Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
File: cRcdWnbTurk3KszJJz66ffHFnPI.mft (raw, json)
Hash identifier: 49vlZ4iGCVCdX4MCmT73VN/dcKUHetoZVn+1R74bVG0=
Subject key identifier: 46:20:C9:0F:22:65:CE:1F:82:06:3A:5A:3D:FD:E5:E1:E4:BD:BF:DB
Authority key identifier: 71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
Certificate issuer: /CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Certificate serial: 0194BBCDF2AC6DCB65CE8954BAF0BB4B1C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: cRcdWnbTurk3KszJJz66ffHFnPI.crl (hash: q6LnNx4Wab8aHR6RPDsHC3x/a0KwuvSjX5Ab2ogq3wg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f2:ac:6d:cb:65:ce:89:54:ba:f0:bb:4b:1c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=4620c90f2265ce1f82063a5a3dfde5e1e4bdbfdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2b:ab:a9:fc:3c:97:44:f3:1e:0c:e4:6b:a5:
c1:f5:2e:86:f7:a1:5b:ac:69:72:bc:09:e2:34:f2:
83:e2:e7:0a:89:33:65:79:93:20:4a:0d:e6:c1:dc:
d8:14:5d:f2:c0:bf:af:e0:bc:c4:37:c9:97:bf:93:
1e:cc:3f:fe:82:22:84:6e:c6:ef:9c:7d:64:a4:90:
91:b1:6e:ea:81:18:b6:3c:31:46:62:24:b7:64:29:
e1:f7:fc:54:e2:99:83:3e:be:ff:89:a1:58:7f:95:
9e:9e:9e:71:59:2e:0b:ce:08:40:51:8d:e3:e9:48:
8e:30:94:c1:82:9c:e7:53:4d:d8:7d:4d:00:cd:73:
50:32:81:3a:be:6a:26:30:bf:09:87:ae:b5:bb:50:
e7:11:9f:e3:6e:7f:56:1b:d2:da:a3:39:82:0a:53:
21:eb:46:0d:84:49:7b:ae:26:cb:99:f7:a4:49:86:
4d:d2:43:f8:b8:70:7f:cb:98:63:07:93:9a:38:1a:
fa:78:14:33:fa:b7:ee:06:bc:5e:39:d8:03:1c:51:
72:f7:34:f5:f2:6d:da:b1:88:45:79:87:e1:fd:8c:
e2:f7:80:d1:c7:ce:52:5e:1e:df:3f:98:7a:29:e7:
64:18:f0:f0:80:db:8b:11:d4:44:71:99:04:01:db:
f7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:20:C9:0F:22:65:CE:1F:82:06:3A:5A:3D:FD:E5:E1:E4:BD:BF:DB
X509v3 Authority Key Identifier:
keyid:71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f0:1a:f6:90:b7:75:82:cc:2d:e2:bf:ec:f1:a1:86:28:5e:
1c:2f:4d:ac:94:61:68:e4:ac:3b:c0:70:74:28:91:80:0b:83:
fd:b9:ff:62:e9:2f:11:00:60:3b:f0:1b:67:3b:81:a1:5f:eb:
55:ae:98:8b:a0:f5:79:86:2e:9d:e0:18:46:23:c1:06:68:41:
e0:0b:03:22:3b:b8:a9:f1:3c:19:37:bf:6d:7a:67:3d:17:3d:
c8:a6:79:a6:70:bd:f5:49:dc:f0:43:f6:27:f0:10:56:8a:a1:
b2:fe:e5:0a:4b:90:a3:fb:11:95:21:55:87:83:10:3f:7e:db:
86:7a:e4:fc:57:7e:df:08:81:6a:04:47:f3:09:29:72:b4:e6:
13:77:03:7f:b1:7f:3c:19:ea:5f:ac:30:a9:fc:25:67:bd:d9:
93:18:e8:a5:ee:a2:11:4b:3d:2b:ba:68:0c:f8:69:7e:2a:45:
6b:8e:47:c0:a9:fc:46:7f:ec:7b:f2:9c:64:c0:c4:e6:d9:15:
2f:61:e5:98:b6:32:17:6c:07:66:78:7f:19:4a:11:ed:09:ac:
42:ee:fc:87:41:fc:82:86:55:04:f8:07:8f:0b:17:9a:ea:b8:
21:15:81:f0:2b:b3:f9:4b:72:6d:a7:38:3d:73:81:49:73:36:
d6:20:0c:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zfKsbctlzolUuvC7SxwnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTcxZDVhNzZkM2JhYjkzNzJhY2NjOTI3M2ViYTdkZjFj
NTljZjIwHhcNMjUwMTMxMTAwMDIzWhcNMjUwMjAxMTAwMDIzWjAzMTEwLwYDVQQD
Eyg0NjIwYzkwZjIyNjVjZTFmODIwNjNhNWEzZGZkZTVlMWU0YmRiZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Curqfw8l0TzHgzka6XB9S6G96Fb
rGlyvAniNPKD4ucKiTNleZMgSg3mwdzYFF3ywL+v4LzEN8mXv5MezD/+giKEbsbv
nH1kpJCRsW7qgRi2PDFGYiS3ZCnh9/xU4pmDPr7/iaFYf5Wenp5xWS4LzghAUY3j
6UiOMJTBgpznU03YfU0AzXNQMoE6vmomML8Jh661u1DnEZ/jbn9WG9LaozmCClMh
60YNhEl7ribLmfekSYZN0kP4uHB/y5hjB5OaOBr6eBQz+rfuBrxeOdgDHFFy9zT1
8m3asYhFeYfh/Yzi94DRx85SXh7fP5h6KedkGPDwgNuLEdREcZkEAdv32QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYgyQ8iZc4fggY6Wj395eHkvb/bMB8GA1UdIwQY
MBaAFHEXHVp207q5NyrMySc+un3xxZzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JjZFduYlR1cmszS3N6Skp6NjZmZkhGblBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZWU4YjktYzMwMC00NWViLTg5ZTEt
ODA2OTk1MjljY2ViLzEvY1JjZFduYlR1cmszS3N6Skp6NjZmZkhGblBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kZWU4YjktYzMwMC00NWViLTg5ZTEtODA2OTk1MjljY2Vi
LzEvY1JjZFduYlR1cmszS3N6Skp6NjZmZkhGblBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfAa9pC3
dYLMLeK/7PGhhiheHC9NrJRhaOSsO8BwdCiRgAuD/bn/YukvEQBgO/AbZzuBoV/r
Va6Yi6D1eYYuneAYRiPBBmhB4AsDIju4qfE8GTe/bXpnPRc9yKZ5pnC99Unc8EP2
J/AQVoqhsv7lCkuQo/sRlSFVh4MQP37bhnrk/Fd+3wiBagRH8wkpcrTmE3cDf7F/
PBnqX6wwqfwlZ73Zkxjope6iEUs9K7poDPhpfipFa45HwKn8Rn/se/KcZMDE5tkV
L2HlmLYyF2wHZnh/GUoR7QmsQu78h0H8goZVBPgHjwsXmuq4IRWB8Cuz+Utybac4
PXOBSXM21iAMXQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:15 2025 by rpki-client