Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
File: 8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json)
Hash identifier: Ig1dmSpTmdMj5+d1fGrf7DH9IWpbHV2hZs50WrW57oo=
Subject key identifier: D7:DE:1B:BE:85:91:E0:25:C5:7E:05:39:57:39:AB:78:88:36:6E:2D
Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Certificate issuer: /CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Certificate serial: 0194BBCE397E08001CA64C51489E0D1FB687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
Manifest number: 07ED
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: QcyD0rJNyyRJoGjENJ6/cdRMHgZJCbRM7TTXzK94kH0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:39:7e:08:00:1c:a6:4c:51:48:9e:0d:1f:b6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=d7de1bbe8591e025c57e05395739ab7888366e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:7f:56:cd:cd:84:25:46:38:75:c9:08:82:
4f:20:4b:5a:68:1d:9c:52:c2:f4:a9:c9:97:c3:7d:
09:f3:83:5e:6f:27:fa:b2:0d:d7:0e:a0:2b:fe:b6:
13:15:77:f8:77:ab:81:6a:4c:29:15:55:5c:5d:6c:
7d:7f:b9:c4:24:fa:6e:b8:48:cc:c5:f0:53:8a:d6:
e5:2d:2d:78:fc:de:57:34:aa:ca:88:62:d0:7e:18:
77:cb:60:89:64:06:47:61:ff:2d:f2:1d:8b:02:99:
5a:f5:fc:fd:9c:03:d8:59:fa:59:30:0b:e3:32:eb:
c2:af:70:4e:ed:64:f8:e7:d0:b5:8a:f1:d6:dc:6e:
ad:ca:64:ee:8f:7c:23:e8:4d:3a:c7:0c:87:9f:16:
83:7d:d7:4b:63:0f:2f:7b:6f:11:0f:06:20:2c:d5:
be:98:52:33:2e:52:f0:22:9d:80:f5:1d:9a:1f:ba:
02:2b:f8:bc:3b:42:bd:2c:ff:eb:80:d6:dc:7c:60:
9f:cd:bf:cb:07:b1:92:f0:3a:69:2d:04:c9:30:3d:
62:45:34:d7:89:04:36:29:e8:e3:fe:fa:01:72:8d:
84:80:9e:8f:c2:c9:82:f5:ea:d2:c9:d4:b7:3a:b7:
11:62:6a:3a:08:b9:26:f7:87:48:f7:14:d9:f8:5d:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DE:1B:BE:85:91:E0:25:C5:7E:05:39:57:39:AB:78:88:36:6E:2D
X509v3 Authority Key Identifier:
keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8d:e2:bb:59:75:0b:ea:1b:30:af:99:18:c9:28:8f:97:97:
24:0f:c5:ba:67:66:2e:db:2c:95:07:09:e5:cf:c8:f1:1e:e3:
89:df:c6:97:81:e1:51:df:16:dd:09:1e:ba:db:83:f1:ba:3c:
49:93:24:97:32:97:ab:2b:f7:5a:3e:3b:f8:88:dc:d3:34:99:
4e:8b:e7:c2:be:60:fb:25:b2:0a:09:e3:55:1d:38:cf:3a:29:
4e:3a:be:16:a4:f1:db:5b:9c:86:12:6c:79:fb:4e:c8:41:fb:
e4:38:04:4c:96:e4:e9:02:27:44:7e:5e:0f:47:fd:66:38:4d:
39:f8:b2:28:3d:6a:8d:a1:1d:70:c0:6e:70:50:18:ee:ff:e0:
36:a1:a3:95:9b:42:57:43:65:a5:24:11:d6:c4:cd:09:60:bf:
fe:0d:8a:6b:28:a0:26:96:a0:13:8a:16:16:bb:09:f0:66:3c:
c2:61:aa:d3:ac:c9:87:27:03:25:cc:f9:82:f5:91:df:f8:74:
27:00:52:f5:46:42:54:4c:95:aa:98:a9:56:de:c3:d3:59:5d:
52:b7:aa:44:69:13:cf:84:f6:33:b4:b2:3a:c2:40:3d:52:85:
2a:63:63:f6:88:72:11:23:ed:28:e0:e7:35:0e:d9:5f:c4:9d:
3f:61:a4:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjl+CAAcpkxRSJ4NH7aHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwM2E5MTM3NzRkYmM5ZTYwNWRjMTdhYjIzYTA1YTE2ODAz
OThkZTUwHhcNMjUwMTMxMTAwMDQxWhcNMjUwMjAxMTAwMDQxWjAzMTEwLwYDVQQD
EyhkN2RlMWJiZTg1OTFlMDI1YzU3ZTA1Mzk1NzM5YWI3ODg4MzY2ZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk9/Vs3NhCVGOHXJCIJPIEtaaB2c
UsL0qcmXw30J84Nebyf6sg3XDqAr/rYTFXf4d6uBakwpFVVcXWx9f7nEJPpuuEjM
xfBTitblLS14/N5XNKrKiGLQfhh3y2CJZAZHYf8t8h2LApla9fz9nAPYWfpZMAvj
MuvCr3BO7WT459C1ivHW3G6tymTuj3wj6E06xwyHnxaDfddLYw8ve28RDwYgLNW+
mFIzLlLwIp2A9R2aH7oCK/i8O0K9LP/rgNbcfGCfzb/LB7GS8DppLQTJMD1iRTTX
iQQ2Kejj/voBco2EgJ6PwsmC9erSydS3OrcRYmo6CLkm94dI9xTZ+F1phQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfeG76FkeAlxX4FOVc5q3iINm4tMB8GA1UdIwQY
MBaAFPA6kTd028nmBdwXqyOgWhaAOY3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERxUk4zVGJ5ZVlGM0Jlckk2QmFGb0E1amVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mODI0MjYtN2ViMC00NzY1LThkZTkt
ZTAwNjMyNjllNDY5LzEvOERxUk4zVGJ5ZVlGM0Jlckk2QmFGb0E1amVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mODI0MjYtN2ViMC00NzY1LThkZTktZTAwNjMyNjllNDY5
LzEvOERxUk4zVGJ5ZVlGM0Jlckk2QmFGb0E1amVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUY3iu1l1
C+obMK+ZGMkoj5eXJA/FumdmLtsslQcJ5c/I8R7jid/Gl4HhUd8W3QkeutuD8bo8
SZMklzKXqyv3Wj47+Ijc0zSZTovnwr5g+yWyCgnjVR04zzopTjq+FqTx21uchhJs
eftOyEH75DgETJbk6QInRH5eD0f9ZjhNOfiyKD1qjaEdcMBucFAY7v/gNqGjlZtC
V0NlpSQR1sTNCWC//g2KayigJpagE4oWFrsJ8GY8wmGq06zJhycDJcz5gvWR3/h0
JwBS9UZCVEyVqpipVt7D01ldUreqRGkTz4T2M7SyOsJAPVKFKmNj9ohyESPtKODn
NQ7ZX8SdP2Gk8Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:32:29 2025 by rpki-client