Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
File: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft (raw, json)
Hash identifier: /bgCDGtpIf8gwCCjdqVv1GH7Fv/ciFmE0y4SqZTnw+8=
Subject key identifier: C4:1A:1A:AD:9D:42:60:B3:05:1C:A8:0C:6C:3F:AC:11:4F:04:B1:33
Authority key identifier: F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
Certificate issuer: /CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Certificate serial: 0194BD17C45BAB43B6CB5B12BC8E95DFEBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
Manifest number: 03AC
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl (hash: tHu+lkIY5yN0JreWY0hxCUcGdFhCkn7pjv5NLJs8Ibg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c4:5b:ab:43:b6:cb:5b:12:bc:8e:95:df:eb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=c41a1aad9d4260b3051ca80c6c3fac114f04b133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:e9:80:8d:aa:9c:09:93:cd:f5:43:31:a1:
be:2a:82:d1:b0:bc:4a:45:5f:d0:ec:bc:c4:c0:64:
56:c1:3d:cf:3a:6c:de:cd:60:4c:6d:ad:43:5a:f1:
d7:38:ba:67:27:d6:b1:e8:cb:cd:9d:5c:0a:45:f1:
3f:3f:08:8e:73:98:8b:4a:7e:1b:f9:6c:84:8e:16:
4d:08:9a:93:20:2e:6b:46:11:b8:3d:25:0b:6f:3e:
c1:e9:41:29:eb:5d:62:8e:e5:56:68:6b:d6:d2:86:
60:85:5d:41:2c:85:95:33:ef:d4:61:25:91:a1:e9:
3b:f9:9b:b0:7d:81:49:69:c6:37:ee:9c:f3:79:0d:
1e:de:c8:aa:0a:8e:af:0f:51:e6:00:03:f7:e0:e2:
09:b1:b8:66:fd:7f:17:a8:60:b1:be:bd:69:f4:be:
89:aa:b3:06:43:3f:9c:af:69:3c:ac:30:08:2f:fb:
6c:1d:d4:a5:2f:77:f7:60:95:29:5d:39:2f:85:85:
74:eb:c7:89:d3:ca:ed:d3:61:6e:a9:4f:c7:e4:ba:
18:50:1f:5a:60:b5:10:d0:b3:dd:20:dc:97:bc:88:
fc:82:44:5e:41:0e:f0:9f:2d:f8:89:b7:85:16:f1:
58:26:a6:e6:c7:23:81:69:1a:d6:65:f8:9a:5c:2a:
11:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1A:1A:AD:9D:42:60:B3:05:1C:A8:0C:6C:3F:AC:11:4F:04:B1:33
X509v3 Authority Key Identifier:
keyid:F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7f:ad:15:ad:d3:c9:b4:c6:5b:77:11:fa:e2:a6:c4:31:48:
47:80:3a:99:95:ed:1d:cc:f4:fe:89:12:47:c1:f8:f1:44:5f:
f0:52:15:79:1b:5b:6d:3a:1f:86:cd:ca:00:1b:db:78:66:3f:
9e:4d:57:42:f3:2c:8e:d2:f2:74:50:fe:d5:25:06:d3:78:aa:
47:ca:6b:0c:e0:7a:67:4d:c7:35:1d:4b:b0:fa:61:98:f9:b2:
39:ac:83:87:04:89:06:e7:45:4f:67:c7:5d:7d:3d:24:fd:66:
01:1b:14:b4:7a:56:90:64:a4:9a:1c:62:34:a4:df:a0:0b:68:
4a:e1:9a:19:38:65:75:5f:82:91:f0:8f:06:e9:0e:e0:ba:5f:
92:07:c3:24:1c:c8:54:ca:b5:c4:ba:ba:d9:85:58:13:66:73:
35:97:8c:94:ed:29:18:80:e4:d3:a2:3a:53:42:ed:6e:77:2b:
5b:39:28:10:6f:fc:a8:2f:d9:83:a8:be:18:7e:0d:61:b5:30:
fd:2a:ac:6d:4b:ef:b9:0d:dc:9d:a8:53:10:b2:f8:0b:72:93:
27:15:1d:9e:fa:6a:23:d5:f1:93:bb:f2:5f:3b:48:ec:ea:de:
20:a8:09:7e:93:bc:46:6a:d6:93:0a:4c:46:95:40:a4:6d:67:
f3:9e:0c:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8Rbq0O2y1sSvI6V3+ulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MzkxY2ZkMjhiMDdlNmE5ZTFjYTMyNTZjZGI4MjAxN2Iy
YjU2MjEwHhcNMjUwMTMxMTYwMDM4WhcNMjUwMjAxMTYwMDM4WjAzMTEwLwYDVQQD
EyhjNDFhMWFhZDlkNDI2MGIzMDUxY2E4MGM2YzNmYWMxMTRmMDRiMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9PpgI2qnAmTzfVDMaG+KoLRsLxK
RV/Q7LzEwGRWwT3POmzezWBMba1DWvHXOLpnJ9ax6MvNnVwKRfE/PwiOc5iLSn4b
+WyEjhZNCJqTIC5rRhG4PSULbz7B6UEp611ijuVWaGvW0oZghV1BLIWVM+/UYSWR
oek7+ZuwfYFJacY37pzzeQ0e3siqCo6vD1HmAAP34OIJsbhm/X8XqGCxvr1p9L6J
qrMGQz+cr2k8rDAIL/tsHdSlL3f3YJUpXTkvhYV068eJ08rt02FuqU/H5LoYUB9a
YLUQ0LPdINyXvIj8gkReQQ7wny34ibeFFvFYJqbmxyOBaRrWZfiaXCoRhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQaGq2dQmCzBRyoDGw/rBFPBLEzMB8GA1UdIwQY
MBaAFPQ5HP0osH5qnhyjJWzbggF7K1YhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9iNmVhM2UtY2M5MS00OGJmLTg2YmMt
ZTVhOWJhOGY1NmFlLzEvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9iNmVhM2UtY2M5MS00OGJmLTg2YmMtZTVhOWJhOGY1NmFl
LzEvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArn+tFa3T
ybTGW3cR+uKmxDFIR4A6mZXtHcz0/okSR8H48URf8FIVeRtbbTofhs3KABvbeGY/
nk1XQvMsjtLydFD+1SUG03iqR8prDOB6Z03HNR1LsPphmPmyOayDhwSJBudFT2fH
XX09JP1mARsUtHpWkGSkmhxiNKTfoAtoSuGaGThldV+CkfCPBukO4LpfkgfDJBzI
VMq1xLq62YVYE2ZzNZeMlO0pGIDk06I6U0LtbncrWzkoEG/8qC/Zg6i+GH4NYbUw
/SqsbUvvuQ3cnahTELL4C3KTJxUdnvpqI9Xxk7vyXztI7OreIKgJfpO8RmrWkwpM
RpVApG1n854MJQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:31:53 2025 by rpki-client