Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft
File: aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft (raw, json)
Hash identifier: 0uBjnilDifYlCj8oBwYMz1R/+H2lzpYA2W9twUQajk4=
Subject key identifier: E9:A9:97:93:ED:FA:AA:B4:E9:4D:46:6F:44:23:B1:EC:17:C6:E4:F2
Authority key identifier: 68:E1:E6:EA:52:7D:C3:85:A7:9A:3E:08:82:7D:BF:69:0C:91:C4:C2
Certificate issuer: /CN=68e1e6ea527dc385a79a3e08827dbf690c91c4c2
Certificate serial: 0194BBCE62E011D76DC39263A9FD1C6D1F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft
Manifest number: 140E
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.crl (hash: mJrpLOlp6JiS20Q0wA+qG+9LnR6dd1Mbs1k/86MC3hQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:62:e0:11:d7:6d:c3:92:63:a9:fd:1c:6d:1f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e1e6ea527dc385a79a3e08827dbf690c91c4c2
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=e9a99793edfaaab4e94d466f4423b1ec17c6e4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cc:67:f7:11:a2:6d:fc:1a:b9:96:92:c5:b0:
59:d4:80:d6:b5:b0:d7:98:46:a0:a5:2d:7d:ff:c4:
5e:b6:db:a2:f3:a8:45:2f:ed:41:37:4d:da:7b:61:
da:15:5e:45:69:15:11:27:35:1b:70:ff:26:cc:87:
ff:a5:c3:59:9b:4e:28:d4:a5:28:51:fc:8e:6b:26:
05:b2:bc:09:69:80:bb:bd:e0:5e:b1:45:32:4a:9b:
42:c9:71:fb:82:78:ad:6a:6b:50:9d:ba:53:d3:2d:
0a:5b:1d:e6:60:ae:0d:c3:b8:aa:8a:0d:91:34:73:
a1:86:33:9a:eb:4a:b4:73:c9:f5:42:77:0b:1a:15:
76:af:d7:1d:e1:0b:f1:21:8c:d5:43:bf:f5:4c:27:
ca:a7:94:e6:40:ae:e5:24:d8:36:21:1e:43:00:50:
6b:79:fb:35:0c:a5:3e:58:b1:87:84:58:aa:50:b6:
7e:af:51:d9:68:65:f6:9d:4b:cf:c9:27:56:11:2d:
e5:95:d9:f5:7d:d6:3f:22:aa:ed:a8:70:05:ad:1d:
c6:1f:82:ce:da:ce:2c:b2:d3:21:c3:55:9d:0c:03:
7c:84:a0:03:f3:61:57:20:ed:d6:29:0c:e4:31:81:
d1:c6:ae:c2:5a:33:e4:14:70:3a:08:89:bd:d4:28:
f7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A9:97:93:ED:FA:AA:B4:E9:4D:46:6F:44:23:B1:EC:17:C6:E4:F2
X509v3 Authority Key Identifier:
keyid:68:E1:E6:EA:52:7D:C3:85:A7:9A:3E:08:82:7D:BF:69:0C:91:C4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d6:0c:d9:27:3c:10:7d:54:69:1c:01:07:5e:1d:08:42:10:
5f:3b:90:eb:51:75:2e:c7:47:a1:7c:15:fe:20:08:fb:e4:f7:
73:df:c1:03:c1:93:e7:a2:7a:e1:bf:77:78:c8:e5:cc:54:97:
6a:7c:81:92:62:d9:95:3b:28:ce:9d:16:8e:8c:d8:a5:4b:77:
01:7b:bb:76:3c:01:80:53:93:d5:bf:b9:1f:2c:e8:fe:42:40:
3d:f7:ca:f5:27:06:e7:ee:fa:3c:e0:e8:01:0e:28:21:36:5e:
92:37:49:09:17:8c:9a:1a:d4:bb:5b:9e:ef:10:ee:9b:3d:a1:
a3:13:4c:a4:e8:21:e7:15:9b:79:e4:75:8d:78:f8:a1:de:89:
b9:58:b6:44:23:91:f8:30:5e:a6:f8:21:bd:04:1a:8d:3e:75:
50:01:b3:c9:51:7e:32:bb:7c:62:fc:42:b8:ef:59:f5:31:44:
91:a9:a9:8d:b8:8d:0e:0d:bc:a3:95:b0:40:58:10:76:2d:72:
0f:4a:38:a0:2e:a0:9a:b4:5d:1d:ea:cd:c0:1e:34:f1:1f:2a:
c4:a3:37:71:f5:ae:26:25:d6:56:98:ca:fd:f6:ec:40:92:f7:
3b:42:48:2d:e1:b6:81:10:6c:18:10:e9:6b:03:42:5b:40:70:
e1:12:73:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zmLgEddtw5Jjqf0cbR82MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZTFlNmVhNTI3ZGMzODVhNzlhM2UwODgyN2RiZjY5MGM5
MWM0YzIwHhcNMjUwMTMxMTAwMDUyWhcNMjUwMjAxMTAwMDUyWjAzMTEwLwYDVQQD
EyhlOWE5OTc5M2VkZmFhYWI0ZTk0ZDQ2NmY0NDIzYjFlYzE3YzZlNGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cxn9xGibfwauZaSxbBZ1IDWtbDX
mEagpS19/8Rettui86hFL+1BN03ae2HaFV5FaRURJzUbcP8mzIf/pcNZm04o1KUo
UfyOayYFsrwJaYC7veBesUUySptCyXH7gnitamtQnbpT0y0KWx3mYK4Nw7iqig2R
NHOhhjOa60q0c8n1QncLGhV2r9cd4QvxIYzVQ7/1TCfKp5TmQK7lJNg2IR5DAFBr
efs1DKU+WLGHhFiqULZ+r1HZaGX2nUvPySdWES3lldn1fdY/IqrtqHAFrR3GH4LO
2s4sstMhw1WdDAN8hKAD82FXIO3WKQzkMYHRxq7CWjPkFHA6CIm91Cj3NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmpl5Pt+qq06U1Gb0QjsewXxuTyMB8GA1UdIwQY
MBaAFGjh5upSfcOFp5o+CIJ9v2kMkcTCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU9IbTZsSjl3NFdubWo0SWduMl9hUXlSeE1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85MzMxYzktZTE2NC00ZDJlLWI4Mzkt
MTdkMDk3ZmY4OWMyLzEvYU9IbTZsSjl3NFdubWo0SWduMl9hUXlSeE1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS85MzMxYzktZTE2NC00ZDJlLWI4MzktMTdkMDk3ZmY4OWMy
LzEvYU9IbTZsSjl3NFdubWo0SWduMl9hUXlSeE1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9YM2Sc8
EH1UaRwBB14dCEIQXzuQ61F1LsdHoXwV/iAI++T3c9/BA8GT56J64b93eMjlzFSX
anyBkmLZlTsozp0WjozYpUt3AXu7djwBgFOT1b+5Hyzo/kJAPffK9ScG5+76PODo
AQ4oITZekjdJCReMmhrUu1ue7xDumz2hoxNMpOgh5xWbeeR1jXj4od6JuVi2RCOR
+DBepvghvQQajT51UAGzyVF+Mrt8YvxCuO9Z9TFEkampjbiNDg28o5WwQFgQdi1y
D0o4oC6gmrRdHerNwB408R8qxKM3cfWuJiXWVpjK/fbsQJL3O0JILeG2gRBsGBDp
awNCW0Bw4RJzgw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:38 2025 by rpki-client