I+j0XkaOrmg3rOJ+d57A
PE4JXG5wfFiNxapOL1cxZlvb1Fv/PGZyfQT+J1Yck9awyoGbMmfyukRarrIc3PPm
gu9Dbhfy6HkQTb9CmFFdIVUI85q3HFWi1QyPq+SNo6mHpypyDaqbHflCH/77cCD7
6Tw4KB7MllOv6tWpxmS6NBjSZdd5A0FWNYde5wkhnvkbG4WQmtluJ+fM6vlVGGg2
/y/UeACTJJUMyzM3IGGuqjz8sYQ1Ie/sV5PjxULELEf6zCeKIXmMAkLATQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRmUgqigGdG7mSqXC2VfyofeWjsMB8GA1UdIwQY
MBaAFNuXm4mMD1g0y8g4ppoF46vowCkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjVlYmlZd1BXRFRMeURpbW1nWGpxLWpBS1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kNWZkZTYtMTk1MS00N2I4LWEzMjUt
NGNiMjU3ZWUxOTJjLzEvMjVlYmlZd1BXRFRMeURpbW1nWGpxLWpBS1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9kNWZkZTYtMTk1MS00N2I4LWEzMjUtNGNiMjU3ZWUxOTJj
LzEvMjVlYmlZd1BXRFRMeURpbW1nWGpxLWpBS1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9gXZt4w
HCArDRM7dku65wolsCnyPCdjsIYOoGPPXZ8E5dW9ZWNibkA4xabV3mIaeZLboNfD
Qu4DUahnh6c2ttT/3+GH1glyPEMLEJjA5URewUrrkWa5EH3YGwq7yZdm0SVrryZT
vi6PlsB5CZfvWm2QgIYk8Sw7SVALygAW5Indk29FmhBFe8/SKvenAoqsMB0+ZpSv
Pwlm+otRV8TQ5vzJeifIlO2h2r3fZSK9F/+2CNib72cecbA5mbupbgSCwPYFcX+I
oQFlxLQSVTC071SC2brHfQGTBTyx3qQIrEj+/TUr0WBunLAwD/IdD2RglqCRyrYA
aCcApxoyLKQxKA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:02 2025 by rpki-client