Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d59c75-04a7-429b-86a3-1448aaf92e26/1/RPXOs0u3ciiYLs9BpAD6sQRtlmw.mft
File: RPXOs0u3ciiYLs9BpAD6sQRtlmw.mft (raw, json)
Hash identifier: 99cmelxmKsUT9dCLiNk57/TzDROQbn1RO8HPkQ8T2HM=
Subject key identifier: D8:8A:C7:6F:7D:B0:14:D7:50:6E:13:37:CC:08:73:ED:8A:BB:B7:41
Authority key identifier: 44:F5:CE:B3:4B:B7:72:28:98:2E:CF:41:A4:00:FA:B1:04:6D:96:6C
Certificate issuer: /CN=44f5ceb34bb77228982ecf41a400fab1046d966c
Certificate serial: 0194BC3C2BECC88B137955502D94BC575750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPXOs0u3ciiYLs9BpAD6sQRtlmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d59c75-04a7-429b-86a3-1448aaf92e26/1/RPXOs0u3ciiYLs9BpAD6sQRtlmw.mft
Manifest number: 0CAA
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: RPXOs0u3ciiYLs9BpAD6sQRtlmw.crl (hash: ZiGJ6IB963Y4pK0USwEL86C2shCMKf9myepyXxfkiSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2b:ec:c8:8b:13:79:55:50:2d:94:bc:57:57:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f5ceb34bb77228982ecf41a400fab1046d966c
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=d88ac76f7db014d7506e1337cc0873ed8abbb741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:28:2d:ca:38:12:b1:ab:15:f8:bc:58:5d:
18:a7:3f:8e:b3:f6:41:76:5a:fc:66:7d:b2:d0:68:
d3:29:32:66:64:f2:c6:71:50:af:e2:80:b1:08:e0:
31:d5:d8:59:82:1a:d7:d0:00:bd:4a:a6:c6:38:db:
50:34:1c:6a:9d:12:ae:e9:0c:1b:cc:63:f8:0c:3e:
d0:c8:d9:58:80:52:e3:8b:cc:83:2d:e2:6d:95:c3:
a7:fb:0e:f4:c9:ad:4b:89:28:11:65:c7:85:7b:09:
dc:8e:c2:46:72:04:8e:5a:47:ab:88:66:5f:56:a2:
b0:a7:d2:a0:49:39:09:fd:bb:96:b1:8a:6e:31:b9:
df:62:be:0b:90:9c:2a:4d:28:c0:cd:b1:f2:92:63:
3e:2d:d2:e4:3c:44:9b:56:c9:7e:32:8b:17:ac:1e:
62:92:f4:75:82:f4:12:d2:72:c9:6f:aa:6b:8e:c2:
21:74:c3:de:00:d7:fd:96:08:ad:8b:32:3a:40:4d:
f7:75:fd:3c:3f:fc:aa:27:5c:c7:d3:a6:ac:df:ea:
97:dc:93:5d:fa:bb:a4:d7:07:3a:5e:83:d4:41:c5:
a8:f6:d0:ea:15:b3:43:96:b7:e9:7d:50:cd:88:c1:
5d:82:a1:50:4d:67:f4:c7:75:ae:a4:d7:ed:18:eb:
3b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8A:C7:6F:7D:B0:14:D7:50:6E:13:37:CC:08:73:ED:8A:BB:B7:41
X509v3 Authority Key Identifier:
keyid:44:F5:CE:B3:4B:B7:72:28:98:2E:CF:41:A4:00:FA:B1:04:6D:96:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPXOs0u3ciiYLs9BpAD6sQRtlmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d59c75-04a7-429b-86a3-1448aaf92e26/1/RPXOs0u3ciiYLs9BpAD6sQRtlmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d59c75-04a7-429b-86a3-1448aaf92e26/1/RPXOs0u3ciiYLs9BpAD6sQRtlmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ff:8e:4c:1b:ab:d2:e3:46:3d:9d:fa:00:88:48:3b:df:9b:
3a:65:6c:b9:2d:37:71:34:8c:4e:b0:df:df:c4:3e:e7:38:ef:
87:49:18:ff:86:69:23:a9:6c:aa:75:b7:e1:51:00:ce:c8:b7:
1d:81:4a:5f:50:07:30:31:4b:89:45:8a:ab:cc:02:68:e8:d1:
31:c4:68:58:40:00:af:e4:e3:15:29:2d:be:56:6d:04:3b:74:
ce:2f:db:fb:7c:8e:40:e1:a8:61:77:ce:9f:2e:e9:d8:b9:58:
9a:82:b8:2d:60:6d:04:de:49:4b:4a:ff:92:e3:1d:7b:08:5a:
03:a6:9b:74:45:d7:4d:c3:86:91:b1:7d:5e:dd:fa:15:c3:45:
84:63:b3:d6:5a:7b:1d:ea:ed:46:b2:06:ad:09:ec:68:3c:78:
1c:0d:97:3f:2c:c0:84:5e:a4:79:53:6a:c6:0b:75:d1:c4:f5:
0c:6c:67:63:f0:5c:a4:0a:91:0f:02:fb:5e:89:05:e5:7e:8b:
c5:67:69:74:d7:2e:fc:0e:52:71:c7:ce:9e:a5:c2:aa:dc:75:
67:da:4f:04:21:ab:3a:26:ea:97:79:13:a0:4f:ce:5c:2d:a3:
0b:d7:37:b9:4a:ba:b8:6c:18:a2:30:c2:7b:68:20:fd:db:ca:
40:96:fc:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PCvsyIsTeVVQLZS8V1dQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZjVjZWIzNGJiNzcyMjg5ODJlY2Y0MWE0MDBmYWIxMDQ2
ZDk2NmMwHhcNMjUwMTMxMTIwMDQ3WhcNMjUwMjAxMTIwMDQ3WjAzMTEwLwYDVQQD
EyhkODhhYzc2ZjdkYjAxNGQ3NTA2ZTEzMzdjYzA4NzNlZDhhYmJiNzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohsoLco4ErGrFfi8WF0Ypz+Os/ZB
dlr8Zn2y0GjTKTJmZPLGcVCv4oCxCOAx1dhZghrX0AC9SqbGONtQNBxqnRKu6Qwb
zGP4DD7QyNlYgFLji8yDLeJtlcOn+w70ya1LiSgRZceFewncjsJGcgSOWkeriGZf
VqKwp9KgSTkJ/buWsYpuMbnfYr4LkJwqTSjAzbHykmM+LdLkPESbVsl+MosXrB5i
kvR1gvQS0nLJb6prjsIhdMPeANf9lgitizI6QE33df08P/yqJ1zH06as3+qX3JNd
+ruk1wc6XoPUQcWo9tDqFbNDlrfpfVDNiMFdgqFQTWf0x3WupNftGOs7PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiKx299sBTXUG4TN8wIc+2Ku7dBMB8GA1UdIwQY
MBaAFET1zrNLt3IomC7PQaQA+rEEbZZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlBYT3MwdTNjaWlZTHM5QnBBRDZzUVJ0bG13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kNTljNzUtMDRhNy00MjliLTg2YTMt
MTQ0OGFhZjkyZTI2LzEvUlBYT3MwdTNjaWlZTHM5QnBBRDZzUVJ0bG13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9kNTljNzUtMDRhNy00MjliLTg2YTMtMTQ0OGFhZjkyZTI2
LzEvUlBYT3MwdTNjaWlZTHM5QnBBRDZzUVJ0bG13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJf+OTBur
0uNGPZ36AIhIO9+bOmVsuS03cTSMTrDf38Q+5zjvh0kY/4ZpI6lsqnW34VEAzsi3
HYFKX1AHMDFLiUWKq8wCaOjRMcRoWEAAr+TjFSktvlZtBDt0zi/b+3yOQOGoYXfO
ny7p2LlYmoK4LWBtBN5JS0r/kuMdewhaA6abdEXXTcOGkbF9Xt36FcNFhGOz1lp7
HertRrIGrQnsaDx4HA2XPyzAhF6keVNqxgt10cT1DGxnY/BcpAqRDwL7XokF5X6L
xWdpdNcu/A5SccfOnqXCqtx1Z9pPBCGrOibql3kToE/OXC2jC9c3uUq6uGwYojDC
e2gg/dvKQJb8fQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:33:32 2025 by rpki-client