Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
File: D4jGhrHhIvzcFlwCN6D149mQvwE.mft (raw, json)
Hash identifier: QqSLbveeYBsk3e5rpuiALf84Jl9LOL8LCxqiCRaCe7A=
Subject key identifier: 1D:17:73:AC:9F:FF:9B:5B:96:3F:26:E1:33:60:D8:0D:90:63:06:E0
Authority key identifier: 0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
Certificate issuer: /CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Certificate serial: 0194BBCE79149BE719B3E9617735967F4FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
Manifest number: 09D7
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: D4jGhrHhIvzcFlwCN6D149mQvwE.crl (hash: 17IvxVU0RfYWvM4pS0jCSxgTPF8O4rz4kVOUtvU0gQA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:79:14:9b:e7:19:b3:e9:61:77:35:96:7f:4f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=1d1773ac9fff9b5b963f26e13360d80d906306e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:fb:20:ae:ec:b0:20:46:07:3e:c9:68:ca:
87:23:4c:45:d9:86:da:1e:49:1f:84:2f:bd:a8:23:
a6:8f:c9:d9:1e:a4:3d:bd:a1:92:59:ac:62:2a:9d:
8f:ac:98:82:30:60:63:d9:58:ce:1a:1b:ca:34:ee:
98:24:cc:09:15:30:44:7e:f9:c8:6a:bc:81:7a:41:
d9:5d:3f:a1:14:ba:dc:0e:d9:70:f0:2c:b6:dd:ca:
ec:69:a4:44:96:e6:22:d2:24:31:60:d6:56:88:76:
96:26:72:f8:93:65:e8:43:84:1b:24:76:1d:56:cb:
fe:8f:14:a1:ed:34:af:47:2d:db:f1:62:ad:18:54:
1b:4a:9b:75:e2:da:39:06:9d:9f:45:09:bb:65:e3:
45:32:a4:66:29:f2:ec:22:3f:80:b2:3e:28:c9:9b:
c3:5d:22:91:59:59:d6:13:fa:6e:dc:4d:fa:3b:1c:
e6:96:e3:55:e5:0e:3a:c2:aa:5c:68:00:01:90:7a:
4d:be:36:3f:aa:3e:32:1b:dd:3f:e5:69:02:61:94:
21:f6:df:e0:e5:69:7f:05:21:46:10:91:25:0c:d7:
33:86:0c:70:4b:e3:68:e2:bc:9a:2a:b6:f6:a9:9d:
85:10:02:39:fe:42:2c:e8:bb:e5:31:e7:ad:16:90:
cc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:17:73:AC:9F:FF:9B:5B:96:3F:26:E1:33:60:D8:0D:90:63:06:E0
X509v3 Authority Key Identifier:
keyid:0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:60:4a:05:45:72:d7:7a:8f:f5:d1:66:56:77:61:64:a5:5a:
63:43:e5:88:a9:65:1b:3b:cf:42:66:e6:1a:94:6b:ee:0d:ac:
5a:3b:9d:0e:c9:1c:45:37:3b:53:9f:45:af:b4:3b:07:a8:4d:
1e:ef:c4:b7:15:4b:23:eb:3c:2d:af:d3:7e:59:80:cf:d6:be:
1a:8a:fd:55:11:7c:ef:53:04:48:d3:21:dc:95:e4:e5:a4:41:
45:2c:fd:00:8b:46:a9:2b:85:de:53:b4:14:dd:c0:95:74:96:
4b:ee:19:45:42:ae:19:ca:77:6d:df:fe:d0:57:49:1e:d8:5b:
49:d5:49:e5:39:70:b0:a3:c2:f5:5e:fc:e1:f9:d9:c0:d9:78:
66:08:eb:4a:1b:b9:44:12:e3:b9:63:e3:57:ee:4e:d1:5b:89:
6a:c7:b8:23:03:42:d7:5a:53:59:b1:65:99:45:0a:46:15:39:
a6:cb:e6:28:fb:fb:29:0a:8d:c1:6e:16:80:4b:48:f9:d4:82:
49:14:18:a9:30:28:80:fc:d6:1c:03:b6:94:0a:d9:43:be:01:
e0:b0:f5:5f:cb:9c:27:52:7f:bb:43:97:87:33:44:8c:c8:06:
8c:cb:60:df:42:87:de:80:c7:72:a8:ce:93:f6:fa:a1:ae:cc:
4c:3b:7d:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7znkUm+cZs+lhdzWWf0+sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmODhjNjg2YjFlMTIyZmNkYzE2NWMwMjM3YTBmNWUzZDk5
MGJmMDEwHhcNMjUwMTMxMTAwMDU4WhcNMjUwMjAxMTAwMDU4WjAzMTEwLwYDVQQD
EygxZDE3NzNhYzlmZmY5YjViOTYzZjI2ZTEzMzYwZDgwZDkwNjMwNmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS37IK7ssCBGBz7JaMqHI0xF2Yba
HkkfhC+9qCOmj8nZHqQ9vaGSWaxiKp2PrJiCMGBj2VjOGhvKNO6YJMwJFTBEfvnI
aryBekHZXT+hFLrcDtlw8Cy23crsaaREluYi0iQxYNZWiHaWJnL4k2XoQ4QbJHYd
Vsv+jxSh7TSvRy3b8WKtGFQbSpt14to5Bp2fRQm7ZeNFMqRmKfLsIj+Asj4oyZvD
XSKRWVnWE/pu3E36OxzmluNV5Q46wqpcaAABkHpNvjY/qj4yG90/5WkCYZQh9t/g
5Wl/BSFGEJElDNczhgxwS+No4ryaKrb2qZ2FEAI5/kIs6LvlMeetFpDMcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0Xc6yf/5tblj8m4TNg2A2QYwbgMB8GA1UdIwQY
MBaAFA+Ixoax4SL83BZcAjeg9ePZkL8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDRqR2hySGhJdnpjRmx3Q042RDE0OW1RdndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lNmYwYzQtNzk5ZC00NjIwLWFiN2It
YjQyMjVkZTI3MjNhLzEvRDRqR2hySGhJdnpjRmx3Q042RDE0OW1RdndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9lNmYwYzQtNzk5ZC00NjIwLWFiN2ItYjQyMjVkZTI3MjNh
LzEvRDRqR2hySGhJdnpjRmx3Q042RDE0OW1RdndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2BKBUVy
13qP9dFmVndhZKVaY0PliKllGzvPQmbmGpRr7g2sWjudDskcRTc7U59Fr7Q7B6hN
Hu/EtxVLI+s8La/TflmAz9a+Gor9VRF871MESNMh3JXk5aRBRSz9AItGqSuF3lO0
FN3AlXSWS+4ZRUKuGcp3bd/+0FdJHthbSdVJ5TlwsKPC9V784fnZwNl4ZgjrShu5
RBLjuWPjV+5O0VuJase4IwNC11pTWbFlmUUKRhU5psvmKPv7KQqNwW4WgEtI+dSC
SRQYqTAogPzWHAO2lArZQ74B4LD1X8ucJ1J/u0OXhzNEjMgGjMtg30KH3oDHcqjO
k/b6oa7MTDt9qQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:41 2025 by rpki-client