Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.mft
File: DwQeIIaCRVpnlCzipkhYygcEfos.mft (raw, json)
Hash identifier: NoLxgiymP597tIA8rDIYJI3wU0ROCJbH6GoqR6kmgaE=
Subject key identifier: B1:08:83:85:86:B4:26:D2:8F:07:A3:F6:F1:75:F7:14:9A:DF:0A:32
Authority key identifier: 0F:04:1E:20:86:82:45:5A:67:94:2C:E2:A6:48:58:CA:07:04:7E:8B
Certificate issuer: /CN=0f041e208682455a67942ce2a64858ca07047e8b
Certificate serial: 0194BD1790862998D8A012AA0269B5648D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwQeIIaCRVpnlCzipkhYygcEfos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: DwQeIIaCRVpnlCzipkhYygcEfos.crl (hash: 3bI8yMhn1STQBB37mLLBLTRqIZCTk9uzZU1lRDOCHH4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:90:86:29:98:d8:a0:12:aa:02:69:b5:64:8d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f041e208682455a67942ce2a64858ca07047e8b
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=b108838586b426d28f07a3f6f175f7149adf0a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:73:d1:49:0d:80:25:63:52:11:e4:ac:e2:97:
f5:62:f1:a7:76:ab:68:4d:28:6b:23:a1:89:79:f1:
09:4e:36:30:0b:f8:72:45:72:cf:42:7b:8e:00:06:
3f:fa:e6:ab:a7:38:d8:52:8f:5e:f2:ab:71:de:6d:
6c:9c:6c:47:88:f7:c4:d4:6e:13:3e:86:ba:76:35:
67:18:01:2f:6f:a8:47:e8:61:7d:fd:e8:a7:f2:ef:
f5:29:a5:70:2f:44:5c:bf:54:5b:7d:1b:09:bb:c7:
c2:d8:68:5b:13:43:b0:2d:0f:61:c2:ad:e5:db:00:
bc:78:a2:76:a7:e5:6b:c2:8e:51:1c:4c:0d:81:4b:
99:a5:80:77:c2:da:e1:df:59:0c:79:e4:4b:a2:d5:
9e:b9:03:e3:6c:70:f9:64:7e:24:3f:2b:26:5d:cd:
24:2a:c0:4c:b6:a7:3f:a9:76:b6:d5:57:87:48:da:
fc:b9:93:c7:e3:14:77:40:a5:33:c9:96:2c:ee:a2:
51:ba:24:01:aa:83:9a:c8:34:16:0e:c1:b2:eb:8a:
6b:4a:52:7d:1b:80:35:a0:a1:29:c8:e2:cc:29:4c:
2a:54:cb:8d:1d:9d:53:b9:a3:92:c2:8e:37:50:79:
67:7f:14:33:94:7a:8d:db:b6:13:31:dd:86:fa:f6:
48:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:08:83:85:86:B4:26:D2:8F:07:A3:F6:F1:75:F7:14:9A:DF:0A:32
X509v3 Authority Key Identifier:
keyid:0F:04:1E:20:86:82:45:5A:67:94:2C:E2:A6:48:58:CA:07:04:7E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwQeIIaCRVpnlCzipkhYygcEfos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:4b:4b:2f:e3:10:a1:a7:68:f2:80:65:ff:dd:6b:14:52:30:
02:44:78:4a:79:68:e9:6a:76:2d:c2:0e:c9:30:6f:71:f1:4d:
4b:61:c5:da:f5:df:68:1b:87:b1:ab:18:b7:3d:5f:2e:9f:8b:
