Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft
File: DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft (raw, json)
Hash identifier: G8ed7MXOH+MftFCmZVuFQqpHF0MMkWvvavsFiqJT1G8=
Subject key identifier: 38:CC:C9:5B:2B:7A:C0:C4:77:15:B8:4C:F8:07:63:1F:C8:53:1E:4C
Authority key identifier: 0D:9D:B2:F3:C0:AD:EA:B3:76:7C:0B:31:72:18:45:AB:3D:44:5D:1C
Certificate issuer: /CN=0d9db2f3c0adeab3767c0b31721845ab3d445d1c
Certificate serial: 019546DA3F6A7C4FC3C453E9C81B4459D0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZ2y88Ct6rN2fAsxchhFqz1EXRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft
Manifest number: 041B
Signing time: Thu 27 Feb 2025 10:01:02 +0000
Manifest this update: Thu 27 Feb 2025 10:01:02 +0000
Manifest next update: Fri 28 Feb 2025 10:01:02 +0000
Files and hashes: 1: DZ2y88Ct6rN2fAsxchhFqz1EXRw.crl (hash: qLIRXsXb8FAbey6NjRl1rlh2BR4HvKXFi5/tBYdofvE=)
2: iQmuyfyS-VZmfPFKC0Z9AaIC4kY.roa (hash: 7DCQpBOfhSoaH0TuGwai+ahzTdDtSNMxfs2ftu0Ew9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:da:3f:6a:7c:4f:c3:c4:53:e9:c8:1b:44:59:d0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9db2f3c0adeab3767c0b31721845ab3d445d1c
Validity
Not Before: Feb 27 10:01:02 2025 GMT
Not After : Feb 28 10:01:02 2025 GMT
Subject: CN=38ccc95b2b7ac0c47715b84cf807631fc8531e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:19:74:01:09:0d:c1:67:09:80:8d:f5:bb:
30:9b:36:73:11:84:1d:df:ef:00:45:5f:92:96:54:
05:84:a6:a3:4f:25:66:44:4c:3b:80:af:8a:87:75:
fa:ce:d2:51:35:15:92:89:e7:67:9a:e1:7a:12:b0:
d3:60:9f:94:27:0b:a3:ed:82:7a:49:a3:ee:8d:5e:
21:6a:6b:f2:7c:f9:32:83:14:09:93:70:2a:79:f9:
c4:ea:0e:3c:64:c7:52:40:d6:ce:cc:bb:12:92:96:
39:77:9b:cc:16:2e:67:8f:0c:f9:f0:5d:da:81:a5:
db:b8:10:61:37:22:38:96:fd:7b:55:42:ba:ea:e7:
aa:1e:1a:8e:ca:fd:97:27:d1:06:62:b2:66:43:ab:
c4:e1:fd:77:13:79:b1:54:a3:6e:ae:21:a8:34:9f:
c7:40:a8:a1:74:38:80:0c:cf:fc:7c:54:3d:db:4b:
6b:87:f9:b2:d3:7a:4b:7c:a6:55:cd:a5:63:34:71:
ac:11:90:8b:43:53:2d:47:70:41:23:28:4e:d9:13:
9a:74:e8:86:7b:fa:c7:69:9c:37:15:6a:12:a2:8a:
d2:aa:ad:3d:b5:51:80:9c:38:aa:2d:78:f8:42:d8:
59:12:aa:6b:cb:51:cb:71:c0:1a:7c:22:ee:7c:79:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CC:C9:5B:2B:7A:C0:C4:77:15:B8:4C:F8:07:63:1F:C8:53:1E:4C
X509v3 Authority Key Identifier:
keyid:0D:9D:B2:F3:C0:AD:EA:B3:76:7C:0B:31:72:18:45:AB:3D:44:5D:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZ2y88Ct6rN2fAsxchhFqz1EXRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:83:1c:56:bf:bf:dc:60:e3:9f:cb:b6:5b:eb:68:78:d5:61:
3d:30:d4:a0:9f:41:36:12:e5:e4:c5:5b:3b:34:af:ff:24:92:
85:92:92:aa:ff:9a:90:7a:b5:0d:7c:3d:e7:9d:63:ce:11:e0:
e7:2b:2a:3a:ff:0f:bc:d7:33:74:99:de:ae:9c:f5:9d:bf:91:
c8:22:3b:fe:46:e0:6e:57:81:04:94:44:a7:35:e6:5c:13:06:
66:cb:cc:d6:19:d9:17:3d:d0:ae:a5:c5:a6:9b:8f:18:c2:e5:
c7:31:3f:7f:cd:e7:e8:10:ef:bd:08:47:58:2b:ed:6e:40:1c:
0b:78:46:08:51:f5:07:11:63:86:63:d9:71:30:26:47:6c:a9:
11:24:ba:d5:63:76:47:e1:b9:c9:d9:30:e0:98:f6:ae:39:db:
6c:85:01:91:bc:74:04:86:48:0f:f0:4c:08:04:a1:8d:69:5e:
80:f8:8b:2b:d5:bb:ad:99:fa:ff:0c:a2:43:97:f0:55:b8:e0:
e3:49:9e:a7:ae:b0:d0:83:71:e9:7b:70:c8:a8:fd:7b:d6:6b:
55:7f:76:db:b3:64:94:40:e4:b0:2e:db:f7:38:8b:14:d2:b8:
8e:85:a3:85:af:de:ff:29:f6:81:81:be:ce:43:a8:71:f1:5a:
97:bb:7e:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVG2j9qfE/DxFPpyBtEWdDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOWRiMmYzYzBhZGVhYjM3NjdjMGIzMTcyMTg0NWFiM2Q0
NDVkMWMwHhcNMjUwMjI3MTAwMTAyWhcNMjUwMjI4MTAwMTAyWjAzMTEwLwYDVQQD
EygzOGNjYzk1YjJiN2FjMGM0NzcxNWI4NGNmODA3NjMxZmM4NTMxZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutQZdAEJDcFnCYCN9bswmzZzEYQd
3+8ARV+SllQFhKajTyVmREw7gK+Kh3X6ztJRNRWSiednmuF6ErDTYJ+UJwuj7YJ6
SaPujV4hamvyfPkygxQJk3AqefnE6g48ZMdSQNbOzLsSkpY5d5vMFi5njwz58F3a
gaXbuBBhNyI4lv17VUK66ueqHhqOyv2XJ9EGYrJmQ6vE4f13E3mxVKNuriGoNJ/H
QKihdDiADM/8fFQ920trh/my03pLfKZVzaVjNHGsEZCLQ1MtR3BBIyhO2ROadOiG
e/rHaZw3FWoSoorSqq09tVGAnDiqLXj4QthZEqpry1HLccAafCLufHlNcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjMyVsresDEdxW4TPgHYx/IUx5MMB8GA1UdIwQY
MBaAFA2dsvPAreqzdnwLMXIYRas9RF0cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFoyeTg4Q3Q2ck4yZkFzeGNoaEZxejFFWFJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83Yzk0NTctNzgyYi00MTE1LTg4YjEt
MGQ1YWM4M2M1ZTYwLzEvRFoyeTg4Q3Q2ck4yZkFzeGNoaEZxejFFWFJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83Yzk0NTctNzgyYi00MTE1LTg4YjEtMGQ1YWM4M2M1ZTYw
LzEvRFoyeTg4Q3Q2ck4yZkFzeGNoaEZxejFFWFJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4McVr+/
3GDjn8u2W+toeNVhPTDUoJ9BNhLl5MVbOzSv/ySShZKSqv+akHq1DXw9551jzhHg
5ysqOv8PvNczdJnerpz1nb+RyCI7/kbgbleBBJREpzXmXBMGZsvM1hnZFz3QrqXF
ppuPGMLlxzE/f83n6BDvvQhHWCvtbkAcC3hGCFH1BxFjhmPZcTAmR2ypESS61WN2
R+G5ydkw4Jj2rjnbbIUBkbx0BIZID/BMCAShjWlegPiLK9W7rZn6/wyiQ5fwVbjg
40mep66w0INx6XtwyKj9e9ZrVX9227NklEDksC7b9ziLFNK4joWjha/e/yn2gYG+
zkOocfFal7t+3Q==
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:47:22 2025 by rpki-client on console.sobornost.net