
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
File: rSRGM37TPO3jTe_1VxBdxxwDqRY.mft (raw, json)
Hash identifier: HAhPDdrXIx13YeHwPq+q8lRahgHDXFyaA9sblnq6//Y=
Subject key identifier: 93:08:95:48:F8:96:93:09:5F:CD:86:A2:BD:27:7C:FE:36:00:C6:F1
Authority key identifier: AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
Certificate issuer: /CN=ad2446337ed33cede34deff557105dc71c03a916
Certificate serial: 0194BBCE4B868C34D61B64C3AD43D4A671A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
Manifest number: 03BB
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: rSRGM37TPO3jTe_1VxBdxxwDqRY.crl (hash: Da5Ifof+OkSVv1WSb2VpfuYEnwwk/qGrUntw0493bLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4b:86:8c:34:d6:1b:64:c3:ad:43:d4:a6:71:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2446337ed33cede34deff557105dc71c03a916
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=93089548f89693095fcd86a2bd277cfe3600c6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:83:2a:90:8b:f1:db:e7:30:ab:7d:e5:36:45:
34:64:8d:60:27:a4:86:4c:58:89:07:e0:2e:f4:2d:
d7:5c:b2:3e:4a:72:0e:9d:40:8e:23:06:78:0b:49:
74:5a:e3:8d:d4:b6:e1:6b:4f:4b:c0:1c:2b:d9:1a:
b4:82:61:79:28:39:10:b6:99:20:60:2d:1e:d3:a7:
7f:f5:39:af:b5:ca:7c:cf:39:20:2a:09:7e:c8:94:
07:af:a2:c4:6a:47:c9:88:1e:98:a0:36:4f:2c:69:
99:f7:6d:85:21:52:d7:a6:aa:59:63:17:aa:7d:db:
b8:94:01:e1:da:48:52:ad:92:31:08:c1:59:c3:48:
06:3f:be:86:a0:cd:c2:b2:da:bc:c7:df:ad:00:ae:
7e:cd:66:21:a2:1b:d4:21:66:e4:60:c6:73:d2:24:
e6:80:86:07:96:fc:01:60:22:d1:0a:ab:bd:78:93:
2e:09:51:3f:fe:15:21:a2:a2:14:f8:07:eb:c9:5a:
c7:34:cb:3a:91:9c:a5:fd:4d:45:43:50:ff:d6:16:
16:0d:6c:5e:93:54:e6:11:8d:5a:2a:ab:b2:87:2e:
83:b9:09:90:e3:71:2c:38:ae:50:0f:1d:3a:b1:55:
9e:91:d5:76:e4:b8:ab:36:91:37:b1:7d:d4:0e:dc:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:08:95:48:F8:96:93:09:5F:CD:86:A2:BD:27:7C:FE:36:00:C6:F1
X509v3 Authority Key Identifier:
keyid:AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:44:f7:5b:6d:73:e7:57:87:a3:72:97:bc:42:d1:52:8e:32:
7b:6c:88:2e:65:ce:51:df:75:85:7e:b9:bf:cd:12:f8:df:d6:
ac:f8:48:a9:f7:fc:85:30:27:36:33:60:c5:60:57:1b:e7:0b:
18:8f:cc:d5:a7:73:2b:13:09:ff:5b:68:03:02:e6:02:3b:79:
91:51:e4:14:8c:19:3b:6c:7b:0a:f4:f9:ae:13:99:c8:b3:2a:
e4:83:c4:fa:65:6a:46:56:21:66:5e:8b:de:6b:0d:6d:10:6f:
d4:99:8e:48:74:36:00:07:94:0a:a6:8a:36:04:ef:c9:c9:9f:
be:dc:52:ac:28:13:6e:93:4e:25:a7:98:2a:d9:a5:3f:12:07:
53:f4:05:23:3b:1d:fd:12:7b:d2:36:42:a9:e0:51:fa:a5:d2:
a1:f7:eb:98:7f:21:5a:d8:6d:88:c3:ba:49:9a:98:63:9d:7d:
fe:d5:7a:57:91:9c:88:35:21:2e:21:85:0e:63:a8:e5:e8:ba:
4b:a2:30:f9:76:27:26:b4:3b:b7:50:78:9c:71:8a:53:9c:a1:
f2:38:6a:62:dc:27:90:b6:57:15:70:b7:14:13:c3:1b:4e:18:
6d:f7:18:5a:09:63:94:8f:1e:c3:56:27:3a:30:05:b0:6f:63:
1f:cf:4c:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zkuGjDTWG2TDrUPUpnGmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMjQ0NjMzN2VkMzNjZWRlMzRkZWZmNTU3MTA1ZGM3MWMw
M2E5MTYwHhcNMjUwMTMxMTAwMDQ2WhcNMjUwMjAxMTAwMDQ2WjAzMTEwLwYDVQQD
Eyg5MzA4OTU0OGY4OTY5MzA5NWZjZDg2YTJiZDI3N2NmZTM2MDBjNmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34MqkIvx2+cwq33lNkU0ZI1gJ6SG
TFiJB+Au9C3XXLI+SnIOnUCOIwZ4C0l0WuON1Lbha09LwBwr2Rq0gmF5KDkQtpkg
YC0e06d/9Tmvtcp8zzkgKgl+yJQHr6LEakfJiB6YoDZPLGmZ922FIVLXpqpZYxeq
fdu4lAHh2khSrZIxCMFZw0gGP76GoM3Cstq8x9+tAK5+zWYhohvUIWbkYMZz0iTm
gIYHlvwBYCLRCqu9eJMuCVE//hUhoqIU+AfryVrHNMs6kZyl/U1FQ1D/1hYWDWxe
k1TmEY1aKquyhy6DuQmQ43EsOK5QDx06sVWekdV25LirNpE3sX3UDtz56QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMIlUj4lpMJX82Gor0nfP42AMbxMB8GA1UdIwQY
MBaAFK0kRjN+0zzt403v9VcQXcccA6kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclNSR00zN1RQTzNqVGVfMVZ4QmR4eHdEcVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZmE3NmMtMDVjYy00M2RjLTk4ZjEt
ZTcwN2RlYzdiZDZjLzEvclNSR00zN1RQTzNqVGVfMVZ4QmR4eHdEcVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9jZmE3NmMtMDVjYy00M2RjLTk4ZjEtZTcwN2RlYzdiZDZj
LzEvclNSR00zN1RQTzNqVGVfMVZ4QmR4eHdEcVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAukT3W21z
51eHo3KXvELRUo4ye2yILmXOUd91hX65v80S+N/WrPhIqff8hTAnNjNgxWBXG+cL
GI/M1adzKxMJ/1toAwLmAjt5kVHkFIwZO2x7CvT5rhOZyLMq5IPE+mVqRlYhZl6L
3msNbRBv1JmOSHQ2AAeUCqaKNgTvycmfvtxSrCgTbpNOJaeYKtmlPxIHU/QFIzsd
/RJ70jZCqeBR+qXSoffrmH8hWthtiMO6SZqYY519/tV6V5GciDUhLiGFDmOo5ei6
S6Iw+XYnJrQ7t1B4nHGKU5yh8jhqYtwnkLZXFXC3FBPDG04YbfcYWgljlI8ew1Yn
OjAFsG9jH89Mcw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:27 2025 by rpki-client