Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
File: C2HQodeVPPO4YIrcECCyahttauc.mft (raw, json)
Hash identifier: ihXAKAQTh+I4c42i2xsUw6GHWfOldOEOgLM6dTIwUns=
Subject key identifier: 96:25:FF:B4:05:2B:B2:9E:9E:01:7F:66:AD:80:3D:D6:6D:43:1F:08
Authority key identifier: 0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
Certificate issuer: /CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Certificate serial: 0195E122705E96586D96926578634FA3B022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
Manifest number: 0EB5
Signing time: Sat 29 Mar 2025 09:01:25 +0000
Manifest this update: Sat 29 Mar 2025 09:01:25 +0000
Manifest next update: Sun 30 Mar 2025 09:01:25 +0000
Files and hashes: 1: C2HQodeVPPO4YIrcECCyahttauc.crl (hash: 9S2S2UuK2gbkF9DMRPMzy2edCgL1iT2ypxUTgMstvUc=)
2: M-x2G8Au-BEiFMNxevYsVKYF8I4.roa (hash: j7AgynVh3GwRhlqpHTTZ3ADKHhLkgrB0EPxSDXlRk0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:70:5e:96:58:6d:96:92:65:78:63:4f:a3:b0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Validity
Not Before: Mar 29 09:01:25 2025 GMT
Not After : Mar 30 09:01:25 2025 GMT
Subject: CN=9625ffb4052bb29e9e017f66ad803dd66d431f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:9a:17:7a:b1:b5:0d:a0:fd:00:b7:5c:6d:
14:82:bd:f3:9e:c1:1f:ec:35:d8:3e:40:15:86:31:
5d:68:9e:f6:ff:f7:02:fb:c6:d1:28:4e:d1:53:6d:
0c:af:07:26:9d:14:e4:b3:c0:49:f0:98:cf:74:d9:
04:a5:ae:18:b2:91:a8:e3:87:27:5f:6d:36:d1:18:
6f:24:0a:e5:99:c0:dc:91:1c:ee:58:73:ee:b8:a8:
8e:74:89:af:8c:56:aa:7a:be:f9:f6:cc:62:bc:ad:
2f:5d:3d:f2:fa:c1:aa:4e:dd:0a:85:a8:e8:21:d6:
2e:d9:fc:7b:b8:f9:c4:c2:da:c4:8f:a1:d9:1c:52:
58:ed:b9:04:fe:a5:a1:3d:64:22:a9:57:77:df:e9:
4f:1e:40:e7:63:fd:4d:40:2c:5c:77:c1:5f:18:f8:
be:4a:c9:04:5e:b6:ab:f6:73:cf:7d:b1:fb:d4:ba:
b8:e5:e2:90:9d:17:f5:b6:ac:37:0a:71:f3:25:a7:
6d:0d:ed:b2:74:8c:1e:01:0e:2d:36:13:fc:16:6e:
c7:7b:2a:c9:f7:5c:f7:22:54:51:db:3d:13:9c:1a:
48:0c:18:4e:d5:8f:90:f1:92:b6:1b:3e:02:1f:b0:
b5:71:55:48:17:38:b3:2d:75:5c:31:1b:c8:54:20:
cb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:25:FF:B4:05:2B:B2:9E:9E:01:7F:66:AD:80:3D:D6:6D:43:1F:08
X509v3 Authority Key Identifier:
keyid:0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:97:00:9a:cc:c4:a3:cf:32:d1:ac:a8:dd:d1:43:6b:95:93:
85:1e:f4:5e:70:93:9f:d9:62:ce:24:f8:77:28:03:78:2a:07:
