Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
File: 1P97rGRNWVZyLl4YOiL7FFXnVUY.mft (raw, json)
Hash identifier: W6gDRp8eeniXkRJt5cp3jsh7XU9JVQv+4muGthB4JSk=
Subject key identifier: 50:D6:A2:29:D6:4C:AA:3A:4C:E7:FA:04:C9:33:AD:52:42:D5:7A:97
Authority key identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
Certificate issuer: /CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Certificate serial: 0194BC3BBF633F6FC85451ACD15778075D72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
Manifest number: B6
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: 1P97rGRNWVZyLl4YOiL7FFXnVUY.crl (hash: AZMVSHAHAiA1+fm+xh4vmg2PDshci+QwmwIPuyhP0rI=)
2: BBrcZolorsy-tffprBkzb6kzxjw.roa (hash: LubTLYd6O/FVL7Y6tbf5xWEWtjZWCQG4GmiGhTzuDxo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bf:63:3f:6f:c8:54:51:ac:d1:57:78:07:5d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=50d6a229d64caa3a4ce7fa04c933ad5242d57a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:16:0d:2f:15:85:9d:85:46:a7:cc:ac:43:42:
ce:cd:44:4b:9d:16:26:1f:40:90:ef:86:45:b6:64:
95:3c:c7:f5:2b:91:d9:f1:1c:4e:9a:86:9a:d1:50:
f3:1c:ec:a9:5b:5f:4f:d5:82:cf:87:3b:a3:c9:1f:
dd:4c:e5:54:ac:7e:0e:c4:55:7e:4f:10:cf:18:6d:
ea:a7:39:1b:af:76:29:ad:79:10:99:11:11:e9:98:
fc:fd:d9:d8:f0:06:68:2a:f6:6c:98:c5:0a:1c:fd:
2e:39:5f:13:48:af:5f:5d:11:99:01:2a:52:8d:35:
5d:4f:95:72:df:fc:c0:fd:4c:2c:3d:7c:15:2b:f5:
b8:73:58:b7:19:7a:34:4c:42:77:6d:99:47:06:65:
59:97:08:fc:85:be:2c:05:a0:81:b4:29:57:a8:8a:
da:44:c1:3f:68:7a:83:f6:06:14:4a:a0:3c:37:bc:
67:38:55:ee:8f:0a:c7:db:d9:bd:f0:d8:d4:69:82:
d8:2c:71:5a:fd:b2:b0:87:0a:b9:d5:7f:a9:bc:ac:
8a:c4:56:cd:29:18:e3:00:e0:ef:ab:d9:d2:9f:b2:
01:8e:d8:d2:50:78:20:87:6f:a6:0d:35:19:fc:44:
d1:2c:54:10:0a:f2:60:64:8c:3a:1f:16:be:e7:be:
71:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D6:A2:29:D6:4C:AA:3A:4C:E7:FA:04:C9:33:AD:52:42:D5:7A:97
X509v3 Authority Key Identifier:
keyid:D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1e:53:da:30:e4:a1:94:71:6a:a3:2c:7c:09:29:15:ae:c5:
b6:86:51:a9:0c:d7:9a:a6:f6:1a:b9:2c:74:06:a2:96:78:65:
36:8c:bd:6a:56:a2:e4:67:7e:1c:75:1c:8a:85:07:45:6e:fa:
75:ff:2b:a1:91:53:b6:ca:1f:c2:d2:d4:19:c1:01:35:b5:ec:
42:cf:5f:fb:e8:64:d9:40:0a:f1:c2:0d:17:21:9e:93:11:be:
b5:3d:a0:25:da:9d:0c:51:37:8a:4a:60:c4:38:55:2a:3b:dc:
2e:cd:e7:e0:89:a5:31:8c:90:e5:21:58:16:6e:9d:0a:f5:78:
81:92:73:59:a1:94:8a:f3:48:47:ac:77:92:65:77:a8:b6:4d:
f1:e9:7d:0e:e3:ff:5c:42:a3:33:61:6a:36:ac:c5:36:95:97:
59:75:3d:3a:de:72:60:9d:cf:3b:31:f1:be:f3:81:51:31:89:
77:73:c6:81:0d:3a:36:b0:84:1c:6f:96:45:26:0a:0d:ac:14:
80:a9:95:dd:9a:f8:0d:a8:ad:ad:fd:97:43:cf:af:10:0b:d9:
28:b9:a1:d3:93:6d:d3:d0:e5:c1:38:d9:c0:92:ec:4a:0c:2e:
42:41:c7:c3:04:42:ac:20:13:d7:80:56:3f:ed:1e:10:3f:57:
8e:3b:97:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O79jP2/IVFGs0Vd4B11yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmY3YmFjNjQ0ZDU5NTY3MjJlNWUxODNhMjJmYjE0NTVl
NzU1NDYwHhcNMjUwMTMxMTIwMDE5WhcNMjUwMjAxMTIwMDE5WjAzMTEwLwYDVQQD
Eyg1MGQ2YTIyOWQ2NGNhYTNhNGNlN2ZhMDRjOTMzYWQ1MjQyZDU3YTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBYNLxWFnYVGp8ysQ0LOzURLnRYm
H0CQ74ZFtmSVPMf1K5HZ8RxOmoaa0VDzHOypW19P1YLPhzujyR/dTOVUrH4OxFV+
TxDPGG3qpzkbr3YprXkQmRER6Zj8/dnY8AZoKvZsmMUKHP0uOV8TSK9fXRGZASpS
jTVdT5Vy3/zA/UwsPXwVK/W4c1i3GXo0TEJ3bZlHBmVZlwj8hb4sBaCBtClXqIra
RME/aHqD9gYUSqA8N7xnOFXujwrH29m98NjUaYLYLHFa/bKwhwq51X+pvKyKxFbN
KRjjAODvq9nSn7IBjtjSUHggh2+mDTUZ/ETRLFQQCvJgZIw6Hxa+575xnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDWoinWTKo6TOf6BMkzrVJC1XqXMB8GA1UdIwQY
MBaAFNT/e6xkTVlWci5eGDoi+xRV51VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xNjcyZDAtNWI2ZC00MTE1LWFmYjMt
ODgwYTgxYjk5Y2M1LzEvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8xNjcyZDAtNWI2ZC00MTE1LWFmYjMtODgwYTgxYjk5Y2M1
LzEvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKB5T2jDk
oZRxaqMsfAkpFa7FtoZRqQzXmqb2GrksdAailnhlNoy9alai5Gd+HHUcioUHRW76
df8roZFTtsofwtLUGcEBNbXsQs9f++hk2UAK8cINFyGekxG+tT2gJdqdDFE3ikpg
xDhVKjvcLs3n4ImlMYyQ5SFYFm6dCvV4gZJzWaGUivNIR6x3kmV3qLZN8el9DuP/
XEKjM2FqNqzFNpWXWXU9Ot5yYJ3POzHxvvOBUTGJd3PGgQ06NrCEHG+WRSYKDawU
gKmV3Zr4Daitrf2XQ8+vEAvZKLmh05Nt09DlwTjZwJLsSgwuQkHHwwRCrCAT14BW
P+0eED9XjjuXFg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:15 2025 by rpki-client