Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
File: cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json)
Hash identifier: YORw0vvWSfcYVJjlh02XaZD02nr3IvnQdqsiKURnQGg=
Subject key identifier: 98:E7:C6:16:CB:78:EC:79:3C:E1:B3:02:5D:C8:B3:CB:24:3E:4D:37
Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
Certificate issuer: /CN=713e45001a855e29381919d799dccb6c1190b5ac
Certificate serial: 0194BBCDEC606B30161DE018E685862B255C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
Manifest number: 075C
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: 6yvVJgjhGadjwDjy+jQLtmKG9Jvvvlz2nHZbghqklhw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ec:60:6b:30:16:1d:e0:18:e6:85:86:2b:25:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=98e7c616cb78ec793ce1b3025dc8b3cb243e4d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:0f:97:2b:6b:12:59:ea:9c:6b:f4:57:4b:
7b:1d:1e:a1:85:23:28:e7:1c:50:e5:0f:1d:e7:69:
7d:05:3a:96:1d:a5:63:fb:58:1f:3b:6b:d6:b0:b7:
f4:9a:11:37:3c:85:0b:43:05:01:5f:ee:79:b5:b4:
f3:95:30:bc:90:a7:fa:b8:af:98:a5:15:d5:da:17:
6a:d3:b6:89:b4:22:a8:f6:80:60:96:49:40:80:67:
35:63:11:8a:ee:51:6b:47:82:7a:ef:a5:e1:96:40:
e5:b0:2c:b4:93:92:44:51:94:6b:11:f4:8d:f2:e9:
bd:0a:45:fe:2e:29:7e:67:a3:1d:95:b7:7d:ff:a7:
e8:37:b5:ee:3b:35:37:af:a8:6a:10:12:be:22:84:
9d:73:96:f6:04:9d:b6:6c:88:34:02:a7:70:af:cb:
17:e8:b0:dc:dd:40:f6:1f:c6:64:c8:55:53:03:f5:
9f:e0:07:33:37:12:87:9c:5a:09:24:e5:90:89:9d:
50:0b:2a:59:e0:03:d1:21:5e:80:d4:59:2a:2c:8a:
60:3b:37:c7:ff:9e:2c:18:e8:78:db:2e:59:cf:f6:
54:08:58:21:09:a4:e6:2b:3c:30:33:9f:30:1f:16:
c1:9e:f7:d5:f0:c9:f5:81:d5:be:7f:0a:9c:f0:d5:
79:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E7:C6:16:CB:78:EC:79:3C:E1:B3:02:5D:C8:B3:CB:24:3E:4D:37
X509v3 Authority Key Identifier:
keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:82:3f:21:05:f8:e0:1e:1c:ff:15:47:79:ad:c8:f1:9c:1d:
2e:a6:11:b8:5f:f5:30:df:f4:4d:aa:51:92:dc:e2:01:6e:c2:
70:a3:34:e9:17:fe:94:ca:86:64:2d:53:16:39:e4:8a:31:f8:
8a:9e:b2:68:3d:59:3a:ce:33:37:2b:3e:10:88:8f:1a:6b:09:
48:e4:a4:b4:c4:ea:63:f5:2d:a1:25:5b:0d:ff:39:55:bf:c6:
bc:19:e2:ed:a9:e3:7e:02:ef:93:dd:3e:78:e3:8c:60:2a:4f:
13:0d:06:3c:c7:f4:2a:a6:2c:a1:35:2c:6d:9e:14:95:55:36:
2b:d0:b6:3a:de:f8:ff:33:14:32:78:c9:43:52:84:ee:a3:74:
88:19:d4:13:4b:0b:42:3b:0f:55:0f:29:92:7f:12:c3:2b:bd:
dd:e0:2b:06:d9:af:13:28:c7:e7:d2:ba:ba:0f:5b:44:01:87:
2a:e9:d4:9e:41:25:2a:74:93:c6:59:90:41:7f:38:ac:18:1a:
48:9d:1c:20:ea:d0:55:4e:7f:1f:df:22:54:81:3a:86:91:0d:
8c:63:d0:c6:57:fd:1a:b3:78:d6:a9:62:0a:60:34:56:ce:d1:
c6:05:ee:2e:dd:3a:48:5a:64:a2:3d:68:ef:9f:4b:78:ab:b9:
9f:e7:85:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zexgazAWHeAY5oWGKyVcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxM2U0NTAwMWE4NTVlMjkzODE5MTlkNzk5ZGNjYjZjMTE5
MGI1YWMwHhcNMjUwMTMxMTAwMDIyWhcNMjUwMjAxMTAwMDIyWjAzMTEwLwYDVQQD
Eyg5OGU3YzYxNmNiNzhlYzc5M2NlMWIzMDI1ZGM4YjNjYjI0M2U0ZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySwPlytrElnqnGv0V0t7HR6hhSMo
5xxQ5Q8d52l9BTqWHaVj+1gfO2vWsLf0mhE3PIULQwUBX+55tbTzlTC8kKf6uK+Y
pRXV2hdq07aJtCKo9oBglklAgGc1YxGK7lFrR4J676XhlkDlsCy0k5JEUZRrEfSN
8um9CkX+Lil+Z6Mdlbd9/6foN7XuOzU3r6hqEBK+IoSdc5b2BJ22bIg0Aqdwr8sX
6LDc3UD2H8ZkyFVTA/Wf4AczNxKHnFoJJOWQiZ1QCypZ4APRIV6A1FkqLIpgOzfH
/54sGOh42y5Zz/ZUCFghCaTmKzwwM58wHxbBnvfV8Mn1gdW+fwqc8NV5awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjnxhbLeOx5POGzAl3Is8skPk03MB8GA1UdIwQY
MBaAFHE+RQAahV4pOBkZ15ncy2wRkLWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jYTQ2ZmItMzczNC00YTkyLTg3Y2It
NjVmMTJiMmU3OTcwLzEvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jYTQ2ZmItMzczNC00YTkyLTg3Y2ItNjVmMTJiMmU3OTcw
LzEvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOII/IQX4
4B4c/xVHea3I8ZwdLqYRuF/1MN/0TapRktziAW7CcKM06Rf+lMqGZC1TFjnkijH4
ip6yaD1ZOs4zNys+EIiPGmsJSOSktMTqY/UtoSVbDf85Vb/GvBni7anjfgLvk90+
eOOMYCpPEw0GPMf0KqYsoTUsbZ4UlVU2K9C2Ot74/zMUMnjJQ1KE7qN0iBnUE0sL
QjsPVQ8pkn8Swyu93eArBtmvEyjH59K6ug9bRAGHKunUnkElKnSTxlmQQX84rBga
SJ0cIOrQVU5/H98iVIE6hpENjGPQxlf9GrN41qliCmA0Vs7RxgXuLt06SFpkoj1o
759LeKu5n+eFfA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:20:44 2025 by rpki-client