Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
File: 1R31-9viXy1eU4x53RjD1sQualU.mft (raw, json)
Hash identifier: 15LSHtw5Pbedan6A+jhbHhxCZbRcYY6UNsj1Dmpqkig=
Subject key identifier: D9:2A:E7:55:CF:09:DA:3A:8E:3E:EB:13:19:60:78:21:3C:79:11:0E
Authority key identifier: D5:1D:F5:FB:DB:E2:5F:2D:5E:53:8C:79:DD:18:C3:D6:C4:2E:6A:55
Certificate issuer: /CN=d51df5fbdbe25f2d5e538c79dd18c3d6c42e6a55
Certificate serial: 0195F9CF77968F6D2335D939BAD6EAEFE2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R31-9viXy1eU4x53RjD1sQualU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
Manifest number: 14CA
Signing time: Thu 03 Apr 2025 04:01:17 +0000
Manifest this update: Thu 03 Apr 2025 04:01:17 +0000
Manifest next update: Fri 04 Apr 2025 04:01:17 +0000
Files and hashes: 1: 1R31-9viXy1eU4x53RjD1sQualU.crl (hash: S1FyYV4CY0Dw/sI9aPgOqg65BV/J7K1+RaAA0bFdm2s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f9:cf:77:96:8f:6d:23:35:d9:39:ba:d6:ea:ef:e2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51df5fbdbe25f2d5e538c79dd18c3d6c42e6a55
Validity
Not Before: Apr 3 04:01:17 2025 GMT
Not After : Apr 4 04:01:17 2025 GMT
Subject: CN=d92ae755cf09da3a8e3eeb13196078213c79110e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:e6:50:6f:92:a4:f8:bf:bf:af:07:ea:4a:
e0:0a:1f:08:f3:e6:c8:73:1e:7e:2e:c2:80:93:5c:
38:d0:84:76:c8:45:9b:35:9c:d5:e9:ee:4f:ed:91:
08:0a:17:6d:01:3a:0a:ac:2d:01:ac:76:fb:d6:f0:
ac:a5:75:86:3a:aa:42:f5:c2:31:36:2c:aa:f8:60:
80:7c:59:c3:40:49:ca:71:32:08:be:41:c9:d0:4c:
e3:33:39:64:6d:1c:e7:63:64:f1:d0:54:64:47:46:
9a:67:e1:ff:c7:9e:9b:a7:5b:4b:03:97:e0:57:ce:
0c:2f:2b:71:bf:1a:6f:52:93:61:65:7d:eb:7f:c9:
33:4d:62:b4:bc:a3:07:3a:b6:e4:0f:db:f9:e4:17:
51:02:2e:7a:14:ac:71:7a:3e:8d:ae:7b:b0:78:03:
cc:3a:0b:62:55:46:40:56:d5:15:76:6c:9f:a3:58:
c1:45:be:4f:44:1e:a0:6c:c7:2f:3c:95:bc:9f:f7:
fb:88:66:47:97:57:a9:ec:d1:f7:99:16:be:6c:60:
6d:92:fc:fb:c7:1c:37:9d:be:48:00:40:cc:e2:2e:
05:ae:f1:fb:62:49:25:7d:ca:c6:4b:e0:c1:6c:e8:
7e:d8:cf:6d:e4:37:11:1d:f7:e0:d0:c4:db:d3:99:
f2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2A:E7:55:CF:09:DA:3A:8E:3E:EB:13:19:60:78:21:3C:79:11:0E
X509v3 Authority Key Identifier:
keyid:D5:1D:F5:FB:DB:E2:5F:2D:5E:53:8C:79:DD:18:C3:D6:C4:2E:6A:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R31-9viXy1eU4x53RjD1sQualU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:25:de:82:00:0a:ae:9a:e9:e4:f0:33:26:b5:e0:f2:cb:7c:
25:fe:4d:7f:d8:de:b1:0c:fc:a5:84:ed:bc:90:3e:ea:a8:01:
6f:4c:e7:32:46:eb:a8:de:04:f4:ae:52:9b:e2:96:4b:41:45:
dc:41:fe:f3:2d:5e:6e:4d:8e:c2:59:0c:c2:76:be:4c:9a:50:
8a:b4:fa:b1:d4:6c:bb:9a:76:68:1d:e1:fd:f0:af:89:5c:f6:
e2:72:92:04:b2:2c:74:08:ec:5f:70:03:5a:0e:91:a7:63:5b:
a7:d6:6b:18:7c:61:c3:cd:ee:89:b4:3c:60:bc:34:ad:ec:1f:
b5:0d:b0:2c:09:e0:56:47:0b:c7:ad:08:80:50:67:7e:69:d3:
c9:29:f7:d0:eb:a9:e8:a2:7e:04:eb:75:a7:22:2a:8d:7d:11:
ad:93:3b:7e:fa:2f:af:43:6d:13:0a:d9:7d:21:2e:ca:5d:2b:
22:2c:46:f4:fc:55:50:e5:4f:3b:23:83:e6:68:40:cc:27:28:
87:c5:78:53:87:1c:b5:ad:57:60:3e:9a:3b:bf:1c:79:ff:a7:
f3:8f:c1:3a:d6:68:70:61:a2:4d:9d:32:95:9d:58:41:49:b5:
15:5f:95:10:e1:97:aa:98:d1:f1:29:42:0d:84:52:47:2f:b6:
0c:f8:67:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZX5z3eWj20jNdk5utbq7+K0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MWRmNWZiZGJlMjVmMmQ1ZTUzOGM3OWRkMThjM2Q2YzQy
ZTZhNTUwHhcNMjUwNDAzMDQwMTE3WhcNMjUwNDA0MDQwMTE3WjAzMTEwLwYDVQQD
EyhkOTJhZTc1NWNmMDlkYTNhOGUzZWViMTMxOTYwNzgyMTNjNzkxMTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvTmUG+SpPi/v68H6krgCh8I8+bI
cx5+LsKAk1w40IR2yEWbNZzV6e5P7ZEIChdtAToKrC0BrHb71vCspXWGOqpC9cIx
Niyq+GCAfFnDQEnKcTIIvkHJ0EzjMzlkbRznY2Tx0FRkR0aaZ+H/x56bp1tLA5fg
V84MLytxvxpvUpNhZX3rf8kzTWK0vKMHOrbkD9v55BdRAi56FKxxej6NrnuweAPM
OgtiVUZAVtUVdmyfo1jBRb5PRB6gbMcvPJW8n/f7iGZHl1ep7NH3mRa+bGBtkvz7
xxw3nb5IAEDM4i4FrvH7YkklfcrGS+DBbOh+2M9t5DcRHffg0MTb05nyJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkq51XPCdo6jj7rExlgeCE8eREOMB8GA1UdIwQY
MBaAFNUd9fvb4l8tXlOMed0Yw9bELmpVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVIzMS05dmlYeTFlVTR4NTNSakQxc1F1YWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNDlhYWEtZWUwOC00YjA0LThlODMt
NmRmMWUwYmYxNTkzLzEvMVIzMS05dmlYeTFlVTR4NTNSakQxc1F1YWxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kNDlhYWEtZWUwOC00YjA0LThlODMtNmRmMWUwYmYxNTkz
LzEvMVIzMS05dmlYeTFlVTR4NTNSakQxc1F1YWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiXeggAK
rprp5PAzJrXg8st8Jf5Nf9jesQz8pYTtvJA+6qgBb0znMkbrqN4E9K5Sm+KWS0FF
3EH+8y1ebk2OwlkMwna+TJpQirT6sdRsu5p2aB3h/fCviVz24nKSBLIsdAjsX3AD
Wg6Rp2Nbp9ZrGHxhw83uibQ8YLw0rewftQ2wLAngVkcLx60IgFBnfmnTySn30Oup
6KJ+BOt1pyIqjX0RrZM7fvovr0NtEwrZfSEuyl0rIixG9PxVUOVPOyOD5mhAzCco
h8V4U4ccta1XYD6aO78cef+n84/BOtZocGGiTZ0ylZ1YQUm1FV+VEOGXqpjR8SlC
DYRSRy+2DPhndQ==
-----END CERTIFICATE-----
Generated at Mon May 12 16:44:28 2025 by rpki-client