Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
File: I0AYtVE7d50uHjrBqGpZO92XTKc.mft (raw, json)
Hash identifier: WH831pzxU/DeV33Dtiu9KbZ9Na4Ofqbd7hu3BJhdgXM=
Subject key identifier: BE:70:7A:9A:C2:DA:06:BC:85:F6:DF:E5:A0:82:DE:25:35:F5:DD:CA
Authority key identifier: 23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7
Certificate issuer: /CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7
Certificate serial: 0194BC3C81B1C3493AB2DF4CAB071306B882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
Manifest number: 0B
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: I0AYtVE7d50uHjrBqGpZO92XTKc.crl (hash: Q6mJQadTLzki7sMgVkG04FIATlI3/Ci74++2/ipy0Fc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:81:b1:c3:49:3a:b2:df:4c:ab:07:13:06:b8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=be707a9ac2da06bc85f6dfe5a082de2535f5ddca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:55:2b:79:d3:08:2d:ac:05:8e:96:dc:c9:
33:2b:09:76:18:79:b5:2c:98:fc:cb:a7:9c:b0:38:
b5:b8:1e:45:d7:2a:57:0e:10:f8:d3:d7:72:72:23:
8d:be:90:c2:5b:8c:31:68:76:2e:d5:38:a7:30:b5:
ba:0e:fe:7e:04:7f:e8:43:39:50:21:97:5f:bc:4a:
17:9a:6d:54:c2:86:18:20:92:96:14:f8:08:46:5e:
2c:64:c2:13:86:4f:8d:7c:fe:23:12:93:00:a3:22:
d1:24:93:8f:3d:55:3f:c9:70:cd:8a:d7:43:4f:80:
e7:a9:61:aa:e4:88:61:b3:20:50:17:1e:38:0d:fb:
02:9a:0c:ae:e2:51:59:2c:76:c9:17:ad:20:b7:7f:
11:42:fd:16:bd:6b:e5:c5:48:43:b4:61:ee:a3:54:
58:66:1f:fb:c6:85:7a:31:98:5a:c8:8e:2e:69:53:
63:53:4a:d5:83:ba:5c:df:24:7a:d3:8d:4d:10:22:
02:d8:00:12:d5:56:0f:2f:f5:7e:66:18:08:8b:f0:
67:04:57:e0:37:1f:3c:35:4b:ed:23:21:ca:b3:4d:
05:a5:cc:c4:ad:1b:2a:16:d7:bd:ad:f1:6e:a4:5a:
a4:35:60:c2:61:6d:9a:dc:49:3f:d1:14:d5:5d:0e:
fb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:70:7A:9A:C2:DA:06:BC:85:F6:DF:E5:A0:82:DE:25:35:F5:DD:CA
X509v3 Authority Key Identifier:
keyid:23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:01:31:29:c3:ed:fe:78:12:a3:fb:b3:a6:76:00:48:7c:ab:
86:0a:f4:55:1b:64:39:9a:36:8f:e5:37:2c:d1:08:05:7e:b7:
50:c1:ec:15:f5:15:fa:92:1f:f2:b1:d5:e7:35:01:e3:0e:5f:
6e:39:22:9a:d3:f5:e8:5d:e7:02:d8:c0:21:3c:04:0b:46:71:
bd:21:46:9f:bf:04:9c:d5:41:4c:61:32:f8:5a:96:2d:ff:b2:
2e:84:54:03:21:ef:88:35:c9:4a:31:5e:aa:02:8d:b7:2e:84:
35:c4:70:ff:c5:fb:ab:6b:94:c7:03:d6:52:78:d7:d1:2d:1c:
fc:e3:d6:9b:8c:a2:46:56:0b:2a:4a:0b:ca:84:fb:9f:76:fc:
89:7a:51:fa:e5:f2:39:15:7a:6b:89:1a:20:6e:57:69:6e:d9:
cf:c8:b9:1b:59:d3:ff:6b:9a:77:2c:e7:b7:cd:94:47:82:55:
20:b2:f1:8f:a5:04:88:1e:a9:08:81:0f:24:73:d9:2a:9a:a9:
88:13:6e:a7:ac:8b:12:72:64:16:5b:45:2e:a3:84:ec:1d:00:
26:88:51:3f:09:ba:89:9b:cb:60:12:63:57:c2:82:5e:43:fc:
dd:14:15:66:cd:66:ea:2c:98:1c:ab:75:9b:78:25:ae:4f:6b:
6b:d4:5b:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PIGxw0k6st9MqwcTBriCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNDAxOGI1NTEzYjc3OWQyZTFlM2FjMWE4NmE1OTNiZGQ5
NzRjYTcwHhcNMjUwMTMxMTIwMTA5WhcNMjUwMjAxMTIwMTA5WjAzMTEwLwYDVQQD
EyhiZTcwN2E5YWMyZGEwNmJjODVmNmRmZTVhMDgyZGUyNTM1ZjVkZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVdVK3nTCC2sBY6W3MkzKwl2GHm1
LJj8y6ecsDi1uB5F1ypXDhD409dyciONvpDCW4wxaHYu1TinMLW6Dv5+BH/oQzlQ
IZdfvEoXmm1UwoYYIJKWFPgIRl4sZMIThk+NfP4jEpMAoyLRJJOPPVU/yXDNitdD
T4DnqWGq5IhhsyBQFx44DfsCmgyu4lFZLHbJF60gt38RQv0WvWvlxUhDtGHuo1RY
Zh/7xoV6MZhayI4uaVNjU0rVg7pc3yR6041NECIC2AAS1VYPL/V+ZhgIi/BnBFfg
Nx88NUvtIyHKs00FpczErRsqFte9rfFupFqkNWDCYW2a3Ek/0RTVXQ77uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5weprC2ga8hfbf5aCC3iU19d3KMB8GA1UdIwQY
MBaAFCNAGLVRO3edLh46wahqWTvdl0ynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTBBWXRWRTdkNTB1SGpyQnFHcFpPOTJYVEtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9iMTgwODAtZTNjOS00MTE0LWExNzQt
YzNkNmM3YzhiYThhLzEvSTBBWXRWRTdkNTB1SGpyQnFHcFpPOTJYVEtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9iMTgwODAtZTNjOS00MTE0LWExNzQtYzNkNmM3YzhiYThh
LzEvSTBBWXRWRTdkNTB1SGpyQnFHcFpPOTJYVEtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAExKcPt
/ngSo/uzpnYASHyrhgr0VRtkOZo2j+U3LNEIBX63UMHsFfUV+pIf8rHV5zUB4w5f
bjkimtP16F3nAtjAITwEC0ZxvSFGn78EnNVBTGEy+FqWLf+yLoRUAyHviDXJSjFe
qgKNty6ENcRw/8X7q2uUxwPWUnjX0S0c/OPWm4yiRlYLKkoLyoT7n3b8iXpR+uXy
ORV6a4kaIG5XaW7Zz8i5G1nT/2uadyznt82UR4JVILLxj6UEiB6pCIEPJHPZKpqp
iBNup6yLEnJkFltFLqOE7B0AJohRPwm6iZvLYBJjV8KCXkP83RQVZs1m6iyYHKt1
m3glrk9ra9Rb7Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:41 2025 by rpki-client