Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
File: T7murXluvL6SUPqiksQOioWIx50.mft (raw, json)
Hash identifier: hX0qVvtUTgAXlVsRNOu/5fbrYPeKoK8eEBqWu/kRVkY=
Subject key identifier: 42:B0:F3:54:AB:F1:5A:D0:F6:A5:55:8B:11:8D:D5:1F:4F:D8:87:41
Authority key identifier: 4F:B9:AE:AD:79:6E:BC:BE:92:50:FA:A2:92:C4:0E:8A:85:88:C7:9D
Certificate issuer: /CN=4fb9aead796ebcbe9250faa292c40e8a8588c79d
Certificate serial: 0194BBCDE233E32C395322ABA60053A83456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
Manifest number: 0F0E
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: T7murXluvL6SUPqiksQOioWIx50.crl (hash: RMaeXEzgnccrfZ7uqpEQShG8Fyz6b37WlYlON0aE70A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e2:33:e3:2c:39:53:22:ab:a6:00:53:a8:34:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb9aead796ebcbe9250faa292c40e8a8588c79d
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=42b0f354abf15ad0f6a5558b118dd51f4fd88741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:88:b1:79:0f:47:2c:72:d9:02:54:c9:f7:dc:
60:65:bf:36:2f:60:72:9a:50:d3:b3:c9:88:ae:5a:
07:b7:99:2d:ea:cd:f1:9b:78:58:1b:cb:06:1e:99:
37:cd:f4:b5:bf:f0:01:ce:d1:73:3b:89:93:5c:ed:
37:20:a5:85:3e:c8:aa:dd:a8:c2:c7:46:fe:f2:34:
13:04:e1:f1:25:05:07:d3:42:dd:22:1e:92:f4:5d:
a4:f6:bc:19:80:25:40:ff:85:76:e1:69:9e:65:27:
11:60:48:6d:14:1a:c1:e1:25:40:41:d4:23:dc:ea:
12:d0:98:df:ba:db:7e:d3:f7:16:d5:24:3e:07:49:
1d:8d:d2:6a:b7:3e:07:d8:18:a4:90:aa:8d:d8:6d:
0b:19:cb:26:77:62:28:ab:de:68:e4:41:29:22:d6:
22:e7:0d:fc:e4:29:e9:b4:7e:1e:06:54:61:d7:28:
e5:9f:15:08:fe:aa:5e:c4:21:aa:48:9a:c0:7a:21:
7c:3d:f2:c3:ff:84:66:f3:51:29:23:4b:cf:15:3f:
ba:89:34:79:5b:f2:3d:97:67:c2:3a:9f:04:6d:c3:
9e:cc:0b:d7:7e:15:9d:84:e0:ba:32:38:17:6d:64:
cb:e5:2b:66:9a:33:bb:06:95:c6:4b:f5:93:2d:96:
39:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B0:F3:54:AB:F1:5A:D0:F6:A5:55:8B:11:8D:D5:1F:4F:D8:87:41
X509v3 Authority Key Identifier:
keyid:4F:B9:AE:AD:79:6E:BC:BE:92:50:FA:A2:92:C4:0E:8A:85:88:C7:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b4:85:f9:22:a0:43:59:98:4b:f4:a5:2e:a7:7f:d8:55:56:
d5:82:2e:31:8e:02:4d:ba:2d:0c:5d:68:0a:a2:5e:2c:97:82:
43:be:70:0b:f3:fe:65:9b:3a:d1:79:84:df:48:49:75:96:cf:
74:55:0e:0f:84:6b:f4:1c:a4:be:aa:c9:f8:4a:48:6d:1a:37:
fa:c9:b9:55:e1:34:de:88:6f:4a:7c:40:b7:3e:ce:1d:ec:e5:
5b:f9:e8:33:9d:af:3b:35:81:a5:dd:c3:aa:e5:3d:39:11:53:
49:b0:1b:e0:18:58:fc:74:60:4f:ef:86:ca:a1:c3:d0:f6:e3:
63:f2:ca:91:71:98:a2:f3:c7:9e:5f:86:c3:1a:75:fb:9d:eb:
8f:bd:98:4c:52:aa:66:ea:3a:36:9f:73:b7:77:00:ad:4a:f2:
68:9f:f8:c9:94:6d:22:5b:80:f1:26:6e:c5:71:e8:ce:3e:de:
d5:1b:08:51:c2:59:59:38:a2:27:d6:2c:f8:03:64:90:58:11:
bb:65:32:f3:cb:64:dc:c6:00:19:14:4b:d5:ad:70:31:cd:96:
a7:e1:a6:82:14:98:2c:2e:4a:08:69:b2:52:7a:c4:f6:a7:6d:
b5:81:bb:2c:df:0a:26:82:df:37:44:a2:d2:7f:a9:7f:0e:43:
bc:c8:8c:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zeIz4yw5UyKrpgBTqDRWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYjlhZWFkNzk2ZWJjYmU5MjUwZmFhMjkyYzQwZThhODU4
OGM3OWQwHhcNMjUwMTMxMTAwMDE5WhcNMjUwMjAxMTAwMDE5WjAzMTEwLwYDVQQD
Eyg0MmIwZjM1NGFiZjE1YWQwZjZhNTU1OGIxMThkZDUxZjRmZDg4NzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YixeQ9HLHLZAlTJ99xgZb82L2By
mlDTs8mIrloHt5kt6s3xm3hYG8sGHpk3zfS1v/ABztFzO4mTXO03IKWFPsiq3ajC
x0b+8jQTBOHxJQUH00LdIh6S9F2k9rwZgCVA/4V24WmeZScRYEhtFBrB4SVAQdQj
3OoS0Jjfutt+0/cW1SQ+B0kdjdJqtz4H2BikkKqN2G0LGcsmd2Ioq95o5EEpItYi
5w385CnptH4eBlRh1yjlnxUI/qpexCGqSJrAeiF8PfLD/4Rm81EpI0vPFT+6iTR5
W/I9l2fCOp8EbcOezAvXfhWdhOC6MjgXbWTL5StmmjO7BpXGS/WTLZY5HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKw81Sr8VrQ9qVVixGN1R9P2IdBMB8GA1UdIwQY
MBaAFE+5rq15bry+klD6opLEDoqFiMedMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDdtdXJYbHV2TDZTVVBxaWtzUU9pb1dJeDUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xMWYwMDQtNDQxZi00NzBkLTg5Mjct
NzZhOTEwOWE2MmU3LzEvVDdtdXJYbHV2TDZTVVBxaWtzUU9pb1dJeDUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xMWYwMDQtNDQxZi00NzBkLTg5MjctNzZhOTEwOWE2MmU3
LzEvVDdtdXJYbHV2TDZTVVBxaWtzUU9pb1dJeDUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7SF+SKg
Q1mYS/SlLqd/2FVW1YIuMY4CTbotDF1oCqJeLJeCQ75wC/P+ZZs60XmE30hJdZbP
dFUOD4Rr9BykvqrJ+EpIbRo3+sm5VeE03ohvSnxAtz7OHezlW/noM52vOzWBpd3D
quU9ORFTSbAb4BhY/HRgT++GyqHD0PbjY/LKkXGYovPHnl+Gwxp1+53rj72YTFKq
Zuo6Np9zt3cArUryaJ/4yZRtIluA8SZuxXHozj7e1RsIUcJZWTiiJ9Ys+ANkkFgR
u2Uy88tk3MYAGRRL1a1wMc2Wp+GmghSYLC5KCGmyUnrE9qdttYG7LN8KJoLfN0Si
0n+pfw5DvMiMvA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:44 2025 by rpki-client