Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File: CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier: qHOoIlSdBxbj5WvYyZak933cgB06JnUJeHoD0AAB9LA=
Subject key identifier: F9:5C:51:82:97:6D:A3:C7:8A:8E:F1:42:13:1C:83:91:33:74:85:57
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer: /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial: 0194BCAA0BEE935C9F9B8A21394A7119F787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number: 1358
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: 9G8fKMayWsOKdtSa43Fv1XTuT60Us79DGh0N2PDou1s=)
2: rWZ0G5VOafQid-7UN-2veJfKGgo.roa (hash: DH2O3e2b1+vrztrC2zTAL363y7HUBnCFCMC6xfBGVbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0b:ee:93:5c:9f:9b:8a:21:39:4a:71:19:f7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=f95c5182976da3c78a8ef142131c839133748557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:a1:5c:28:14:38:95:d9:c9:b3:b4:a8:30:
71:84:19:3b:76:e1:67:85:ec:2a:0d:a2:2a:a7:2f:
74:1d:2d:2e:87:fa:2c:a3:37:7b:d3:8c:05:83:ae:
c4:fb:3e:7b:b6:f1:76:9e:32:2b:75:78:0e:a9:bf:
25:c0:3a:54:6c:39:d2:01:03:77:11:52:f8:93:97:
23:e7:4a:20:23:32:af:f3:7a:ae:bb:dc:7e:8e:a0:
bc:97:9f:59:d0:88:2d:74:90:6d:1c:9f:e3:59:34:
53:90:3f:21:d7:df:36:96:ff:b1:f8:ec:82:5f:ef:
1c:10:91:ca:26:71:32:7f:94:79:04:1e:a5:30:ca:
52:8b:13:4f:9f:33:31:e8:fc:24:07:55:f0:cf:c5:
74:97:b4:a4:3e:74:e7:6d:c6:05:e0:e8:f1:be:1f:
5a:86:10:a3:a9:c1:6e:aa:10:ef:a2:ab:0e:da:1c:
be:b7:37:57:62:dc:7a:ab:16:76:7c:5a:aa:90:17:
6a:bd:b7:eb:ab:dc:f2:6f:ae:f7:52:f0:4d:ab:a8:
b0:0e:bd:cb:92:c8:c6:7a:1e:c3:c7:b0:74:a0:0f:
5b:54:83:45:b5:06:0e:bf:4c:82:55:6f:40:9b:3d:
d8:34:82:35:fe:79:70:f0:40:2d:cf:d0:3c:8b:93:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5C:51:82:97:6D:A3:C7:8A:8E:F1:42:13:1C:83:91:33:74:85:57
X509v3 Authority Key Identifier:
keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:dc:71:6b:85:3a:53:fe:41:d3:59:93:ad:e1:2d:68:d9:17:
be:87:31:61:fc:4d:5b:cd:a2:42:90:9d:87:16:30:22:14:87:
14:8e:f1:55:4e:b4:87:96:96:7a:ce:a8:63:9c:ea:7c:07:db:
56:ab:10:6a:a2:b4:68:d6:f1:ee:8c:37:3d:79:b4:70:09:b5:
e6:10:10:7d:ff:e0:b6:fe:d5:78:cd:4d:97:0e:9c:f4:79:66:
69:3e:4b:a4:1e:3e:00:a0:a8:22:72:a7:7d:b0:d1:61:c9:77:
ff:d0:98:83:42:56:6b:37:38:e8:3a:04:a8:13:f3:dc:3b:40:
24:fd:59:9c:26:e3:ea:65:ac:39:1f:07:87:92:5f:aa:bb:d6:
1b:2a:03:ed:27:e9:cd:28:dd:0f:69:ad:a9:49:e6:dd:ce:5b:
e3:5e:b7:87:40:26:4f:fe:d4:96:87:62:f3:45:c9:07:c4:3d:
05:91:a9:d4:98:87:d7:a3:d5:c4:ce:d5:34:cb:be:30:d5:b0:
1e:6b:87:fb:14:eb:98:fa:31:66:fd:2e:bc:40:c8:1a:dd:3b:
b9:58:84:66:4a:ca:44:9e:fa:cb:54:06:1a:cf:66:13:5d:e2:
23:83:d5:6c:61:bb:58:1d:06:e1:1e:6f:01:84:2e:d7:26:d4:
de:fa:a5:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgvuk1yfm4ohOUpxGfeHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YzU1MjQ5ODg4MTg3NjU1NmYxNmUzMjNmMWNhMzY5YjI1
ZWRiMGMwHhcNMjUwMTMxMTQwMDQ4WhcNMjUwMjAxMTQwMDQ4WjAzMTEwLwYDVQQD
EyhmOTVjNTE4Mjk3NmRhM2M3OGE4ZWYxNDIxMzFjODM5MTMzNzQ4NTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlWhXCgUOJXZybO0qDBxhBk7duFn
hewqDaIqpy90HS0uh/osozd704wFg67E+z57tvF2njIrdXgOqb8lwDpUbDnSAQN3
EVL4k5cj50ogIzKv83quu9x+jqC8l59Z0IgtdJBtHJ/jWTRTkD8h1982lv+x+OyC
X+8cEJHKJnEyf5R5BB6lMMpSixNPnzMx6PwkB1Xwz8V0l7SkPnTnbcYF4Ojxvh9a
hhCjqcFuqhDvoqsO2hy+tzdXYtx6qxZ2fFqqkBdqvbfrq9zyb673UvBNq6iwDr3L
ksjGeh7Dx7B0oA9bVINFtQYOv0yCVW9Amz3YNII1/nlw8EAtz9A8i5PBeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlcUYKXbaPHio7xQhMcg5EzdIVXMB8GA1UdIwQY
MBaAFAnFUkmIgYdlVvFuMj8co2myXtsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgt
MTFmMzY1YTczNTJjLzEvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgtMTFmMzY1YTczNTJj
LzEvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtxxa4U6
U/5B01mTreEtaNkXvocxYfxNW82iQpCdhxYwIhSHFI7xVU60h5aWes6oY5zqfAfb
VqsQaqK0aNbx7ow3PXm0cAm15hAQff/gtv7VeM1Nlw6c9HlmaT5LpB4+AKCoInKn
fbDRYcl3/9CYg0JWazc46DoEqBPz3DtAJP1ZnCbj6mWsOR8Hh5JfqrvWGyoD7Sfp
zSjdD2mtqUnm3c5b4163h0AmT/7Ulodi80XJB8Q9BZGp1JiH16PVxM7VNMu+MNWw
HmuH+xTrmPoxZv0uvEDIGt07uViEZkrKRJ76y1QGGs9mE13iI4PVbGG7WB0G4R5v
AYQu1ybU3vqlFg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:14:50 2025 by rpki-client