Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
File: X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft (raw, json)
Hash identifier: 1+huNbSxYK4m9YUXzyrhnMj93C88WDoBwGnw7L+DBt4=
Subject key identifier: 0D:3C:DC:AD:44:3D:45:B1:82:D1:26:FD:27:C3:A7:F9:E6:07:9D:A0
Authority key identifier: 5F:B7:46:6D:8E:92:B2:1C:7B:1A:A1:35:F3:0E:FE:6E:73:E1:F8:6C
Certificate issuer: /CN=5fb7466d8e92b21c7b1aa135f30efe6e73e1f86c
Certificate serial: 0194BCE0CD4720ED28F515B4A8DD3C49FFFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7dGbY6Sshx7GqE18w7-bnPh-Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
Manifest number: 0A45
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: X7dGbY6Sshx7GqE18w7-bnPh-Gw.crl (hash: VZ29qQdn6cVeGg1KWwrdobsIerDX9jTkURJHJd3LT6A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cd:47:20:ed:28:f5:15:b4:a8:dd:3c:49:ff:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb7466d8e92b21c7b1aa135f30efe6e73e1f86c
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=0d3cdcad443d45b182d126fd27c3a7f9e6079da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:15:86:38:e5:c1:a2:82:e8:f0:5f:8c:30:36:
db:bb:a6:50:40:52:69:38:6a:64:76:ae:1b:a1:13:
75:2a:e0:f9:d7:51:ef:e3:ae:06:c7:bd:1c:48:88:
29:c7:30:1b:99:51:ac:b5:7e:fd:30:1d:c1:2d:13:
c6:31:06:9a:e5:7c:8e:0c:fc:61:9c:2a:07:31:a2:
71:ab:45:3f:10:71:d8:1c:af:ca:af:61:f9:96:03:
24:72:e8:b3:6f:11:54:3b:99:7a:6d:e5:f0:ec:aa:
89:9b:40:33:ab:84:ee:9b:65:3c:b5:db:02:fc:0c:
4a:7b:fe:a2:77:81:9b:c8:47:c9:52:6e:12:85:c6:
41:8f:18:20:61:99:0f:ca:c9:d3:f3:12:0b:c8:ee:
ee:8c:bd:b2:5c:cd:7c:53:75:3f:a3:fe:a2:76:d2:
c1:ac:9e:cf:79:90:6d:7d:40:26:49:84:f8:b9:89:
95:32:db:02:4d:07:27:86:00:72:b3:15:de:0c:c8:
ca:a4:29:3b:72:47:9c:56:0f:27:db:98:f7:71:c3:
a4:57:c5:4f:20:4c:f4:76:68:41:52:0b:3b:ef:24:
84:68:52:60:12:d3:09:52:83:25:31:19:86:ff:10:
68:d4:f5:cf:9f:ef:c8:2a:85:8d:e0:a4:89:6c:c0:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3C:DC:AD:44:3D:45:B1:82:D1:26:FD:27:C3:A7:F9:E6:07:9D:A0
X509v3 Authority Key Identifier:
keyid:5F:B7:46:6D:8E:92:B2:1C:7B:1A:A1:35:F3:0E:FE:6E:73:E1:F8:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7dGbY6Sshx7GqE18w7-bnPh-Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:83:cc:ea:66:6f:a4:b4:a5:bc:43:7a:35:be:4e:a5:74:58:
d5:8d:f7:ba:b6:30:86:eb:1e:f4:f5:83:a2:19:91:c3:63:39:
