Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
File: 4fI_OJG9feF53kEDCi_R-ljkPRc.mft (raw, json)
Hash identifier: LEqC14GW/mHmGZgz+1ax0nkPRNqn5qfIFlcruH02xLk=
Subject key identifier: 24:DB:A1:38:F2:6D:84:F7:57:DE:E0:C5:47:FB:AF:C0:4A:89:D0:23
Authority key identifier: E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
Certificate issuer: /CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Certificate serial: 0194BC04ADA3360DBBABDAA476F50A650481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
Manifest number: 0246
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: 4fI_OJG9feF53kEDCi_R-ljkPRc.crl (hash: XIrR2lkp6tcNKFvox8iWqPY3ZEsPmfdQrqJnglJObcg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ad:a3:36:0d:bb:ab:da:a4:76:f5:0a:65:04:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=24dba138f26d84f757dee0c547fbafc04a89d023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:07:c8:17:69:95:0a:13:04:6f:43:a0:69:55:
b0:7c:b4:07:37:7e:3e:dc:6d:12:61:7d:25:71:35:
ae:2a:39:32:7b:0b:98:10:5e:73:f3:04:d6:b0:26:
4c:1f:1f:00:d0:08:95:6e:15:c0:35:92:62:cd:40:
18:1d:f5:b4:d2:42:ae:90:bf:20:a8:bb:98:e7:86:
b0:7a:10:1d:6f:3a:45:9d:84:97:dd:05:d6:7f:2e:
f7:6f:38:a3:87:5e:18:c1:b0:02:91:30:a5:8a:ac:
d7:bc:7b:1f:30:94:dc:f7:e5:f0:45:5e:02:c4:ab:
85:9c:97:95:25:45:22:45:da:17:8c:dd:d9:9b:d1:
98:10:ca:b5:4d:48:b4:e8:3c:a2:87:68:62:cd:f1:
8b:e3:d3:24:c7:a3:df:83:76:1f:e9:c2:48:2f:de:
cf:79:db:e5:e4:1a:dc:da:3d:1a:2f:b5:bc:cb:b5:
96:46:03:2d:78:fb:69:69:37:98:08:a8:5a:21:d0:
38:69:2c:2e:c3:b1:6a:90:dc:50:60:e5:b3:ca:ff:
64:af:3e:08:c8:6d:82:e4:6b:5b:d7:90:d9:f8:ff:
42:cb:7f:d9:12:d1:88:43:06:45:21:47:b0:1e:a7:
fd:35:52:4e:f5:4c:70:a0:a5:85:5d:11:b9:e8:95:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DB:A1:38:F2:6D:84:F7:57:DE:E0:C5:47:FB:AF:C0:4A:89:D0:23
X509v3 Authority Key Identifier:
keyid:E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:70:45:1a:16:13:8a:c1:61:88:4f:78:b0:fa:60:45:51:db:
7b:ed:f1:b3:1d:40:a7:9b:77:2b:a2:09:70:8a:ee:d1:97:fa:
c0:8e:58:4f:19:3c:46:e9:81:bc:cc:30:1c:bd:ee:99:ad:96:
85:e8:a7:1c:8c:e9:9b:0f:c8:7e:1e:71:0e:0e:c9:c4:50:22:
cf:ad:ea:ae:02:5f:0a:48:48:88:a8:0d:1b:97:ff:76:5c:bd:
b1:da:36:e9:7b:d5:00:13:64:85:f0:3a:89:c1:db:c2:87:46:
2c:b5:64:b5:fc:60:ec:f4:0f:b4:26:ae:df:ef:9d:95:83:da:
df:cd:c4:78:99:37:51:23:9b:23:c1:fe:f7:ba:43:dc:47:21:
c4:2c:7f:49:b6:68:1a:8f:ea:bf:9e:a6:20:7b:0b:d3:06:3e:
41:db:3f:9e:b8:21:74:d2:cb:bc:04:12:e6:bd:53:72:a0:d5:
db:62:05:1a:ed:aa:8f:7b:14:bb:14:84:73:8e:31:3e:8b:af:
23:35:f8:db:40:50:c8:c4:f4:8d:c8:b1:68:12:c1:d6:be:38:
44:34:b5:3f:8e:63:66:63:e5:76:fb:29:68:e0:d0:51:09:b3:
ae:ca:58:35:67:7d:c0:a2:81:1f:a8:d3:fe:a5:94:79:c3:32:
4c:fc:12:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BK2jNg27q9qkdvUKZQSBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjIzZjM4OTFiZDdkZTE3OWRlNDEwMzBhMmZkMWZhNThl
NDNkMTcwHhcNMjUwMTMxMTEwMDEwWhcNMjUwMjAxMTEwMDEwWjAzMTEwLwYDVQQD
EygyNGRiYTEzOGYyNmQ4NGY3NTdkZWUwYzU0N2ZiYWZjMDRhODlkMDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QfIF2mVChMEb0OgaVWwfLQHN34+
3G0SYX0lcTWuKjkyewuYEF5z8wTWsCZMHx8A0AiVbhXANZJizUAYHfW00kKukL8g
qLuY54awehAdbzpFnYSX3QXWfy73bzijh14YwbACkTCliqzXvHsfMJTc9+XwRV4C
xKuFnJeVJUUiRdoXjN3Zm9GYEMq1TUi06Dyih2hizfGL49Mkx6Pfg3Yf6cJIL97P
edvl5Brc2j0aL7W8y7WWRgMtePtpaTeYCKhaIdA4aSwuw7FqkNxQYOWzyv9krz4I
yG2C5Gtb15DZ+P9Cy3/ZEtGIQwZFIUewHqf9NVJO9UxwoKWFXRG56JVwPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTboTjybYT3V97gxUf7r8BKidAjMB8GA1UdIwQY
MBaAFOHyPziRvX3hed5BAwov0fpY5D0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZJX09KRzlmZUY1M2tFRENpX1ItbGprUFJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jM2NkNmEtYzZjMS00MDg3LTk2ZjYt
ODYxNzYzYjVmMDY1LzEvNGZJX09KRzlmZUY1M2tFRENpX1ItbGprUFJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jM2NkNmEtYzZjMS00MDg3LTk2ZjYtODYxNzYzYjVmMDY1
LzEvNGZJX09KRzlmZUY1M2tFRENpX1ItbGprUFJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHBFGhYT
isFhiE94sPpgRVHbe+3xsx1Ap5t3K6IJcIru0Zf6wI5YTxk8RumBvMwwHL3uma2W
heinHIzpmw/Ifh5xDg7JxFAiz63qrgJfCkhIiKgNG5f/dly9sdo26XvVABNkhfA6
icHbwodGLLVktfxg7PQPtCau3++dlYPa383EeJk3USObI8H+97pD3EchxCx/SbZo
Go/qv56mIHsL0wY+Qds/nrghdNLLvAQS5r1TcqDV22IFGu2qj3sUuxSEc44xPouv
IzX420BQyMT0jcixaBLB1r44RDS1P45jZmPldvspaODQUQmzrspYNWd9wKKBH6jT
/qWUecMyTPwSag==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:03 2025 by rpki-client