Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
File: cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json)
Hash identifier: 3fJsAB1cwvEIA2ucyghyUJ/neBspfS7DZCox8AGvuK8=
Subject key identifier: 9C:BB:E1:EA:F2:3B:FB:3A:A5:EA:52:3A:02:6F:5B:E0:EC:C2:2C:08
Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
Certificate issuer: /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Certificate serial: 0194BCAA0748A77A126601BF9C8960C0A303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
Manifest number: 0651
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: wrjL/rqqrI2v5qEn+EnDGPq0kVvKWaYPUhDMPDVlxBI=)
2: d0b72ny8wPnM19_QwF_mbcUjDN0.roa (hash: SMFsSG0c6aEdE5nra06sYeY6XybcAZuUprO34jcJsEQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:07:48:a7:7a:12:66:01:bf:9c:89:60:c0:a3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=9cbbe1eaf23bfb3aa5ea523a026f5be0ecc22c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:e3:e3:e9:15:dc:70:6a:3c:e6:df:69:0c:
43:e1:d2:13:bf:22:30:22:7a:d1:24:1d:91:49:56:
50:9d:20:53:e3:75:4d:5e:9c:d3:6d:0e:c8:fc:2e:
af:28:52:3e:83:b2:dd:ac:38:05:7d:44:74:43:19:
d5:dc:f3:4e:a9:c5:81:4e:c3:12:5b:1b:e9:2e:8b:
88:3a:18:22:f7:14:6b:76:c4:e2:ae:8d:ba:3c:26:
5c:0a:ad:fc:f4:ee:98:67:04:67:45:44:e9:18:2a:
1e:8b:d9:4f:32:1a:13:35:64:8f:ac:e2:29:0e:0f:
4a:a8:0a:fa:b3:7f:b2:74:e5:d7:36:87:87:da:b1:
7e:63:b6:12:14:2e:12:be:74:c0:eb:9d:0b:d0:10:
09:6c:70:ac:39:2c:94:fe:b7:8a:51:d3:13:4c:39:
8b:6f:b2:2a:86:dc:cd:5d:e6:89:55:69:31:3a:af:
8f:9e:d6:72:e9:a3:40:48:94:fb:87:42:57:32:17:
c1:8a:89:b3:1f:47:8a:7b:f7:07:95:36:23:4a:27:
e7:cd:19:5c:83:e1:10:b3:ff:bf:17:c1:fc:a7:8f:
2c:85:37:ee:db:4c:38:57:83:c4:c0:4b:63:69:d9:
71:12:36:ec:22:21:4f:75:95:84:01:18:44:54:67:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BB:E1:EA:F2:3B:FB:3A:A5:EA:52:3A:02:6F:5B:E0:EC:C2:2C:08
X509v3 Authority Key Identifier:
keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:61:b4:60:e1:b5:b1:63:5b:ae:de:3d:00:c1:57:ed:f4:49:
88:a1:d2:04:4e:ec:e0:6e:dd:fd:34:9e:b5:ac:7c:14:bd:79:
44:61:a0:6d:20:ea:e9:98:31:ab:06:45:2a:4e:19:f3:dd:de:
50:f6:66:67:a5:8b:57:c8:8a:18:a9:1f:a0:df:78:0a:68:97:
54:b9:50:93:3e:dc:53:c0:fe:9c:ae:70:bb:19:31:61:7c:2a:
88:60:77:b7:8f:47:db:8d:bd:a8:20:ce:38:9c:0d:7a:ba:a1:
88:51:94:a0:0f:c5:68:7b:5c:dc:d5:79:21:dc:02:b7:9c:cf:
0f:70:3c:83:a2:16:08:88:8e:49:c6:37:c1:15:06:2f:18:d5:
d7:3c:cd:fb:0e:b6:16:1a:4f:60:54:50:fb:5a:b5:4b:8a:e5:
2c:c3:1d:78:71:60:c2:16:83:c9:8d:ba:7e:df:cb:e4:e4:19:
cd:ad:b1:9d:fa:e2:e4:28:19:3a:70:81:43:12:53:d4:b3:f0:
0b:96:c9:de:00:88:e5:83:fd:f9:ed:b8:09:8d:76:c0:c4:07:
0c:12:2f:36:af:e3:9f:63:3c:e7:46:90:6b:37:91:de:51:c8:
0a:27:1a:93:5d:93:b4:14:84:d0:42:0d:b9:17:2c:e1:b5:23:
dd:73:ca:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgdIp3oSZgG/nIlgwKMDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTViNTdiYjM5OGQ1ZTE4MzlhM2ZlNDI1NGRmNzBkNzEy
Y2UxNGEwHhcNMjUwMTMxMTQwMDQ3WhcNMjUwMjAxMTQwMDQ3WjAzMTEwLwYDVQQD
Eyg5Y2JiZTFlYWYyM2JmYjNhYTVlYTUyM2EwMjZmNWJlMGVjYzIyYzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOrj4+kV3HBqPObfaQxD4dITvyIw
InrRJB2RSVZQnSBT43VNXpzTbQ7I/C6vKFI+g7LdrDgFfUR0QxnV3PNOqcWBTsMS
WxvpLouIOhgi9xRrdsTiro26PCZcCq389O6YZwRnRUTpGCoei9lPMhoTNWSPrOIp
Dg9KqAr6s3+ydOXXNoeH2rF+Y7YSFC4SvnTA650L0BAJbHCsOSyU/reKUdMTTDmL
b7IqhtzNXeaJVWkxOq+PntZy6aNASJT7h0JXMhfBiomzH0eKe/cHlTYjSifnzRlc
g+EQs/+/F8H8p48shTfu20w4V4PEwEtjadlxEjbsIiFPdZWEARhEVGelHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJy74eryO/s6pepSOgJvW+DswiwIMB8GA1UdIwQY
MBaAFHLltXuzmNXhg5o/5CVN9w1xLOFKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDct
OTY4ZDBjN2YyMmJiLzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDctOTY4ZDBjN2YyMmJi
LzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmG0YOG1
sWNbrt49AMFX7fRJiKHSBE7s4G7d/TSetax8FL15RGGgbSDq6ZgxqwZFKk4Z893e
UPZmZ6WLV8iKGKkfoN94CmiXVLlQkz7cU8D+nK5wuxkxYXwqiGB3t49H2429qCDO
OJwNerqhiFGUoA/FaHtc3NV5IdwCt5zPD3A8g6IWCIiOScY3wRUGLxjV1zzN+w62
FhpPYFRQ+1q1S4rlLMMdeHFgwhaDyY26ft/L5OQZza2xnfri5CgZOnCBQxJT1LPw
C5bJ3gCI5YP9+e24CY12wMQHDBIvNq/jn2M850aQazeR3lHICicak12TtBSE0EIN
uRcs4bUj3XPKXg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:25 2025 by rpki-client