
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier: SLy60qFm/Yvze0mPYTHyzMFGfp5VZtkvJ3Ig+UqaJDQ=
Subject key identifier: 30:FF:7E:41:50:A0:61:80:41:3B:14:E2:E6:55:B3:31:7B:C9:96:85
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial: 0194BD85ACC813022D9DDDDA6A5C415283AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: MmMjPcmgSnmpat_UrnnkwrG8N3M.roa (hash: P+6oU+/zVxV3KfOFEMlrjbqkg2yguA/0UthTHnReUm8=)
2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: 15nu1K2Qob2qvgat6f5XlqaMZrkTHdtN6FTETAWdV20=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ac:c8:13:02:2d:9d:dd:da:6a:5c:41:52:83:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=30ff7e4150a06180413b14e2e655b3317bc99685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:7e:05:99:7e:16:5d:49:e2:f5:69:90:ab:
58:b0:a4:56:5a:dd:58:75:71:a7:d8:16:f1:f0:f0:
fb:7f:32:06:1d:a4:ee:44:a3:02:f8:5a:3b:dd:ad:
43:c0:44:dd:02:2f:b2:6e:e3:f5:e2:22:6b:0d:14:
66:cb:a5:ab:20:f2:bc:da:81:44:d4:cf:7b:db:04:
11:4a:8e:15:78:9a:aa:b6:4e:ed:e8:25:6f:18:e6:
a7:63:41:37:07:a3:e9:11:d5:52:d6:39:18:3d:d7:
7b:40:29:19:d5:b3:79:58:71:7d:ed:68:f0:14:ff:
28:c4:57:5b:90:73:86:ac:78:58:8e:0d:84:9f:de:
d2:46:29:5f:be:b9:ad:64:8e:6f:c0:0e:6d:98:a7:
2e:22:45:8c:63:03:70:f2:12:64:a5:61:85:58:f4:
79:5c:b8:40:a3:0b:07:78:22:bd:19:69:f3:e9:32:
dd:e9:53:ca:cb:c1:b4:46:d7:75:ec:50:77:44:1c:
ac:8b:7b:f8:c2:b7:54:fc:84:be:bf:2a:e7:bf:98:
5a:33:bd:a8:c6:9e:52:17:2b:be:cf:a8:7d:c7:7a:
58:3c:55:e0:80:75:14:3f:bf:c8:e7:fb:8e:3b:3a:
0b:4f:6f:42:d2:b1:7c:4e:d0:4b:4b:f2:b9:f8:c4:
f0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FF:7E:41:50:A0:61:80:41:3B:14:E2:E6:55:B3:31:7B:C9:96:85
X509v3 Authority Key Identifier:
keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:26:a4:68:e9:d8:f8:d9:54:26:16:69:ee:2b:cf:dc:e9:be:
63:66:f5:77:fe:92:45:e4:79:fd:17:43:6a:b8:6a:78:8e:74:
6f:3f:91:9a:28:c2:3d:36:36:82:fd:b4:60:ef:2c:8e:95:a4:
ed:36:c5:ec:3f:80:27:a2:6d:b0:08:a7:84:69:b7:66:c9:69:
06:ee:73:b0:11:60:29:f0:e7:fa:bd:c8:50:fe:a5:ba:59:24:
07:f5:60:8e:93:ce:7a:0f:55:0c:b7:93:db:de:6c:ad:e2:6e:
ea:0e:c8:91:ca:d4:e4:ab:69:d5:af:fe:cc:49:1c:f8:9f:1b:
3a:b2:0d:8f:97:0b:39:52:8e:11:2e:23:df:7c:72:b0:92:4a:
6f:69:3a:a2:e4:82:6b:62:7f:84:33:42:ee:a2:a6:10:f3:3e:
e1:2d:70:98:ac:b4:44:d7:ed:9a:fb:e8:a9:05:d2:b4:84:b1:
31:be:96:6b:b7:f2:6a:54:55:c7:21:cb:9d:d9:8e:3f:7e:c3:
9b:b5:96:6f:50:5a:35:73:94:29:56:7b:24:2c:99:a6:d3:80:
f5:2e:5f:81:8f:90:af:b2:3c:5e:f2:72:fd:99:3f:47:b9:26:
04:79:aa:03:7e:d5:bf:13:fd:c2:76:c8:0b:8a:9b:68:2b:e7:
66:a2:d5:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hazIEwItnd3aalxBUoOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwN2YzZGFiYWVlMjRmYzQzYjg2NWFhZmEzZjNjOWMyZjM2
NGJmYzkwHhcNMjUwMTMxMTgwMDQxWhcNMjUwMjAxMTgwMDQxWjAzMTEwLwYDVQQD
EygzMGZmN2U0MTUwYTA2MTgwNDEzYjE0ZTJlNjU1YjMzMTdiYzk5Njg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0l+BZl+Fl1J4vVpkKtYsKRWWt1Y
dXGn2Bbx8PD7fzIGHaTuRKMC+Fo73a1DwETdAi+ybuP14iJrDRRmy6WrIPK82oFE
1M972wQRSo4VeJqqtk7t6CVvGOanY0E3B6PpEdVS1jkYPdd7QCkZ1bN5WHF97Wjw
FP8oxFdbkHOGrHhYjg2En97SRilfvrmtZI5vwA5tmKcuIkWMYwNw8hJkpWGFWPR5
XLhAowsHeCK9GWnz6TLd6VPKy8G0Rtd17FB3RBysi3v4wrdU/IS+vyrnv5haM72o
xp5SFyu+z6h9x3pYPFXggHUUP7/I5/uOOzoLT29C0rF8TtBLS/K5+MTwtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDD/fkFQoGGAQTsU4uZVszF7yZaFMB8GA1UdIwQY
MBaAFHB/Pauu4k/EO4Zar6PzycLzZL/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUt
ZWNjZDY2NWYxZjAzLzEvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUtZWNjZDY2NWYxZjAz
LzEvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsyakaOnY
+NlUJhZp7ivP3Om+Y2b1d/6SReR5/RdDarhqeI50bz+RmijCPTY2gv20YO8sjpWk
7TbF7D+AJ6JtsAinhGm3ZslpBu5zsBFgKfDn+r3IUP6lulkkB/VgjpPOeg9VDLeT
295sreJu6g7IkcrU5Ktp1a/+zEkc+J8bOrINj5cLOVKOES4j33xysJJKb2k6ouSC
a2J/hDNC7qKmEPM+4S1wmKy0RNftmvvoqQXStISxMb6Wa7fyalRVxyHLndmOP37D
m7WWb1BaNXOUKVZ7JCyZptOA9S5fgY+Qr7I8XvJy/Zk/R7kmBHmqA37VvxP9wnbI
C4qbaCvnZqLVXw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:00:10 2025 by rpki-client