Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
File: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json)
Hash identifier: Rp9vY4O4zBqB4Bzjx4RRmBP8ZDbq7LUuZ7DlQpwho08=
Subject key identifier: 4B:CE:EA:AA:B7:25:D7:E3:AD:C9:67:C2:A2:E5:CD:3C:BE:16:F8:F3
Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Certificate issuer: /CN=e039649faa8f9de3dae91be799a27e2ca6628789
Certificate serial: 0194BBCDEA8B4F0924D9B18A74A15BC23F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: lBF6Dlj3yB4+zEpX+bASvGXxiVtHFaIgofiQtX2ZIdM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ea:8b:4f:09:24:d9:b1:8a:74:a1:5b:c2:3f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=4bceeaaab725d7e3adc967c2a2e5cd3cbe16f8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:8d:c2:a4:11:90:89:13:37:37:78:20:08:
ba:c7:d7:19:e4:77:83:52:8f:f7:c3:39:a7:5a:01:
e7:bb:30:1d:cc:cc:e6:bf:aa:17:09:42:a0:03:3e:
38:ca:aa:23:18:e8:09:55:73:11:24:17:da:22:43:
0d:e7:06:07:64:47:2a:b7:89:76:4a:ac:9b:a0:d1:
c9:fc:16:25:a9:b9:db:a6:30:42:07:18:3e:19:8f:
2f:b8:e8:1d:86:e2:54:43:ff:d8:21:18:be:bb:19:
43:8d:f8:5f:f4:77:ca:d1:c6:b0:39:a4:fc:30:3e:
67:1f:80:3e:4c:01:09:0f:8c:f7:63:c8:0e:d6:5c:
0b:68:fd:ea:40:18:ca:e9:c7:e2:61:dc:94:d4:4a:
ec:e1:a1:d0:10:b2:c5:e9:a4:26:fe:c1:c3:54:a9:
29:8a:bb:35:8f:49:7d:73:7c:17:fc:1b:83:9a:06:
60:c3:5f:1d:08:c3:58:f0:eb:70:8e:a1:54:54:6e:
59:e5:49:eb:4d:78:21:fc:6c:06:2f:bf:58:14:0a:
f5:9d:20:a3:55:c9:85:c8:82:6a:87:ca:f2:49:8a:
12:38:3a:4a:a4:fc:d8:92:59:f1:59:36:24:1d:34:
d3:71:98:b6:46:a7:86:71:72:a2:29:63:8d:1c:fa:
67:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CE:EA:AA:B7:25:D7:E3:AD:C9:67:C2:A2:E5:CD:3C:BE:16:F8:F3
X509v3 Authority Key Identifier:
keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9b:9a:b6:98:2a:bd:14:ff:30:89:c4:ce:1f:d6:39:b8:80:
0e:7c:ff:54:30:d6:d0:8e:c0:66:23:b5:9f:0c:43:43:7e:ae:
df:13:58:a0:ff:a5:08:26:27:fb:c5:33:d9:0d:06:31:e5:30:
7d:d0:f3:94:32:f3:53:b3:dc:b7:18:ca:14:47:1c:15:a1:96:
04:e6:30:29:65:74:32:42:4a:60:7d:c8:93:ea:8e:2d:dd:52:
ef:0e:cb:96:c6:e2:f9:a9:2f:97:4a:69:5f:94:0f:4c:15:fa:
22:75:a5:b2:5a:69:61:f4:26:89:5a:fa:22:61:94:b1:e5:51:
6e:a3:07:ce:0f:05:af:51:28:6b:48:f5:b3:d8:af:b0:44:28:
8d:25:2d:7f:6c:b0:69:31:eb:38:0b:9f:9d:78:79:0c:07:cb:
82:e7:02:13:f8:f0:49:54:74:a2:ff:54:fa:a9:f7:20:be:f8:
d8:1f:b6:8e:cd:f2:42:03:d1:e7:87:18:72:55:29:f8:0d:e8:
a9:5a:9a:fe:42:e6:5a:69:2c:d0:8a:de:97:7c:9b:4e:1d:ed:
67:34:39:25:34:2a:36:43:be:ab:6a:bd:9e:72:85:cb:d4:39:
40:be:77:bc:3e:1a:f8:78:a8:94:87:b6:68:72:71:fe:04:72:
66:5a:11:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zeqLTwkk2bGKdKFbwj8fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMzk2NDlmYWE4ZjlkZTNkYWU5MWJlNzk5YTI3ZTJjYTY2
Mjg3ODkwHhcNMjUwMTMxMTAwMDIxWhcNMjUwMjAxMTAwMDIxWjAzMTEwLwYDVQQD
Eyg0YmNlZWFhYWI3MjVkN2UzYWRjOTY3YzJhMmU1Y2QzY2JlMTZmOGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvCNwqQRkIkTNzd4IAi6x9cZ5HeD
Uo/3wzmnWgHnuzAdzMzmv6oXCUKgAz44yqojGOgJVXMRJBfaIkMN5wYHZEcqt4l2
SqyboNHJ/BYlqbnbpjBCBxg+GY8vuOgdhuJUQ//YIRi+uxlDjfhf9HfK0cawOaT8
MD5nH4A+TAEJD4z3Y8gO1lwLaP3qQBjK6cfiYdyU1Ers4aHQELLF6aQm/sHDVKkp
irs1j0l9c3wX/BuDmgZgw18dCMNY8OtwjqFUVG5Z5UnrTXgh/GwGL79YFAr1nSCj
VcmFyIJqh8rySYoSODpKpPzYklnxWTYkHTTTcZi2RqeGcXKiKWONHPpnVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvO6qq3JdfjrclnwqLlzTy+FvjzMB8GA1UdIwQY
MBaAFOA5ZJ+qj53j2ukb55mifiymYoeJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNERsa242cVBuZVBhNlJ2bm1hSi1MS1ppaDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yZWZhY2UtZDBhMy00MzM5LTgwNjgt
ZDc2NzhhMDc4N2QxLzEvNERsa242cVBuZVBhNlJ2bm1hSi1MS1ppaDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8yZWZhY2UtZDBhMy00MzM5LTgwNjgtZDc2NzhhMDc4N2Qx
LzEvNERsa242cVBuZVBhNlJ2bm1hSi1MS1ppaDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJuatpgq
vRT/MInEzh/WObiADnz/VDDW0I7AZiO1nwxDQ36u3xNYoP+lCCYn+8Uz2Q0GMeUw
fdDzlDLzU7PctxjKFEccFaGWBOYwKWV0MkJKYH3Ik+qOLd1S7w7Llsbi+akvl0pp
X5QPTBX6InWlslppYfQmiVr6ImGUseVRbqMHzg8Fr1Eoa0j1s9ivsEQojSUtf2yw
aTHrOAufnXh5DAfLgucCE/jwSVR0ov9U+qn3IL742B+2js3yQgPR54cYclUp+A3o
qVqa/kLmWmks0Irel3ybTh3tZzQ5JTQqNkO+q2q9nnKFy9Q5QL53vD4a+HiolIe2
aHJx/gRyZloRzg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:28 2025 by rpki-client