Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
File: 40Y8J4uE4t8ApHvC2AyNgP-puok.mft (raw, json)
Hash identifier: I2MJAPsCoPKhZLlX1j27y7gTJ0ZdSPz5sR1VoEQ/sOM=
Subject key identifier: 33:BC:99:5C:5A:6D:BC:DC:C5:44:39:0B:E4:63:51:F1:19:CE:65:68
Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Certificate issuer: /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Certificate serial: 0194BC3C84C4FC6D7177096D06E13354BC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: 40Y8J4uE4t8ApHvC2AyNgP-puok.crl (hash: HA25tLk1RZ1xetjavWUgylvDGL7h2uH0JeVqeUlYoqs=)
2: 4mphuMGYKre7KcVIZklqvnEwe9w.roa (hash: BDdrPj5npMilCe1H11h3z51bgzRRHnfwNgW8/PXQiwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:84:c4:fc:6d:71:77:09:6d:06:e1:33:54:bc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=33bc995c5a6dbcdcc544390be46351f119ce6568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:d0:28:e9:04:0e:e4:b1:40:b6:80:53:4f:
ae:e2:31:da:25:c4:42:68:1f:59:63:ac:8a:a1:37:
a5:7d:86:88:03:aa:0e:e2:cc:a7:20:a8:b0:e1:63:
de:0f:a7:ce:28:a8:8e:e4:6c:43:96:87:ee:36:8a:
dd:ed:b2:cc:1a:79:fe:f8:cf:4a:c1:69:f0:28:da:
48:a0:39:7a:d1:59:c6:0e:0e:b5:ed:e6:75:df:64:
ef:7b:9c:8d:2e:fe:81:e3:04:77:c7:ec:2a:c4:a7:
a6:cb:4d:d2:17:eb:f7:e1:ba:b2:29:05:93:bd:bd:
2f:bd:73:e4:ad:df:69:fa:4f:b2:20:a7:62:74:56:
80:b6:5b:c6:c1:c3:90:95:e4:3e:13:6a:a0:96:1a:
a0:a4:44:72:92:1c:94:6d:b3:9f:c6:c2:ec:0c:c7:
a7:3d:d0:32:44:85:48:4c:90:03:d1:6b:2f:c6:12:
81:08:97:05:e1:b2:90:d5:b3:17:92:99:59:fc:40:
ca:e3:7f:d5:09:f5:f7:eb:a6:a1:ee:3c:4e:2f:31:
65:75:10:a6:27:4a:b1:41:7c:62:9c:bf:51:d3:7e:
b8:38:44:4b:62:e0:1b:4b:18:58:f6:6e:a3:7c:43:
40:60:cc:7c:68:1a:76:80:40:28:86:58:2d:cd:04:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BC:99:5C:5A:6D:BC:DC:C5:44:39:0B:E4:63:51:F1:19:CE:65:68
X509v3 Authority Key Identifier:
keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:89:4a:a3:41:93:bb:9c:d6:d6:e3:84:34:4d:a3:39:bb:87:
8c:37:79:99:ba:38:a9:e7:1c:ab:ed:dd:3f:29:09:45:ff:18:
19:15:44:b1:03:df:5d:a9:26:35:71:af:6a:0b:64:e8:03:a5:
2d:14:f6:67:71:5b:bc:aa:5f:0a:91:c1:74:c0:3c:f5:df:e3:
1a:56:23:39:ae:36:49:e1:0c:e3:aa:9b:1b:24:17:80:c8:c1:
95:92:a2:a3:7c:a5:48:ee:5e:3f:a9:a8:98:ae:eb:d3:cd:d8:
d5:bd:a2:9c:01:5f:29:05:b3:c2:85:bb:b7:3a:d8:f4:8b:42:
bb:49:0c:e9:d2:ed:a6:fb:1e:88:c1:25:11:28:40:a1:f0:b8:
43:36:56:4b:03:c4:bd:b2:54:5e:24:92:00:45:16:59:80:c0:
97:52:e1:db:24:e7:23:b4:26:bf:c2:bb:08:4e:a9:35:bb:f7:
52:71:f2:60:1d:3d:59:18:d8:0e:94:f8:74:9c:a8:86:ec:8b:
9a:a9:2b:95:b4:82:ef:e5:81:56:2c:1b:2c:c2:e7:1c:c8:f5:
4d:0e:67:1d:de:69:e6:aa:fd:44:46:7f:53:be:af:ac:2f:76:
91:e0:b9:19:96:73:04:42:56:8a:41:a3:89:29:24:3f:0b:72:
6a:02:ec:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PITE/G1xdwltBuEzVLyEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNDYzYzI3OGI4NGUyZGYwMGE0N2JjMmQ4MGM4ZDgwZmZh
OWJhODkwHhcNMjUwMTMxMTIwMTEwWhcNMjUwMjAxMTIwMTEwWjAzMTEwLwYDVQQD
EygzM2JjOTk1YzVhNmRiY2RjYzU0NDM5MGJlNDYzNTFmMTE5Y2U2NTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVLQKOkEDuSxQLaAU0+u4jHaJcRC
aB9ZY6yKoTelfYaIA6oO4synIKiw4WPeD6fOKKiO5GxDlofuNord7bLMGnn++M9K
wWnwKNpIoDl60VnGDg617eZ132Tve5yNLv6B4wR3x+wqxKemy03SF+v34bqyKQWT
vb0vvXPkrd9p+k+yIKdidFaAtlvGwcOQleQ+E2qglhqgpERykhyUbbOfxsLsDMen
PdAyRIVITJAD0WsvxhKBCJcF4bKQ1bMXkplZ/EDK43/VCfX366ah7jxOLzFldRCm
J0qxQXxinL9R0364OERLYuAbSxhY9m6jfENAYMx8aBp2gEAohlgtzQQ6kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDO8mVxabbzcxUQ5C+RjUfEZzmVoMB8GA1UdIwQY
MBaAFONGPCeLhOLfAKR7wtgMjYD/qbqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85N2JhY2UtYjJkNS00MDUyLThmNjEt
NWYyZGZlZDVkMWE0LzEvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85N2JhY2UtYjJkNS00MDUyLThmNjEtNWYyZGZlZDVkMWE0
LzEvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4lKo0GT
u5zW1uOENE2jObuHjDd5mbo4qeccq+3dPykJRf8YGRVEsQPfXakmNXGvagtk6AOl
LRT2Z3FbvKpfCpHBdMA89d/jGlYjOa42SeEM46qbGyQXgMjBlZKio3ylSO5eP6mo
mK7r083Y1b2inAFfKQWzwoW7tzrY9ItCu0kM6dLtpvseiMElEShAofC4QzZWSwPE
vbJUXiSSAEUWWYDAl1Lh2yTnI7Qmv8K7CE6pNbv3UnHyYB09WRjYDpT4dJyohuyL
mqkrlbSC7+WBViwbLMLnHMj1TQ5nHd5p5qr9REZ/U76vrC92keC5GZZzBEJWikGj
iSkkPwtyagLsEw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:53 2025 by rpki-client