Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
File: _9YayMVuOP32EjgDbHNUcnADRjE.mft (raw, json)
Hash identifier: GIoYCKGyC7R60wv2CnLQPbojRKYjQkVf3PI50JU9lnw=
Subject key identifier: B6:AB:CC:19:C6:FF:BD:53:41:F6:5F:D6:9F:85:34:E7:A2:A6:0E:96
Authority key identifier: FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
Certificate issuer: /CN=ffd61ac8c56e38fdf61238036c73547270034631
Certificate serial: 0194BCE0CB83D2BE5E8B077875906A1AD57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: _9YayMVuOP32EjgDbHNUcnADRjE.crl (hash: KuUl0EhnXa67V9qJ9q/HkrydhiHZkZ8Kjfsy7CcZwqg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cb:83:d2:be:5e:8b:07:78:75:90:6a:1a:d5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd61ac8c56e38fdf61238036c73547270034631
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=b6abcc19c6ffbd5341f65fd69f8534e7a2a60e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:26:fe:b3:14:a8:3c:2d:3e:25:f3:a9:86:
5a:05:02:9c:1b:1a:fc:a2:1c:5e:94:10:6e:b2:72:
96:ee:98:55:02:38:6d:28:60:0f:b8:10:06:bb:eb:
68:a6:05:f0:7f:6a:f6:4d:fb:73:78:96:57:60:86:
b0:a2:a5:56:3a:28:81:fb:a9:bc:d3:11:6f:66:ac:
1c:38:35:42:0f:f2:7b:ef:74:c9:8b:36:19:da:bb:
ed:2e:bf:25:ad:e9:3d:0d:e8:23:41:bb:5a:e8:2b:
b4:e8:eb:46:40:ae:31:72:94:cc:c0:34:cf:bb:ff:
11:25:c5:21:fe:64:31:09:99:76:09:4c:6b:38:e1:
be:83:84:22:4b:40:22:f5:00:ca:b7:2b:20:63:a1:
24:4e:56:0f:ce:5c:bb:4d:b6:a6:2d:57:76:38:19:
70:43:5f:0a:f3:11:79:fb:e3:a5:15:2a:a0:c4:e8:
1d:b7:bc:df:ea:bc:10:8f:c9:76:a1:89:e3:e2:80:
f9:c4:d3:92:cc:d0:71:14:ac:04:24:bb:c5:f1:77:
b7:a9:66:05:81:32:5f:3a:18:55:df:cb:23:7d:a0:
b2:9a:f6:21:f9:a5:78:ab:e7:4c:65:31:ec:11:de:
85:bf:af:e0:7e:b2:62:db:24:87:3f:f7:f4:bc:3c:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AB:CC:19:C6:FF:BD:53:41:F6:5F:D6:9F:85:34:E7:A2:A6:0E:96
X509v3 Authority Key Identifier:
keyid:FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f8:57:8a:1d:8d:67:92:df:77:61:3f:1d:95:3c:11:bc:a6:
f3:3f:a5:e9:b5:64:a7:3b:49:9a:2c:43:f9:e1:ac:02:75:0c:
b2:7f:dc:f9:c0:b7:5d:df:fe:53:d5:98:de:a6:a6:c6:18:56:
3d:a1:9c:34:2d:38:2f:9a:fb:73:1e:a9:49:de:68:1d:bb:94:
04:47:97:d6:e6:16:e4:cb:27:02:70:da:45:af:55:7c:75:0a:
2d:6d:ed:e3:c7:7e:8c:25:e6:5c:76:4f:03:46:53:58:56:2b:
a9:a7:65:05:66:13:6b:87:e1:98:7b:8d:67:4c:7b:27:fc:78:
d0:03:83:c3:ee:c2:a5:35:08:9c:22:b2:a7:55:95:4c:b0:03:
48:b7:97:32:9b:42:21:f0:70:a0:58:0e:e1:7a:2a:8c:fd:68:
ed:e6:f8:3f:ec:09:c3:5c:8e:6f:e3:7e:57:97:8a:f5:41:7a:
cd:8b:d2:28:02:43:86:56:7e:ce:73:d2:40:51:67:a8:5c:5d:
f2:0b:3c:aa:14:d2:16:4a:8d:4e:8c:d5:d8:f2:83:f2:cc:ca:
25:0c:bb:40:33:20:7d:ed:2c:e8:63:b6:67:87:5a:0c:08:24:
8b:d1:ec:ab:7a:da:ef:d2:7c:33:7f:53:01:a5:b1:35:b5:17:
eb:e8:d7:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84MuD0r5eiwd4dZBqGtV/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZDYxYWM4YzU2ZTM4ZmRmNjEyMzgwMzZjNzM1NDcyNzAw
MzQ2MzEwHhcNMjUwMTMxMTUwMDM2WhcNMjUwMjAxMTUwMDM2WjAzMTEwLwYDVQQD
EyhiNmFiY2MxOWM2ZmZiZDUzNDFmNjVmZDY5Zjg1MzRlN2EyYTYwZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSUm/rMUqDwtPiXzqYZaBQKcGxr8
ohxelBBusnKW7phVAjhtKGAPuBAGu+topgXwf2r2TftzeJZXYIawoqVWOiiB+6m8
0xFvZqwcODVCD/J773TJizYZ2rvtLr8lrek9DegjQbta6Cu06OtGQK4xcpTMwDTP
u/8RJcUh/mQxCZl2CUxrOOG+g4QiS0Ai9QDKtysgY6EkTlYPzly7TbamLVd2OBlw
Q18K8xF5++OlFSqgxOgdt7zf6rwQj8l2oYnj4oD5xNOSzNBxFKwEJLvF8Xe3qWYF
gTJfOhhV38sjfaCymvYh+aV4q+dMZTHsEd6Fv6/gfrJi2ySHP/f0vDzL0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLarzBnG/71TQfZf1p+FNOeipg6WMB8GA1UdIwQY
MBaAFP/WGsjFbjj99hI4A2xzVHJwA0YxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzlZYXlNVnVPUDMyRWpnRGJITlVjbkFEUmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8xNGQ3YjgtYWZjZS00NWExLWIyNzIt
MDRkOTZmYTgzZDA3LzEvXzlZYXlNVnVPUDMyRWpnRGJITlVjbkFEUmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8xNGQ3YjgtYWZjZS00NWExLWIyNzItMDRkOTZmYTgzZDA3
LzEvXzlZYXlNVnVPUDMyRWpnRGJITlVjbkFEUmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPhXih2N
Z5Lfd2E/HZU8Ebym8z+l6bVkpztJmixD+eGsAnUMsn/c+cC3Xd/+U9WY3qamxhhW
PaGcNC04L5r7cx6pSd5oHbuUBEeX1uYW5MsnAnDaRa9VfHUKLW3t48d+jCXmXHZP
A0ZTWFYrqadlBWYTa4fhmHuNZ0x7J/x40AODw+7CpTUInCKyp1WVTLADSLeXMptC
IfBwoFgO4XoqjP1o7eb4P+wJw1yOb+N+V5eK9UF6zYvSKAJDhlZ+znPSQFFnqFxd
8gs8qhTSFkqNTozV2PKD8szKJQy7QDMgfe0s6GO2Z4daDAgki9Hsq3ra79J8M39T
AaWxNbUX6+jXqQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:43:57 2025 by rpki-client