Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fa27b6-8172-4cf2-b65f-91a43f4da295/1/C4DBxQyWMRNC1dnGEkwhzLcRkqo.mft
File: C4DBxQyWMRNC1dnGEkwhzLcRkqo.mft (raw, json)
Hash identifier: 2TPjHn9Se+AQM0N9LtqOUsLAIlb2vHCzrovdL6r6bcA=
Subject key identifier: 74:C2:A9:D6:D6:80:3D:96:98:F7:60:4A:9E:56:C3:2F:86:F6:F7:2F
Authority key identifier: 0B:80:C1:C5:0C:96:31:13:42:D5:D9:C6:12:4C:21:CC:B7:11:92:AA
Certificate issuer: /CN=0b80c1c50c96311342d5d9c6124c21ccb71192aa
Certificate serial: 0194BBCDFFDB802C876677B4D4F1FF62A34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DBxQyWMRNC1dnGEkwhzLcRkqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fa27b6-8172-4cf2-b65f-91a43f4da295/1/C4DBxQyWMRNC1dnGEkwhzLcRkqo.mft
Manifest number: 0DC9
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: C4DBxQyWMRNC1dnGEkwhzLcRkqo.crl (hash: miOmizZ68l7iqqet6jEQoefrfb8k1yZdNGmu2WiDb70=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ff:db:80:2c:87:66:77:b4:d4:f1:ff:62:a3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b80c1c50c96311342d5d9c6124c21ccb71192aa
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=74c2a9d6d6803d9698f7604a9e56c32f86f6f72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:e5:70:3d:d7:a3:ec:82:48:be:a3:74:b5:
09:0a:22:bc:24:39:c4:ee:51:8f:8d:b4:78:c5:fb:
50:49:84:aa:7a:2d:8b:0d:5b:5f:68:56:ba:31:f8:
8b:dd:f5:70:5e:2b:3b:af:dd:95:86:cf:b6:8b:84:
a6:87:27:44:37:35:7c:f2:55:c6:aa:7f:cc:ad:a9:
11:8d:94:9d:82:f2:14:c5:0b:67:96:71:a2:ea:d8:
15:d5:02:d3:03:1b:0b:1d:83:7c:9c:09:d3:d9:ce:
b8:35:62:14:36:dc:9b:a5:b5:4e:1c:f3:32:8f:a9:
49:b2:55:f9:d6:3d:30:f6:85:4b:95:eb:cb:e8:34:
91:cf:e6:56:8b:17:08:f2:a6:b1:56:6c:75:46:92:
c0:9b:a0:f8:24:60:83:1d:dc:48:8d:72:a2:7a:d0:
1e:aa:3c:8f:a1:02:dc:c5:76:a3:c2:a3:4b:d9:a4:
58:64:0a:42:66:a5:84:c9:fb:10:fd:86:60:9c:02:
6a:aa:26:49:ab:e2:41:ba:13:1b:89:4a:82:ec:b3:
72:0c:7e:29:70:11:12:b1:0b:7c:dc:66:18:93:9c:
db:ec:07:b7:7d:1b:98:de:20:99:d5:e0:1e:27:b3:
a0:b7:46:35:ab:53:b9:0c:0f:4d:2c:b7:43:fa:ab:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C2:A9:D6:D6:80:3D:96:98:F7:60:4A:9E:56:C3:2F:86:F6:F7:2F
X509v3 Authority Key Identifier:
keyid:0B:80:C1:C5:0C:96:31:13:42:D5:D9:C6:12:4C:21:CC:B7:11:92:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DBxQyWMRNC1dnGEkwhzLcRkqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fa27b6-8172-4cf2-b65f-91a43f4da295/1/C4DBxQyWMRNC1dnGEkwhzLcRkqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fa27b6-8172-4cf2-b65f-91a43f4da295/1/C4DBxQyWMRNC1dnGEkwhzLcRkqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bb:40:de:5f:62:30:46:83:46:ba:89:c1:62:25:e4:38:83:
45:2d:30:38:3f:f9:9f:97:4e:66:fc:64:57:d1:a0:04:b4:52:
05:ac:fb:26:fa:e1:f0:0a:bd:a5:e3:96:e4:4d:ac:5c:2d:a4:
ef:9d:58:85:6a:34:9e:65:06:fb:15:e1:cd:a3:86:21:31:41:
47:92:d8:73:d8:ce:e8:c5:1d:23:d7:b8:30:ea:cc:6b:38:85:
88:97:83:54:a5:2b:72:ff:36:38:87:e2:e1:87:ae:9b:71:d2:
0b:5c:c1:a1:5d:15:35:fe:52:07:1b:a1:de:4c:31:02:5d:07:
bb:1b:26:72:c3:cc:e6:2a:36:68:55:ea:9d:30:63:ab:6c:11:
e6:91:62:ce:0c:e1:ef:f0:76:15:f4:1b:15:9d:a1:3e:f0:dc:
81:e7:da:2c:70:bb:80:7a:ef:ca:e1:1c:63:05:a6:4d:c2:f5:
47:a9:ff:57:d1:27:60:02:99:20:05:3f:92:03:c8:79:94:82:
3d:e2:2a:f6:09:b9:b6:88:41:73:20:13:44:74:2f:18:bf:16:
f7:c2:c1:46:75:3c:37:72:7c:e1:11:22:c3:48:7a:fa:2d:a4:
d3:cc:c3:84:90:6f:26:3a:ac:5b:d0:4a:25:16:93:64:e2:9a:
3a:46:9a:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zf/bgCyHZne01PH/YqNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiODBjMWM1MGM5NjMxMTM0MmQ1ZDljNjEyNGMyMWNjYjcx
MTkyYWEwHhcNMjUwMTMxMTAwMDI3WhcNMjUwMjAxMTAwMDI3WjAzMTEwLwYDVQQD
Eyg3NGMyYTlkNmQ2ODAzZDk2OThmNzYwNGE5ZTU2YzMyZjg2ZjZmNzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5nlcD3Xo+yCSL6jdLUJCiK8JDnE
7lGPjbR4xftQSYSqei2LDVtfaFa6MfiL3fVwXis7r92Vhs+2i4SmhydENzV88lXG
qn/MrakRjZSdgvIUxQtnlnGi6tgV1QLTAxsLHYN8nAnT2c64NWIUNtybpbVOHPMy
j6lJslX51j0w9oVLlevL6DSRz+ZWixcI8qaxVmx1RpLAm6D4JGCDHdxIjXKietAe
qjyPoQLcxXajwqNL2aRYZApCZqWEyfsQ/YZgnAJqqiZJq+JBuhMbiUqC7LNyDH4p
cBESsQt83GYYk5zb7Ae3fRuY3iCZ1eAeJ7Ogt0Y1q1O5DA9NLLdD+quurQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTCqdbWgD2WmPdgSp5Wwy+G9vcvMB8GA1UdIwQY
MBaAFAuAwcUMljETQtXZxhJMIcy3EZKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzREQnhReVdNUk5DMWRuR0Vrd2h6TGNSa3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mYTI3YjYtODE3Mi00Y2YyLWI2NWYt
OTFhNDNmNGRhMjk1LzEvQzREQnhReVdNUk5DMWRuR0Vrd2h6TGNSa3FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9mYTI3YjYtODE3Mi00Y2YyLWI2NWYtOTFhNDNmNGRhMjk1
LzEvQzREQnhReVdNUk5DMWRuR0Vrd2h6TGNSa3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrtA3l9i
MEaDRrqJwWIl5DiDRS0wOD/5n5dOZvxkV9GgBLRSBaz7Jvrh8Aq9peOW5E2sXC2k
751YhWo0nmUG+xXhzaOGITFBR5LYc9jO6MUdI9e4MOrMaziFiJeDVKUrcv82OIfi
4Yeum3HSC1zBoV0VNf5SBxuh3kwxAl0HuxsmcsPM5io2aFXqnTBjq2wR5pFizgzh
7/B2FfQbFZ2hPvDcgefaLHC7gHrvyuEcYwWmTcL1R6n/V9EnYAKZIAU/kgPIeZSC
PeIq9gm5tohBcyATRHQvGL8W98LBRnU8N3J84REiw0h6+i2k08zDhJBvJjqsW9BK
JRaTZOKaOkaaPA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:58:52 2025 by rpki-client