Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
File: 2IUFXXA5jPDHLM6sXlga1A8gPvw.mft (raw, json)
Hash identifier: AE+MTVDamP4tN06p7SoPfiz3dhjyjH9SFQTO1zd68xo=
Subject key identifier: 40:DC:29:36:40:E1:9D:EE:8B:68:F2:2C:C4:A7:10:B8:43:11:4F:3B
Authority key identifier: D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
Certificate issuer: /CN=d885055d70398cf0c72cceac5e581ad40f203efc
Certificate serial: 0194BCA998CD3EAA489E6A94211912368A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
Manifest number: 0BF4
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: 2IUFXXA5jPDHLM6sXlga1A8gPvw.crl (hash: 71Wuyc+nWLkFgc0Lg5BMPZbt3g18SzYubzB3szGrvjY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:98:cd:3e:aa:48:9e:6a:94:21:19:12:36:8a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d885055d70398cf0c72cceac5e581ad40f203efc
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=40dc293640e19dee8b68f22cc4a710b843114f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:84:98:c7:55:e2:af:c0:f3:68:90:9f:fa:
93:c3:b3:0f:7c:96:6d:60:42:86:84:3c:10:1b:b8:
79:62:f6:c1:24:91:f1:ae:a9:b8:e7:25:49:36:95:
67:99:c0:35:24:17:c9:d4:1b:fd:27:6b:3c:f7:5d:
f4:ee:51:f9:3b:db:74:6c:3c:a2:88:c8:b1:06:a1:
8b:98:af:33:83:6a:4f:75:91:71:0b:63:a0:df:e4:
a1:31:b0:65:7f:76:ac:c8:75:3b:87:b5:f3:d1:dc:
82:07:4d:e6:d1:41:82:7f:30:f9:c5:db:a6:43:a0:
e7:fb:0c:29:ee:8f:d3:e7:fe:cd:3a:f3:8a:b6:a2:
d1:40:e5:7f:7a:61:4d:05:a7:93:bf:54:35:a2:e7:
0f:bc:19:6b:ae:f6:5e:9f:ce:89:89:1c:83:40:03:
b0:b0:0f:03:49:8b:24:dd:f4:f6:07:00:61:34:a2:
ca:23:b0:de:de:c9:a5:f3:ba:6f:57:b9:ff:0d:3d:
d9:06:9d:03:be:16:13:83:bc:0e:05:c3:64:bf:58:
78:b7:b9:09:59:1a:8e:44:60:d2:e1:70:c7:8d:8b:
95:91:61:25:db:e0:92:b4:4b:e6:dc:95:8f:e7:99:
56:96:cb:86:7f:c3:49:99:e8:30:5e:a8:21:84:89:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DC:29:36:40:E1:9D:EE:8B:68:F2:2C:C4:A7:10:B8:43:11:4F:3B
X509v3 Authority Key Identifier:
keyid:D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:80:04:dd:a5:8d:a7:44:ef:f6:c1:c7:e4:69:3b:6b:13:e1:
66:c6:7d:a0:11:84:17:6a:0f:a1:23:0d:7f:7f:a4:60:fa:bd:
1b:ef:04:37:b3:bd:e5:f1:35:9d:de:1b:62:75:df:0a:3f:6c:
b6:2d:7c:e0:b0:81:3e:b0:82:a6:3a:f0:79:1a:b7:9d:0f:73:
b0:7c:47:ea:25:0c:db:c0:67:84:62:3f:ac:0b:16:b4:44:19:
72:49:a0:8a:b6:9b:98:15:4e:10:7d:19:1d:3b:12:2f:d4:f8:
30:5a:e9:b4:95:01:0d:f7:dd:53:dd:9e:9c:74:4e:9a:2d:d6:
e7:fc:13:8f:e1:cf:0f:70:2f:c0:f9:28:e8:f8:02:6e:1f:85:
c9:35:0a:0a:5f:79:4c:25:9f:3e:94:72:08:63:89:2c:3e:4d:
ea:5c:dc:6a:32:2a:19:61:2b:db:f3:ce:a9:c5:fb:3e:9f:2d:
0f:c8:a4:0d:71:f2:43:35:1e:74:6c:f5:39:40:34:a6:d1:29:
1f:e4:5f:0b:5b:3c:5a:43:74:57:2c:58:07:f5:54:2b:20:d9:
a4:37:34:e0:36:dc:57:ee:b4:2b:7c:7d:5b:bb:18:87:4e:e6:
5e:61:88:9a:97:5f:1c:a8:97:68:04:19:5a:fb:be:c7:ba:40:
f9:f1:f2:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZjNPqpInmqUIRkSNoqQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ODUwNTVkNzAzOThjZjBjNzJjY2VhYzVlNTgxYWQ0MGYy
MDNlZmMwHhcNMjUwMTMxMTQwMDE4WhcNMjUwMjAxMTQwMDE4WjAzMTEwLwYDVQQD
Eyg0MGRjMjkzNjQwZTE5ZGVlOGI2OGYyMmNjNGE3MTBiODQzMTE0ZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV2EmMdV4q/A82iQn/qTw7MPfJZt
YEKGhDwQG7h5YvbBJJHxrqm45yVJNpVnmcA1JBfJ1Bv9J2s891307lH5O9t0bDyi
iMixBqGLmK8zg2pPdZFxC2Og3+ShMbBlf3asyHU7h7Xz0dyCB03m0UGCfzD5xdum
Q6Dn+wwp7o/T5/7NOvOKtqLRQOV/emFNBaeTv1Q1oucPvBlrrvZen86JiRyDQAOw
sA8DSYsk3fT2BwBhNKLKI7De3sml87pvV7n/DT3ZBp0DvhYTg7wOBcNkv1h4t7kJ
WRqORGDS4XDHjYuVkWEl2+CStEvm3JWP55lWlsuGf8NJmegwXqghhImunwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDcKTZA4Z3ui2jyLMSnELhDEU87MB8GA1UdIwQY
MBaAFNiFBV1wOYzwxyzOrF5YGtQPID78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMklVRlhYQTVqUERITE02c1hsZ2ExQThnUHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84MmFmMjgtYjYzNC00NjNhLWI2YmUt
MWNhM2M2N2YxNTA2LzEvMklVRlhYQTVqUERITE02c1hsZ2ExQThnUHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84MmFmMjgtYjYzNC00NjNhLWI2YmUtMWNhM2M2N2YxNTA2
LzEvMklVRlhYQTVqUERITE02c1hsZ2ExQThnUHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4AE3aWN
p0Tv9sHH5Gk7axPhZsZ9oBGEF2oPoSMNf3+kYPq9G+8EN7O95fE1nd4bYnXfCj9s
ti184LCBPrCCpjrweRq3nQ9zsHxH6iUM28BnhGI/rAsWtEQZckmgirabmBVOEH0Z
HTsSL9T4MFrptJUBDffdU92enHROmi3W5/wTj+HPD3AvwPko6PgCbh+FyTUKCl95
TCWfPpRyCGOJLD5N6lzcajIqGWEr2/POqcX7Pp8tD8ikDXHyQzUedGz1OUA0ptEp
H+RfC1s8WkN0VyxYB/VUKyDZpDc04DbcV+60K3x9W7sYh07mXmGImpdfHKiXaAQZ
Wvu+x7pA+fHyxw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:09 2025 by rpki-client