Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
File: spuNaKggdWqqP4l5UdWv1n_bPbs.mft (raw, json)
Hash identifier: VWXyoyHknDulx7hwgWO7gvdNjbiOvUHHBUT455CTTd8=
Subject key identifier: BE:88:D2:4D:31:E2:B0:D5:45:90:39:1F:DC:76:D9:9B:10:9D:03:81
Authority key identifier: B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
Certificate issuer: /CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Certificate serial: 0194BBCEA7C98CE1C5CDC974E2E796B445BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: spuNaKggdWqqP4l5UdWv1n_bPbs.crl (hash: 9TKHLOYVL+PsCBtkGkAcTqqBdlIcKwW7hyFQ/OpNph4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a7:c9:8c:e1:c5:cd:c9:74:e2:e7:96:b4:45:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=be88d24d31e2b0d54590391fdc76d99b109d0381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:cf:3a:16:41:3a:79:63:d2:4c:0d:d5:cd:
5c:b6:bb:6a:eb:8d:18:39:dc:d2:06:94:33:20:7c:
7c:76:0a:33:d8:a8:64:4b:63:a0:a1:2c:2a:7d:b3:
50:3d:44:00:9a:ac:32:d2:fc:70:bb:81:57:4d:e5:
6e:74:8d:97:b6:dc:7d:c1:98:53:cb:77:34:79:74:
c2:af:ae:07:91:c9:fe:5b:bc:3e:bd:58:ec:96:6e:
73:77:da:03:da:1e:b4:ac:7b:de:72:24:0f:2b:42:
63:c5:31:6d:49:0c:04:a2:dc:ac:c1:b5:f7:21:5f:
84:88:1b:7a:9a:c1:40:fb:79:6a:92:fb:0c:fc:68:
fd:09:d4:0d:b3:3f:01:6e:06:d7:fd:25:e1:44:03:
23:4c:cd:ab:0b:be:7c:14:b8:b9:16:b2:46:47:0d:
b2:64:76:1d:dd:18:88:c8:c2:4c:d2:b3:1b:49:b7:
bf:c7:c3:16:d1:9b:22:80:40:13:6c:27:41:8c:8d:
f4:b3:ea:2b:eb:87:21:6e:71:d4:21:97:d4:5d:33:
1d:5e:a9:4d:9d:20:6b:f5:a3:ae:1c:a4:48:08:06:
da:af:d8:a5:6c:18:da:ee:44:f5:70:1d:dc:47:7b:
93:94:d8:89:25:0b:2b:89:a3:69:fb:a1:fa:aa:ea:
16:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:88:D2:4D:31:E2:B0:D5:45:90:39:1F:DC:76:D9:9B:10:9D:03:81
X509v3 Authority Key Identifier:
keyid:B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2a:04:ec:9f:cd:74:c7:33:6a:15:4d:25:8f:20:41:cc:35:
82:80:b3:f3:d8:bf:e0:c6:4e:b4:9c:97:1e:89:90:40:4a:7a:
e4:a5:de:eb:2a:8a:5d:80:0b:b9:87:a5:da:7b:af:a4:85:8a:
47:98:fb:32:cc:ee:03:6e:fc:17:e4:21:df:a9:92:fe:c1:e0:
bc:3c:bd:e2:43:03:f4:cf:be:f4:fc:f7:5c:a3:2e:90:d6:63:
1b:99:a0:f0:7e:07:dd:0e:64:de:2d:99:a3:4b:53:2b:76:d2:
34:7a:f5:e1:ad:48:b8:0f:93:b9:4f:3c:9f:4a:3b:39:60:f2:
ca:d4:fd:89:84:d4:6f:21:d5:cd:95:cb:0b:e9:71:46:72:d0:
52:e2:b4:f9:7d:f4:3e:4c:c6:41:c7:17:90:1e:db:d6:3c:f5:
65:ce:4a:61:6b:07:73:78:a6:d7:78:43:9d:87:32:7f:33:c7:
1f:8f:bd:aa:1e:71:1d:c3:24:61:42:a8:95:9d:55:e8:9f:ba:
5c:88:f1:17:d4:5f:80:1b:44:b5:4d:bc:b9:3d:bb:72:9d:c1:
fe:fb:1a:07:61:8c:84:18:c2:16:65:e0:50:9b:5b:54:c7:2b:
32:ba:62:3b:16:61:f6:97:61:81:2f:16:9e:3d:c5:79:77:80:
5f:6c:1b:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zqfJjOHFzcl04ueWtEW6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyOWI4ZDY4YTgyMDc1NmFhYTNmODk3OTUxZDVhZmQ2N2Zk
YjNkYmIwHhcNMjUwMTMxMTAwMTEwWhcNMjUwMjAxMTAwMTEwWjAzMTEwLwYDVQQD
EyhiZTg4ZDI0ZDMxZTJiMGQ1NDU5MDM5MWZkYzc2ZDk5YjEwOWQwMzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1TPOhZBOnlj0kwN1c1ctrtq640Y
OdzSBpQzIHx8dgoz2KhkS2OgoSwqfbNQPUQAmqwy0vxwu4FXTeVudI2Xttx9wZhT
y3c0eXTCr64Hkcn+W7w+vVjslm5zd9oD2h60rHveciQPK0JjxTFtSQwEotyswbX3
IV+EiBt6msFA+3lqkvsM/Gj9CdQNsz8BbgbX/SXhRAMjTM2rC758FLi5FrJGRw2y
ZHYd3RiIyMJM0rMbSbe/x8MW0ZsigEATbCdBjI30s+or64chbnHUIZfUXTMdXqlN
nSBr9aOuHKRICAbar9ilbBja7kT1cB3cR3uTlNiJJQsriaNp+6H6quoWRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6I0k0x4rDVRZA5H9x22ZsQnQOBMB8GA1UdIwQY
MBaAFLKbjWioIHVqqj+JeVHVr9Z/2z27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3B1TmFLZ2dkV3FxUDRsNVVkV3Yxbl9iUGJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jOTdiMTctNjcxYi00MTAyLTkyNDEt
MWMxZWIxNThiMDJkLzEvc3B1TmFLZ2dkV3FxUDRsNVVkV3Yxbl9iUGJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9jOTdiMTctNjcxYi00MTAyLTkyNDEtMWMxZWIxNThiMDJk
LzEvc3B1TmFLZ2dkV3FxUDRsNVVkV3Yxbl9iUGJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyoE7J/N
dMczahVNJY8gQcw1goCz89i/4MZOtJyXHomQQEp65KXe6yqKXYALuYel2nuvpIWK
R5j7MszuA278F+Qh36mS/sHgvDy94kMD9M++9Pz3XKMukNZjG5mg8H4H3Q5k3i2Z
o0tTK3bSNHr14a1IuA+TuU88n0o7OWDyytT9iYTUbyHVzZXLC+lxRnLQUuK0+X30
PkzGQccXkB7b1jz1Zc5KYWsHc3im13hDnYcyfzPHH4+9qh5xHcMkYUKolZ1V6J+6
XIjxF9RfgBtEtU28uT27cp3B/vsaB2GMhBjCFmXgUJtbVMcrMrpiOxZh9pdhgS8W
nj3FeXeAX2wbsg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:28 2025 by rpki-client