Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
File: _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json)
Hash identifier: wKAS52SHRCEiMNSiC/nSz5Ttu/KeOnh5tL/ZeJsj0gQ=
Subject key identifier: 95:EC:5B:AE:86:ED:83:A2:85:F2:E2:E8:87:48:43:97:77:C0:A4:D2
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial: 0194BCE0A2368E4B5369E9F98C16B5BDC89A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: /2iQZgGFpE6J2a1jIWt6OQ0FV8wvpgGRsgrdrg5X7to=)
2: sKY5eWcuMLtnQDCwYINlgWrJYiU.roa (hash: CtU3txyv7ojbqzOBjkBrsZCPvN9srqKePBnH0g0kSFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a2:36:8e:4b:53:69:e9:f9:8c:16:b5:bd:c8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=95ec5bae86ed83a285f2e2e88748439777c0a4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:81:8e:5c:3a:8c:4c:53:d4:be:4a:c7:a5:
33:b1:e5:74:23:52:35:f7:68:cc:c0:ca:7c:b3:19:
64:4f:ec:e2:60:10:91:69:37:fe:ff:05:2a:32:12:
1c:4f:00:39:18:37:85:f8:9c:a4:18:30:f3:d7:cf:
41:6e:ab:bb:40:13:cb:ec:bf:4c:ed:6c:7a:c9:77:
b0:48:fd:98:a9:2f:4f:f2:ad:ce:3a:12:aa:d1:d2:
04:f0:4a:51:44:ae:d6:57:83:cf:e2:a7:cc:74:68:
6f:cf:0b:a7:9b:9c:c2:69:e4:0a:4f:e9:0b:35:19:
37:15:5a:bc:6c:29:50:aa:8c:3e:28:da:23:03:c2:
83:4c:28:87:dc:66:59:65:7b:29:85:0c:f8:04:06:
4b:f3:63:0a:16:f4:61:43:97:9a:e1:ab:b9:6b:12:
3b:6e:1b:d3:59:71:2c:08:62:aa:ef:38:b8:fb:55:
f3:f9:65:f1:3e:4c:bb:25:fe:29:3c:21:1c:ca:86:
b4:81:6e:a5:47:ef:e8:ac:6e:19:84:d3:a2:64:d8:
27:c3:cd:5b:e0:24:8e:c9:5c:af:54:16:15:0a:1f:
a0:cc:ec:ec:44:a4:72:f8:b1:6c:c7:3c:74:c0:fb:
20:cc:22:7a:0c:87:cb:5f:fb:21:bf:d7:52:13:2e:
83:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EC:5B:AE:86:ED:83:A2:85:F2:E2:E8:87:48:43:97:77:C0:A4:D2
X509v3 Authority Key Identifier:
keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:09:f2:28:41:6c:e5:cc:21:dd:1a:43:35:4e:77:0a:b5:eb:
6f:21:6e:70:96:30:01:96:44:41:80:03:a8:3b:56:5a:e6:db:
87:7e:b9:2c:5d:4b:90:75:c7:2a:1a:fc:77:a0:3a:99:33:e0:
5f:57:35:27:f8:0e:f0:1b:ba:8a:34:81:3d:70:e7:77:f5:b8:
8b:db:bc:29:f7:4a:93:c1:a6:aa:12:e0:5b:85:6a:4d:18:48:
05:76:59:71:6c:45:a8:20:ea:16:f6:01:6b:75:35:9b:24:db:
5d:da:50:db:0b:55:91:c6:1b:96:36:96:34:ea:b8:d6:be:09:
a8:4c:b9:96:b8:cd:9d:5c:8b:85:4c:1f:64:e5:0d:86:e8:6a:
1e:8b:fe:95:b4:23:d6:f0:ef:ef:92:01:eb:34:ea:d0:8f:a1:
40:44:d6:43:90:49:d6:45:d2:b6:f9:6b:e9:29:4d:5e:69:d6:
da:5e:26:1d:57:dc:86:68:8e:25:88:b5:68:9b:6e:0d:a3:03:
26:8f:0e:f6:88:ab:5c:4d:38:a2:0c:1b:94:2c:13:2f:14:01:
c5:f7:03:e3:cf:dc:05:a1:ca:be:62:1a:2e:4c:71:c8:90:d2:
2b:8c:66:b8:b9:bf:67:6e:d6:8f:22:c1:bc:ec:b2:b6:bf:2e:
75:1d:9e:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84KI2jktTaen5jBa1vciaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDk0MjJkZTk2MjAzZTVkODczZTA5OTU1OTFhM2E2OTBk
ZDNkOTIwHhcNMjUwMTMxMTUwMDI1WhcNMjUwMjAxMTUwMDI1WjAzMTEwLwYDVQQD
Eyg5NWVjNWJhZTg2ZWQ4M2EyODVmMmUyZTg4NzQ4NDM5Nzc3YzBhNGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobuBjlw6jExT1L5Kx6UzseV0I1I1
92jMwMp8sxlkT+ziYBCRaTf+/wUqMhIcTwA5GDeF+JykGDDz189Bbqu7QBPL7L9M
7Wx6yXewSP2YqS9P8q3OOhKq0dIE8EpRRK7WV4PP4qfMdGhvzwunm5zCaeQKT+kL
NRk3FVq8bClQqow+KNojA8KDTCiH3GZZZXsphQz4BAZL82MKFvRhQ5ea4au5axI7
bhvTWXEsCGKq7zi4+1Xz+WXxPky7Jf4pPCEcyoa0gW6lR+/orG4ZhNOiZNgnw81b
4CSOyVyvVBYVCh+gzOzsRKRy+LFsxzx0wPsgzCJ6DIfLX/shv9dSEy6DdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXsW66G7YOihfLi6IdIQ5d3wKTSMB8GA1UdIwQY
MBaAFP3ZQi3pYgPl2HPgmVWRo6aQ3T2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODkt
YTE4NTUwYTY5ZjY2LzEvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODktYTE4NTUwYTY5ZjY2
LzEvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQnyKEFs
5cwh3RpDNU53CrXrbyFucJYwAZZEQYADqDtWWubbh365LF1LkHXHKhr8d6A6mTPg
X1c1J/gO8Bu6ijSBPXDnd/W4i9u8KfdKk8GmqhLgW4VqTRhIBXZZcWxFqCDqFvYB
a3U1myTbXdpQ2wtVkcYbljaWNOq41r4JqEy5lrjNnVyLhUwfZOUNhuhqHov+lbQj
1vDv75IB6zTq0I+hQETWQ5BJ1kXStvlr6SlNXmnW2l4mHVfchmiOJYi1aJtuDaMD
Jo8O9oirXE04ogwblCwTLxQBxfcD48/cBaHKvmIaLkxxyJDSK4xmuLm/Z27WjyLB
vOyytr8udR2etQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:46 2025 by rpki-client