Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
File: clOCbDGl92CXvNwqL2UZiKE2flM.mft (raw, json)
Hash identifier: NXb3t8QPoFPzrJ3aHuc0SLIxAX/SFXNDMD8XA6C5XRU=
Subject key identifier: 85:4E:73:7A:92:71:80:0C:87:12:F1:24:3A:AE:BE:B3:74:C4:E1:2F
Authority key identifier: 72:53:82:6C:31:A5:F7:60:97:BC:DC:2A:2F:65:19:88:A1:36:7E:53
Certificate issuer: /CN=7253826c31a5f76097bcdc2a2f651988a1367e53
Certificate serial: 0194BC3C4ED40CA9ED2CE89C48A70CFF28E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clOCbDGl92CXvNwqL2UZiKE2flM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
Manifest number: 0702
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: clOCbDGl92CXvNwqL2UZiKE2flM.crl (hash: MZOAG3BPPoLAd/anfseIe/R+aAzXYfjVBglDw07lx90=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4e:d4:0c:a9:ed:2c:e8:9c:48:a7:0c:ff:28:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7253826c31a5f76097bcdc2a2f651988a1367e53
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=854e737a9271800c8712f1243aaebeb374c4e12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:51:60:b0:56:19:b3:3d:29:ec:09:3c:7b:35:
6e:be:84:90:67:42:29:24:86:7d:b5:c5:66:c1:c6:
f4:a2:83:9d:e1:f8:fa:c4:e4:fb:b8:59:b2:b1:75:
16:c0:57:c8:c7:d0:fc:68:fc:61:87:7c:20:8d:e9:
e6:2a:11:49:43:5e:2b:1e:09:e1:95:6d:c0:06:70:
45:ae:ef:d5:12:f3:16:fe:7c:f8:fd:6d:f4:e4:bb:
94:9b:5a:a5:bf:47:6a:5a:14:64:dc:18:14:8a:ac:
35:92:7a:7b:aa:c1:08:2b:b0:17:d4:02:37:29:67:
70:58:fc:f3:13:e1:40:f7:1f:32:de:62:a2:a5:6d:
ca:59:81:56:f6:c4:66:3d:66:7a:2a:89:30:3b:65:
db:49:b5:e9:a0:22:83:47:ec:8b:52:b8:1d:14:64:
8d:85:a7:21:ca:82:45:bc:d4:58:48:89:e1:be:54:
5e:60:d5:10:75:46:27:09:76:72:ef:7a:c5:8e:ba:
cc:06:7b:5e:8c:bf:ae:58:39:78:56:f1:1b:3c:ec:
1a:72:41:b3:f1:65:b7:1d:15:0e:e2:8b:23:ee:e9:
c9:9a:23:01:f1:26:26:53:cd:fd:3d:5c:0c:41:3d:
6d:5b:ab:3e:7f:d9:a0:90:c5:e7:10:c5:97:7b:3d:
50:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4E:73:7A:92:71:80:0C:87:12:F1:24:3A:AE:BE:B3:74:C4:E1:2F
X509v3 Authority Key Identifier:
keyid:72:53:82:6C:31:A5:F7:60:97:BC:DC:2A:2F:65:19:88:A1:36:7E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clOCbDGl92CXvNwqL2UZiKE2flM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f6:c6:7c:b3:6b:6a:f1:b2:5a:0d:5a:c8:77:fa:d1:5d:c7:
0f:e8:1a:2f:36:6d:c3:3f:f5:0f:29:83:1d:d7:c8:f3:73:fd:
