Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
File: cnPNrMHijwIT37KPPf2LnL3Txi4.mft (raw, json)
Hash identifier: qYp7i6FvgvRAtPSZfnQs2ARHzCGv7Tzok/GggH1sRKw=
Subject key identifier: E9:F3:6C:DC:8B:8A:7F:EF:01:45:B3:C2:BD:90:50:E5:F5:4A:11:D0
Authority key identifier: 72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E
Certificate issuer: /CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
Certificate serial: 0194BC72A7C9049B9FB07B348E0D3F9704B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
Manifest number: 0386
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: cnPNrMHijwIT37KPPf2LnL3Txi4.crl (hash: W93TATzygGJB4wrk1fn46e42vz5EV4V9TCQtMPtdbCI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a7:c9:04:9b:9f:b0:7b:34:8e:0d:3f:97:04:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=e9f36cdc8b8a7fef0145b3c2bd9050e5f54a11d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ac:c6:45:61:59:eb:39:d9:c9:2a:b9:07:82:
45:c8:5d:3a:12:a4:a4:2a:49:7e:ee:09:5d:47:d4:
07:4e:cf:d6:c8:5d:0a:62:dd:93:62:65:60:c8:ef:
2e:15:f9:1d:48:9d:ec:8a:2e:d7:7e:ee:bc:33:7e:
83:59:fc:00:08:1b:3d:d2:c6:3d:18:3e:8c:53:19:
aa:66:84:18:93:65:25:cb:7b:0f:8f:dd:e9:2a:00:
72:ea:90:25:27:51:2c:18:08:24:92:54:c0:ad:29:
0f:51:63:f9:e9:d7:a4:8c:90:05:a2:6f:2e:94:8e:
62:72:7e:9e:05:78:e6:60:89:4b:47:f0:6c:72:fd:
a7:8d:98:b2:9f:ed:16:c6:56:0c:ca:69:ed:24:37:
c9:d6:04:a1:32:ab:73:0d:e1:c8:77:9c:32:fc:ab:
2b:12:03:3f:af:d6:76:ed:8e:5d:53:91:57:ce:09:
28:b0:24:82:09:6a:07:74:b1:8b:03:bf:06:cb:63:
ad:aa:3a:f8:50:28:11:fa:1e:2e:3c:f0:2d:44:41:
4e:56:f4:36:41:ee:85:54:d3:ad:50:80:70:88:ed:
79:b9:db:a4:d1:de:b7:18:f4:fb:b4:e3:f3:fe:35:
8f:df:ee:27:e7:4a:b4:22:48:5a:c6:de:73:70:a7:
7c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F3:6C:DC:8B:8A:7F:EF:01:45:B3:C2:BD:90:50:E5:F5:4A:11:D0
X509v3 Authority Key Identifier:
keyid:72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:18:eb:90:9c:cc:46:24:1a:be:5c:f3:14:70:3b:60:2a:17:
85:99:46:e6:33:da:e5:02:4f:a3:7e:e0:ca:cd:bb:80:c8:17:
a5:73:b5:ab:ba:68:22:2b:00:5d:a7:b7:f7:2b:dd:09:e5:34:
bb:1f:3c:4e:e7:25:26:25:a7:98:a3:31:03:bf:b2:34:87:07:
b2:d2:a2:97:cb:be:26:1e:6a:78:bf:0e:60:c2:eb:70:d1:8f:
5d:4b:32:a0:fb:10:30:8c:dc:08:67:aa:9d:db:43:2c:51:9e:
f6:00:55:8f:d3:69:16:70:f0:57:d1:8d:dd:d3:8b:3a:ee:01:
70:8e:00:e0:30:50:48:fb:f1:9d:ee:d2:51:01:d3:34:1f:52:
38:df:c8:bf:d8:a0:e8:45:77:d1:09:03:68:6f:69:af:51:88:
49:9a:65:d2:7d:af:ff:04:75:d1:13:93:09:d8:ad:c4:68:63:
5c:b0:c7:93:8d:e8:92:9b:ab:f1:72:57:8e:95:b9:7f:7c:47:
5d:2f:03:c0:40:3d:01:da:0d:85:11:0f:09:15:0e:90:bf:7e:
b5:f3:e3:7c:f1:db:0c:68:ef:5e:b1:57:fe:a3:34:2d:c9:c9:
83:1e:2e:f3:e3:09:c8:57:d6:47:bc:31:67:a6:3d:75:b8:e0:
2b:bf:c0:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqfJBJufsHs0jg0/lwS1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzNjZGFjYzFlMjhmMDIxM2RmYjI4ZjNkZmQ4YjljYmRk
M2M2MmUwHhcNMjUwMTMxMTMwMDE4WhcNMjUwMjAxMTMwMDE4WjAzMTEwLwYDVQQD
EyhlOWYzNmNkYzhiOGE3ZmVmMDE0NWIzYzJiZDkwNTBlNWY1NGExMWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qzGRWFZ6znZySq5B4JFyF06EqSk
Kkl+7gldR9QHTs/WyF0KYt2TYmVgyO8uFfkdSJ3sii7Xfu68M36DWfwACBs90sY9
GD6MUxmqZoQYk2Uly3sPj93pKgBy6pAlJ1EsGAgkklTArSkPUWP56dekjJAFom8u
lI5icn6eBXjmYIlLR/Bscv2njZiyn+0WxlYMymntJDfJ1gShMqtzDeHId5wy/Ksr
EgM/r9Z27Y5dU5FXzgkosCSCCWoHdLGLA78Gy2Otqjr4UCgR+h4uPPAtREFOVvQ2
Qe6FVNOtUIBwiO15uduk0d63GPT7tOPz/jWP3+4n50q0Ikhaxt5zcKd8cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnzbNyLin/vAUWzwr2QUOX1ShHQMB8GA1UdIwQY
MBaAFHJzzazB4o8CE9+yjz39i5y908YuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25QTnJNSGlqd0lUMzdLUFBmMkxuTDNUeGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85OGMzMDQtNjUzMi00YWM2LWExNjIt
YzBhMjViMTA5MDJhLzEvY25QTnJNSGlqd0lUMzdLUFBmMkxuTDNUeGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85OGMzMDQtNjUzMi00YWM2LWExNjItYzBhMjViMTA5MDJh
LzEvY25QTnJNSGlqd0lUMzdLUFBmMkxuTDNUeGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohjrkJzM
RiQavlzzFHA7YCoXhZlG5jPa5QJPo37gys27gMgXpXO1q7poIisAXae39yvdCeU0
ux88TuclJiWnmKMxA7+yNIcHstKil8u+Jh5qeL8OYMLrcNGPXUsyoPsQMIzcCGeq
ndtDLFGe9gBVj9NpFnDwV9GN3dOLOu4BcI4A4DBQSPvxne7SUQHTNB9SON/Iv9ig
6EV30QkDaG9pr1GISZpl0n2v/wR10ROTCditxGhjXLDHk43okpur8XJXjpW5f3xH
XS8DwEA9AdoNhREPCRUOkL9+tfPjfPHbDGjvXrFX/qM0LcnJgx4u8+MJyFfWR7wx
Z6Y9dbjgK7/A9Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:41 2025 by rpki-client