Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
File: ClCzt81M47FFt1O_cXmpVczSkl0.mft (raw, json)
Hash identifier: 1K/F8XAy6ZBRGmZWy1h0Pec0RaEj9PsTa21YhgiqhSk=
Subject key identifier: 56:37:E4:8C:36:C3:74:CF:07:2C:52:D0:4A:B2:E3:CA:D5:3C:3B:69
Authority key identifier: 0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D
Certificate issuer: /CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d
Certificate serial: 0194BCE09BB685358E3636AD9DD5DB062E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
Manifest number: 0479
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: ClCzt81M47FFt1O_cXmpVczSkl0.crl (hash: w22cUXjZ/J23tlLidT9yZ5gs5ni+SHMDPoFnfKEMmK0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9b:b6:85:35:8e:36:36:ad:9d:d5:db:06:2e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=5637e48c36c374cf072c52d04ab2e3cad53c3b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:55:e2:54:75:82:a1:d3:aa:e2:a4:5b:c1:
02:4a:f3:21:88:8d:61:87:b3:20:6b:e9:e5:5a:d0:
2e:95:62:de:aa:6b:14:4f:f3:5c:c0:2c:ff:85:3c:
56:ef:76:59:f3:81:8b:b2:5f:0c:3f:dc:30:cd:22:
ab:e7:a5:75:4b:2c:6c:ac:a5:86:2a:9a:63:77:63:
10:db:ec:50:3b:f9:d7:d0:5b:b4:72:0d:88:55:32:
d9:6a:ac:05:01:b6:37:58:ca:46:51:bb:e4:d8:87:
86:b5:bc:cd:df:d6:fb:e8:0b:95:b4:fc:6f:10:b6:
65:6b:2b:d8:0d:01:e7:f4:ab:c6:2e:38:79:8d:db:
3b:e4:55:90:73:5e:ef:90:92:45:15:8e:53:46:c9:
85:7a:63:68:6f:dd:fa:93:35:7f:e9:ae:01:d6:2d:
af:37:16:a6:6d:48:35:dd:42:03:0c:91:6f:bf:0c:
19:7c:cc:49:28:51:8a:94:35:30:7b:8d:fa:c6:af:
bb:26:79:27:70:37:2f:1c:bb:b1:86:95:2c:21:06:
8c:94:19:00:75:86:98:91:b0:6b:f8:3f:f5:f4:d5:
bd:ad:bb:03:d3:1f:a0:39:75:a2:07:99:ad:81:57:
fe:3e:56:e3:65:ab:d7:b3:ad:10:f6:7b:c2:2c:05:
2d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:37:E4:8C:36:C3:74:CF:07:2C:52:D0:4A:B2:E3:CA:D5:3C:3B:69
X509v3 Authority Key Identifier:
keyid:0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b0:07:72:e8:ec:35:3d:8d:0b:19:db:d8:c4:45:c2:03:46:
77:22:32:ba:7b:4d:0b:19:2b:57:a2:db:05:bd:98:26:ba:c7:
cb:ce:00:4e:8b:9d:96:0e:ba:a8:eb:25:18:73:c4:1d:e3:01:
a4:ec:f9:cd:49:bf:7f:53:5f:2a:8d:75:39:77:5b:09:64:5e:
92:3c:84:43:e2:38:02:37:fe:b0:dd:03:cb:3f:f2:c7:ea:62:
c1:43:5c:1b:f1:09:df:fd:81:67:01:6a:55:05:8f:fe:32:d0:
72:d0:8b:55:ea:e3:b6:84:94:9b:2b:a3:87:e7:2c:c8:4f:9a:
22:dd:57:0e:51:6a:41:11:2d:21:7d:c3:14:9a:64:84:6e:df:
c4:78:32:29:e5:cd:af:3d:32:e4:ce:3f:6b:2a:5c:b0:79:80:
5d:98:ed:3c:39:f2:ac:8f:8a:08:e8:d7:ab:3d:5c:f7:14:41:
db:75:a4:13:d2:7a:b7:99:ab:79:c9:bd:bb:28:d0:ef:3f:de:
6c:34:ea:2b:e0:43:95:ed:86:c9:2c:38:49:58:6e:8a:a2:a5:
36:42:51:54:a6:af:d4:a3:bf:b3:d3:0e:8b:29:8d:85:3f:bc:
e9:31:6b:a7:53:72:85:a9:4a:ea:b8:94:5f:b6:37:c1:5c:72:
c3:c6:5b:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Ju2hTWONjatndXbBi5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNTBiM2I3Y2Q0Y2UzYjE0NWI3NTNiZjcxNzlhOTU1Y2Nk
MjkyNWQwHhcNMjUwMTMxMTUwMDIzWhcNMjUwMjAxMTUwMDIzWjAzMTEwLwYDVQQD
Eyg1NjM3ZTQ4YzM2YzM3NGNmMDcyYzUyZDA0YWIyZTNjYWQ1M2MzYjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVdV4lR1gqHTquKkW8ECSvMhiI1h
h7Mga+nlWtAulWLeqmsUT/NcwCz/hTxW73ZZ84GLsl8MP9wwzSKr56V1SyxsrKWG
Kppjd2MQ2+xQO/nX0Fu0cg2IVTLZaqwFAbY3WMpGUbvk2IeGtbzN39b76AuVtPxv
ELZlayvYDQHn9KvGLjh5jds75FWQc17vkJJFFY5TRsmFemNob936kzV/6a4B1i2v
NxambUg13UIDDJFvvwwZfMxJKFGKlDUwe436xq+7JnkncDcvHLuxhpUsIQaMlBkA
dYaYkbBr+D/19NW9rbsD0x+gOXWiB5mtgVf+PlbjZavXs60Q9nvCLAUtKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFY35Iw2w3TPByxS0Eqy48rVPDtpMB8GA1UdIwQY
MBaAFApQs7fNTOOxRbdTv3F5qVXM0pJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2xDenQ4MU00N0ZGdDFPX2NYbXBWY3pTa2wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9mZWMwOGYtOTJjYi00ZTRmLTk2Y2Mt
MTcwZWQyMzBkNWY4LzEvQ2xDenQ4MU00N0ZGdDFPX2NYbXBWY3pTa2wwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9mZWMwOGYtOTJjYi00ZTRmLTk2Y2MtMTcwZWQyMzBkNWY4
LzEvQ2xDenQ4MU00N0ZGdDFPX2NYbXBWY3pTa2wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7AHcujs
NT2NCxnb2MRFwgNGdyIyuntNCxkrV6LbBb2YJrrHy84AToudlg66qOslGHPEHeMB
pOz5zUm/f1NfKo11OXdbCWRekjyEQ+I4Ajf+sN0Dyz/yx+piwUNcG/EJ3/2BZwFq
VQWP/jLQctCLVerjtoSUmyujh+csyE+aIt1XDlFqQREtIX3DFJpkhG7fxHgyKeXN
rz0y5M4/aypcsHmAXZjtPDnyrI+KCOjXqz1c9xRB23WkE9J6t5mrecm9uyjQ7z/e
bDTqK+BDle2GySw4SVhuiqKlNkJRVKav1KO/s9MOiymNhT+86TFrp1NyhalK6riU
X7Y3wVxyw8ZbNg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:50:05 2025 by rpki-client