ed:e1:1d:ac:13:4d:6f:67:1a:cc:9a:0c:f1:42:8e:67:30:61:
b6:7e:0e:87:49:13:6d:f3:2a:b1:3e:b7:a5:74:3e:e3:7a:36:
c1:03:b1:99:d8:2a:9b:59:e4:35:6d:14:7e:7c:31:63:c5:87:
da:c3:4b:6f:32:1c:ba:ec:f5:05:04:38:ea:d9:fd:8e:26:87:
f0:99:05:90:c1:67:ce:ab:a3:4a:c1:b2:dd:e6:ad:f4:72:65:
c2:46:bb:59:2c:08:5f:71:0c:1c:88:bc:a8:cc:7a:2f:f9:fa:
64:a9:dd:5b:04:19:4f:fe:7d:15:a3:d5:5d:2d:e2:6c:6d:52:
92:3f:25:0f:3d:25:1b:26:1d:88:87:c9:50:2f:51:1f:66:19:
d8:1a:dd:8c:94:6b:42:37:c8:fc:f8:5e:ce:ca:d9:c5:86:ae:
4b:d6:26:03:a2:9a:ad:98:cd:28:4e:d8:7f:57:a4:89:81:4a:
30:8b:1a:e6:ff:89:fa:0c:5e:84:21:df:08:0c:c2:7b:73:d9:
27:2f:27:f3:f4:cb:bb:25:f2:5b:dc:86:ad:bb:2c:04:e1:53:
f0:63:82:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhInBellhtlpJleGNPo7AiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNjFkMGExZDc5NTNjZjNiODYwOGFkYzEwMjBiMjZhMWI2
ZDZhZTcwHhcNMjUwMzI5MDkwMTI1WhcNMjUwMzMwMDkwMTI1WjAzMTEwLwYDVQQD
Eyg5NjI1ZmZiNDA1MmJiMjllOWUwMTdmNjZhZDgwM2RkNjZkNDMxZjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhiaF3qxtQ2g/QC3XG0Ugr3znsEf
7DXYPkAVhjFdaJ72//cC+8bRKE7RU20MrwcmnRTks8BJ8JjPdNkEpa4YspGo44cn
X2020RhvJArlmcDckRzuWHPuuKiOdImvjFaqer759sxivK0vXT3y+sGqTt0Khajo
IdYu2fx7uPnEwtrEj6HZHFJY7bkE/qWhPWQiqVd33+lPHkDnY/1NQCxcd8FfGPi+
SskEXrar9nPPfbH71Lq45eKQnRf1tqw3CnHzJadtDe2ydIweAQ4tNhP8Fm7HeyrJ
91z3IlRR2z0TnBpIDBhO1Y+Q8ZK2Gz4CH7C1cVVIFzizLXVcMRvIVCDLyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYl/7QFK7KengF/Zq2APdZtQx8IMB8GA1UdIwQY
MBaAFAth0KHXlTzzuGCK3BAgsmobbWrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzJIUW9kZVZQUE80WUlyY0VDQ3lhaHR0YXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jMmMyNzEtMTcxYS00MTkwLWJmZDUt
NDcyMjBkMzE4YjRjLzEvQzJIUW9kZVZQUE80WUlyY0VDQ3lhaHR0YXVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jMmMyNzEtMTcxYS00MTkwLWJmZDUtNDcyMjBkMzE4YjRj
LzEvQzJIUW9kZVZQUE80WUlyY0VDQ3lhaHR0YXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpcAmszE
o88y0ayo3dFDa5WThR70XnCTn9liziT4dygDeCoH7eEdrBNNb2cazJoM8UKOZzBh
tn4Oh0kTbfMqsT63pXQ+43o2wQOxmdgqm1nkNW0UfnwxY8WH2sNLbzIcuuz1BQQ4
6tn9jiaH8JkFkMFnzqujSsGy3eat9HJlwka7WSwIX3EMHIi8qMx6L/n6ZKndWwQZ
T/59FaPVXS3ibG1Skj8lDz0lGyYdiIfJUC9RH2YZ2BrdjJRrQjfI/PhezsrZxYau
S9YmA6KarZjNKE7Yf1ekiYFKMIsa5v+J+gxehCHfCAzCe3PZJy8n8/TLuyXyW9yG
rbssBOFT8GOC1A==
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:04:28 2025 by rpki-client