c7:4b:e3:26:3e:b9:1d:29:b2:1b:4a:f9:f2:51:b5:31:bc:c1:
2a:91:03:ca:80:a6:79:bf:57:b6:2f:47:63:cd:d9:76:53:1e:
45:85:1d:3e:4a:ef:04:87:1a:3d:36:52:1e:4c:76:60:10:c3:
73:89:7f:05:53:60:ee:a8:8d:a6:a9:d4:ac:c7:3d:5e:79:12:
28:6d:64:16:5a:cd:3b:e7:f2:19:2e:86:2f:ff:c3:80:cb:dd:
d0:34:96:d2:5f:98:3d:4e:cc:cc:cf:d3:d1:d4:21:f0:35:07:
87:dd:15:b1:a8:4c:ad:16:af:3c:37:f8:dd:f7:7c:f4:6e:88:
48:41:72:28:b6:98:00:e0:97:e3:fc:e7:dc:5c:a9:33:4b:4f:
50:86:8e:f1:58:d2:16:53:87:46:3e:16:bf:10:1f:95:9f:42:
7a:f7:c1:f4:34:a6:ce:af:15:28:08:d9:77:28:98:af:54:64:
3a:2a:fc:8e:35:ce:78:66:97:de:c1:c8:d8:57:59:60:f1:48:
98:36:bf:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F5CGKZjYoBKqAmm1ZI04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMDQxZTIwODY4MjQ1NWE2Nzk0MmNlMmE2NDg1OGNhMDcw
NDdlOGIwHhcNMjUwMTMxMTYwMDI1WhcNMjUwMjAxMTYwMDI1WjAzMTEwLwYDVQQD
EyhiMTA4ODM4NTg2YjQyNmQyOGYwN2EzZjZmMTc1ZjcxNDlhZGYwYTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XPRSQ2AJWNSEeSs4pf1YvGndqto
TShrI6GJefEJTjYwC/hyRXLPQnuOAAY/+uarpzjYUo9e8qtx3m1snGxHiPfE1G4T
Poa6djVnGAEvb6hH6GF9/ein8u/1KaVwL0Rcv1RbfRsJu8fC2GhbE0OwLQ9hwq3l
2wC8eKJ2p+Vrwo5RHEwNgUuZpYB3wtrh31kMeeRLotWeuQPjbHD5ZH4kPysmXc0k
KsBMtqc/qXa21VeHSNr8uZPH4xR3QKUzyZYs7qJRuiQBqoOayDQWDsGy64prSlJ9
G4A1oKEpyOLMKUwqVMuNHZ1TuaOSwo43UHlnfxQzlHqN27YTMd2G+vZIuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEIg4WGtCbSjwej9vF19xSa3woyMB8GA1UdIwQY
MBaAFA8EHiCGgkVaZ5Qs4qZIWMoHBH6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHdRZUlJYUNSVnBubEN6aXBraFl5Z2NFZm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mOTIyZTctZDUzZS00ZGFmLTg3NzAt
N2ZmZGZlZTU3ZjUyLzEvRHdRZUlJYUNSVnBubEN6aXBraFl5Z2NFZm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mOTIyZTctZDUzZS00ZGFmLTg3NzAtN2ZmZGZlZTU3ZjUy
LzEvRHdRZUlJYUNSVnBubEN6aXBraFl5Z2NFZm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUtLL+MQ
oado8oBl/91rFFIwAkR4Snlo6Wp2LcIOyTBvcfFNS2HF2vXfaBuHsasYtz1fLp+L
x0vjJj65HSmyG0r58lG1MbzBKpEDyoCmeb9Xti9HY83ZdlMeRYUdPkrvBIcaPTZS
Hkx2YBDDc4l/BVNg7qiNpqnUrMc9XnkSKG1kFlrNO+fyGS6GL//DgMvd0DSW0l+Y
PU7MzM/T0dQh8DUHh90VsahMrRavPDf43fd89G6ISEFyKLaYAOCX4/zn3FypM0tP
UIaO8VjSFlOHRj4WvxAflZ9CevfB9DSmzq8VKAjZdyiYr1RkOir8jjXOeGaX3sHI
2FdZYPFImDa/Qw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:10 2025 by rpki-client