Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
File: 29B3gCIiIDwWzo6v1Z8LCsHb58M.mft (raw, json)
Hash identifier: NZaqvIBes6E1Ly3tzHEBJiydQ5Z29cOsQhFXzDyOn1Q=
Subject key identifier: C7:45:B9:62:DA:47:3D:1F:F8:CF:A4:55:1F:5E:B2:B3:8A:3B:0C:13
Authority key identifier: DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
Certificate issuer: /CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
Certificate serial: 0194BBCE550E62FAE7D0BB3A153A2B29B8B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
Manifest number: 0CDF
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: 29B3gCIiIDwWzo6v1Z8LCsHb58M.crl (hash: Gd9EiFp9I2V9vgrKswZwIQ1fx3OZxxzyPCAE4Yxun/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:55:0e:62:fa:e7:d0:bb:3a:15:3a:2b:29:b8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=c745b962da473d1ff8cfa4551f5eb2b38a3b0c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:e1:48:0f:1f:8b:7a:5b:be:b3:51:5c:6b:
1d:33:2a:21:6f:6f:4f:57:13:8f:c5:72:06:4f:86:
38:d5:ac:ef:31:b5:9d:15:a2:a8:e4:9a:5f:3f:64:
ea:99:c0:71:2c:0a:46:7c:fb:49:58:37:a6:f7:ec:
c5:18:54:58:a1:b0:8b:a3:08:93:b2:2a:97:ba:97:
93:1b:e3:b1:e1:a6:41:61:ce:bf:5f:91:e9:dc:58:
a0:55:4a:72:3e:32:ef:b4:f5:10:39:27:fc:cf:3b:
09:7d:73:82:20:cd:19:a5:86:17:28:c7:80:81:58:
8d:55:eb:28:8f:09:bf:a1:69:50:05:ed:29:74:8a:
f9:d3:5a:e1:49:a2:bb:f1:3b:fd:13:df:eb:29:33:
ac:48:30:91:dd:ba:20:10:ef:6a:f1:14:46:03:f3:
bb:4c:0f:06:2f:1d:e5:72:c6:83:02:b0:9f:b8:01:
08:9c:18:20:61:a4:cc:6b:bc:b6:cc:bc:19:52:5b:
ae:46:97:40:f2:39:49:68:30:c8:15:db:5f:b0:14:
1d:52:f1:4d:d4:ba:b1:53:93:9c:a3:d2:2b:e3:a9:
20:ae:61:5c:c7:4d:52:39:47:b8:a0:1c:ad:f8:2d:
5e:1d:ae:3d:ee:45:78:44:43:20:45:2a:bd:c2:ad:
4f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:45:B9:62:DA:47:3D:1F:F8:CF:A4:55:1F:5E:B2:B3:8A:3B:0C:13
X509v3 Authority Key Identifier:
keyid:DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6b:13:39:72:ac:3a:de:3b:7a:ba:02:03:13:31:3d:91:13:
34:7c:7b:c2:9e:df:ec:7b:42:20:00:aa:af:d7:35:cc:7c:f1:
9c:cb:d7:cf:20:54:67:1f:b5:1d:5c:31:65:b8:2e:5b:89:28:
28:2a:af:d1:bf:96:dd:cb:b9:72:4c:91:60:80:1a:d7:b6:42:
c6:b6:a1:7e:f7:fc:cb:8e:63:1e:6f:88:33:3c:71:ae:d0:14:
e4:d9:e0:04:87:3f:fb:99:99:c1:2e:35:91:01:2e:c2:b3:a3:
55:7d:ae:72:d3:38:94:7c:2f:b4:1d:21:c8:4e:c0:e1:f5:8b:
cb:fd:27:74:7d:c1:74:96:ae:11:5a:9a:44:43:da:85:1a:0e:
3b:f0:e5:d4:10:e5:75:c1:0d:62:ba:91:c3:c9:4a:47:42:62:
fa:40:c5:32:c9:22:6a:e8:71:e8:9b:bc:28:e8:d5:f1:ba:f9:
0d:b9:84:6b:1e:52:47:50:32:3c:99:40:ab:94:bd:24:24:5d:
29:46:09:58:dc:99:fa:65:fc:d7:6a:c9:c0:c2:cd:ad:f4:50:
c3:01:2d:23:c8:b1:17:1f:e9:6c:3b:b0:d7:13:96:be:4a:e4:
a8:ae:2b:89:5a:81:34:c3:65:7a:ae:42:04:d1:de:6b:7d:d1:
1f:99:98:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlUOYvrn0Ls6FTorKbizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZDA3NzgwMjIyMjIwM2MxNmNlOGVhZmQ1OWYwYjBhYzFk
YmU3YzMwHhcNMjUwMTMxMTAwMDQ5WhcNMjUwMjAxMTAwMDQ5WjAzMTEwLwYDVQQD
EyhjNzQ1Yjk2MmRhNDczZDFmZjhjZmE0NTUxZjVlYjJiMzhhM2IwYzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT7hSA8fi3pbvrNRXGsdMyohb29P
VxOPxXIGT4Y41azvMbWdFaKo5JpfP2TqmcBxLApGfPtJWDem9+zFGFRYobCLowiT
siqXupeTG+Ox4aZBYc6/X5Hp3FigVUpyPjLvtPUQOSf8zzsJfXOCIM0ZpYYXKMeA
gViNVesojwm/oWlQBe0pdIr501rhSaK78Tv9E9/rKTOsSDCR3bogEO9q8RRGA/O7
TA8GLx3lcsaDArCfuAEInBggYaTMa7y2zLwZUluuRpdA8jlJaDDIFdtfsBQdUvFN
1LqxU5Oco9Ir46kgrmFcx01SOUe4oByt+C1eHa497kV4REMgRSq9wq1P5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdFuWLaRz0f+M+kVR9esrOKOwwTMB8GA1UdIwQY
MBaAFNvQd4AiIiA8Fs6Or9WfCwrB2+fDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjlCM2dDSWlJRHdXem82djFaOExDc0hiNThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81ZmEwOTQtZWZhNS00Y2Y3LTg2YjAt
NWRkOTQ1MjllZWVhLzEvMjlCM2dDSWlJRHdXem82djFaOExDc0hiNThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS81ZmEwOTQtZWZhNS00Y2Y3LTg2YjAtNWRkOTQ1MjllZWVh
LzEvMjlCM2dDSWlJRHdXem82djFaOExDc0hiNThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmsTOXKs
Ot47eroCAxMxPZETNHx7wp7f7HtCIACqr9c1zHzxnMvXzyBUZx+1HVwxZbguW4ko
KCqv0b+W3cu5ckyRYIAa17ZCxrahfvf8y45jHm+IMzxxrtAU5NngBIc/+5mZwS41
kQEuwrOjVX2uctM4lHwvtB0hyE7A4fWLy/0ndH3BdJauEVqaREPahRoOO/Dl1BDl
dcENYrqRw8lKR0Ji+kDFMskiauhx6Ju8KOjV8br5DbmEax5SR1AyPJlAq5S9JCRd
KUYJWNyZ+mX812rJwMLNrfRQwwEtI8ixFx/pbDuw1xOWvkrkqK4riVqBNMNleq5C
BNHea33RH5mY4Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:30 2025 by rpki-client