Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: 3WLzdO4OpYkvGKWVg84Pl0dH8AedAaajkfM3fHKjZjE=
Subject key identifier: 36:18:A1:11:8E:4B:CD:45:30:66:7D:1B:1B:E8:22:DB:C6:FD:6A:0E
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 0195E0EB48B26481D7F7E0F1072F651246CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 08:01:10 +0000
Manifest this update: Sat 29 Mar 2025 08:01:10 +0000
Manifest next update: Sun 30 Mar 2025 08:01:10 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: AAZjtsOZRmtvcDyRbDA7k/RyXkfv3vB221/UP1Ny4O4=)
2: KU9VrPubRe8eWjpLdcsjMFiIw80.roa (hash: a9ro504fqwtPl4NviidsiBYPcJ6GgoUu42PU2Cb9coI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:48:b2:64:81:d7:f7:e0:f1:07:2f:65:12:46:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Mar 29 08:01:10 2025 GMT
Not After : Mar 30 08:01:10 2025 GMT
Subject: CN=3618a1118e4bcd4530667d1b1be822dbc6fd6a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:6e:d5:68:af:54:0f:7a:38:db:5f:2b:bd:
bb:97:a2:a8:df:31:33:01:96:b4:bc:6e:de:96:90:
c2:71:09:bc:e7:0f:e8:fa:13:17:60:f0:41:8c:94:
7d:d7:20:df:cb:10:6f:91:0f:65:c7:1a:c6:a9:0f:
81:0d:3b:83:6a:dc:76:5c:4e:fd:f2:a0:08:be:99:
76:66:83:db:33:ab:80:29:a4:7c:2d:82:1e:ba:88:
47:a9:91:7f:47:9b:e8:53:68:e7:e0:a1:5a:09:cd:
aa:e2:fc:d6:fe:aa:15:71:97:ee:f8:5d:20:76:81:
f1:b7:5c:3a:9e:29:ef:1a:33:db:5d:a5:65:66:eb:
d4:83:2c:3e:10:47:2b:89:cf:d4:85:72:a3:bc:68:
c4:b4:95:ea:2c:f3:98:70:e5:4f:f1:82:1e:2c:ee:
10:9c:77:51:5c:76:ea:ae:63:37:e1:64:0e:3f:da:
82:74:49:27:38:df:dd:c6:13:06:fc:48:2e:6e:34:
af:69:d1:76:92:b8:71:c1:8b:88:09:fa:21:2c:36:
0f:a2:90:67:40:8e:b9:e8:d0:70:2f:4e:6a:97:08:
cf:ba:58:c2:b5:40:34:32:74:74:d9:55:b8:dd:d0:
bf:f2:1e:3c:73:89:ba:b8:9a:94:58:8b:1b:70:f8:
ad:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:18:A1:11:8E:4B:CD:45:30:66:7D:1B:1B:E8:22:DB:C6:FD:6A:0E
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:04:80:55:f3:50:b9:d9:e4:bb:3b:ab:a0:61:35:84:6b:bf:
aa:e4:c1:f7:2c:bf:be:7f:23:60:88:d1:4b:77:ca:6e:b0:db:
ca:be:34:90:0f:af:23:4c:60:6e:36:ba:6e:c6:b4:92:c8:89:
56:9f:4b:53:04:cf:98:c1:86:3d:61:33:34:5b:e7:f0:8f:08:
da:13:22:0f:2e:82:21:1d:08:85:7b:ba:18:54:d7:8d:38:5e:
91:69:36:ad:60:6c:f4:e2:07:22:a5:89:6f:92:97:95:e4:19:
58:8c:c5:93:ca:35:01:92:cb:f6:3b:99:ba:ae:90:90:36:d0:
57:d4:4f:44:ad:cf:4a:26:d8:c7:d1:43:d7:58:dd:20:95:91:
49:2e:a9:38:2b:cd:9d:c5:ba:56:36:b4:92:4c:f7:45:3a:fc:
81:93:4d:07:37:3a:d2:ee:4b:00:f4:91:3b:5b:a5:92:ad:69:
e7:69:5f:f7:0f:65:5d:1b:f4:04:7a:f4:aa:08:95:c2:2b:2a:
5e:9c:bc:77:20:17:e9:25:d9:05:82:cc:22:5d:d7:69:dc:50:
a3:3f:f5:3f:64:5c:f9:df:17:52:93:80:b0:e8:74:55:b5:d4:
9c:71:92:e6:fa:62:a5:b2:1e:4a:02:12:c4:a6:f6:e2:23:45:
b6:c9:81:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXg60iyZIHX9+DxBy9lEkbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMmQ0MjBlNjYxYzg2NTcxMDg5ZmYwYjUxOTY1YTg2ZTBk
N2JjNzUwHhcNMjUwMzI5MDgwMTEwWhcNMjUwMzMwMDgwMTEwWjAzMTEwLwYDVQQD
EygzNjE4YTExMThlNGJjZDQ1MzA2NjdkMWIxYmU4MjJkYmM2ZmQ2YTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWpu1WivVA96ONtfK727l6Ko3zEz
AZa0vG7elpDCcQm85w/o+hMXYPBBjJR91yDfyxBvkQ9lxxrGqQ+BDTuDatx2XE79
8qAIvpl2ZoPbM6uAKaR8LYIeuohHqZF/R5voU2jn4KFaCc2q4vzW/qoVcZfu+F0g
doHxt1w6ninvGjPbXaVlZuvUgyw+EEcric/UhXKjvGjEtJXqLPOYcOVP8YIeLO4Q
nHdRXHbqrmM34WQOP9qCdEknON/dxhMG/EgubjSvadF2krhxwYuICfohLDYPopBn
QI656NBwL05qlwjPuljCtUA0MnR02VW43dC/8h48c4m6uJqUWIsbcPit1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYYoRGOS81FMGZ9GxvoItvG/WoOMB8GA1UdIwQY
MBaAFA4tQg5mHIZXEIn/C1GWWobg17x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEt
NzUxODhiM2MxMTJlLzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEtNzUxODhiM2MxMTJl
LzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbASAVfNQ
udnkuzuroGE1hGu/quTB9yy/vn8jYIjRS3fKbrDbyr40kA+vI0xgbja6bsa0ksiJ
Vp9LUwTPmMGGPWEzNFvn8I8I2hMiDy6CIR0IhXu6GFTXjThekWk2rWBs9OIHIqWJ
b5KXleQZWIzFk8o1AZLL9juZuq6QkDbQV9RPRK3PSibYx9FD11jdIJWRSS6pOCvN
ncW6Vja0kkz3RTr8gZNNBzc60u5LAPSRO1ulkq1p52lf9w9lXRv0BHr0qgiVwisq
Xpy8dyAX6SXZBYLMIl3XadxQoz/1P2Rc+d8XUpOAsOh0VbXUnHGS5vpipbIeSgIS
xKb24iNFtsmBIQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:07:08 2025 by rpki-client