Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
File: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft (raw, json)
Hash identifier: 3XDgZ7o1USDzzkcktizmL6jx6RmGzeLajiKeknL93qs=
Subject key identifier: 91:8C:CD:34:63:8A:5E:4E:3C:E2:0E:78:27:2D:4A:1C:9A:0D:06:DA
Authority key identifier: 09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
Certificate issuer: /CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Certificate serial: 0194BC3BD0B80DC06C8B62FCD4F6051A0081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
Manifest number: 03FE
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: 1sSI6pbK966Ru5qcNlumzkFgHXo.roa (hash: Y/ByRYsvClyIBJkfIerTKqNABccGlH+dIKU39tN+dB8=)
2: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl (hash: wQHc21yuBrw5AgMOQZQHyUq6oqGRKLmscxT5pRx56jo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d0:b8:0d:c0:6c:8b:62:fc:d4:f6:05:1a:00:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=918ccd34638a5e4e3ce20e78272d4a1c9a0d06da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3d:f6:f0:cf:ea:78:42:5e:45:79:80:5e:a4:
fc:d4:18:37:7a:23:2d:f0:45:fe:99:83:7e:9f:98:
dc:e4:89:bf:28:09:28:dc:d7:d7:ab:1c:2a:39:8c:
b6:4b:aa:0e:bc:31:88:02:91:7a:67:51:37:77:34:
a3:19:88:57:c3:11:18:3c:e3:26:4a:b1:d5:9d:73:
5f:36:e8:c4:67:72:e2:1d:f1:97:31:d9:4b:ab:9b:
3e:59:c4:73:3f:b8:b0:06:f6:28:5d:35:ca:e3:64:
5c:40:e2:78:fa:32:b5:d1:06:3d:ce:d6:19:10:d7:
47:e8:6b:e5:86:00:78:c2:ff:28:14:7f:6f:8f:8b:
dd:b0:4b:64:0c:5f:8b:fc:ee:7a:07:62:ff:09:a3:
de:6d:ab:c4:09:0a:07:86:44:21:9f:ad:81:dc:bf:
c2:87:6b:5b:d7:cf:7b:02:6a:33:17:c8:cb:39:65:
01:d5:f9:a1:ac:0f:da:dd:13:79:6b:45:b0:40:87:
61:5a:a8:5f:2a:a7:64:12:0e:92:fe:fd:15:b4:97:
78:64:44:93:94:3f:43:5c:8c:dd:8f:35:1a:3c:e1:
75:38:cd:3c:a6:0b:90:a7:41:d3:95:cc:ea:8e:02:
e5:8d:a9:80:b5:76:e8:7e:0e:ce:ee:a8:97:ac:e0:
65:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8C:CD:34:63:8A:5E:4E:3C:E2:0E:78:27:2D:4A:1C:9A:0D:06:DA
X509v3 Authority Key Identifier:
keyid:09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6c:a3:d6:00:e1:94:ee:5b:58:16:51:50:2a:f0:30:54:fc:
a4:cc:ec:ab:d0:eb:2e:7a:02:5a:40:8a:5f:b1:2b:61:30:cf:
e3:82:b2:33:f1:ed:fa:e6:2f:c2:ca:3f:66:92:b7:c8:5c:05:
60:e2:ef:a8:49:69:78:a4:bf:cd:93:3d:21:c3:e7:44:87:af:
39:01:11:fb:2c:be:c2:fb:9a:0a:4c:48:ca:0a:7f:c1:63:83:
2e:8f:84:8a:93:79:3b:07:f4:38:3f:27:79:e5:29:f3:5e:f7:
54:02:5f:c8:f8:4a:a6:07:b2:7b:69:93:de:c8:b0:c0:38:7e:
53:0e:7c:76:29:91:3d:90:5b:2f:b4:f2:dd:b1:32:3d:06:f3:
f8:69:cd:fb:13:b5:ad:45:37:c1:ed:47:30:c4:cb:e9:03:90:
c5:3b:58:f0:94:9e:03:5f:1f:61:2a:f0:3e:30:b3:52:62:0a:
8c:b6:85:b1:fd:be:4d:b7:4b:8d:57:2f:90:cc:2d:f1:a7:de:
ac:dc:e3:c6:27:69:19:46:74:f5:8b:7e:a6:5c:8a:2f:a0:80:
0f:6f:a9:7c:7b:6c:8f:d5:1f:1b:5b:6a:94:f1:64:63:2a:2d:
33:d2:f5:b4:4b:22:df:c5:89:c3:a3:0e:dc:8b:8e:46:77:b3:
cf:2e:89:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9C4DcBsi2L81PYFGgCBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5M2FkMDhhZDczYzJhYzQzOGFjNjk4MTYzODFlN2FhM2U4
NjU3OWEwHhcNMjUwMTMxMTIwMDI0WhcNMjUwMjAxMTIwMDI0WjAzMTEwLwYDVQQD
Eyg5MThjY2QzNDYzOGE1ZTRlM2NlMjBlNzgyNzJkNGExYzlhMGQwNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5j328M/qeEJeRXmAXqT81Bg3eiMt
8EX+mYN+n5jc5Im/KAko3NfXqxwqOYy2S6oOvDGIApF6Z1E3dzSjGYhXwxEYPOMm
SrHVnXNfNujEZ3LiHfGXMdlLq5s+WcRzP7iwBvYoXTXK42RcQOJ4+jK10QY9ztYZ
ENdH6GvlhgB4wv8oFH9vj4vdsEtkDF+L/O56B2L/CaPebavECQoHhkQhn62B3L/C
h2tb1897AmozF8jLOWUB1fmhrA/a3RN5a0WwQIdhWqhfKqdkEg6S/v0VtJd4ZEST
lD9DXIzdjzUaPOF1OM08pguQp0HTlczqjgLljamAtXbofg7O7qiXrOBlEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGMzTRjil5OPOIOeCctShyaDQbaMB8GA1UdIwQY
MBaAFAk60IrXPCrEOKxpgWOB56o+hleaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wOTU5ODUtZDBkYy00ZDQxLTk4ZWIt
NDFhYTQ3NWQxNWI4LzEvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wOTU5ODUtZDBkYy00ZDQxLTk4ZWItNDFhYTQ3NWQxNWI4
LzEvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmyj1gDh
lO5bWBZRUCrwMFT8pMzsq9DrLnoCWkCKX7ErYTDP44KyM/Ht+uYvwso/ZpK3yFwF
YOLvqElpeKS/zZM9IcPnRIevOQER+yy+wvuaCkxIygp/wWODLo+EipN5Owf0OD8n
eeUp8173VAJfyPhKpgeye2mT3siwwDh+Uw58dimRPZBbL7Ty3bEyPQbz+GnN+xO1
rUU3we1HMMTL6QOQxTtY8JSeA18fYSrwPjCzUmIKjLaFsf2+TbdLjVcvkMwt8afe
rNzjxidpGUZ09Yt+plyKL6CAD2+pfHtsj9UfG1tqlPFkYyotM9L1tEsi38WJw6MO
3IuORnezzy6JFA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:01:10 2025 by rpki-client