Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
File: 2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft (raw, json)
Hash identifier: vctqoLfsDTcfsRbe1X/ziRp/xsRnBI+xdUur7C+F0DI=
Subject key identifier: 2C:64:C9:5D:B5:E9:F3:EC:86:7A:7A:A5:EB:D3:3D:24:F8:B3:91:09
Authority key identifier: D9:A2:34:85:FE:D8:C8:50:74:52:32:E3:DC:51:CC:EA:D4:72:54:A4
Certificate issuer: /CN=d9a23485fed8c850745232e3dc51ccead47254a4
Certificate serial: 0194BBCEDEA9D3CADBEA68D5F48E2E1FF106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
Manifest number: 0838
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: 2aI0hf7YyFB0UjLj3FHM6tRyVKQ.crl (hash: TIz+z2KEDpApQS0OOfbo0lfyo9luXYPt9EGMGg1cEBA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:de:a9:d3:ca:db:ea:68:d5:f4:8e:2e:1f:f1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a23485fed8c850745232e3dc51ccead47254a4
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=2c64c95db5e9f3ec867a7aa5ebd33d24f8b39109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9a:d9:f1:f2:4e:06:c5:d7:dc:64:26:0c:7f:
8f:91:4b:d6:8a:2c:bb:cc:96:31:9c:89:60:8d:56:
e5:5e:3c:56:05:5a:4f:3d:c1:bf:db:85:2e:a5:ba:
c6:78:e0:32:c8:5b:9b:dd:47:da:9a:08:17:9f:a2:
77:87:24:01:bf:60:80:de:2f:63:0e:1c:1f:30:4b:
61:34:29:d6:d9:e0:62:51:d8:03:49:d4:e9:ed:6d:
bb:f8:4e:6d:90:a1:f8:65:76:84:28:b2:3b:1b:bb:
78:06:92:ec:e7:06:5f:86:cc:8f:63:e1:98:0d:54:
23:65:27:fb:99:5e:89:49:16:c7:24:c0:89:82:30:
62:be:71:2d:54:0c:5b:ad:f0:3e:83:13:53:0d:28:
31:40:50:e9:67:e8:a1:5a:87:ab:aa:80:71:d2:ce:
c3:6b:c2:c8:f8:a4:28:66:42:54:80:48:a0:d0:94:
13:87:19:bf:de:90:46:59:cb:07:d0:88:41:46:41:
da:c7:ae:4e:ec:3e:f2:25:d2:1a:a0:1d:80:aa:42:
c8:b9:9e:8e:90:bd:f1:52:79:eb:8a:ed:43:ff:cb:
83:e4:bd:f0:28:8c:e3:5b:9f:bb:61:cf:82:29:ef:
8e:a3:e7:59:ec:00:bc:49:08:ca:3c:6a:cb:18:a2:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:64:C9:5D:B5:E9:F3:EC:86:7A:7A:A5:EB:D3:3D:24:F8:B3:91:09
X509v3 Authority Key Identifier:
keyid:D9:A2:34:85:FE:D8:C8:50:74:52:32:E3:DC:51:CC:EA:D4:72:54:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:63:8a:92:0b:56:50:7f:b5:05:57:56:d0:70:e2:69:6f:9c:
a3:90:78:f5:ee:12:ea:14:cb:fb:c8:41:d6:02:58:ef:a2:e7:
9a:7f:15:cd:03:c9:63:c0:92:c3:e1:24:e3:52:f0:0c:95:31:
ba:e7:11:88:e5:e4:98:2c:ce:f2:40:b8:27:ec:de:64:24:e5:
f5:1e:72:ea:4b:6b:86:04:3f:a8:0c:8a:a1:d7:c0:77:5e:e0:
8c:62:53:9d:8e:9b:7f:2a:f2:85:f0:16:81:35:67:84:64:ef:
79:48:02:2a:36:eb:f8:0f:34:5b:9d:c4:95:59:89:30:d1:07:
28:ef:9c:d6:65:e8:95:11:1d:b9:49:b8:a4:88:a6:a9:63:be:
50:04:ae:52:1d:73:f7:87:0e:b8:f2:b2:78:7d:20:34:6e:e3:
2d:55:f4:1d:7a:01:df:1d:20:fc:09:de:42:af:e1:e4:d3:be:
bd:8e:78:0e:14:91:57:63:80:e4:9f:d9:1d:d3:74:41:b3:0f:
7a:3a:85:9b:f7:34:18:8a:14:b7:8c:0b:11:1c:4e:6f:35:f4:
97:7a:5a:ca:76:09:88:58:ee:a8:2c:97:26:6a:75:6a:d5:cc:
b4:83:98:3e:a6:88:aa:e2:ba:b1:66:ac:3f:a0:fd:29:b8:90:
42:8e:3d:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zt6p08rb6mjV9I4uH/EGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YTIzNDg1ZmVkOGM4NTA3NDUyMzJlM2RjNTFjY2VhZDQ3
MjU0YTQwHhcNMjUwMTMxMTAwMTI0WhcNMjUwMjAxMTAwMTI0WjAzMTEwLwYDVQQD
EygyYzY0Yzk1ZGI1ZTlmM2VjODY3YTdhYTVlYmQzM2QyNGY4YjM5MTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JrZ8fJOBsXX3GQmDH+PkUvWiiy7
zJYxnIlgjVblXjxWBVpPPcG/24UupbrGeOAyyFub3UfamggXn6J3hyQBv2CA3i9j
DhwfMEthNCnW2eBiUdgDSdTp7W27+E5tkKH4ZXaEKLI7G7t4BpLs5wZfhsyPY+GY
DVQjZSf7mV6JSRbHJMCJgjBivnEtVAxbrfA+gxNTDSgxQFDpZ+ihWoerqoBx0s7D
a8LI+KQoZkJUgEig0JQThxm/3pBGWcsH0IhBRkHax65O7D7yJdIaoB2AqkLIuZ6O
kL3xUnnriu1D/8uD5L3wKIzjW5+7Yc+CKe+Oo+dZ7AC8SQjKPGrLGKIBgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxkyV216fPshnp6pevTPST4s5EJMB8GA1UdIwQY
MBaAFNmiNIX+2MhQdFIy49xRzOrUclSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmFJMGhmN1l5RkIwVWpMajNGSE02dFJ5VktRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lZGEzZWYtY2RhNi00M2ZhLWI4YTYt
YTI0NjFlNDMxYzQ0LzEvMmFJMGhmN1l5RkIwVWpMajNGSE02dFJ5VktRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9lZGEzZWYtY2RhNi00M2ZhLWI4YTYtYTI0NjFlNDMxYzQ0
LzEvMmFJMGhmN1l5RkIwVWpMajNGSE02dFJ5VktRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2OKkgtW
UH+1BVdW0HDiaW+co5B49e4S6hTL+8hB1gJY76Lnmn8VzQPJY8CSw+Ek41LwDJUx
uucRiOXkmCzO8kC4J+zeZCTl9R5y6ktrhgQ/qAyKodfAd17gjGJTnY6bfyryhfAW
gTVnhGTveUgCKjbr+A80W53ElVmJMNEHKO+c1mXolREduUm4pIimqWO+UASuUh1z
94cOuPKyeH0gNG7jLVX0HXoB3x0g/AneQq/h5NO+vY54DhSRV2OA5J/ZHdN0QbMP
ejqFm/c0GIoUt4wLERxObzX0l3paynYJiFjuqCyXJmp1atXMtIOYPqaIquK6sWas
P6D9KbiQQo49Mw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:26 2025 by rpki-client