Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
File: AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json)
Hash identifier: Xwy9FpIMfMceUJoRijdl6aerohPtO+KWVYD75zZWE+I=
Subject key identifier: EA:30:E4:49:E7:D1:F2:5F:D0:53:62:7D:90:E6:69:28:5D:62:F2:9C
Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
Certificate issuer: /CN=014f7b7d51e508180ee73ceddbdd955c39774822
Certificate serial: 0194BC730947FB587092B81BCA57FE2F3AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: /W2FNsUGOrYL7Y0fUgkHnXwqmBfvnnZ1/NKOv9UZigM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:09:47:fb:58:70:92:b8:1b:ca:57:fe:2f:3a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=ea30e449e7d1f25fd053627d90e669285d62f29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:28:58:8c:12:02:fc:75:87:33:02:49:5d:
db:90:2d:33:ea:21:6f:3f:6f:37:45:5e:ee:58:2a:
ef:68:a5:a4:a7:8d:b8:d9:fc:9c:21:78:3b:90:5c:
19:5f:49:6a:41:25:1d:d9:cc:53:d6:be:7e:d9:04:
3e:c6:1c:b4:64:be:ce:ae:59:85:fe:75:14:53:f3:
30:60:4e:74:33:8c:d4:80:40:a0:3b:3e:cd:b9:bf:
29:2b:33:79:7c:75:7f:de:87:e6:0c:5c:d6:80:eb:
84:eb:6a:8f:83:9f:30:b6:b7:a3:a2:bc:34:8c:3f:
6f:20:23:2f:4e:16:cc:d5:8f:83:ea:80:30:61:03:
7e:e4:d1:43:de:fc:bd:8d:d3:ca:93:30:a3:11:71:
00:72:59:a4:13:fa:94:eb:71:f6:6b:a5:e7:f4:47:
39:44:ee:ee:1e:5b:0b:c1:0c:90:a9:09:1c:99:97:
f0:78:f5:13:ee:2a:09:aa:17:3a:32:ed:53:a1:92:
a5:f6:2f:f8:f1:08:28:88:4e:2c:21:62:ec:56:6a:
4d:20:a8:55:b7:81:0f:8f:7a:54:de:19:76:93:d0:
64:79:a9:68:be:7d:d9:bb:f6:51:c5:10:49:b0:ce:
82:ba:34:e5:af:38:0d:bf:01:20:ee:3c:b9:c0:3a:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:30:E4:49:E7:D1:F2:5F:D0:53:62:7D:90:E6:69:28:5D:62:F2:9C
X509v3 Authority Key Identifier:
keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:8e:3f:c1:a9:44:bc:58:51:37:cc:38:b1:7b:67:27:5e:b5:
72:56:04:cb:ca:d4:c7:a8:c1:b0:ca:5e:67:d5:94:58:6d:0c:
70:80:a5:83:a2:53:e4:14:97:83:32:21:89:13:fa:b9:01:2d:
74:fc:2d:87:65:25:f0:16:bf:dd:ca:66:48:0a:e3:ff:3d:5a:
d5:95:ef:f0:8e:ee:bc:b4:19:04:c1:f5:e9:86:e7:a5:7d:26:
1e:20:ab:ab:48:8e:5f:2e:cc:e5:b4:27:1e:54:fa:77:2e:93:
9a:44:54:63:90:06:2d:4b:a0:e2:72:5c:47:6b:b4:4c:61:5e:
fa:d5:8d:a2:c0:c8:0a:f1:e6:39:40:0f:cb:41:72:59:64:8c:
e0:82:db:2f:83:0b:9e:45:50:40:2e:e4:9b:bd:9d:c0:68:af:
64:01:74:ee:e3:51:20:80:6a:68:01:f4:64:e7:39:e6:51:61:
59:76:7c:b1:09:f3:14:c9:6a:c1:e1:93:65:34:ef:c1:16:2a:
4c:a9:44:dd:4a:65:c2:85:55:0f:c6:f3:a6:79:6f:f9:ea:ab:
74:0c:9c:38:b7:50:ba:4c:3e:72:ba:10:18:70:96:07:5a:2c:
94:e1:ad:cc:5b:b7:ba:c8:aa:50:05:08:53:1c:27:e2:01:c8:
53:ff:9a:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cwlH+1hwkrgbylf+LzrgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNGY3YjdkNTFlNTA4MTgwZWU3M2NlZGRiZGQ5NTVjMzk3
NzQ4MjIwHhcNMjUwMTMxMTMwMDQzWhcNMjUwMjAxMTMwMDQzWjAzMTEwLwYDVQQD
EyhlYTMwZTQ0OWU3ZDFmMjVmZDA1MzYyN2Q5MGU2NjkyODVkNjJmMjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorAoWIwSAvx1hzMCSV3bkC0z6iFv
P283RV7uWCrvaKWkp4242fycIXg7kFwZX0lqQSUd2cxT1r5+2QQ+xhy0ZL7OrlmF
/nUUU/MwYE50M4zUgECgOz7Nub8pKzN5fHV/3ofmDFzWgOuE62qPg58wtrejorw0
jD9vICMvThbM1Y+D6oAwYQN+5NFD3vy9jdPKkzCjEXEAclmkE/qU63H2a6Xn9Ec5
RO7uHlsLwQyQqQkcmZfwePUT7ioJqhc6Mu1ToZKl9i/48QgoiE4sIWLsVmpNIKhV
t4EPj3pU3hl2k9Bkealovn3Zu/ZRxRBJsM6CujTlrzgNvwEg7jy5wDqWYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOow5Enn0fJf0FNifZDmaShdYvKcMB8GA1UdIwQY
MBaAFAFPe31R5QgYDuc87dvdlVw5d0giMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVU5N2ZWSGxDQmdPNXp6dDI5MlZYRGwzU0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xN2FhNjctOGZlNC00YTQzLWFhZGQt
YzRjNTFmY2ZmNDk3LzEvQVU5N2ZWSGxDQmdPNXp6dDI5MlZYRGwzU0NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8xN2FhNjctOGZlNC00YTQzLWFhZGQtYzRjNTFmY2ZmNDk3
LzEvQVU5N2ZWSGxDQmdPNXp6dDI5MlZYRGwzU0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvI4/walE
vFhRN8w4sXtnJ161clYEy8rUx6jBsMpeZ9WUWG0McIClg6JT5BSXgzIhiRP6uQEt
dPwth2Ul8Ba/3cpmSArj/z1a1ZXv8I7uvLQZBMH16YbnpX0mHiCrq0iOXy7M5bQn
HlT6dy6TmkRUY5AGLUug4nJcR2u0TGFe+tWNosDICvHmOUAPy0FyWWSM4ILbL4ML
nkVQQC7km72dwGivZAF07uNRIIBqaAH0ZOc55lFhWXZ8sQnzFMlqweGTZTTvwRYq
TKlE3UplwoVVD8bzpnlv+eqrdAycOLdQukw+croQGHCWB1oslOGtzFu3usiqUAUI
Uxwn4gHIU/+aLA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:22 2025 by rpki-client