Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
File: IMnySVGbH_R5NQ8xclT0Bei_yr0.mft (raw, json)
Hash identifier: LWQCr9LTtb3zhCBoHoDhGkbS9QoWVfJJA1+W76tiCVw=
Subject key identifier: F4:A8:98:CB:13:D8:A5:AD:E1:BD:5F:19:22:09:1C:71:DB:54:C1:71
Authority key identifier: 20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
Certificate issuer: /CN=20c9f249519b1ff479350f317254f405e8bfcabd
Certificate serial: 0194BCA9EC1F912B7A25FCDB4816C758CE1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
Manifest number: 0E20
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: IMnySVGbH_R5NQ8xclT0Bei_yr0.crl (hash: wUKijfvSR7Ot89iq4UraaUcAj3fEJyUtdbcEfSmeuYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ec:1f:91:2b:7a:25:fc:db:48:16:c7:58:ce:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c9f249519b1ff479350f317254f405e8bfcabd
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=f4a898cb13d8a5ade1bd5f1922091c71db54c171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:70:62:68:af:4f:a9:23:57:b4:7a:cd:e7:83:
d2:e7:86:d0:c2:e2:9a:e6:2c:d7:bc:b1:76:09:09:
bb:2c:ee:f8:cb:bb:27:d1:cc:de:8e:be:2e:3a:8b:
b7:03:31:47:05:64:c6:22:5a:dc:cd:9b:ce:a2:14:
d7:f2:fa:47:3b:61:51:eb:55:75:c4:69:b9:be:45:
ca:61:db:de:34:f8:dd:fc:06:eb:1a:f8:53:25:ab:
28:fe:8a:ea:b7:bc:0b:04:7f:35:08:1a:7f:7f:82:
42:48:75:4c:62:6d:89:04:35:c1:58:01:5b:b6:7d:
ac:6e:e8:06:51:2d:04:90:0b:5c:ee:10:6d:b4:f9:
14:fb:07:de:f5:f4:e1:60:ec:52:11:84:1b:f7:e4:
49:1c:cc:af:08:b3:71:10:05:fa:51:16:27:fe:46:
3b:2d:b9:82:e4:8c:6d:61:ad:61:79:61:81:c3:1f:
e8:02:85:15:8f:f8:6b:40:ff:c7:25:a5:41:70:00:
75:b3:bf:01:59:35:f2:60:8f:2f:5a:d4:40:4b:ea:
da:84:d8:9e:0c:4c:13:13:ed:bd:bf:94:82:46:78:
80:13:d5:41:27:5c:1b:a6:af:5d:a0:fa:76:2c:18:
a6:4b:aa:3f:a7:a6:fe:6a:00:11:dd:8f:df:28:09:
ea:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A8:98:CB:13:D8:A5:AD:E1:BD:5F:19:22:09:1C:71:DB:54:C1:71
X509v3 Authority Key Identifier:
keyid:20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:00:8c:cb:b4:dc:ac:b8:38:7c:da:bd:50:f5:fb:17:4d:c6:
bf:d2:8b:79:e1:10:4a:e9:58:99:f5:f0:60:a5:28:0a:dd:d2:
c6:a2:fe:09:37:59:d2:5f:c5:59:1e:90:ea:46:27:f6:a5:07:
39:07:1c:3d:5e:d4:b4:de:c9:bb:55:ad:0a:3d:5c:b3:75:e2:
56:91:4f:70:52:e2:b3:f7:7a:96:df:40:e6:03:c5:c1:e8:de:
da:43:37:97:b2:d9:97:6e:17:bc:fe:22:fa:e6:7c:e5:ef:2c:
5e:03:f0:91:88:2a:a8:8c:ff:45:ba:75:59:7e:e6:4b:83:a3:
2a:31:de:85:9a:9a:bb:fd:cd:55:34:c1:ec:2c:f2:cf:d1:05:
3b:83:7f:fe:86:57:b6:45:4f:b1:65:40:b2:2e:d2:fa:ae:99:
a5:eb:c7:35:83:f6:90:e9:d9:de:53:ec:b3:0a:c3:34:37:bb:
79:2e:24:c8:06:0a:27:0c:16:c0:8d:6a:df:d2:e1:04:f5:06:
aa:b5:99:03:cf:5d:b6:96:23:e5:f5:22:93:e7:81:bd:69:c1:
40:bc:fb:b1:f5:25:90:6d:d0:59:20:aa:cf:e0:25:b4:58:4f:
f6:08:2a:b0:44:72:c8:84:81:0d:88:f5:4f:d7:b1:fd:a6:8e:
d8:9c:2a:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qewfkSt6JfzbSBbHWM4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzlmMjQ5NTE5YjFmZjQ3OTM1MGYzMTcyNTRmNDA1ZThi
ZmNhYmQwHhcNMjUwMTMxMTQwMDQwWhcNMjUwMjAxMTQwMDQwWjAzMTEwLwYDVQQD
EyhmNGE4OThjYjEzZDhhNWFkZTFiZDVmMTkyMjA5MWM3MWRiNTRjMTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnBiaK9PqSNXtHrN54PS54bQwuKa
5izXvLF2CQm7LO74y7sn0czejr4uOou3AzFHBWTGIlrczZvOohTX8vpHO2FR61V1
xGm5vkXKYdveNPjd/AbrGvhTJaso/orqt7wLBH81CBp/f4JCSHVMYm2JBDXBWAFb
tn2sbugGUS0EkAtc7hBttPkU+wfe9fThYOxSEYQb9+RJHMyvCLNxEAX6URYn/kY7
LbmC5IxtYa1heWGBwx/oAoUVj/hrQP/HJaVBcAB1s78BWTXyYI8vWtRAS+rahNie
DEwTE+29v5SCRniAE9VBJ1wbpq9doPp2LBimS6o/p6b+agAR3Y/fKAnqBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSomMsT2KWt4b1fGSIJHHHbVMFxMB8GA1UdIwQY
MBaAFCDJ8klRmx/0eTUPMXJU9AXov8q9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1ueVNWR2JIX1I1TlE4eGNsVDBCZWlfeXIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOGMyNmYtMjVhMi00YjIwLTllY2Qt
MGU2YmNlZDAwNDYzLzEvSU1ueVNWR2JIX1I1TlE4eGNsVDBCZWlfeXIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zOGMyNmYtMjVhMi00YjIwLTllY2QtMGU2YmNlZDAwNDYz
LzEvSU1ueVNWR2JIX1I1TlE4eGNsVDBCZWlfeXIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtACMy7Tc
rLg4fNq9UPX7F03Gv9KLeeEQSulYmfXwYKUoCt3SxqL+CTdZ0l/FWR6Q6kYn9qUH
OQccPV7UtN7Ju1WtCj1cs3XiVpFPcFLis/d6lt9A5gPFweje2kM3l7LZl24XvP4i
+uZ85e8sXgPwkYgqqIz/Rbp1WX7mS4OjKjHehZqau/3NVTTB7Czyz9EFO4N//oZX
tkVPsWVAsi7S+q6ZpevHNYP2kOnZ3lPsswrDNDe7eS4kyAYKJwwWwI1q39LhBPUG
qrWZA89dtpYj5fUik+eBvWnBQLz7sfUlkG3QWSCqz+AltFhP9ggqsERyyISBDYj1
T9ex/aaO2JwqXw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:05:35 2025 by rpki-client