Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
File: S2T4wOGznYqO-OjItaD_7itTtYc.mft (raw, json)
Hash identifier: 1vZv8kwfhrOwvwwtanR44p1oLAoIPEyiaRg6vK5Npzg=
Subject key identifier: C1:73:3A:48:4C:69:5C:A9:BC:14:90:FB:C9:42:94:31:E0:D7:FD:4D
Authority key identifier: 4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
Certificate issuer: /CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Certificate serial: 0194BBCEC369212D33DD05231AB96F4C4D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
Manifest number: 0554
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: S2T4wOGznYqO-OjItaD_7itTtYc.crl (hash: Z+ykk6R8GTtNSx6gmuRhSfD/eqLpmw7E0PENXkVKzik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c3:69:21:2d:33:dd:05:23:1a:b9:6f:4c:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=c1733a484c695ca9bc1490fbc9429431e0d7fd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:0b:59:1e:63:8a:e5:f1:1d:72:c4:ed:90:
70:1e:d7:02:64:aa:1f:45:be:f6:1b:e3:f8:06:a7:
46:cc:55:a0:8f:66:1f:c8:8e:8b:c9:60:d0:0d:47:
10:17:08:4a:8e:d9:d9:0b:a7:d3:b7:70:bb:f8:2f:
e2:66:4a:e8:66:1f:0e:b1:76:08:5f:4a:73:c3:60:
28:15:f2:03:cd:48:6f:b1:8d:7a:85:6e:e9:74:b4:
50:32:2d:7b:93:2d:fd:c2:d8:d9:68:fd:74:65:4b:
81:91:7b:80:7d:21:92:21:18:64:1c:c5:c7:d1:14:
56:3c:29:80:d5:d8:a8:84:30:b6:f6:83:69:ad:8d:
68:5e:2e:2a:2b:5f:86:d4:cd:93:c3:c4:b0:08:d6:
d0:43:d2:ed:d6:bc:5d:8e:40:5f:9a:de:51:fb:55:
86:11:d8:c2:79:84:5e:66:a0:15:38:47:04:1e:6e:
c2:21:e2:11:63:56:e0:51:e1:0d:f0:0c:5f:91:c8:
23:f3:b7:23:f7:7f:66:a8:76:7b:5e:f9:ff:5f:11:
e2:be:2a:45:7f:ec:73:f6:9c:ec:e5:fb:34:24:ef:
64:94:6f:57:4f:4f:93:aa:de:a5:52:a0:53:a6:58:
a2:cf:a4:4d:ff:53:b6:a2:0f:0f:c8:8e:15:8f:d2:
d2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:73:3A:48:4C:69:5C:A9:BC:14:90:FB:C9:42:94:31:E0:D7:FD:4D
X509v3 Authority Key Identifier:
keyid:4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:62:0f:e2:f7:ee:7f:19:a6:53:c5:25:60:47:5a:9a:d8:81:
6f:7b:58:76:43:cd:f5:fc:ee:b4:88:45:33:01:7a:58:f1:ca:
20:3f:76:e8:b3:3c:a6:a8:08:2a:19:d5:69:eb:d3:ae:27:f0:
0a:61:ed:53:92:c4:a3:99:ec:16:62:71:73:7f:93:8e:aa:7b:
d5:e8:dc:a8:c6:a7:aa:7e:88:d4:a9:ae:60:f1:ce:3c:f1:98:
4a:ee:57:31:2a:dd:03:bb:7a:62:f8:03:92:b7:05:2e:31:90:
ca:06:02:e4:22:c3:3e:f7:96:66:bc:ae:85:82:8b:f6:d7:d4:
d2:35:b5:d0:03:01:07:c1:99:fa:c9:6f:f0:a3:ec:e6:eb:3c:
56:73:3a:c2:b2:ee:46:9a:a4:19:ff:3a:49:b9:48:c0:da:d6:
50:65:85:ea:a4:0b:18:a8:5b:3d:e7:d8:6d:2b:b4:27:15:39:
99:11:b3:ab:8b:c3:33:1b:aa:29:f6:d3:13:02:2b:5e:c7:1a:
fe:9d:d5:b1:16:ae:85:ab:2a:52:16:43:8a:24:71:b1:89:1c:
15:10:84:6b:7b:a8:32:d4:60:d0:c9:25:69:ab:6e:d7:5f:b6:
a3:12:61:60:88:16:b0:10:9b:72:38:5c:d1:6d:50:ad:d9:4b:
d2:87:0c:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zsNpIS0z3QUjGrlvTE0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNjRmOGMwZTFiMzlkOGE4ZWY4ZThjOGI1YTBmZmVlMmI1
M2I1ODcwHhcNMjUwMTMxMTAwMTE3WhcNMjUwMjAxMTAwMTE3WjAzMTEwLwYDVQQD
EyhjMTczM2E0ODRjNjk1Y2E5YmMxNDkwZmJjOTQyOTQzMWUwZDdmZDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF0LWR5jiuXxHXLE7ZBwHtcCZKof
Rb72G+P4BqdGzFWgj2YfyI6LyWDQDUcQFwhKjtnZC6fTt3C7+C/iZkroZh8OsXYI
X0pzw2AoFfIDzUhvsY16hW7pdLRQMi17ky39wtjZaP10ZUuBkXuAfSGSIRhkHMXH
0RRWPCmA1diohDC29oNprY1oXi4qK1+G1M2Tw8SwCNbQQ9Lt1rxdjkBfmt5R+1WG
EdjCeYReZqAVOEcEHm7CIeIRY1bgUeEN8Axfkcgj87cj939mqHZ7Xvn/XxHivipF
f+xz9pzs5fs0JO9klG9XT0+Tqt6lUqBTpliiz6RN/1O2og8PyI4Vj9LSWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFzOkhMaVypvBSQ+8lClDHg1/1NMB8GA1UdIwQY
MBaAFEtk+MDhs52KjvjoyLWg/+4rU7WHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzJUNHdPR3puWXFPLU9qSXRhRF83aXRUdFljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jNDk3YmUtZjNiMS00YzliLTg1OWUt
OTVkNWUxNmNkZGVmLzEvUzJUNHdPR3puWXFPLU9qSXRhRF83aXRUdFljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9jNDk3YmUtZjNiMS00YzliLTg1OWUtOTVkNWUxNmNkZGVm
LzEvUzJUNHdPR3puWXFPLU9qSXRhRF83aXRUdFljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2IP4vfu
fxmmU8UlYEdamtiBb3tYdkPN9fzutIhFMwF6WPHKID926LM8pqgIKhnVaevTrifw
CmHtU5LEo5nsFmJxc3+Tjqp71ejcqManqn6I1KmuYPHOPPGYSu5XMSrdA7t6YvgD
krcFLjGQygYC5CLDPveWZryuhYKL9tfU0jW10AMBB8GZ+slv8KPs5us8VnM6wrLu
RpqkGf86SblIwNrWUGWF6qQLGKhbPefYbSu0JxU5mRGzq4vDMxuqKfbTEwIrXsca
/p3VsRauhasqUhZDiiRxsYkcFRCEa3uoMtRg0Mklaatu11+2oxJhYIgWsBCbcjhc
0W1QrdlL0ocM9w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:05 2025 by rpki-client