Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
File: dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft (raw, json)
Hash identifier: H0w1fFGmjD5r77dcd3vTqA3mOeTykCBR8JhGUqHp5cg=
Subject key identifier: B3:EA:5C:09:45:2A:68:1D:CD:5F:D4:42:97:67:A9:A8:69:D4:60:8A
Authority key identifier: 74:23:0D:14:2E:EC:7F:6A:99:B0:DB:40:96:F9:3A:04:20:48:3F:E6
Certificate issuer: /CN=74230d142eec7f6a99b0db4096f93a0420483fe6
Certificate serial: 0194BBCEA7E83AAA97F32C16B0D20CDB62AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
Manifest number: 061F
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl (hash: A5xSDK6Y3k7PLRp7frJCx/c6swDaOVNOMf29csnRaDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a7:e8:3a:aa:97:f3:2c:16:b0:d2:0c:db:62:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74230d142eec7f6a99b0db4096f93a0420483fe6
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=b3ea5c09452a681dcd5fd4429767a9a869d4608a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6b:08:a3:8d:f3:91:de:f0:4c:d5:02:6b:ca:
50:26:b2:f0:1a:1b:ed:3a:3b:4a:93:fb:7c:ff:54:
06:d1:ca:6f:80:51:76:1b:f3:27:da:58:21:b1:6c:
ca:fd:ae:13:06:db:06:53:27:f7:69:a4:7d:73:a9:
75:90:0c:1e:0f:4d:af:4a:df:ea:16:4d:b6:82:a6:
d6:8d:bc:86:40:80:37:ec:e2:c0:98:2b:c5:21:68:
52:22:d8:e6:96:05:44:3d:60:e0:51:b8:90:08:e1:
42:e7:ab:57:87:68:59:87:05:9a:10:db:a9:07:2e:
9a:03:2c:62:b6:3b:a2:f7:68:5e:74:b8:33:46:4d:
6e:dd:e3:e0:40:d5:88:df:08:9e:c3:2c:a2:ed:fe:
74:9c:d2:93:d4:21:ed:30:0e:78:b7:8a:c9:14:97:
5f:57:e7:48:10:a6:fd:cb:be:f0:21:54:1c:ce:49:
64:e7:b6:a4:60:90:6a:92:cb:68:31:ae:12:41:27:
8c:a1:ea:38:03:82:11:57:a2:a3:d6:36:79:10:ba:
5a:b0:ea:6f:b2:71:21:0a:e1:91:78:ee:05:56:f9:
0f:7c:f0:38:90:48:3e:b6:1b:71:10:6c:a7:11:67:
0a:4d:50:e4:a2:64:60:ff:3b:95:2a:17:7c:0d:2c:
b9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EA:5C:09:45:2A:68:1D:CD:5F:D4:42:97:67:A9:A8:69:D4:60:8A
X509v3 Authority Key Identifier:
keyid:74:23:0D:14:2E:EC:7F:6A:99:B0:DB:40:96:F9:3A:04:20:48:3F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4f:2f:17:07:47:c1:eb:cf:b3:63:69:7c:bf:df:ac:7b:c8:
05:b4:0b:72:b7:bc:c9:5b:4e:c9:b7:da:33:f9:b8:93:19:9e:
6e:39:6f:d2:a1:24:29:02:d1:52:df:6d:62:2f:b2:be:d9:4f:
38:0d:89:1b:b0:b2:7f:4d:4d:6c:b3:71:6d:49:b0:92:88:11:
78:20:50:e7:6f:d5:62:02:34:f1:dd:da:13:c7:17:e7:20:04:
0a:cd:41:ff:63:da:13:b3:20:ee:17:ce:d5:a1:ab:f9:b8:ae:
47:09:d8:3e:88:94:e6:dc:8a:ee:1c:e5:00:f2:0d:ae:30:e0:
9d:dd:4c:80:19:0c:8b:ae:b3:5d:81:ec:36:5e:71:93:ad:9c:
f3:17:c6:32:cf:18:70:53:a7:5f:99:5e:68:31:69:f4:2f:c2:
65:af:80:9b:df:30:33:31:40:71:54:23:32:f6:4a:08:ff:40:
f3:36:52:72:e4:b5:87:92:d0:ea:84:5b:31:d9:36:9f:9d:06:
a5:1e:a0:0d:71:f6:d9:1f:df:72:b2:2b:a3:a5:8d:5e:38:0e:
27:e2:2d:c4:54:13:83:d5:15:d6:9c:9b:d2:c4:28:e9:db:93:
1f:ae:c7:de:d7:ea:7f:a9:0b:e6:46:e0:52:5e:87:00:ea:33:
d6:bc:ce:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zqfoOqqX8ywWsNIM22KsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MjMwZDE0MmVlYzdmNmE5OWIwZGI0MDk2ZjkzYTA0MjA0
ODNmZTYwHhcNMjUwMTMxMTAwMTEwWhcNMjUwMjAxMTAwMTEwWjAzMTEwLwYDVQQD
EyhiM2VhNWMwOTQ1MmE2ODFkY2Q1ZmQ0NDI5NzY3YTlhODY5ZDQ2MDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+msIo43zkd7wTNUCa8pQJrLwGhvt
OjtKk/t8/1QG0cpvgFF2G/Mn2lghsWzK/a4TBtsGUyf3aaR9c6l1kAweD02vSt/q
Fk22gqbWjbyGQIA37OLAmCvFIWhSItjmlgVEPWDgUbiQCOFC56tXh2hZhwWaENup
By6aAyxitjui92hedLgzRk1u3ePgQNWI3wiewyyi7f50nNKT1CHtMA54t4rJFJdf
V+dIEKb9y77wIVQczklk57akYJBqkstoMa4SQSeMoeo4A4IRV6Kj1jZ5ELpasOpv
snEhCuGReO4FVvkPfPA4kEg+thtxEGynEWcKTVDkomRg/zuVKhd8DSy5eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPqXAlFKmgdzV/UQpdnqahp1GCKMB8GA1UdIwQY
MBaAFHQjDRQu7H9qmbDbQJb5OgQgSD/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZENNTkZDN3NmMnFac050QWx2azZCQ0JJUC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OTc1NjQtMDAyNS00ZjkyLThkZmQt
Y2UxYzAzNDAwZDRkLzEvZENNTkZDN3NmMnFac050QWx2azZCQ0JJUC1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82OTc1NjQtMDAyNS00ZjkyLThkZmQtY2UxYzAzNDAwZDRk
LzEvZENNTkZDN3NmMnFac050QWx2azZCQ0JJUC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ08vFwdH
wevPs2NpfL/frHvIBbQLcre8yVtOybfaM/m4kxmebjlv0qEkKQLRUt9tYi+yvtlP
OA2JG7Cyf01NbLNxbUmwkogReCBQ52/VYgI08d3aE8cX5yAECs1B/2PaE7Mg7hfO
1aGr+biuRwnYPoiU5tyK7hzlAPINrjDgnd1MgBkMi66zXYHsNl5xk62c8xfGMs8Y
cFOnX5leaDFp9C/CZa+Am98wMzFAcVQjMvZKCP9A8zZScuS1h5LQ6oRbMdk2n50G
pR6gDXH22R/fcrIro6WNXjgOJ+ItxFQTg9UV1pyb0sQo6duTH67H3tfqf6kL5kbg
Ul6HAOoz1rzOlg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:38 2025 by rpki-client