Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4a4a18-5184-4d36-907b-56cf387806f9/1/jm4ZvC60qI1Upb33OyM5GQ4x2gs.mft
File: jm4ZvC60qI1Upb33OyM5GQ4x2gs.mft (raw, json)
Hash identifier: CaFDd2SEH8htanpareDnYF375mpKI6pcXHcKtPIGzAM=
Subject key identifier: 42:B4:5D:33:37:3C:A8:8D:22:94:9A:33:1B:FF:DE:AA:76:A4:3E:92
Authority key identifier: 8E:6E:19:BC:2E:B4:A8:8D:54:A5:BD:F7:3B:23:39:19:0E:31:DA:0B
Certificate issuer: /CN=8e6e19bc2eb4a88d54a5bdf73b2339190e31da0b
Certificate serial: 0195E159AF94B762D7CA719ADC6445E0E332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jm4ZvC60qI1Upb33OyM5GQ4x2gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/4a4a18-5184-4d36-907b-56cf387806f9/1/jm4ZvC60qI1Upb33OyM5GQ4x2gs.mft
Manifest number: 0855
Signing time: Sat 29 Mar 2025 10:01:45 +0000
Manifest this update: Sat 29 Mar 2025 10:01:45 +0000
Manifest next update: Sun 30 Mar 2025 10:01:45 +0000
Files and hashes: 1: jm4ZvC60qI1Upb33OyM5GQ4x2gs.crl (hash: Qdtib1yqXhperW2dT76hhwX3XGbV2B8nNLalC2NUhRo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:af:94:b7:62:d7:ca:71:9a:dc:64:45:e0:e3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6e19bc2eb4a88d54a5bdf73b2339190e31da0b
Validity
Not Before: Mar 29 10:01:45 2025 GMT
Not After : Mar 30 10:01:45 2025 GMT
Subject: CN=42b45d33373ca88d22949a331bffdeaa76a43e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:1e:31:b2:de:3c:11:2e:19:e1:ff:70:de:
91:9a:77:82:f2:cc:31:96:ed:61:ee:67:ee:4f:07:
9d:72:6e:d1:48:f4:13:31:2f:6c:cf:ce:39:67:40:
5e:f1:ac:2d:6d:9e:db:9b:17:48:bf:73:88:4b:21:
e3:73:61:fc:af:6c:4d:6c:80:cf:d4:d4:08:9a:18:
d8:72:64:8b:a1:a3:ab:14:8e:7f:17:7b:91:bd:e1:
01:95:fd:b4:bd:52:00:b6:55:bb:13:81:7f:b3:0e:
2a:ab:0e:d6:55:8b:fe:a3:c4:49:b2:ba:40:7c:42:
a5:07:6f:e0:f7:85:11:dc:8c:0d:a2:19:a3:ae:b0:
c3:f4:94:e5:f7:46:64:18:88:e2:18:39:79:9f:f8:
9e:6a:aa:63:66:18:10:37:50:9d:11:82:a4:e8:4d:
46:63:77:74:dd:ea:6f:bc:01:1c:d7:8e:ae:fd:06:
4b:eb:ed:75:28:a7:40:91:c8:f5:02:50:1b:6f:d6:
37:3d:43:4a:d6:e9:89:50:64:8c:d6:23:af:ad:4d:
e9:5d:89:00:23:3b:12:48:2f:e3:a2:1f:2a:fb:19:
4e:36:98:d9:0c:65:b5:ff:e4:0d:09:f6:b1:6e:1a:
99:91:ab:42:3c:08:da:8c:f7:7d:63:b6:0b:16:c3:
6e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B4:5D:33:37:3C:A8:8D:22:94:9A:33:1B:FF:DE:AA:76:A4:3E:92
X509v3 Authority Key Identifier:
keyid:8E:6E:19:BC:2E:B4:A8:8D:54:A5:BD:F7:3B:23:39:19:0E:31:DA:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jm4ZvC60qI1Upb33OyM5GQ4x2gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4a4a18-5184-4d36-907b-56cf387806f9/1/jm4ZvC60qI1Upb33OyM5GQ4x2gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4a4a18-5184-4d36-907b-56cf387806f9/1/jm4ZvC60qI1Upb33OyM5GQ4x2gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:31:a6:9a:62:eb:62:c0:30:59:23:cf:53:44:42:bc:a6:da:
b5:96:29:21:df:8a:37:0a:b7:2d:20:dc:f1:a5:e0:e6:5a:d9:
45:af:c3:e7:ee:65:ed:a6:7a:e8:9b:06:01:8b:62:11:98:ec:
79:95:e3:b6:45:b8:30:4e:ac:44:7c:2c:83:af:27:e3:24:73:
4e:8f:a1:3c:71:f9:80:ac:7f:5d:87:b6:9a:95:51:58:ca:6f:
69:81:e6:ec:35:a9:94:26:83:9d:8b:b2:ff:18:b6:2e:b4:f2:
04:9e:22:a9:82:9c:ed:0b:65:bb:26:37:c5:8e:41:df:f2:58:
9f:c1:ab:d8:b1:93:19:02:95:ac:7b:42:df:44:ce:dc:e1:be:
5c:94:d0:7d:ea:2a:11:d2:8b:9c:fc:80:3f:7d:92:a0:ba:74:
35:71:a9:39:e5:42:5e:3e:57:22:ac:cc:db:c5:dd:70:1c:35:
98:5e:f4:c3:cd:94:19:7e:a1:4f:42:67:43:03:d2:b1:15:68:
12:a1:69:e6:9d:af:6d:24:67:53:94:cb:b2:9d:9e:cf:97:39:
33:d9:2a:da:e1:04:c8:a8:78:47:f7:68:9c:62:ca:07:bb:ff:
a3:f9:d4:03:3e:b2:ce:21:33:27:8a:98:5b:ec:fa:87:35:8e:
a2:bc:82:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWa+Ut2LXynGa3GRF4OMyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNmUxOWJjMmViNGE4OGQ1NGE1YmRmNzNiMjMzOTE5MGUz
MWRhMGIwHhcNMjUwMzI5MTAwMTQ1WhcNMjUwMzMwMTAwMTQ1WjAzMTEwLwYDVQQD
Eyg0MmI0NWQzMzM3M2NhODhkMjI5NDlhMzMxYmZmZGVhYTc2YTQzZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvseMbLePBEuGeH/cN6RmneC8swx
lu1h7mfuTwedcm7RSPQTMS9sz845Z0Be8awtbZ7bmxdIv3OISyHjc2H8r2xNbIDP
1NQImhjYcmSLoaOrFI5/F3uRveEBlf20vVIAtlW7E4F/sw4qqw7WVYv+o8RJsrpA
fEKlB2/g94UR3IwNohmjrrDD9JTl90ZkGIjiGDl5n/ieaqpjZhgQN1CdEYKk6E1G
Y3d03epvvAEc146u/QZL6+11KKdAkcj1AlAbb9Y3PUNK1umJUGSM1iOvrU3pXYkA
IzsSSC/joh8q+xlONpjZDGW1/+QNCfaxbhqZkatCPAjajPd9Y7YLFsNupwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEK0XTM3PKiNIpSaMxv/3qp2pD6SMB8GA1UdIwQY
MBaAFI5uGbwutKiNVKW99zsjORkOMdoLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam00WnZDNjBxSTFVcGIzM095TTVHUTR4MmdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80YTRhMTgtNTE4NC00ZDM2LTkwN2It
NTZjZjM4NzgwNmY5LzEvam00WnZDNjBxSTFVcGIzM095TTVHUTR4MmdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy80YTRhMTgtNTE4NC00ZDM2LTkwN2ItNTZjZjM4NzgwNmY5
LzEvam00WnZDNjBxSTFVcGIzM095TTVHUTR4MmdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDGmmmLr
YsAwWSPPU0RCvKbatZYpId+KNwq3LSDc8aXg5lrZRa/D5+5l7aZ66JsGAYtiEZjs
eZXjtkW4ME6sRHwsg68n4yRzTo+hPHH5gKx/XYe2mpVRWMpvaYHm7DWplCaDnYuy
/xi2LrTyBJ4iqYKc7QtluyY3xY5B3/JYn8Gr2LGTGQKVrHtC30TO3OG+XJTQfeoq
EdKLnPyAP32SoLp0NXGpOeVCXj5XIqzM28XdcBw1mF70w82UGX6hT0JnQwPSsRVo
EqFp5p2vbSRnU5TLsp2ez5c5M9kq2uEEyKh4R/donGLKB7v/o/nUAz6yziEzJ4qY
W+z6hzWOoryCMg==
-----END CERTIFICATE-----
Generated at Mon May 12 11:31:15 2025 by rpki-client