Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/i9lSvUDOCXP5EEEfWS426QE2wuo.mft
File: i9lSvUDOCXP5EEEfWS426QE2wuo.mft (raw, json)
Hash identifier: f7rIxhP6RE6hdPVv2mqdR0qpOdP9vWCiUedL4LXUlQ8=
Subject key identifier: 7D:1E:BD:4B:D2:AB:38:AC:53:C4:E0:A2:EA:13:8E:A1:43:70:C5:FB
Authority key identifier: 8B:D9:52:BD:40:CE:09:73:F9:10:41:1F:59:2E:36:E9:01:36:C2:EA
Certificate issuer: /CN=8bd952bd40ce0973f910411f592e36e90136c2ea
Certificate serial: 0194BD17DE362C90EAA1285BEA78417773E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9lSvUDOCXP5EEEfWS426QE2wuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/i9lSvUDOCXP5EEEfWS426QE2wuo.mft
Manifest number: 05AA
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: i9lSvUDOCXP5EEEfWS426QE2wuo.crl (hash: dn71ecHKbIfQacSVB9nPprUffjdzl3ctBs5qbe+GhfY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:de:36:2c:90:ea:a1:28:5b:ea:78:41:77:73:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd952bd40ce0973f910411f592e36e90136c2ea
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=7d1ebd4bd2ab38ac53c4e0a2ea138ea14370c5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:f9:c6:16:c1:d6:70:b3:91:1a:7c:6c:bf:
f4:7b:49:01:a3:ae:8b:8f:6a:51:b6:dc:43:63:8d:
7c:7a:2e:f1:56:d4:3c:c8:3b:12:91:52:f6:ab:c6:
16:71:4c:7f:07:e8:34:ba:95:b8:9d:7c:9c:28:c2:
e1:04:cd:2a:57:f3:72:71:dc:8f:2a:63:65:c8:23:
eb:99:25:fe:ab:16:ba:56:7e:ac:13:c0:cf:42:d0:
93:7e:2c:f3:c6:de:16:c2:12:a9:09:f3:61:e3:0f:
ee:1f:19:8c:a1:56:8f:6f:a9:a4:f0:6d:57:28:57:
64:4a:37:ff:37:9d:e0:60:60:02:51:0a:b6:5e:41:
68:ae:c4:00:d8:87:9d:6c:8b:a8:f4:3b:b9:73:64:
d4:b2:18:b0:d5:9e:63:5d:f8:87:d9:c6:74:74:ac:
2b:d8:44:a5:f0:db:e1:59:52:de:ab:95:b4:43:52:
3e:fd:30:10:ca:7f:95:98:c8:46:47:40:d7:04:4c:
34:5b:c4:e0:b5:80:30:d2:4c:04:0b:26:70:dc:f1:
a7:b6:ef:80:df:10:14:ec:8a:10:76:62:b0:d7:2c:
ba:86:c7:91:54:07:01:49:88:9a:b8:31:b4:66:3c:
93:a9:3c:aa:cc:08:fc:6f:ce:40:2a:99:dc:ff:de:
89:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1E:BD:4B:D2:AB:38:AC:53:C4:E0:A2:EA:13:8E:A1:43:70:C5:FB
X509v3 Authority Key Identifier:
keyid:8B:D9:52:BD:40:CE:09:73:F9:10:41:1F:59:2E:36:E9:01:36:C2:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9lSvUDOCXP5EEEfWS426QE2wuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/i9lSvUDOCXP5EEEfWS426QE2wuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/i9lSvUDOCXP5EEEfWS426QE2wuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0f:49:7b:5f:0c:91:d9:c5:88:2e:9e:ab:ca:45:5e:41:4c:
