Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
File: soWZKSpjJCl-Av_zxRGb7gsxdUg.mft (raw, json)
Hash identifier: B/mImQXxVQaDmIhXBKZfD073JwQjkaZg5ng86aT2C9I=
Subject key identifier: BF:CD:AE:88:53:A8:2B:85:A3:B7:F5:45:02:10:4C:A1:77:EE:AE:0F
Authority key identifier: B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
Certificate issuer: /CN=b28599292a6324297e02fff3c5119bee0b317548
Certificate serial: 0194BC3C3537DB56410931AAD1BB3CCA0D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: soWZKSpjJCl-Av_zxRGb7gsxdUg.crl (hash: 0cNFp5k4BH/0CBKsxQ83Zr6Yhg5Izly0bOBwXHLHupE=)
2: yVvkuO-jgpRX6XN3GXN1npWJJ6g.roa (hash: 1v07ddxL5rWksw0TtZmPMhkBlMfB2KOWe+9tKgMQP40=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:35:37:db:56:41:09:31:aa:d1:bb:3c:ca:0d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b28599292a6324297e02fff3c5119bee0b317548
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=bfcdae8853a82b85a3b7f54502104ca177eeae0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:08:8c:73:1b:d4:6f:8a:dd:67:7a:0b:6f:
05:1b:f6:ca:86:4c:f3:f3:fd:c6:80:58:83:3c:2a:
42:5d:d7:2a:10:e4:1f:6a:14:53:86:72:95:7c:04:
5c:8a:af:3a:dd:3a:5c:3d:35:aa:4b:02:1b:45:09:
af:fd:81:59:0d:ac:f4:39:a5:86:ed:33:a2:80:e3:
f5:4e:6f:8f:11:82:52:b2:6d:c5:f4:69:7f:4f:bd:
ee:86:3f:75:33:49:6f:7f:cc:8b:c2:cc:e5:d2:6c:
e9:1a:ca:1b:8d:92:aa:ed:3a:42:3c:52:12:a2:83:
8c:07:05:3f:83:50:38:04:4f:2a:52:18:ed:62:51:
92:17:f4:91:9b:4d:68:5f:27:7c:c8:da:24:b7:f4:
5e:6d:fb:a8:2b:21:8b:22:36:d2:aa:56:c8:9d:d8:
7f:e8:12:07:93:f5:e1:f5:3f:ac:aa:78:d9:6f:47:
5d:a9:10:c6:51:d9:92:46:8a:9a:d4:49:cc:1b:68:
9d:07:24:66:83:68:36:d8:d0:04:cb:62:d1:31:30:
2a:5a:84:22:16:41:75:cc:a1:5d:ef:51:70:72:25:
e6:a2:28:60:4c:57:62:cc:ce:01:6a:0c:2c:87:9e:
36:b3:e0:9d:e5:94:a6:bd:dd:b6:d5:1d:5b:21:60:
54:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CD:AE:88:53:A8:2B:85:A3:B7:F5:45:02:10:4C:A1:77:EE:AE:0F
X509v3 Authority Key Identifier:
keyid:B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ed:3a:16:a8:a3:30:bc:88:a8:b8:b5:5f:0f:7b:74:4a:5d:
ca:8a:ea:8d:ff:a9:7a:32:1b:61:3e:aa:cf:a9:13:16:a0:f3:
39:a7:9e:ed:e3:85:0d:21:9c:b4:95:75:91:5b:64:76:d7:50:
fc:96:45:d6:e2:82:57:ed:02:60:da:8e:3a:ef:4d:d4:8f:33:
07:ca:0a:ce:48:0d:47:8a:64:ee:a7:9a:cb:69:cc:e9:87:58:
29:86:3f:4c:8b:d2:d2:fb:29:54:3d:c7:cf:24:34:c3:54:d4:
c6:7e:d7:c5:9b:d2:7f:0c:1e:7b:08:f6:ce:19:a9:0d:c4:32:
80:9e:4b:e1:12:1e:d5:8e:30:da:8d:1e:9d:33:9e:8b:61:be:
be:f6:d7:5a:93:81:df:fe:7d:79:c2:4f:4a:5e:6d:67:af:28:
4d:51:d6:18:cc:3e:ea:68:5b:0c:c1:4c:d1:33:43:0d:75:04:
22:ce:f8:c1:f0:b7:21:e1:00:e0:28:ab:6a:a2:a1:91:0f:96:
fb:4a:a2:b0:8b:67:d3:87:3e:e2:1c:5a:66:2d:4b:f0:d1:4a:
25:28:64:a7:5a:14:7a:40:ef:f5:69:e1:d7:0e:45:f6:12:95:
1c:81:91:f0:0c:06:c1:f8:d4:df:0c:f5:70:58:2d:49:d8:de:
47:f3:f3:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDU321ZBCTGq0bs8yg2PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODU5OTI5MmE2MzI0Mjk3ZTAyZmZmM2M1MTE5YmVlMGIz
MTc1NDgwHhcNMjUwMTMxMTIwMDQ5WhcNMjUwMjAxMTIwMDQ5WjAzMTEwLwYDVQQD
EyhiZmNkYWU4ODUzYTgyYjg1YTNiN2Y1NDUwMjEwNGNhMTc3ZWVhZTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWYIjHMb1G+K3Wd6C28FG/bKhkzz
8/3GgFiDPCpCXdcqEOQfahRThnKVfARciq863TpcPTWqSwIbRQmv/YFZDaz0OaWG
7TOigOP1Tm+PEYJSsm3F9Gl/T73uhj91M0lvf8yLwszl0mzpGsobjZKq7TpCPFIS
ooOMBwU/g1A4BE8qUhjtYlGSF/SRm01oXyd8yNokt/RebfuoKyGLIjbSqlbIndh/
6BIHk/Xh9T+sqnjZb0ddqRDGUdmSRoqa1EnMG2idByRmg2g22NAEy2LRMTAqWoQi
FkF1zKFd71FwciXmoihgTFdizM4Bagwsh542s+Cd5ZSmvd221R1bIWBUSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/NrohTqCuFo7f1RQIQTKF37q4PMB8GA1UdIwQY
MBaAFLKFmSkqYyQpfgL/88URm+4LMXVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29XWktTcGpKQ2wtQXZfenhSR2I3Z3N4ZFVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lNTUyZjQtOTZjYS00MjU5LWE4MmEt
ZTM1YTY3ZTVkOWUyLzEvc29XWktTcGpKQ2wtQXZfenhSR2I3Z3N4ZFVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9lNTUyZjQtOTZjYS00MjU5LWE4MmEtZTM1YTY3ZTVkOWUy
LzEvc29XWktTcGpKQ2wtQXZfenhSR2I3Z3N4ZFVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARO06Fqij
MLyIqLi1Xw97dEpdyorqjf+pejIbYT6qz6kTFqDzOaee7eOFDSGctJV1kVtkdtdQ
/JZF1uKCV+0CYNqOOu9N1I8zB8oKzkgNR4pk7qeay2nM6YdYKYY/TIvS0vspVD3H
zyQ0w1TUxn7XxZvSfwweewj2zhmpDcQygJ5L4RIe1Y4w2o0enTOei2G+vvbXWpOB
3/59ecJPSl5tZ68oTVHWGMw+6mhbDMFM0TNDDXUEIs74wfC3IeEA4CiraqKhkQ+W
+0qisItn04c+4hxaZi1L8NFKJShkp1oUekDv9Wnh1w5F9hKVHIGR8AwGwfjU3wz1
cFgtSdjeR/PzVg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:37 2025 by rpki-client