Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
File: ALlD7lfDXyx_T-wGhel9YDsHytI.mft (raw, json)
Hash identifier: e7O6pBvKZkzorK+GYEnt+71MUZ1uJ4vvt80vgQc90eg=
Subject key identifier: 13:2A:5F:3B:BD:A6:98:68:CB:E0:7E:9E:C0:41:52:11:26:8D:17:92
Authority key identifier: 00:B9:43:EE:57:C3:5F:2C:7F:4F:EC:06:85:E9:7D:60:3B:07:CA:D2
Certificate issuer: /CN=00b943ee57c35f2c7f4fec0685e97d603b07cad2
Certificate serial: 0194BD17E0D067E7F6B103F832C320BF9258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
Manifest number: 07ED
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: ALlD7lfDXyx_T-wGhel9YDsHytI.crl (hash: GbSpiLlKBSadDZBRwGUZXbw+kkDlpdYCiIJNCBX+6kc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e0:d0:67:e7:f6:b1:03:f8:32:c3:20:bf:92:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b943ee57c35f2c7f4fec0685e97d603b07cad2
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=132a5f3bbda69868cbe07e9ec0415211268d1792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:bb:bd:20:34:97:2a:4e:2e:ad:06:37:c0:e0:
c6:76:a3:29:b7:ad:2a:7d:7b:79:0b:e5:f7:cc:a6:
a1:83:0e:76:a2:3c:44:41:92:a9:7b:d6:60:03:81:
15:2e:66:bc:6b:5e:31:37:77:8a:77:75:a3:de:7a:
f1:ea:47:e7:1d:13:28:30:f5:5f:9a:ce:21:59:91:
38:70:cc:26:c4:84:53:f7:b7:2b:a8:a9:40:b5:4c:
88:2e:97:38:6d:73:06:35:c4:06:37:1e:7d:0a:07:
32:55:a8:76:f1:56:0f:02:f6:48:4c:14:9f:df:a4:
d2:86:62:a7:13:9c:e7:e7:9b:2f:98:d0:5a:d1:4a:
b4:60:25:87:8d:e3:bc:e2:f2:06:cd:af:bb:f6:d2:
37:6e:fd:75:28:2b:67:3a:a3:ab:11:ae:4a:93:c4:
07:c9:2c:f2:50:c9:09:39:1e:71:18:ef:ec:39:2b:
40:52:a4:99:68:1a:eb:c0:81:fe:e3:4e:e9:a4:4a:
c5:32:e5:a5:7b:2c:cf:ac:13:fd:e9:65:d7:69:38:
08:ef:54:1c:fc:58:ce:ad:4d:be:52:93:22:58:29:
73:e9:f2:0f:20:2b:e2:15:e6:95:65:2b:4e:28:a0:
ca:a6:c6:a0:44:e4:fa:ff:0b:c3:af:d2:89:21:6a:
04:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2A:5F:3B:BD:A6:98:68:CB:E0:7E:9E:C0:41:52:11:26:8D:17:92
X509v3 Authority Key Identifier:
keyid:00:B9:43:EE:57:C3:5F:2C:7F:4F:EC:06:85:E9:7D:60:3B:07:CA:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:aa:bc:23:46:c1:19:58:82:b6:cf:16:19:6f:f2:cc:5f:f9:
ae:0f:71:f9:b0:98:ca:af:6c:38:9c:7e:ed:59:d6:e3:17:1e:
3a:34:19:d0:19:b6:e0:78:f2:47:6a:9f:83:4a:1a:e4:52:ee:
16:6c:a8:45:0f:37:e3:9d:62:c4:d2:e9:e4:67:de:4a:f9:e9:
e7:e6:73:2c:f9:6e:59:db:86:c1:93:d8:2f:32:62:ce:96:11:
45:67:43:2d:67:bc:e2:6f:c5:2c:3d:a7:39:59:6c:2c:20:d3:
07:0a:00:af:06:26:e9:33:40:ab:6f:0d:4a:29:42:c8:02:f1:
df:bb:03:70:92:0e:a3:60:3e:e6:50:84:d2:74:a1:00:0e:33:
47:45:ad:6a:33:b7:63:07:bf:89:73:fd:9e:3e:1a:f3:ea:bd:
f2:6a:1e:b2:2c:dd:13:aa:c1:cb:6c:c8:06:7b:4a:c9:d5:09:
e2:5e:ad:77:19:da:af:31:2b:1a:70:cd:38:8d:11:75:57:d1:
48:27:45:e8:5f:26:14:da:d1:5b:44:25:50:ab:30:df:a3:2a:
6f:f7:f4:81:9e:4d:0e:38:6d:39:5c:3e:6b:23:0e:c1:14:70:
07:88:73:80:8b:75:7c:e8:a6:32:c1:4c:f1:07:ae:44:8b:68:
ec:47:e5:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+DQZ+f2sQP4MsMgv5JYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYjk0M2VlNTdjMzVmMmM3ZjRmZWMwNjg1ZTk3ZDYwM2Iw
N2NhZDIwHhcNMjUwMTMxMTYwMDQ2WhcNMjUwMjAxMTYwMDQ2WjAzMTEwLwYDVQQD
EygxMzJhNWYzYmJkYTY5ODY4Y2JlMDdlOWVjMDQxNTIxMTI2OGQxNzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9bu9IDSXKk4urQY3wODGdqMpt60q
fXt5C+X3zKahgw52ojxEQZKpe9ZgA4EVLma8a14xN3eKd3Wj3nrx6kfnHRMoMPVf
ms4hWZE4cMwmxIRT97crqKlAtUyILpc4bXMGNcQGNx59CgcyVah28VYPAvZITBSf
36TShmKnE5zn55svmNBa0Uq0YCWHjeO84vIGza+79tI3bv11KCtnOqOrEa5Kk8QH
ySzyUMkJOR5xGO/sOStAUqSZaBrrwIH+407ppErFMuWleyzPrBP96WXXaTgI71Qc
/FjOrU2+UpMiWClz6fIPICviFeaVZStOKKDKpsagROT6/wvDr9KJIWoEgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMqXzu9pphoy+B+nsBBUhEmjReSMB8GA1UdIwQY
MBaAFAC5Q+5Xw18sf0/sBoXpfWA7B8rSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUxsRDdsZkRYeXhfVC13R2hlbDlZRHNIeXRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80OGYwOWUtNzM4Ni00MTM5LTkxYzgt
M2M4OGU0MGU3MTFjLzEvQUxsRDdsZkRYeXhfVC13R2hlbDlZRHNIeXRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80OGYwOWUtNzM4Ni00MTM5LTkxYzgtM2M4OGU0MGU3MTFj
LzEvQUxsRDdsZkRYeXhfVC13R2hlbDlZRHNIeXRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyaq8I0bB
GViCts8WGW/yzF/5rg9x+bCYyq9sOJx+7VnW4xceOjQZ0Bm24HjyR2qfg0oa5FLu
FmyoRQ83451ixNLp5GfeSvnp5+ZzLPluWduGwZPYLzJizpYRRWdDLWe84m/FLD2n
OVlsLCDTBwoArwYm6TNAq28NSilCyALx37sDcJIOo2A+5lCE0nShAA4zR0WtajO3
Ywe/iXP9nj4a8+q98moesizdE6rBy2zIBntKydUJ4l6tdxnarzErGnDNOI0RdVfR
SCdF6F8mFNrRW0QlUKsw36Mqb/f0gZ5NDjhtOVw+ayMOwRRwB4hzgIt1fOimMsFM
8QeuRIto7Efl+A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:19 2025 by rpki-client