b6:28:b8:bf:75:3e:a3:8c:49:a7:eb:a6:cd:e3:9f:39:36:10:
04:a4:08:8e:bd:a0:7e:e0:fd:63:54:fb:f0:88:e9:98:ac:c1:
86:ab:64:8f:77:7c:88:7b:a3:f3:7b:fd:5d:28:10:7a:45:8c:
0b:3c:27:2b:18:ec:02:56:46:0e:a3:2e:8f:c6:dc:7a:e3:da:
39:25:08:56:3e:4a:81:90:0c:09:68:d2:07:7e:cd:65:db:93:
37:42:a0:45:eb:79:59:ca:53:4d:81:98:0e:a5:82:c0:48:89:
d4:fb:de:54:7f:0b:5e:bc:ff:e1:2f:5e:7e:23:fc:1d:88:5d:
95:ad:aa:f9:13:fd:d8:49:6d:aa:73:bb:04:73:c1:8a:26:bb:
d8:4b:e0:b4:eb:c0:6a:fc:8f:65:65:ca:d5:6b:7a:d8:71:b3:
e4:07:b2:20:a0:f9:88:36:c6:59:92:88:ee:eb:a6:39:68:11:
fb:e1:43:67:3e:1e:24:b1:dd:f8:98:af:eb:33:94:bf:7f:15:
c4:9b:8d:33:73:13:43:ab:03:92:41:68:db:c7:70:fc:b2:93:
1c:74:2b:37:da:ff:4a:e9:a2:86:b9:88:27:7d:63:1a:70:ac:
35:9f:bd:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F942LJDqoShb6nhBd3PhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZDk1MmJkNDBjZTA5NzNmOTEwNDExZjU5MmUzNmU5MDEz
NmMyZWEwHhcNMjUwMTMxMTYwMDQ1WhcNMjUwMjAxMTYwMDQ1WjAzMTEwLwYDVQQD
Eyg3ZDFlYmQ0YmQyYWIzOGFjNTNjNGUwYTJlYTEzOGVhMTQzNzBjNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumL5xhbB1nCzkRp8bL/0e0kBo66L
j2pRttxDY418ei7xVtQ8yDsSkVL2q8YWcUx/B+g0upW4nXycKMLhBM0qV/NycdyP
KmNlyCPrmSX+qxa6Vn6sE8DPQtCTfizzxt4WwhKpCfNh4w/uHxmMoVaPb6mk8G1X
KFdkSjf/N53gYGACUQq2XkForsQA2IedbIuo9Du5c2TUshiw1Z5jXfiH2cZ0dKwr
2ESl8NvhWVLeq5W0Q1I+/TAQyn+VmMhGR0DXBEw0W8TgtYAw0kwECyZw3PGntu+A
3xAU7IoQdmKw1yy6hseRVAcBSYiauDG0ZjyTqTyqzAj8b85AKpnc/96JEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0evUvSqzisU8TgouoTjqFDcMX7MB8GA1UdIwQY
MBaAFIvZUr1Azglz+RBBH1kuNukBNsLqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTlsU3ZVRE9DWFA1RUVFZldTNDI2UUUyd3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8zZWRiOGMtMTg1MC00ODhmLWFmZGYt
NWMyYWJlNTM5NGU2LzEvaTlsU3ZVRE9DWFA1RUVFZldTNDI2UUUyd3VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8zZWRiOGMtMTg1MC00ODhmLWFmZGYtNWMyYWJlNTM5NGU2
LzEvaTlsU3ZVRE9DWFA1RUVFZldTNDI2UUUyd3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQ9Je18M
kdnFiC6eq8pFXkFMtii4v3U+o4xJp+umzeOfOTYQBKQIjr2gfuD9Y1T78IjpmKzB
hqtkj3d8iHuj83v9XSgQekWMCzwnKxjsAlZGDqMuj8bceuPaOSUIVj5KgZAMCWjS
B37NZduTN0KgRet5WcpTTYGYDqWCwEiJ1PveVH8LXrz/4S9efiP8HYhdla2q+RP9
2EltqnO7BHPBiia72EvgtOvAavyPZWXK1Wt62HGz5AeyIKD5iDbGWZKI7uumOWgR
++FDZz4eJLHd+Jiv6zOUv38VxJuNM3MTQ6sDkkFo28dw/LKTHHQrN9r/SumihrmI
J31jGnCsNZ+9EA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:42 2025 by rpki-client