Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/11265d-80a8-448d-bfc6-b0ebb6bd00c7/1/oD8_d4YxqgT8MVRTySFzR9FjjnQ.mft
File: oD8_d4YxqgT8MVRTySFzR9FjjnQ.mft (raw, json)
Hash identifier: 3fgtlczacDVfgd4bGFjn0QsiGFEfSOnseSPBapKggx4=
Subject key identifier: AF:04:EF:EA:F2:40:2A:C2:E6:B7:89:E9:EC:BD:1D:C5:94:37:9C:8C
Authority key identifier: A0:3F:3F:77:86:31:AA:04:FC:31:54:53:C9:21:73:47:D1:63:8E:74
Certificate issuer: /CN=a03f3f778631aa04fc315453c9217347d1638e74
Certificate serial: 01955FF541731907785C378A6233A2236089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oD8_d4YxqgT8MVRTySFzR9FjjnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/11265d-80a8-448d-bfc6-b0ebb6bd00c7/1/oD8_d4YxqgT8MVRTySFzR9FjjnQ.mft
Manifest number: 0982
Signing time: Tue 04 Mar 2025 07:01:03 +0000
Manifest this update: Tue 04 Mar 2025 07:01:03 +0000
Manifest next update: Wed 05 Mar 2025 07:01:03 +0000
Files and hashes: 1: oD8_d4YxqgT8MVRTySFzR9FjjnQ.crl (hash: 43dW5vrHvwCT9qNhmU15M9wdWgxf5F/4WJAwaVZA5gg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5f:f5:41:73:19:07:78:5c:37:8a:62:33:a2:23:60:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a03f3f778631aa04fc315453c9217347d1638e74
Validity
Not Before: Mar 4 07:01:03 2025 GMT
Not After : Mar 5 07:01:03 2025 GMT
Subject: CN=af04efeaf2402ac2e6b789e9ecbd1dc594379c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:0b:48:f5:a9:41:bb:bd:9d:70:04:12:de:
90:dd:c4:d8:88:20:d5:9e:90:c6:75:09:05:3e:c4:
b6:0d:db:ef:26:4b:c0:85:be:84:0f:72:6f:81:e1:
76:a9:de:51:96:b2:52:bc:af:36:f2:b4:fb:d6:c7:
4b:cb:f2:4f:93:99:6c:fe:51:cb:96:94:f6:5e:05:
4e:ff:ad:9b:54:db:cf:73:a7:a6:a5:6f:5a:20:66:
19:35:50:4e:9d:f4:f6:4f:32:34:8a:92:05:f2:d3:
a5:9c:8d:48:4d:4f:5f:3b:f1:a5:9a:43:34:ee:4e:
3a:e2:5c:02:09:39:bd:51:b4:b1:bf:00:e6:15:95:
ea:c7:64:0d:5a:0f:0b:b4:c6:e2:ef:1d:4b:32:dc:
11:10:07:27:2a:3f:74:87:a5:a9:3d:a2:3a:fb:cb:
01:00:b1:4b:76:2c:f4:38:e9:91:fb:58:b4:df:93:
06:e6:05:57:72:f5:fb:57:a7:d3:8f:eb:de:d2:12:
96:21:bf:bd:7e:03:1c:a3:6f:4d:90:ce:7e:8c:41:
97:e6:37:cf:87:6a:75:a8:f3:49:e2:7a:5e:d1:f1:
a8:a2:2e:cc:4a:71:c4:97:d1:3d:34:8d:2f:ba:28:
ef:58:af:b3:85:7a:f8:d0:58:20:b1:70:23:6e:23:
72:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:04:EF:EA:F2:40:2A:C2:E6:B7:89:E9:EC:BD:1D:C5:94:37:9C:8C
X509v3 Authority Key Identifier:
keyid:A0:3F:3F:77:86:31:AA:04:FC:31:54:53:C9:21:73:47:D1:63:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oD8_d4YxqgT8MVRTySFzR9FjjnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/11265d-80a8-448d-bfc6-b0ebb6bd00c7/1/oD8_d4YxqgT8MVRTySFzR9FjjnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/11265d-80a8-448d-bfc6-b0ebb6bd00c7/1/oD8_d4YxqgT8MVRTySFzR9FjjnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f8:e3:49:57:01:b9:97:84:3e:89:b1:83:1b:7a:5b:08:87:
f4:cf:57:c3:fa:f9:7f:0e:99:8a:83:8a:56:4f:22:c3:2f:0b:
ee:db:75:ed:af:81:20:68:8f:f2:ec:50:bc:9e:d6:e7:02:fb:
41:a1:a3:a3:e8:8d:dc:9d:3f:01:d6:4f:f5:dd:d2:e4:15:17:
83:9e:2b:35:bf:8b:36:ae:20:6a:6b:d8:c0:8b:17:98:15:8a:
d9:ae:d2:e1:53:2b:15:bb:77:35:1a:6b:08:4b:d3:0f:d9:b8:
1b:26:29:5a:23:bf:30:cb:f2:92:34:68:49:db:e0:6c:37:c7:
cd:9c:20:1e:c5:e6:30:32:3b:bf:e0:3f:fe:ee:46:78:5d:68:
fb:1d:cf:ff:fb:68:4f:5d:e6:36:fc:d4:70:08:8a:78:72:1a:
79:52:e8:44:91:af:fe:00:63:6b:19:eb:8f:e7:af:ef:28:81:
88:f7:ae:ec:46:de:9d:42:63:c6:0e:65:f3:f6:e6:b0:e8:fe:
9f:6c:e1:c4:24:fe:df:b4:10:34:ff:87:98:e7:8c:9b:61:0b:
e6:01:e5:96:ea:82:fc:2a:62:6d:7e:fd:88:b2:94:38:60:88:
2a:77:78:2a:da:16:b8:8e:a1:11:45:46:8d:be:34:ac:e6:81:
89:71:36:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVf9UFzGQd4XDeKYjOiI2CJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwM2YzZjc3ODYzMWFhMDRmYzMxNTQ1M2M5MjE3MzQ3ZDE2
MzhlNzQwHhcNMjUwMzA0MDcwMTAzWhcNMjUwMzA1MDcwMTAzWjAzMTEwLwYDVQQD
EyhhZjA0ZWZlYWYyNDAyYWMyZTZiNzg5ZTllY2JkMWRjNTk0Mzc5YzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzwLSPWpQbu9nXAEEt6Q3cTYiCDV
npDGdQkFPsS2DdvvJkvAhb6ED3JvgeF2qd5RlrJSvK828rT71sdLy/JPk5ls/lHL
lpT2XgVO/62bVNvPc6empW9aIGYZNVBOnfT2TzI0ipIF8tOlnI1ITU9fO/GlmkM0
7k464lwCCTm9UbSxvwDmFZXqx2QNWg8LtMbi7x1LMtwREAcnKj90h6WpPaI6+8sB
ALFLdiz0OOmR+1i035MG5gVXcvX7V6fTj+ve0hKWIb+9fgMco29NkM5+jEGX5jfP
h2p1qPNJ4npe0fGooi7MSnHEl9E9NI0vuijvWK+zhXr40FggsXAjbiNy5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8E7+ryQCrC5reJ6ey9HcWUN5yMMB8GA1UdIwQY
MBaAFKA/P3eGMaoE/DFUU8khc0fRY450MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0Q4X2Q0WXhxZ1Q4TVZSVHlTRnpSOUZqam5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xMTI2NWQtODBhOC00NDhkLWJmYzYt
YjBlYmI2YmQwMGM3LzEvb0Q4X2Q0WXhxZ1Q4TVZSVHlTRnpSOUZqam5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xMTI2NWQtODBhOC00NDhkLWJmYzYtYjBlYmI2YmQwMGM3
LzEvb0Q4X2Q0WXhxZ1Q4TVZSVHlTRnpSOUZqam5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvjjSVcB
uZeEPomxgxt6WwiH9M9Xw/r5fw6ZioOKVk8iwy8L7tt17a+BIGiP8uxQvJ7W5wL7
QaGjo+iN3J0/AdZP9d3S5BUXg54rNb+LNq4gamvYwIsXmBWK2a7S4VMrFbt3NRpr
CEvTD9m4GyYpWiO/MMvykjRoSdvgbDfHzZwgHsXmMDI7v+A//u5GeF1o+x3P//to
T13mNvzUcAiKeHIaeVLoRJGv/gBjaxnrj+ev7yiBiPeu7EbenUJjxg5l8/bmsOj+
n2zhxCT+37QQNP+HmOeMm2EL5gHlluqC/CpibX79iLKUOGCIKnd4KtoWuI6hEUVG
jb40rOaBiXE22g==
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:30:29 2025 by rpki-client