Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
File: RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft (raw, json)
Hash identifier: Zod5UUaEfE1YhPjA4Q+4YrUDeA3iQXQMmzklgnX+59E=
Subject key identifier: F5:32:F1:80:2C:E4:1B:2C:D0:D0:32:C3:CE:1A:62:99:77:F4:88:35
Authority key identifier: 45:3B:84:E8:E0:E5:61:7C:34:26:0D:76:8F:44:0A:51:31:F2:DC:F4
Certificate issuer: /CN=453b84e8e0e5617c34260d768f440a5131f2dcf4
Certificate serial: 0194BC3C8FA20C6056347AEBC127FBFC0599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
Manifest number: 0B9B
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl (hash: Pp9hIV5AQsRgLlopDZBKtiKj5FZuZoBDC9rjTKylDrU=)
2: su-hbEzusTLSOxmaXJEWMOWCTZI.roa (hash: wY777l5pDJFcS+82iBVpdLmEK77pZHYgVlbVwhboSl4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8f:a2:0c:60:56:34:7a:eb:c1:27:fb:fc:05:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453b84e8e0e5617c34260d768f440a5131f2dcf4
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=f532f1802ce41b2cd0d032c3ce1a629977f48835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6d:8b:2b:e7:48:ed:0f:a6:b3:21:ab:92:49:
e3:ff:32:17:dd:6d:31:d9:06:e0:be:50:ba:85:f4:
19:02:6f:06:02:7b:84:55:1f:d0:82:36:63:a8:58:
b2:80:2c:d5:a4:58:8d:c8:7c:ec:b7:a6:7d:0b:7c:
c3:2e:40:78:44:2e:c9:2b:6b:85:d5:50:0a:6c:4e:
88:22:8c:1c:66:5a:af:b3:6e:0a:58:57:ab:74:95:
2b:16:df:7a:e5:b5:57:2e:cf:11:ce:18:6f:f4:7a:
06:f8:b9:fe:81:81:94:62:f7:7e:4f:19:94:6b:88:
e0:d5:46:f9:c0:cd:6f:09:e5:da:68:c6:d2:3d:54:
a1:16:dd:c9:46:4d:d7:e1:bf:24:bb:a9:20:30:ba:
4e:e7:54:ee:14:42:5e:61:cf:21:62:2b:0a:0c:a5:
cd:6e:9c:05:16:ad:eb:a0:34:76:1f:b1:80:e9:77:
e7:1e:95:73:45:eb:7f:1e:58:b5:ce:22:fe:6e:e8:
98:04:63:22:69:18:cd:67:4f:29:59:c9:0a:82:f1:
b7:5d:2c:12:e0:66:7b:4b:62:d7:70:73:e0:99:95:
dd:26:97:98:65:79:92:fa:22:5c:83:11:0a:13:59:
1b:48:93:b4:80:34:15:b0:5c:fe:54:d9:e0:e9:7e:
83:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:32:F1:80:2C:E4:1B:2C:D0:D0:32:C3:CE:1A:62:99:77:F4:88:35
X509v3 Authority Key Identifier:
keyid:45:3B:84:E8:E0:E5:61:7C:34:26:0D:76:8F:44:0A:51:31:F2:DC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fd:f9:02:99:20:45:b5:4c:15:e5:7b:0a:77:31:1d:be:fb:
b4:e9:58:05:5d:d3:6c:4e:b4:b3:50:d9:28:0b:f3:c5:81:4f:
33:b2:f1:bf:8f:25:61:de:fc:91:34:66:c7:34:72:47:3c:e4:
33:ca:48:3e:91:e5:c1:19:cd:b9:f8:60:1b:5c:21:95:2f:8c:
57:ed:b6:c0:7f:49:b6:39:5e:a4:97:ae:d9:0c:45:6e:27:c0:
98:4a:ff:97:da:42:eb:2a:cd:dc:c6:ea:e0:fb:15:16:a6:93:
ec:41:16:ab:bd:66:18:ee:6d:77:db:2a:5e:03:62:81:3f:55:
d8:c4:8d:bf:fb:8d:3b:ef:96:05:6a:fb:cb:e6:e5:10:40:10:
33:c0:f0:12:bd:12:29:cc:f6:a7:01:c8:50:a5:5e:92:c4:14:
a2:10:b9:45:c1:21:9d:b1:ac:4a:02:45:a9:20:d5:fb:67:70:
32:f1:8f:a4:54:ba:d9:ef:79:bd:93:26:cf:a4:d4:79:db:ec:
b7:dd:e3:d8:15:c2:0e:c2:e0:5b:73:d8:23:12:6d:2b:c8:e4:
87:cb:9c:1a:f6:89:5f:0d:24:68:38:9a:bf:fe:25:33:3e:a6:
27:f3:b9:20:46:ee:03:aa:d1:9e:6e:dc:b6:bd:9c:9b:19:99:
fe:43:5e:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PI+iDGBWNHrrwSf7/AWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1M2I4NGU4ZTBlNTYxN2MzNDI2MGQ3NjhmNDQwYTUxMzFm
MmRjZjQwHhcNMjUwMTMxMTIwMTEyWhcNMjUwMjAxMTIwMTEyWjAzMTEwLwYDVQQD
EyhmNTMyZjE4MDJjZTQxYjJjZDBkMDMyYzNjZTFhNjI5OTc3ZjQ4ODM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG2LK+dI7Q+msyGrkknj/zIX3W0x
2QbgvlC6hfQZAm8GAnuEVR/QgjZjqFiygCzVpFiNyHzst6Z9C3zDLkB4RC7JK2uF
1VAKbE6IIowcZlqvs24KWFerdJUrFt965bVXLs8Rzhhv9HoG+Ln+gYGUYvd+TxmU
a4jg1Ub5wM1vCeXaaMbSPVShFt3JRk3X4b8ku6kgMLpO51TuFEJeYc8hYisKDKXN
bpwFFq3roDR2H7GA6XfnHpVzRet/Hli1ziL+buiYBGMiaRjNZ08pWckKgvG3XSwS
4GZ7S2LXcHPgmZXdJpeYZXmS+iJcgxEKE1kbSJO0gDQVsFz+VNng6X6DxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUy8YAs5Bss0NAyw84aYpl39Ig1MB8GA1UdIwQY
MBaAFEU7hOjg5WF8NCYNdo9EClEx8tz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlR1RTZPRGxZWHcwSmcxMmowUUtVVEh5M1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NTk4NWItNTViNy00Y2I3LWE0ZjQt
OTk4NzgzYzY4NDFkLzEvUlR1RTZPRGxZWHcwSmcxMmowUUtVVEh5M1BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NTk4NWItNTViNy00Y2I3LWE0ZjQtOTk4NzgzYzY4NDFk
LzEvUlR1RTZPRGxZWHcwSmcxMmowUUtVVEh5M1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqv35Apkg
RbVMFeV7CncxHb77tOlYBV3TbE60s1DZKAvzxYFPM7Lxv48lYd78kTRmxzRyRzzk
M8pIPpHlwRnNufhgG1whlS+MV+22wH9JtjlepJeu2QxFbifAmEr/l9pC6yrN3Mbq
4PsVFqaT7EEWq71mGO5td9sqXgNigT9V2MSNv/uNO++WBWr7y+blEEAQM8DwEr0S
Kcz2pwHIUKVeksQUohC5RcEhnbGsSgJFqSDV+2dwMvGPpFS62e95vZMmz6TUedvs
t93j2BXCDsLgW3PYIxJtK8jkh8ucGvaJXw0kaDiav/4lMz6mJ/O5IEbuA6rRnm7c
tr2cmxmZ/kNemg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:44 2025 by rpki-client