43:a6:ec:04:c8:2d:50:66:21:d7:59:a1:a2:bb:ef:44:25:0e:
f3:9d:19:82:72:d0:5d:da:60:c9:d8:f3:88:f1:06:d1:f7:fe:
e5:4c:e4:f0:4a:fd:95:a2:1f:fb:40:64:c7:32:12:0f:49:18:
e0:3a:7b:8e:44:b8:5a:1a:86:8c:7e:a6:83:66:f0:8f:a0:d6:
7a:57:a6:70:e2:d5:34:d5:6f:c2:84:b0:eb:e6:a3:c2:48:24:
5c:b6:06:90:b5:df:5d:52:86:d1:5b:63:1d:5c:38:d9:9a:c3:
33:e4:d8:cf:13:6a:0f:92:4b:5f:e6:31:3a:5d:fc:02:4e:21:
2f:57:d9:c4:a5:41:1f:67:9d:00:71:54:0b:61:7e:aa:4a:37:
24:60:53:55:3d:34:9c:2a:51:dd:bc:b4:dd:60:08:d1:5f:53:
28:fa:5f:60:1e:0e:97:f0:8c:d6:9c:dd:7e:8b:4f:9a:30:64:
10:09:43:13:29:03:d0:d2:72:c7:cc:e0:5b:4f:ba:25:8c:de:
80:c5:7a:a3:35:b9:96:a6:ab:a8:64:be:84:56:51:02:45:8e:
36:4c:95:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84M1HIO0o9RW0qN08Sf/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYjc0NjZkOGU5MmIyMWM3YjFhYTEzNWYzMGVmZTZlNzNl
MWY4NmMwHhcNMjUwMTMxMTUwMDM2WhcNMjUwMjAxMTUwMDM2WjAzMTEwLwYDVQQD
EygwZDNjZGNhZDQ0M2Q0NWIxODJkMTI2ZmQyN2MzYTdmOWU2MDc5ZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RWGOOXBooLo8F+MMDbbu6ZQQFJp
OGpkdq4boRN1KuD511Hv464Gx70cSIgpxzAbmVGstX79MB3BLRPGMQaa5XyODPxh
nCoHMaJxq0U/EHHYHK/Kr2H5lgMkcuizbxFUO5l6beXw7KqJm0Azq4Tum2U8tdsC
/AxKe/6id4GbyEfJUm4ShcZBjxggYZkPysnT8xILyO7ujL2yXM18U3U/o/6idtLB
rJ7PeZBtfUAmSYT4uYmVMtsCTQcnhgBysxXeDMjKpCk7ckecVg8n25j3ccOkV8VP
IEz0dmhBUgs77ySEaFJgEtMJUoMlMRmG/xBo1PXPn+/IKoWN4KSJbMCuywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA083K1EPUWxgtEm/SfDp/nmB52gMB8GA1UdIwQY
MBaAFF+3Rm2OkrIcexqhNfMO/m5z4fhsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDdkR2JZNlNzaHg3R3FFMTh3Ny1iblBoLUd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZWQyODktZDY2MS00MzQzLWEyZTAt
MGI5MjY3OWQzNjI1LzEvWDdkR2JZNlNzaHg3R3FFMTh3Ny1iblBoLUd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83ZWQyODktZDY2MS00MzQzLWEyZTAtMGI5MjY3OWQzNjI1
LzEvWDdkR2JZNlNzaHg3R3FFMTh3Ny1iblBoLUd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0YPM6mZv
pLSlvEN6Nb5OpXRY1Y33urYwhuse9PWDohmRw2M5Q6bsBMgtUGYh11mhorvvRCUO
850ZgnLQXdpgydjziPEG0ff+5Uzk8Er9laIf+0BkxzISD0kY4Dp7jkS4WhqGjH6m
g2bwj6DWelemcOLVNNVvwoSw6+ajwkgkXLYGkLXfXVKG0VtjHVw42ZrDM+TYzxNq
D5JLX+YxOl38Ak4hL1fZxKVBH2edAHFUC2F+qko3JGBTVT00nCpR3by03WAI0V9T
KPpfYB4Ol/CM1pzdfotPmjBkEAlDEykD0NJyx8zgW0+6JYzegMV6ozW5lqarqGS+
hFZRAkWONkyVLQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:32 2025 by rpki-client