Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
File: RUH1XBZZBCT7NMZeDi6sIogkcNs.mft (raw, json)
Hash identifier: QeHHKGESiUZcmAjbZmAvdSGbC3dEsqHubso1q9P5Eh8=
Subject key identifier: F9:7D:5B:6F:5E:41:9A:3E:07:1C:0B:76:34:93:F4:49:16:43:0B:43
Authority key identifier: 45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
Certificate issuer: /CN=4541f55c16590424fb34c65e0e2eac22882470db
Certificate serial: 0194BBCE49BC68396C0C128900FE9A9E0106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
Manifest number: 046A
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: RUH1XBZZBCT7NMZeDi6sIogkcNs.crl (hash: fTvUJl6Ewuh3QtTUoM07buGBuzxgmlaOtP5BhMqY+V0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:49:bc:68:39:6c:0c:12:89:00:fe:9a:9e:01:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4541f55c16590424fb34c65e0e2eac22882470db
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=f97d5b6f5e419a3e071c0b763493f44916430b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:a9:0d:a0:30:69:30:54:80:b8:c0:72:87:
c5:ff:2b:be:7f:61:e7:aa:aa:90:18:bf:a4:f9:1c:
9b:f2:6b:1b:8c:5d:42:74:a6:b5:c7:c4:3e:da:fa:
c3:ff:76:57:11:4b:3c:c1:6d:77:7a:1a:f3:0f:cd:
f4:76:9e:51:86:b8:86:d1:2c:6f:0c:6d:fd:83:f7:
f8:f3:66:b7:ab:c4:9a:f3:91:44:12:84:4e:af:a4:
b2:3c:d4:fc:50:3f:3f:2a:da:9d:cd:2e:b9:3e:3f:
b5:9e:d3:d6:4b:a9:ef:3f:d0:bb:f5:77:47:61:1a:
08:10:55:d0:06:fd:15:11:e0:a1:fa:53:08:9d:d8:
21:7c:c1:1d:a2:62:51:9e:99:5c:72:16:92:0d:ac:
d9:a5:66:3a:56:af:ea:88:83:33:0c:6f:c0:88:9c:
a9:0e:9a:d7:cb:9f:53:27:15:0c:7e:68:98:12:b5:
bf:51:f3:db:1f:8b:80:0e:a6:81:31:3c:f8:41:de:
a1:88:6a:f7:bb:c7:1a:9f:8d:63:7c:11:f3:ea:fc:
8b:b8:f3:95:e9:2d:92:92:67:20:2f:ed:f8:05:04:
15:72:0c:57:f2:8d:f4:e9:7e:06:86:c5:f5:aa:23:
eb:ea:49:58:2c:de:b3:a1:4d:06:ca:3b:8a:d9:b5:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7D:5B:6F:5E:41:9A:3E:07:1C:0B:76:34:93:F4:49:16:43:0B:43
X509v3 Authority Key Identifier:
keyid:45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c3:1e:22:ac:90:83:21:84:17:8f:e8:5b:ce:bb:74:31:5d:
39:3a:20:2b:95:64:68:74:4a:5a:ae:eb:e9:7f:0c:5b:37:11:
e9:a8:f3:6d:d9:65:5d:37:e4:9e:dc:e4:9c:f0:7a:55:fe:36:
8d:60:ca:19:f6:26:23:94:29:5c:35:3c:11:f8:28:ce:0d:6e:
b4:2c:5a:8f:ad:be:9e:9d:c1:a5:a6:15:ed:68:53:af:bf:3c:
77:0c:cf:31:38:01:9f:56:4e:1c:57:b7:50:59:0f:f9:1c:a4:
c4:03:89:74:b9:53:7f:cd:9f:d5:d8:e3:36:0a:47:0a:83:b2:
06:c8:fe:b7:7b:41:3a:4e:fa:88:d3:d9:b2:41:01:97:0e:fc:
a2:43:c0:71:2e:f3:21:ff:54:f4:ea:c1:4e:36:4e:33:85:0a:
81:78:57:4e:5b:df:72:b7:58:39:c2:65:ab:aa:0e:86:71:34:
3f:26:4c:6a:04:7f:9a:f9:ca:f1:ea:2a:55:43:61:6e:67:ad:
20:27:43:97:22:c3:60:96:94:6b:52:98:f4:6c:e7:84:48:af:
94:e3:ab:f7:2c:a9:95:b0:f5:f3:7f:2c:31:00:c6:a6:ac:e2:
5a:3f:de:79:3d:29:44:f6:28:e5:60:9c:93:7f:cf:a0:57:09:
e6:34:20:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zkm8aDlsDBKJAP6angEGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NDFmNTVjMTY1OTA0MjRmYjM0YzY1ZTBlMmVhYzIyODgy
NDcwZGIwHhcNMjUwMTMxMTAwMDQ2WhcNMjUwMjAxMTAwMDQ2WjAzMTEwLwYDVQQD
EyhmOTdkNWI2ZjVlNDE5YTNlMDcxYzBiNzYzNDkzZjQ0OTE2NDMwYjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu2pDaAwaTBUgLjAcofF/yu+f2Hn
qqqQGL+k+Ryb8msbjF1CdKa1x8Q+2vrD/3ZXEUs8wW13ehrzD830dp5RhriG0Sxv
DG39g/f482a3q8Sa85FEEoROr6SyPNT8UD8/KtqdzS65Pj+1ntPWS6nvP9C79XdH
YRoIEFXQBv0VEeCh+lMIndghfMEdomJRnplcchaSDazZpWY6Vq/qiIMzDG/AiJyp
DprXy59TJxUMfmiYErW/UfPbH4uADqaBMTz4Qd6hiGr3u8can41jfBHz6vyLuPOV
6S2SkmcgL+34BQQVcgxX8o306X4GhsX1qiPr6klYLN6zoU0GyjuK2bU1PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPl9W29eQZo+BxwLdjST9EkWQwtDMB8GA1UdIwQY
MBaAFEVB9VwWWQQk+zTGXg4urCKIJHDbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlVIMVhCWlpCQ1Q3Tk1aZURpNnNJb2drY05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kMzg4NWMtNmI3NC00M2M0LThmZGQt
Nzg5ZDA3YzE5ODA4LzEvUlVIMVhCWlpCQ1Q3Tk1aZURpNnNJb2drY05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9kMzg4NWMtNmI3NC00M2M0LThmZGQtNzg5ZDA3YzE5ODA4
LzEvUlVIMVhCWlpCQ1Q3Tk1aZURpNnNJb2drY05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8MeIqyQ
gyGEF4/oW867dDFdOTogK5VkaHRKWq7r6X8MWzcR6ajzbdllXTfkntzknPB6Vf42
jWDKGfYmI5QpXDU8Efgozg1utCxaj62+np3BpaYV7WhTr788dwzPMTgBn1ZOHFe3
UFkP+RykxAOJdLlTf82f1djjNgpHCoOyBsj+t3tBOk76iNPZskEBlw78okPAcS7z
If9U9OrBTjZOM4UKgXhXTlvfcrdYOcJlq6oOhnE0PyZMagR/mvnK8eoqVUNhbmet
ICdDlyLDYJaUa1KY9GznhEivlOOr9yyplbD1838sMQDGpqziWj/eeT0pRPYo5WCc
k3/PoFcJ5jQgHA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:24 2025 by rpki-client