
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
File: fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json)
Hash identifier: DvmRoezoz0+EBIzOfF//m6MH02Kfdbo9kJKH2JLnSU8=
Subject key identifier: DE:46:C1:88:39:47:5F:C1:B2:F3:FB:16:47:F7:EF:24:A1:64:7E:1B
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Certificate issuer: /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial: 0194BC3C8C0FFD274A63FFF204CE33F20ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
Manifest number: 053C
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: TbMjDWj4JjSbzv98od3kf6H3oLQ.roa (hash: 6tue5GmhUL7N95x2Z4BFABU7q9BYKT3YDkCK4sofjnc=)
2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: i0znyNujlZTWqas/9uQRG9bKUKMNAp9+3/ORdmHgfdU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8c:0f:fd:27:4a:63:ff:f2:04:ce:33:f2:0a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=de46c18839475fc1b2f3fb1647f7ef24a1647e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e5:d4:ff:35:00:b5:46:ea:84:0b:87:ee:0a:
5f:ac:48:b6:84:76:9a:e2:61:09:bb:52:e0:b4:c8:
3a:0c:b4:0c:d8:2b:83:96:2f:60:ca:1d:82:26:e8:
2d:7b:3d:2a:76:b9:6d:87:3b:56:61:20:d4:0f:68:
56:a8:7e:2b:09:b7:ed:cf:82:7e:8e:d4:8e:c6:c8:
93:1d:81:87:3c:c1:af:55:28:df:2d:4c:d5:da:56:
ac:c4:fa:c6:e4:f2:1e:c3:00:d8:c8:60:dd:f5:2d:
9b:af:cb:f7:93:09:39:a1:6f:74:46:fb:b1:d3:b3:
a6:c0:0a:7d:bd:ea:e1:77:30:43:2d:7d:44:19:b0:
ed:69:2a:aa:bd:ca:0b:29:eb:89:35:c4:27:37:a2:
ee:ab:7b:36:93:a5:95:2c:3b:26:ca:fd:39:c3:8e:
72:eb:bb:fa:62:61:59:b9:39:a7:e0:02:20:01:0b:
38:fb:10:6e:63:6f:66:09:e6:6a:36:ef:8e:ed:5e:
af:4a:e2:72:ae:df:d1:3e:9b:61:42:4d:03:9c:e5:
9c:cc:f9:da:b9:fd:dd:aa:58:c5:5f:08:a0:48:83:
ac:de:f2:26:d9:97:1a:98:de:cf:9f:45:4c:d0:99:
40:a5:fc:e2:c8:95:36:ef:26:f1:e2:3c:c5:14:bb:
9d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:46:C1:88:39:47:5F:C1:B2:F3:FB:16:47:F7:EF:24:A1:64:7E:1B
X509v3 Authority Key Identifier:
keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:07:05:93:dc:df:ff:a7:b9:ba:87:ca:96:10:8f:ee:99:87:
49:21:ee:61:b6:3a:9a:11:bf:1d:83:f2:3e:7e:07:13:49:3a:
f9:ca:f4:be:11:33:59:af:46:6c:7d:0d:40:7b:90:90:8b:32:
28:6b:e2:13:85:de:3f:43:5a:27:5d:0b:0e:cc:ce:5d:95:35:
02:f2:dd:a2:86:4d:83:ad:66:a4:82:8c:78:bc:46:32:10:62:
53:ab:a9:b5:b3:1d:c1:25:0f:41:25:9f:e8:95:8b:e1:db:04:
34:32:4d:e5:3d:08:9b:a7:5a:d4:65:c1:6f:74:e6:dc:7e:f9:
ad:45:d8:71:f6:83:be:89:5c:cf:79:68:35:cc:df:f1:1d:df:
35:d0:00:aa:8c:e9:89:4c:eb:84:7d:69:62:01:05:80:84:ce:
b8:5d:b7:15:30:87:7e:8d:21:33:ff:62:89:a1:ef:ab:1a:9f:
0b:3c:1b:b3:43:b9:ad:84:76:23:39:28:13:39:f7:57:da:fa:
fc:75:32:9c:3c:12:59:5b:b3:d5:23:3a:d1:43:ba:bb:be:de:
b4:2a:5a:03:8d:5d:c0:27:ec:9e:b8:be:fb:7b:2a:48:d6:fa:
e4:a1:1b:aa:2b:de:e7:65:f5:0a:a7:84:58:87:77:d8:c0:25:
d8:66:86:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PIwP/SdKY//yBM4z8grcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZDUxZGMxMDJhNDk3NTE4ZTE2MDkxZTY1ZTgwNWMyNDM4
ZWYyNWIwHhcNMjUwMTMxMTIwMTEyWhcNMjUwMjAxMTIwMTEyWjAzMTEwLwYDVQQD
EyhkZTQ2YzE4ODM5NDc1ZmMxYjJmM2ZiMTY0N2Y3ZWYyNGExNjQ3ZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+XU/zUAtUbqhAuH7gpfrEi2hHaa
4mEJu1LgtMg6DLQM2CuDli9gyh2CJugtez0qdrlthztWYSDUD2hWqH4rCbftz4J+
jtSOxsiTHYGHPMGvVSjfLUzV2lasxPrG5PIewwDYyGDd9S2br8v3kwk5oW90Rvux
07OmwAp9verhdzBDLX1EGbDtaSqqvcoLKeuJNcQnN6Luq3s2k6WVLDsmyv05w45y
67v6YmFZuTmn4AIgAQs4+xBuY29mCeZqNu+O7V6vSuJyrt/RPpthQk0DnOWczPna
uf3dqljFXwigSIOs3vIm2ZcamN7Pn0VM0JlApfziyJU27ybx4jzFFLudtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5GwYg5R1/BsvP7Fkf37yShZH4bMB8GA1UdIwQY
MBaAFH3VHcECpJdRjhYJHmXoBcJDjvJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGIt
NzZlNGUxYzkzNjA2LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGItNzZlNGUxYzkzNjA2
LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAcFk9zf
/6e5uofKlhCP7pmHSSHuYbY6mhG/HYPyPn4HE0k6+cr0vhEzWa9GbH0NQHuQkIsy
KGviE4XeP0NaJ10LDszOXZU1AvLdooZNg61mpIKMeLxGMhBiU6uptbMdwSUPQSWf
6JWL4dsENDJN5T0Im6da1GXBb3Tm3H75rUXYcfaDvolcz3loNczf8R3fNdAAqozp
iUzrhH1pYgEFgITOuF23FTCHfo0hM/9iiaHvqxqfCzwbs0O5rYR2IzkoEzn3V9r6
/HUynDwSWVuz1SM60UO6u77etCpaA41dwCfsnri++3sqSNb65KEbqive52X1CqeE
WId32MAl2GaGcw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:54 2025 by rpki-client