63:52:2b:b5:04:4b:9e:e6:31:d7:38:df:98:f4:4e:05:7d:d9:
8e:b6:90:a5:49:87:73:fe:43:4c:60:6d:f8:58:cd:0b:14:82:
97:3a:ae:fc:88:ad:6c:6a:f2:22:ed:30:e8:fc:fb:4a:f1:d5:
88:ea:55:97:81:4d:88:98:9a:8c:e4:f9:b0:65:3b:33:20:8a:
af:d3:0c:57:7e:a8:8b:9b:dc:8d:78:11:5c:cc:67:5f:cd:f2:
84:bc:4f:84:11:e3:04:bf:fc:be:be:6d:f4:4a:55:ea:16:95:
03:66:0a:34:32:44:63:f6:ca:9c:b4:a2:4c:ed:cc:a5:32:07:
2a:3b:2a:eb:dd:0a:9a:eb:1b:eb:d7:13:98:ee:94:42:a5:84:
c1:da:17:d3:98:3c:22:38:dc:2b:38:fd:15:19:00:4a:f1:4c:
ee:91:02:31:ee:d5:52:88:d7:f4:3c:be:1e:8b:5d:23:b8:f7:
f0:c2:81:fe:e1:81:e2:78:81:b3:7b:92:28:7b:79:f9:b1:89:
10:de:d8:42:5b:dd:3a:a3:3f:8a:65:ae:32:ac:d8:8e:01:b3:
bc:89:64:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PE7UDKntLOicSKcM/yjpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNTM4MjZjMzFhNWY3NjA5N2JjZGMyYTJmNjUxOTg4YTEz
NjdlNTMwHhcNMjUwMTMxMTIwMDU2WhcNMjUwMjAxMTIwMDU2WjAzMTEwLwYDVQQD
Eyg4NTRlNzM3YTkyNzE4MDBjODcxMmYxMjQzYWFlYmViMzc0YzRlMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01FgsFYZsz0p7Ak8ezVuvoSQZ0Ip
JIZ9tcVmwcb0ooOd4fj6xOT7uFmysXUWwFfIx9D8aPxhh3wgjenmKhFJQ14rHgnh
lW3ABnBFru/VEvMW/nz4/W305LuUm1qlv0dqWhRk3BgUiqw1knp7qsEIK7AX1AI3
KWdwWPzzE+FA9x8y3mKipW3KWYFW9sRmPWZ6KokwO2XbSbXpoCKDR+yLUrgdFGSN
hachyoJFvNRYSInhvlReYNUQdUYnCXZy73rFjrrMBntejL+uWDl4VvEbPOwackGz
8WW3HRUO4osj7unJmiMB8SYmU839PVwMQT1tW6s+f9mgkMXnEMWXez1QLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVOc3qScYAMhxLxJDquvrN0xOEvMB8GA1UdIwQY
MBaAFHJTgmwxpfdgl7zcKi9lGYihNn5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2xPQ2JER2w5MkNYdk53cUwyVVppS0UyZmxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83YTRhNDItN2RjNS00MGMwLTgwNGIt
ZjNmNTFjMTA3MGI5LzEvY2xPQ2JER2w5MkNYdk53cUwyVVppS0UyZmxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83YTRhNDItN2RjNS00MGMwLTgwNGItZjNmNTFjMTA3MGI5
LzEvY2xPQ2JER2w5MkNYdk53cUwyVVppS0UyZmxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/bGfLNr
avGyWg1ayHf60V3HD+gaLzZtwz/1DymDHdfI83P9Y1IrtQRLnuYx1zjfmPROBX3Z
jraQpUmHc/5DTGBt+FjNCxSClzqu/IitbGryIu0w6Pz7SvHViOpVl4FNiJiajOT5
sGU7MyCKr9MMV36oi5vcjXgRXMxnX83yhLxPhBHjBL/8vr5t9EpV6haVA2YKNDJE
Y/bKnLSiTO3MpTIHKjsq690Kmusb69cTmO6UQqWEwdoX05g8IjjcKzj9FRkASvFM
7pECMe7VUojX9Dy+HotdI7j38MKB/uGB4niBs3uSKHt5+bGJEN7YQlvdOqM/imWu
MqzYjgGzvIlkZg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:33:26 2025 by rpki-client