Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
File: 169EtH8IvQvo_AX5sMFaWrxiA6o.mft (raw, json)
Hash identifier: UuvT57sbTh4IkTWJnwPRJWjlWwy7FP1vi59FrdxoBes=
Subject key identifier: B3:21:CA:5A:5A:6D:D3:F6:2F:BC:5C:60:01:BA:47:93:99:3F:A1:BE
Authority key identifier: D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
Certificate issuer: /CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Certificate serial: 0194BC731F63AA0B9591D20318BD5C34B89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
Manifest number: 09D3
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: 169EtH8IvQvo_AX5sMFaWrxiA6o.crl (hash: z41p8EGxlt6LPljXUermNQ5VGGg8DMKAmY8M9VfQTtI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1f:63:aa:0b:95:91:d2:03:18:bd:5c:34:b8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=b321ca5a5a6dd3f62fbc5c6001ba4793993fa1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:dc:f2:01:1f:e2:26:3f:29:de:4e:56:c2:
da:3e:c3:05:ac:c1:f2:b9:ea:bf:73:99:15:5c:ba:
10:32:90:96:75:33:29:1b:51:70:fe:c9:a0:c6:a3:
93:7f:7a:f6:9a:1c:32:ce:88:3f:29:18:6b:ff:a6:
63:14:a1:50:35:8d:bb:cf:a3:a5:4c:70:bb:5c:bc:
53:df:54:f9:67:91:97:1e:ec:5d:f6:8c:d3:31:eb:
7a:52:69:5a:37:a3:bc:8f:56:11:f8:36:7f:ab:cf:
06:fe:86:f0:5f:7e:08:57:2e:2b:62:e0:1c:75:bb:
35:a5:f2:a2:48:bd:9f:a5:76:ce:cb:50:46:5c:bc:
2c:fe:fc:da:59:2c:e4:a0:b2:8a:82:6a:f8:4f:95:
8b:3d:a0:c2:96:67:1c:2b:46:ce:8e:b9:d0:d2:43:
60:a2:87:10:ee:65:42:27:db:01:af:0e:c1:cc:71:
e1:8c:72:ac:5d:db:55:b2:fe:28:40:ef:6c:30:63:
24:13:ca:29:b1:b3:32:9f:83:78:ae:92:58:82:bd:
cf:2b:e7:0a:81:14:db:73:4c:4e:8b:bc:fe:58:1d:
bd:97:36:e0:67:7b:28:f4:21:00:16:8a:b5:38:d2:
9f:2a:45:d2:66:ee:1b:c4:c9:d9:e3:00:ec:8f:6a:
4e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:21:CA:5A:5A:6D:D3:F6:2F:BC:5C:60:01:BA:47:93:99:3F:A1:BE
X509v3 Authority Key Identifier:
keyid:D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:82:4f:8a:69:7c:7c:18:f7:43:49:a2:24:a0:ea:e7:c4:6d:
80:12:0a:b2:46:59:60:13:32:9e:3e:9b:7f:4d:22:aa:a1:5c:
cd:b5:39:88:4c:83:73:7f:b5:a0:4a:de:70:b3:7c:15:ee:0d:
42:0c:a2:df:11:d8:5b:a6:d2:1c:94:c8:a0:78:16:f7:e0:b2:
66:9a:01:1a:c0:24:44:bd:3f:2c:76:72:16:8f:12:d9:01:e1:
a6:e9:70:87:49:36:a1:54:22:36:6f:65:b5:af:ff:08:1c:bf:
45:c8:7b:02:01:e0:e2:a5:05:d8:27:9e:5c:8b:86:da:78:52:
6b:94:6a:85:10:ab:2e:d7:4f:0e:ae:a8:12:e2:f0:d8:2b:6f:
2f:11:33:c3:97:ca:91:58:8d:e5:eb:30:18:89:c2:35:3b:6c:
27:5b:3d:0c:ff:2b:0b:a8:40:70:ef:a7:06:cc:23:1f:1e:2c:
c2:ea:7b:34:9b:e5:a5:dc:c6:4f:5e:75:27:78:c5:42:c9:6a:
ec:98:91:f0:d4:4a:98:ad:36:50:2b:76:af:d1:eb:97:45:cf:
66:65:4b:be:9f:a9:80:0e:b2:97:36:78:be:22:d5:e8:de:b8:
a6:ce:89:1b:cd:b5:15:66:54:15:54:7e:66:09:43:83:ca:0d:
09:d7:a0:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cx9jqguVkdIDGL1cNLicMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YWY0NGI0N2YwOGJkMGJlOGZjMDVmOWIwYzE1YTVhYmM2
MjAzYWEwHhcNMjUwMTMxMTMwMDQ4WhcNMjUwMjAxMTMwMDQ4WjAzMTEwLwYDVQQD
EyhiMzIxY2E1YTVhNmRkM2Y2MmZiYzVjNjAwMWJhNDc5Mzk5M2ZhMWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhjc8gEf4iY/Kd5OVsLaPsMFrMHy
ueq/c5kVXLoQMpCWdTMpG1Fw/smgxqOTf3r2mhwyzog/KRhr/6ZjFKFQNY27z6Ol
THC7XLxT31T5Z5GXHuxd9ozTMet6UmlaN6O8j1YR+DZ/q88G/obwX34IVy4rYuAc
dbs1pfKiSL2fpXbOy1BGXLws/vzaWSzkoLKKgmr4T5WLPaDClmccK0bOjrnQ0kNg
oocQ7mVCJ9sBrw7BzHHhjHKsXdtVsv4oQO9sMGMkE8opsbMyn4N4rpJYgr3PK+cK
gRTbc0xOi7z+WB29lzbgZ3so9CEAFoq1ONKfKkXSZu4bxMnZ4wDsj2pOewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMhylpabdP2L7xcYAG6R5OZP6G+MB8GA1UdIwQY
MBaAFNevRLR/CL0L6PwF+bDBWlq8YgOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTY5RXRIOEl2UXZvX0FYNXNNRmFXcnhpQTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mYmJiNTMtNWRhMi00NGY2LThjOWYt
MTliMDI2OWQxMDNjLzEvMTY5RXRIOEl2UXZvX0FYNXNNRmFXcnhpQTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9mYmJiNTMtNWRhMi00NGY2LThjOWYtMTliMDI2OWQxMDNj
LzEvMTY5RXRIOEl2UXZvX0FYNXNNRmFXcnhpQTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoJPiml8
fBj3Q0miJKDq58RtgBIKskZZYBMynj6bf00iqqFczbU5iEyDc3+1oErecLN8Fe4N
Qgyi3xHYW6bSHJTIoHgW9+CyZpoBGsAkRL0/LHZyFo8S2QHhpulwh0k2oVQiNm9l
ta//CBy/Rch7AgHg4qUF2CeeXIuG2nhSa5RqhRCrLtdPDq6oEuLw2CtvLxEzw5fK
kViN5eswGInCNTtsJ1s9DP8rC6hAcO+nBswjHx4swup7NJvlpdzGT151J3jFQslq
7JiR8NRKmK02UCt2r9Hrl0XPZmVLvp+pgA6ylzZ4viLV6N64ps6JG821FWZUFVR+
ZglDg8oNCdeggQ==
-----END CERTIFICATE-----
Generated at Thu May 1 06:02:45 2025 by rpki-client