Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
File: 6GtO0zF8kqNLdsj60prpcID5Hzs.mft (raw, json)
Hash identifier: N7D3y3wVCRcaoLs4jXmtagUlfYnogFlviAfU3whw/Ss=
Subject key identifier: 95:50:AD:8A:12:DE:C3:C5:11:55:07:F0:ED:30:B0:D5:08:3F:E0:12
Authority key identifier: E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B
Certificate issuer: /CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
Certificate serial: 0194BBCE7011EEC88CFFBC646D92DA2078E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
Manifest number: 1107
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: 6GtO0zF8kqNLdsj60prpcID5Hzs.crl (hash: GqB2QlrNtSa2QE+lQSTmoz/m9WAFGoKNJeVcw2UKpuA=)
2: DEYi7WsKY2zM3uINUVpUki3PaVg.roa (hash: DRmT8SF6k5qeKVt2hMFQ+AwmgRFjXhlT847OzPWC7g8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:70:11:ee:c8:8c:ff:bc:64:6d:92:da:20:78:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=9550ad8a12dec3c5115507f0ed30b0d5083fe012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e0:cf:3f:c4:c3:74:79:86:f8:f8:74:6e:6a:
94:4e:9b:e9:c2:cd:52:a7:34:12:dd:34:00:6c:60:
4e:a8:34:13:b6:36:6c:47:8e:2b:ab:99:e7:39:56:
5d:19:b8:0f:03:25:72:3b:8d:e6:de:de:56:f3:b2:
ed:8f:c5:ff:a5:27:7a:36:12:9d:93:e7:c8:c7:d8:
f0:47:4f:fa:2f:b1:e4:31:db:ed:e4:92:d1:92:5b:
d8:b0:1a:c3:d1:b4:29:cb:ea:93:35:30:74:3c:ce:
e0:38:53:6e:a0:c7:6c:ff:f9:35:12:a2:51:6a:76:
49:0d:29:8c:59:c4:1e:a0:b2:22:26:cb:c8:82:41:
05:68:de:7f:f6:31:d7:52:fa:97:d5:a3:8a:51:96:
32:d6:99:1c:0c:87:a1:3d:d1:e9:6c:b7:03:34:5c:
92:46:a7:3d:63:ae:d4:a4:18:8a:d0:56:69:10:52:
c0:4d:8c:0d:5a:b4:24:83:7d:c4:4e:92:f4:ec:5b:
91:7c:d7:49:a0:cd:16:ef:1c:17:db:13:ee:4e:3e:
4a:c8:b1:d8:bc:a5:5e:0d:ea:6f:d4:a6:ed:b7:35:
36:50:9f:c7:a6:42:99:52:8f:f2:ed:c9:2b:70:c3:
f5:ae:36:b1:84:47:22:5d:b3:a9:b3:84:57:7c:54:
11:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:50:AD:8A:12:DE:C3:C5:11:55:07:F0:ED:30:B0:D5:08:3F:E0:12
X509v3 Authority Key Identifier:
keyid:E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:51:c0:82:98:59:32:da:29:ca:1a:cf:ab:73:7a:30:4f:67:
2c:69:7b:fb:f4:8f:6b:dd:5b:84:43:8a:82:54:58:c2:ea:dc:
d9:f7:07:89:68:ad:37:fd:9a:a6:4b:1f:48:f9:92:04:83:12:
16:f0:de:7b:6c:f7:96:d4:1f:27:36:8e:43:b2:37:1b:4c:09:
b7:30:71:a7:e7:33:d9:56:ee:83:31:57:5e:9e:a9:42:a1:82:
b0:a2:7f:d7:ea:ab:07:8a:3d:75:a5:d6:bd:92:3d:f2:e5:6e:
51:65:df:c5:44:7b:b0:5d:00:05:43:20:28:e9:f1:21:9e:f4:
22:6b:3e:ae:fe:8f:12:6c:2d:7b:6d:74:75:f1:7a:03:3d:db:
b1:da:78:ca:f7:96:00:f0:21:75:04:8a:90:a6:d6:a7:18:4a:
b9:a0:3d:fe:ff:82:b4:d5:02:90:2f:52:42:61:7a:e8:2b:bf:
b8:86:e2:04:8f:3c:79:ba:26:78:c0:b8:a0:71:e3:60:fa:a6:
6b:a2:74:a1:4c:6b:9d:de:2e:b6:88:f1:46:94:ae:16:56:3c:
4e:49:34:bd:20:98:14:cc:af:9e:9c:db:a4:0c:56:72:4d:ff:
63:3e:69:4c:22:8e:cb:f3:83:06:3d:c2:2b:06:81:c6:5f:ac:
ae:5f:26:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7znAR7siM/7xkbZLaIHjmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NmI0ZWQzMzE3YzkyYTM0Yjc2YzhmYWQyOWFlOTcwODBm
OTFmM2IwHhcNMjUwMTMxMTAwMDU1WhcNMjUwMjAxMTAwMDU1WjAzMTEwLwYDVQQD
Eyg5NTUwYWQ4YTEyZGVjM2M1MTE1NTA3ZjBlZDMwYjBkNTA4M2ZlMDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+DPP8TDdHmG+Ph0bmqUTpvpws1S
pzQS3TQAbGBOqDQTtjZsR44rq5nnOVZdGbgPAyVyO43m3t5W87Ltj8X/pSd6NhKd
k+fIx9jwR0/6L7HkMdvt5JLRklvYsBrD0bQpy+qTNTB0PM7gOFNuoMds//k1EqJR
anZJDSmMWcQeoLIiJsvIgkEFaN5/9jHXUvqX1aOKUZYy1pkcDIehPdHpbLcDNFyS
Rqc9Y67UpBiK0FZpEFLATYwNWrQkg33ETpL07FuRfNdJoM0W7xwX2xPuTj5KyLHY
vKVeDepv1KbttzU2UJ/HpkKZUo/y7ckrcMP1rjaxhEciXbOps4RXfFQR3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVQrYoS3sPFEVUH8O0wsNUIP+ASMB8GA1UdIwQY
MBaAFOhrTtMxfJKjS3bI+tKa6XCA+R87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkd0TzB6RjhrcU5MZHNqNjBwcnBjSUQ1SHpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82YzVlYWYtOWM0NC00YTVhLWJhYTEt
MzI1YWFkZDczM2MzLzEvNkd0TzB6RjhrcU5MZHNqNjBwcnBjSUQ1SHpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy82YzVlYWYtOWM0NC00YTVhLWJhYTEtMzI1YWFkZDczM2Mz
LzEvNkd0TzB6RjhrcU5MZHNqNjBwcnBjSUQ1SHpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVHAgphZ
MtopyhrPq3N6ME9nLGl7+/SPa91bhEOKglRYwurc2fcHiWitN/2apksfSPmSBIMS
FvDee2z3ltQfJzaOQ7I3G0wJtzBxp+cz2VbugzFXXp6pQqGCsKJ/1+qrB4o9daXW
vZI98uVuUWXfxUR7sF0ABUMgKOnxIZ70Ims+rv6PEmwte210dfF6Az3bsdp4yveW
APAhdQSKkKbWpxhKuaA9/v+CtNUCkC9SQmF66Cu/uIbiBI88ebomeMC4oHHjYPqm
a6J0oUxrnd4utojxRpSuFlY8Tkk0vSCYFMyvnpzbpAxWck3/Yz5pTCKOy/ODBj3C
KwaBxl+srl8muA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:51 2025 by rpki-client