Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b2ae39-e5d3-4f37-b509-a17ceb7fda48/1/8P5yZJaZ7jOE0gK5HrhoTvwwLMg.mft
File: 8P5yZJaZ7jOE0gK5HrhoTvwwLMg.mft (raw, json)
Hash identifier: 8TPZvMg1NocZwUQUUZHEisjkkxvOFKOGd99yQjbMSNY=
Subject key identifier: 09:05:11:0A:F1:BC:BB:8D:77:E2:68:A5:83:3C:5B:4D:0F:38:B1:F0
Authority key identifier: F0:FE:72:64:96:99:EE:33:84:D2:02:B9:1E:B8:68:4E:FC:30:2C:C8
Certificate issuer: /CN=f0fe72649699ee3384d202b91eb8684efc302cc8
Certificate serial: 01941ADF7A3C0A1CFF01AB8A6FD0A5E3F84A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P5yZJaZ7jOE0gK5HrhoTvwwLMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b2ae39-e5d3-4f37-b509-a17ceb7fda48/1/8P5yZJaZ7jOE0gK5HrhoTvwwLMg.mft
Manifest number: 0972
Signing time: Tue 31 Dec 2024 04:00:40 +0000
Manifest this update: Tue 31 Dec 2024 04:00:40 +0000
Manifest next update: Wed 01 Jan 2025 04:00:40 +0000
Files and hashes: 1: 8P5yZJaZ7jOE0gK5HrhoTvwwLMg.crl (hash: ewdVSX5NJYgxe1fTIalR/y8ISfuUyekL51rMXk0+0WE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1a:df:7a:3c:0a:1c:ff:01:ab:8a:6f:d0:a5:e3:f8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fe72649699ee3384d202b91eb8684efc302cc8
Validity
Not Before: Dec 31 04:00:40 2024 GMT
Not After : Jan 1 04:00:40 2025 GMT
Subject: CN=0905110af1bcbb8d77e268a5833c5b4d0f38b1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:15:32:81:13:7a:86:33:f2:cc:b5:1b:6a:44:
b7:4c:25:1e:70:4a:6d:07:66:9b:41:1a:4f:80:02:
ac:3c:02:e0:4c:ff:36:44:64:25:c7:08:49:32:ae:
bb:c3:aa:eb:95:76:15:1c:6b:48:ec:6a:24:50:cb:
41:7e:28:25:7a:e0:67:61:13:7d:91:5a:28:99:1d:
6a:ba:be:b6:23:5d:ef:1f:f6:0d:40:79:56:31:f5:
e5:c2:de:99:b5:ba:55:17:84:7a:c6:bd:70:5c:44:
9f:1d:d8:46:9d:da:b9:5c:8c:13:13:b2:f7:4d:95:
ee:2a:af:6b:a0:fb:fe:3d:cb:7a:92:08:19:54:ca:
3a:fd:29:3f:a8:21:0f:1d:07:99:18:a1:e0:b2:87:
3b:79:3e:ef:3d:f8:75:72:52:70:f7:e1:ad:2e:7b:
57:ab:8e:4d:21:c1:3e:a0:f2:45:d2:d4:63:ff:d6:
f2:21:d4:c5:65:c5:ce:8f:b2:f0:20:5f:f3:9f:51:
43:f0:cd:97:ee:9a:22:9d:b3:1b:37:2c:d8:eb:94:
ca:b0:2d:35:b4:3c:4e:69:2b:4b:01:35:9a:f8:55:
b4:5a:95:94:cb:07:1e:a7:04:8a:f2:04:f6:4c:dd:
cc:3f:7a:da:22:b6:c3:64:20:b6:87:47:28:fd:36:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:05:11:0A:F1:BC:BB:8D:77:E2:68:A5:83:3C:5B:4D:0F:38:B1:F0
X509v3 Authority Key Identifier:
keyid:F0:FE:72:64:96:99:EE:33:84:D2:02:B9:1E:B8:68:4E:FC:30:2C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P5yZJaZ7jOE0gK5HrhoTvwwLMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b2ae39-e5d3-4f37-b509-a17ceb7fda48/1/8P5yZJaZ7jOE0gK5HrhoTvwwLMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b2ae39-e5d3-4f37-b509-a17ceb7fda48/1/8P5yZJaZ7jOE0gK5HrhoTvwwLMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:20:45:f1:50:a7:61:ad:51:3d:51:64:21:f7:fc:dd:7f:c4:
83:4c:c9:ec:1f:c4:79:da:0b:08:ba:b5:05:a5:43:e4:9e:23:
a6:ee:40:a2:40:11:cc:1d:0b:1a:1a:5e:f4:9b:2a:98:e9:48:
af:e2:d2:f0:7d:54:3a:31:f3:94:01:76:3d:ad:2a:12:a0:ed:
0a:94:5f:a3:9b:ee:e6:16:bf:40:6a:fe:51:f7:7d:bc:00:aa:
b9:fd:90:1b:60:fc:91:e7:94:5c:e3:0b:47:3e:9f:81:c1:20:
89:8b:08:d9:cb:6c:ec:a8:72:df:38:7d:73:b2:50:fe:95:8a:
f2:09:06:ae:19:ab:b5:2c:36:04:73:46:72:14:88:05:27:5d:
e7:5e:66:39:83:b8:2b:73:89:01:f3:07:43:a7:85:8f:0e:55:
05:42:4d:da:28:ca:71:ab:4d:37:fa:94:80:44:22:25:f7:63:
44:96:16:3d:d1:c7:8d:f0:52:1c:bf:9e:93:56:cd:ae:ba:dc:
59:a2:a7:71:75:fa:3b:ca:25:42:32:2b:d8:8b:98:50:1b:74:
ce:79:dd:12:57:2d:d0:85:cd:ef:28:9c:f3:ee:c5:cc:66:b2:
2a:08:4b:61:2d:de:c8:22:74:ba:bf:8d:f1:21:35:cc:55:ec:
2a:02:78:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQa33o8Chz/AauKb9Cl4/hKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZmU3MjY0OTY5OWVlMzM4NGQyMDJiOTFlYjg2ODRlZmMz
MDJjYzgwHhcNMjQxMjMxMDQwMDQwWhcNMjUwMTAxMDQwMDQwWjAzMTEwLwYDVQQD
EygwOTA1MTEwYWYxYmNiYjhkNzdlMjY4YTU4MzNjNWI0ZDBmMzhiMWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBUygRN6hjPyzLUbakS3TCUecEpt
B2abQRpPgAKsPALgTP82RGQlxwhJMq67w6rrlXYVHGtI7GokUMtBfigleuBnYRN9
kVoomR1qur62I13vH/YNQHlWMfXlwt6ZtbpVF4R6xr1wXESfHdhGndq5XIwTE7L3
TZXuKq9roPv+Pct6kggZVMo6/Sk/qCEPHQeZGKHgsoc7eT7vPfh1clJw9+GtLntX
q45NIcE+oPJF0tRj/9byIdTFZcXOj7LwIF/zn1FD8M2X7poinbMbNyzY65TKsC01
tDxOaStLATWa+FW0WpWUywcepwSK8gT2TN3MP3raIrbDZCC2h0co/TZz2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkFEQrxvLuNd+JopYM8W00POLHwMB8GA1UdIwQY
MBaAFPD+cmSWme4zhNICuR64aE78MCzIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFA1eVpKYVo3ak9FMGdLNUhyaG9Udnd3TE1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iMmFlMzktZTVkMy00ZjM3LWI1MDkt
YTE3Y2ViN2ZkYTQ4LzEvOFA1eVpKYVo3ak9FMGdLNUhyaG9Udnd3TE1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9iMmFlMzktZTVkMy00ZjM3LWI1MDktYTE3Y2ViN2ZkYTQ4
LzEvOFA1eVpKYVo3ak9FMGdLNUhyaG9Udnd3TE1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhiBF8VCn
Ya1RPVFkIff83X/Eg0zJ7B/EedoLCLq1BaVD5J4jpu5AokARzB0LGhpe9JsqmOlI
r+LS8H1UOjHzlAF2Pa0qEqDtCpRfo5vu5ha/QGr+Ufd9vACquf2QG2D8keeUXOML
Rz6fgcEgiYsI2cts7Khy3zh9c7JQ/pWK8gkGrhmrtSw2BHNGchSIBSdd515mOYO4
K3OJAfMHQ6eFjw5VBUJN2ijKcatNN/qUgEQiJfdjRJYWPdHHjfBSHL+ek1bNrrrc
WaKncXX6O8olQjIr2IuYUBt0znndElct0IXN7yic8+7FzGayKghLYS3eyCJ0ur+N
8SE1zFXsKgJ4uw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:03 2025 by rpki-client