Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
File: tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft (raw, json)
Hash identifier: qNoakFOIAV9QpeeLW3k7MBP+zccl7GuGedVA8l2dpyo=
Subject key identifier: C8:8D:F6:43:59:FB:E3:B5:B7:29:F5:AA:94:8D:92:E9:4F:4C:48:C9
Authority key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
Certificate issuer: /CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Certificate serial: 0194BBCDD4AE163B0653CF73EC4E31832389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
Manifest number: 0CC4
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl (hash: rWXm0m9/ZwrKagSIzbKfXv8JYxRsYU0iBETDWm3MS0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d4:ae:16:3b:06:53:cf:73:ec:4e:31:83:23:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=c88df64359fbe3b5b729f5aa948d92e94f4c48c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:14:0d:96:7e:b6:a2:da:4e:08:c2:60:be:e3:
7a:c9:00:87:8b:b5:53:71:5e:1a:0c:67:15:37:20:
f0:48:a3:a8:1d:57:57:1e:7b:83:d6:6d:80:a5:4e:
76:33:fc:5b:27:47:af:66:8f:63:93:b1:84:e5:d1:
bc:4f:e7:6a:48:27:c8:b8:0e:f9:b9:66:78:81:83:
ac:13:0d:e8:67:da:ac:66:59:12:73:f6:38:e7:df:
98:1a:25:13:b7:21:e8:8b:15:89:18:0b:8b:06:29:
c1:56:1f:66:f5:b8:6b:a0:c2:d1:90:89:a5:ed:7f:
28:05:b7:c3:d7:1c:16:6a:d2:74:03:b8:77:39:7e:
75:e6:39:d3:77:23:bf:eb:d1:c5:18:9d:67:c5:b9:
4f:6d:18:45:c8:42:94:d1:fe:9a:a3:8b:70:af:11:
cb:b6:e0:7a:5e:bb:a0:05:0a:92:ae:29:e3:1d:eb:
60:49:00:de:43:15:ae:03:7e:b8:a7:bf:54:c7:70:
d0:f1:fa:67:32:e4:ce:de:19:bc:4b:39:14:1d:bf:
b0:2f:04:33:a8:1d:29:f4:19:88:65:67:95:2f:2c:
9c:b5:2d:75:64:91:45:ac:e5:f6:7d:b4:f7:0c:b8:
18:df:a0:cb:b5:f6:d1:80:2f:8b:01:a0:bb:08:fd:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8D:F6:43:59:FB:E3:B5:B7:29:F5:AA:94:8D:92:E9:4F:4C:48:C9
X509v3 Authority Key Identifier:
keyid:B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:72:26:0b:3f:c1:fb:b8:26:dd:00:ef:36:4a:d8:df:f5:a8:
65:44:0d:95:17:cc:69:f2:43:c3:35:12:4e:69:3a:e1:6c:a8:
42:3c:3a:b7:32:f7:72:a8:38:87:76:02:7e:25:7c:29:0d:e3:
c6:01:56:df:1a:06:16:87:59:27:50:79:c1:fd:32:21:d2:3f:
c3:16:a6:91:26:40:d0:11:9d:64:2a:26:4a:2b:35:43:90:b0:
45:64:ce:87:9b:4d:7b:51:d4:c0:df:11:5c:df:0f:01:89:e0:
0b:bd:7d:33:47:06:12:c2:82:70:2c:f6:c6:a8:af:48:da:87:
71:4f:3b:76:53:16:bb:3f:84:33:ce:ac:eb:19:0e:86:67:05:
cd:34:ff:d8:7f:9f:97:85:d2:fd:8e:9b:a8:0e:4d:bc:45:85:
5d:59:af:4b:d5:97:d3:9b:14:30:a0:8e:3c:6f:28:ad:93:c6:
c7:20:bc:18:46:b8:5a:9e:67:ce:16:43:5e:6f:2c:0e:09:5a:
e6:f1:8d:dc:35:bd:6e:9c:61:d7:98:6a:b9:fa:c8:32:7e:67:
e7:19:36:bf:d7:e3:e3:ba:34:06:94:1c:2d:a6:cb:9c:1f:fa:
6f:dd:12:c6:4e:b0:80:74:68:8d:b0:78:21:09:44:5e:9a:c3:
ee:d3:1b:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdSuFjsGU89z7E4xgyOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZTNhODYzNjllZjc5ZGMxM2NmYjQzNzYxNWQ0OTIzODhi
ZjhjZTMwHhcNMjUwMTMxMTAwMDE2WhcNMjUwMjAxMTAwMDE2WjAzMTEwLwYDVQQD
EyhjODhkZjY0MzU5ZmJlM2I1YjcyOWY1YWE5NDhkOTJlOTRmNGM0OGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RQNln62otpOCMJgvuN6yQCHi7VT
cV4aDGcVNyDwSKOoHVdXHnuD1m2ApU52M/xbJ0evZo9jk7GE5dG8T+dqSCfIuA75
uWZ4gYOsEw3oZ9qsZlkSc/Y459+YGiUTtyHoixWJGAuLBinBVh9m9bhroMLRkIml
7X8oBbfD1xwWatJ0A7h3OX515jnTdyO/69HFGJ1nxblPbRhFyEKU0f6ao4twrxHL
tuB6XrugBQqSrinjHetgSQDeQxWuA364p79Ux3DQ8fpnMuTO3hm8SzkUHb+wLwQz
qB0p9BmIZWeVLyyctS11ZJFFrOX2fbT3DLgY36DLtfbRgC+LAaC7CP26EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiN9kNZ++O1tyn1qpSNkulPTEjJMB8GA1UdIwQY
MBaAFLTjqGNp73ncE8+0N2FdSSOIv4zjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE9Pb1kybnZlZHdUejdRM1lWMUpJNGlfak9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81YzU3ZGQtNDg2ZS00YzY5LWExMTYt
ZjkwYThkY2UxYmZjLzEvdE9Pb1kybnZlZHdUejdRM1lWMUpJNGlfak9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy81YzU3ZGQtNDg2ZS00YzY5LWExMTYtZjkwYThkY2UxYmZj
LzEvdE9Pb1kybnZlZHdUejdRM1lWMUpJNGlfak9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3ImCz/B
+7gm3QDvNkrY3/WoZUQNlRfMafJDwzUSTmk64WyoQjw6tzL3cqg4h3YCfiV8KQ3j
xgFW3xoGFodZJ1B5wf0yIdI/wxamkSZA0BGdZComSis1Q5CwRWTOh5tNe1HUwN8R
XN8PAYngC719M0cGEsKCcCz2xqivSNqHcU87dlMWuz+EM86s6xkOhmcFzTT/2H+f
l4XS/Y6bqA5NvEWFXVmvS9WX05sUMKCOPG8orZPGxyC8GEa4Wp5nzhZDXm8sDgla
5vGN3DW9bpxh15hqufrIMn5n5xk2v9fj47o0BpQcLabLnB/6b90Sxk6wgHRojbB4
IQlEXprD7tMb2g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:43 2025 by rpki-client