Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
File: 2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft (raw, json)
Hash identifier: 7SrZm15vrKG1E0J8g/QiCTd3GkUA2y1KPJpwC/NjrpE=
Subject key identifier: 34:50:61:D0:49:71:A7:14:F5:7E:DB:A7:91:F2:19:EE:5F:20:3A:BB
Authority key identifier: D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7
Certificate issuer: /CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
Certificate serial: 0194BBCE593B9E6227125947E7CFF483E6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
Manifest number: 0B0B
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: 2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl (hash: 1mZFCb4rJML/l0WzkvJBoUeN4jUg543/dQwvmEnG/40=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:59:3b:9e:62:27:12:59:47:e7:cf:f4:83:e6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=345061d04971a714f57edba791f219ee5f203abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d5:25:40:c7:2a:f0:db:ad:03:d7:0c:9b:55:
dc:1e:f4:7e:db:3b:22:1a:6b:be:32:3f:d0:c2:b5:
8d:ad:41:9a:a4:7e:76:89:dc:3f:a2:4e:70:5b:2b:
fb:85:b4:25:c3:01:1b:45:5e:37:27:ac:a8:14:60:
93:62:02:34:33:74:11:1a:60:ce:92:48:8f:2f:1c:
0d:d9:48:9b:71:77:f4:73:7e:a5:d7:9f:32:fb:e8:
3d:3a:a7:23:07:0e:fc:9e:a3:59:46:4b:e7:19:78:
17:3f:cf:f6:7e:c0:bd:16:ad:d2:fa:28:df:2d:af:
04:fe:d4:84:8f:c2:e6:8f:f6:14:22:ac:71:ae:08:
db:c6:13:ab:3d:c8:31:3a:53:42:dd:f1:18:15:14:
3a:b0:5b:fe:41:46:e5:1a:46:d0:19:c7:12:a4:75:
fc:c3:fc:9c:6f:01:f4:3a:3f:d9:90:5a:7b:8a:1d:
04:1a:14:7e:74:cf:09:92:5c:3f:df:d2:fe:fa:75:
7f:7b:cb:15:03:ab:2c:44:c0:93:9a:1a:54:d0:cf:
c8:17:f3:54:89:c2:fe:07:68:cd:84:31:47:bf:f3:
55:fa:c4:1f:7e:6e:97:31:b8:21:d0:c4:ed:9d:90:
6a:8c:cb:d6:63:68:ce:fe:07:1c:9c:8b:ad:c9:98:
df:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:50:61:D0:49:71:A7:14:F5:7E:DB:A7:91:F2:19:EE:5F:20:3A:BB
X509v3 Authority Key Identifier:
keyid:D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:41:8d:87:e1:08:e7:3d:29:85:60:9b:b3:bb:a1:11:ea:08:
5c:89:d9:23:5e:26:98:47:1e:f2:60:0c:10:34:e9:3c:59:a4:
ec:e5:cf:62:0c:dd:45:14:78:22:7f:ea:19:3c:84:d5:15:8d:
5e:28:f5:59:9d:d0:33:be:dc:7b:e0:00:df:7f:b3:4f:d7:ad:
aa:a7:72:95:fc:a2:5f:87:4f:02:95:15:dd:43:c0:a9:43:1f:
7b:b4:1b:72:31:96:c1:e9:77:ed:cf:ea:d4:f0:98:cf:d0:f7:
81:30:6f:15:68:2b:fe:83:2b:ff:6b:19:b1:06:a1:66:0a:41:
1d:8e:5d:06:ee:55:db:9c:ed:71:60:34:12:cd:37:62:33:b6:
9e:cc:fc:44:f0:46:41:80:39:56:6b:3b:33:40:31:39:a6:2c:
c3:55:44:63:3b:bb:99:87:64:76:6c:ce:2c:d3:b1:8f:49:21:
96:c2:af:21:e5:d4:6f:d9:b3:97:60:48:11:a5:bf:17:7b:67:
e9:39:21:ff:f9:81:d3:04:e5:cb:c4:75:d9:c5:33:ee:01:96:
15:f5:bc:32:c9:d5:18:ee:fc:dc:cb:c0:c3:60:8e:8b:c2:06:
05:4a:24:bf:9d:e5:6c:43:08:28:ed:b9:c5:e0:6f:9c:37:4c:
60:5c:a3:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlk7nmInEllH58/0g+btMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OTM2NjM1ZDEyZDZjZTIzMmUxMTI5YzhmMThjZWRiODM2
ZWNkZDcwHhcNMjUwMTMxMTAwMDUwWhcNMjUwMjAxMTAwMDUwWjAzMTEwLwYDVQQD
EygzNDUwNjFkMDQ5NzFhNzE0ZjU3ZWRiYTc5MWYyMTllZTVmMjAzYWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdUlQMcq8NutA9cMm1XcHvR+2zsi
Gmu+Mj/QwrWNrUGapH52idw/ok5wWyv7hbQlwwEbRV43J6yoFGCTYgI0M3QRGmDO
kkiPLxwN2UibcXf0c36l158y++g9OqcjBw78nqNZRkvnGXgXP8/2fsC9Fq3S+ijf
La8E/tSEj8Lmj/YUIqxxrgjbxhOrPcgxOlNC3fEYFRQ6sFv+QUblGkbQGccSpHX8
w/ycbwH0Oj/ZkFp7ih0EGhR+dM8Jklw/39L++nV/e8sVA6ssRMCTmhpU0M/IF/NU
icL+B2jNhDFHv/NV+sQffm6XMbgh0MTtnZBqjMvWY2jO/gccnIutyZjfDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRQYdBJcacU9X7bp5HyGe5fIDq7MB8GA1UdIwQY
MBaAFNmTZjXRLWziMuESnI8YztuDbs3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlpObU5kRXRiT0l5NFJLY2p4ak8yNE51emRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81MGI1ZWItNmRkMS00MDc4LWE1NWYt
NDg4ZWMyM2RjODA0LzEvMlpObU5kRXRiT0l5NFJLY2p4ak8yNE51emRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81MGI1ZWItNmRkMS00MDc4LWE1NWYtNDg4ZWMyM2RjODA0
LzEvMlpObU5kRXRiT0l5NFJLY2p4ak8yNE51emRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREGNh+EI
5z0phWCbs7uhEeoIXInZI14mmEce8mAMEDTpPFmk7OXPYgzdRRR4In/qGTyE1RWN
Xij1WZ3QM77ce+AA33+zT9etqqdylfyiX4dPApUV3UPAqUMfe7QbcjGWwel37c/q
1PCYz9D3gTBvFWgr/oMr/2sZsQahZgpBHY5dBu5V25ztcWA0Es03YjO2nsz8RPBG
QYA5Vms7M0AxOaYsw1VEYzu7mYdkdmzOLNOxj0khlsKvIeXUb9mzl2BIEaW/F3tn
6Tkh//mB0wTly8R12cUz7gGWFfW8MsnVGO783MvAw2COi8IGBUokv53lbEMIKO25
xeBvnDdMYFyj+g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:43:20 2025 by rpki-client