Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft
File: X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft (raw, json)
Hash identifier: vHt3SFWySvcHtfSEotza6DXJBsTp6guP/to1TMK55eg=
Subject key identifier: 46:C8:6E:8C:C5:25:B3:EC:A4:94:C7:3A:0B:B4:81:2F:33:37:2B:27
Authority key identifier: 5F:F0:CA:C3:63:FE:0B:0A:B9:08:58:97:5D:4B:8F:68:F8:50:49:50
Certificate issuer: /CN=5ff0cac363fe0b0ab90858975d4b8f68f8504950
Certificate serial: 0194BD1749A6E144A32B1910CAF9C8488422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft
Manifest number: 06BA
Signing time: Fri 31 Jan 2025 16:00:07 +0000
Manifest this update: Fri 31 Jan 2025 16:00:07 +0000
Manifest next update: Sat 01 Feb 2025 16:00:07 +0000
Files and hashes: 1: X_DKw2P-Cwq5CFiXXUuPaPhQSVA.crl (hash: kscJDpSVtiaUVKW2KNCv7KE6xa+Q/dc4aq2Gj1XZXf4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:49:a6:e1:44:a3:2b:19:10:ca:f9:c8:48:84:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff0cac363fe0b0ab90858975d4b8f68f8504950
Validity
Not Before: Jan 31 16:00:07 2025 GMT
Not After : Feb 1 16:00:07 2025 GMT
Subject: CN=46c86e8cc525b3eca494c73a0bb4812f33372b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:64:07:e3:d8:23:ac:ce:80:1f:22:ea:a7:
e9:3e:73:e6:bd:a5:ab:ee:66:bf:52:ad:dc:d0:fb:
85:74:81:72:1b:23:d5:9e:d5:de:2c:1f:89:15:df:
23:38:4e:b4:13:91:c9:ba:8a:75:fa:4c:52:34:50:
de:1f:3b:1f:59:04:1c:48:09:09:87:bf:57:34:e8:
89:5d:bc:90:37:86:22:01:21:c2:c0:79:f7:87:8a:
9c:50:ad:aa:fd:35:0c:b1:58:11:9b:1c:fb:26:7b:
35:8d:0a:83:c1:f3:90:26:ec:f2:0d:ba:15:fc:45:
6b:3e:2e:db:17:c1:cd:85:39:5c:b2:5c:38:e0:48:
80:24:a2:61:e9:42:b1:de:8c:59:bc:d9:d1:d6:64:
0c:d3:27:16:1b:21:70:5f:b8:72:60:11:ca:79:f9:
39:47:46:97:87:b7:b3:ec:1f:63:65:1e:f6:4f:26:
dd:72:b9:e2:9d:97:a1:67:6f:e9:83:80:e3:99:fd:
d7:45:c9:72:91:e7:fa:7f:4d:2f:75:c1:35:87:eb:
9b:c8:c7:7b:a2:4b:eb:7d:5a:cd:29:29:89:f8:4f:
ae:34:09:92:8a:f6:60:57:fe:78:3a:00:33:ac:72:
d3:cd:a3:7e:50:5b:1d:6c:ff:56:4b:97:38:7e:6d:
40:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C8:6E:8C:C5:25:B3:EC:A4:94:C7:3A:0B:B4:81:2F:33:37:2B:27
X509v3 Authority Key Identifier:
keyid:5F:F0:CA:C3:63:FE:0B:0A:B9:08:58:97:5D:4B:8F:68:F8:50:49:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d7:53:b9:1e:9d:1b:cb:d4:46:df:ce:c9:b1:7e:52:4e:67:
bb:19:24:d4:e5:de:94:a3:1a:8d:fb:b2:86:7f:35:96:76:ea:
