Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
File: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft (raw, json)
Hash identifier: iCrPc+rc5j4CekF3X6G6z7KEQycRAaX6TaL+fUw1Vfg=
Subject key identifier: 03:68:9E:15:BA:E8:92:59:7E:A1:B1:A4:67:EE:7E:1B:FE:62:F0:DD
Authority key identifier: DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
Certificate issuer: /CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Certificate serial: 0194BD855B1B066D0F8DF5151399A18CE59B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
Manifest number: 01E5
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl (hash: tyovbFo7AswYXAV5Mz8c9ZWCMEkciOHLOiuQuzUFQ8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5b:1b:06:6d:0f:8d:f5:15:13:99:a1:8c:e5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=03689e15bae892597ea1b1a467ee7e1bfe62f0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:18:1d:c0:a4:c6:5c:88:c2:c5:cd:c0:9b:89:
ea:0a:e7:a8:6a:70:bc:18:f6:56:a3:bb:6a:dd:70:
e8:b6:ab:c1:86:9f:0c:bc:aa:38:f8:24:a5:f9:7f:
9c:7b:fa:c5:1e:6b:3d:cd:89:c9:28:4e:18:29:7c:
2a:e2:1c:07:80:79:23:d2:97:20:b5:84:9c:19:6b:
f1:dc:c0:49:3f:1e:54:d0:4c:a5:4f:cb:5f:7b:4e:
37:c5:0e:0e:cf:94:6c:50:52:6b:0a:82:37:e8:17:
79:11:ff:ce:49:5c:d6:5e:4a:3a:8a:89:62:e0:28:
29:9a:7a:e2:a4:93:5d:7b:4d:6b:dc:9b:13:9c:05:
e1:a3:56:f5:99:14:20:df:8a:b8:83:94:33:79:06:
e6:93:4e:31:a0:28:49:8c:71:c2:73:b5:56:c0:f3:
ab:27:4b:03:77:f6:7b:27:a6:20:37:6d:55:12:52:
9c:ff:f3:b2:80:5e:8f:8c:89:2f:ad:9b:c2:5a:e6:
19:17:d4:3a:20:27:90:29:ed:d7:bb:6a:35:42:28:
a8:7f:19:58:a6:0f:33:64:1c:bf:a1:36:16:57:76:
91:dd:0c:1e:3a:a4:e2:95:56:f7:f4:da:40:0b:81:
93:18:8b:33:74:00:fe:38:1e:45:ba:97:d7:82:d7:
08:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:68:9E:15:BA:E8:92:59:7E:A1:B1:A4:67:EE:7E:1B:FE:62:F0:DD
X509v3 Authority Key Identifier:
keyid:DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:16:4a:0a:8c:f1:f3:48:8a:ad:80:65:d4:b6:18:b3:11:b5:
1b:12:38:7e:71:50:f8:8d:dd:48:94:53:2e:4c:da:96:8f:a7:
b9:d4:d6:b6:93:27:92:bf:2d:81:75:58:bd:91:10:de:61:d2:
57:52:55:2b:7d:7b:4d:b5:d6:81:5c:94:c5:c1:72:f6:81:74:
a9:bf:aa:7b:3f:4c:38:94:d3:17:5d:56:12:7d:6c:6a:cb:49:
58:19:79:37:43:ea:46:18:0a:7f:fa:ec:8a:f3:b7:72:41:2a:
76:f5:dd:83:49:ef:aa:34:e0:b8:f5:74:7e:ee:f6:4a:f8:49:
75:be:21:3c:73:33:75:4d:66:8f:15:21:ca:c9:53:14:bd:2d:
71:1b:97:76:b7:ec:20:7a:73:3c:fa:09:1f:33:1a:34:a7:99:
f0:97:3a:55:5c:85:86:3c:c0:a9:cb:7a:84:be:4e:2e:05:e4:
a9:71:12:a3:d8:a6:67:82:12:66:29:0e:e5:10:56:50:4b:59:
f9:3b:0d:a1:9f:fb:cd:af:87:8c:0e:52:e8:d2:0a:e8:5d:b8:
7a:d8:bc:da:b5:ba:56:77:5a:73:e7:02:60:20:e2:d1:4f:e3:
48:71:a8:6c:5c:48:69:0a:4c:28:c6:8e:89:2e:b8:b3:20:bc:
5f:1f:b3:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVsbBm0PjfUVE5mhjOWbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzI1YzNhOWM1Y2Q4NjY2Zjg2YjA3YTgwOGYxMzJlMDkx
MTE5OWUwHhcNMjUwMTMxMTgwMDIwWhcNMjUwMjAxMTgwMDIwWjAzMTEwLwYDVQQD
EygwMzY4OWUxNWJhZTg5MjU5N2VhMWIxYTQ2N2VlN2UxYmZlNjJmMGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxgdwKTGXIjCxc3Am4nqCueoanC8
GPZWo7tq3XDotqvBhp8MvKo4+CSl+X+ce/rFHms9zYnJKE4YKXwq4hwHgHkj0pcg
tYScGWvx3MBJPx5U0EylT8tfe043xQ4Oz5RsUFJrCoI36Bd5Ef/OSVzWXko6ioli
4CgpmnripJNde01r3JsTnAXho1b1mRQg34q4g5QzeQbmk04xoChJjHHCc7VWwPOr
J0sDd/Z7J6YgN21VElKc//OygF6PjIkvrZvCWuYZF9Q6ICeQKe3Xu2o1QiiofxlY
pg8zZBy/oTYWV3aR3QweOqTilVb39NpAC4GTGIszdAD+OB5FupfXgtcI0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANonhW66JJZfqGxpGfufhv+YvDdMB8GA1UdIwQY
MBaAFNpyXDqcXNhmb4aweoCPEy4JERmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5KY09weGMyR1p2aHJCNmdJOFRMZ2tSR1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lNmI4ZDktNjk5Mi00ODQxLWExYTUt
M2ZkMTgwMzQxY2JiLzEvMm5KY09weGMyR1p2aHJCNmdJOFRMZ2tSR1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9lNmI4ZDktNjk5Mi00ODQxLWExYTUtM2ZkMTgwMzQxY2Ji
LzEvMm5KY09weGMyR1p2aHJCNmdJOFRMZ2tSR1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxZKCozx
80iKrYBl1LYYsxG1GxI4fnFQ+I3dSJRTLkzalo+nudTWtpMnkr8tgXVYvZEQ3mHS
V1JVK317TbXWgVyUxcFy9oF0qb+qez9MOJTTF11WEn1sastJWBl5N0PqRhgKf/rs
ivO3ckEqdvXdg0nvqjTguPV0fu72SvhJdb4hPHMzdU1mjxUhyslTFL0tcRuXdrfs
IHpzPPoJHzMaNKeZ8Jc6VVyFhjzAqct6hL5OLgXkqXESo9imZ4ISZikO5RBWUEtZ
+TsNoZ/7za+HjA5S6NIK6F24eti82rW6Vndac+cCYCDi0U/jSHGobFxIaQpMKMaO
iS64syC8Xx+zAg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:04 2025 by rpki-client