d5:65:57:31:9a:9e:6d:c4:19:a9:63:58:84:fe:a6:7e:d7:ad:
d5:40:25:db:67:19:37:1e:a7:ce:13:5c:61:de:57:20:06:36:
e7:f9:6f:9b:79:40:f9:cc:4e:bf:23:b9:ce:d8:2c:d8:d3:d6:
f7:c8:7d:dc:91:ed:2a:09:e0:0d:d4:7b:58:0f:63:e7:dd:1b:
ac:0e:78:85:ba:6f:b6:2e:c1:10:8b:b0:f0:45:d4:96:a2:2b:
f2:c8:a7:b7:18:74:4e:af:05:36:e3:41:6b:56:d4:ac:c7:91:
78:b1:29:83:e5:5e:b2:1f:78:ab:98:7d:48:d4:13:53:99:16:
11:8d:15:39:d9:aa:4d:15:73:ee:f2:40:29:72:ef:b1:98:c8:
6d:62:3d:a7:e4:35:86:4b:7b:1c:8d:48:b3:09:26:fb:6b:7e:
d2:c1:62:a4:db:8d:41:83:2a:3b:22:65:49:48:7b:9e:10:c5:
7c:12:52:55:48:66:29:a8:78:d2:f4:fd:28:f3:22:13:a0:ed:
d1:a0:3c:1d:9c:3b:66:bc:10:4d:21:69:fb:63:ac:1a:bf:80:
2d:4a:ff:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F0mm4USjKxkQyvnISIQiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZjBjYWMzNjNmZTBiMGFiOTA4NTg5NzVkNGI4ZjY4Zjg1
MDQ5NTAwHhcNMjUwMTMxMTYwMDA3WhcNMjUwMjAxMTYwMDA3WjAzMTEwLwYDVQQD
Eyg0NmM4NmU4Y2M1MjViM2VjYTQ5NGM3M2EwYmI0ODEyZjMzMzcyYjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw5kB+PYI6zOgB8i6qfpPnPmvaWr
7ma/Uq3c0PuFdIFyGyPVntXeLB+JFd8jOE60E5HJuop1+kxSNFDeHzsfWQQcSAkJ
h79XNOiJXbyQN4YiASHCwHn3h4qcUK2q/TUMsVgRmxz7Jns1jQqDwfOQJuzyDboV
/EVrPi7bF8HNhTlcslw44EiAJKJh6UKx3oxZvNnR1mQM0ycWGyFwX7hyYBHKefk5
R0aXh7ez7B9jZR72TybdcrninZehZ2/pg4Djmf3XRclykef6f00vdcE1h+ubyMd7
okvrfVrNKSmJ+E+uNAmSivZgV/54OgAzrHLTzaN+UFsdbP9WS5c4fm1AhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbIbozFJbPspJTHOgu0gS8zNysnMB8GA1UdIwQY
MBaAFF/wysNj/gsKuQhYl11Lj2j4UElQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWF9ES3cyUC1Dd3E1Q0ZpWFhVdVBhUGhRU1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zMmRmNGYtNWE1Ny00NTQxLWJhYmUt
ODQ3ZjViYWVjMmU5LzEvWF9ES3cyUC1Dd3E1Q0ZpWFhVdVBhUGhRU1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zMmRmNGYtNWE1Ny00NTQxLWJhYmUtODQ3ZjViYWVjMmU5
LzEvWF9ES3cyUC1Dd3E1Q0ZpWFhVdVBhUGhRU1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPddTuR6d
G8vURt/OybF+Uk5nuxkk1OXelKMajfuyhn81lnbq1WVXMZqebcQZqWNYhP6mftet
1UAl22cZNx6nzhNcYd5XIAY25/lvm3lA+cxOvyO5ztgs2NPW98h93JHtKgngDdR7
WA9j590brA54hbpvti7BEIuw8EXUlqIr8sintxh0Tq8FNuNBa1bUrMeReLEpg+Ve
sh94q5h9SNQTU5kWEY0VOdmqTRVz7vJAKXLvsZjIbWI9p+Q1hkt7HI1Iswkm+2t+
0sFipNuNQYMqOyJlSUh7nhDFfBJSVUhmKah40vT9KPMiE6Dt0aA8HZw7ZrwQTSFp
+2OsGr+ALUr/5A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:03 2025 by rpki-client