Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
File: 0kvL9emk_kMp8iPBFFBykFOPnMI.mft (raw, json)
Hash identifier: EFVlU//DLRVpLITHSrlxsVE8ybSwMIXVeWTTk+D5Vr4=
Subject key identifier: 1B:E7:CC:F1:7F:3D:71:64:B5:6B:69:C9:A1:90:BC:EB:CB:76:63:63
Authority key identifier: D2:4B:CB:F5:E9:A4:FE:43:29:F2:23:C1:14:50:72:90:53:8F:9C:C2
Certificate issuer: /CN=d24bcbf5e9a4fe4329f223c114507290538f9cc2
Certificate serial: 0194BBCE7639C3CA2D56C2A1E971238C2B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
Manifest number: 0F75
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: 0kvL9emk_kMp8iPBFFBykFOPnMI.crl (hash: YlO/PzDnQD0gKRJN8Lco7YjVqbIKcJ2F37TRdmHGY8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:76:39:c3:ca:2d:56:c2:a1:e9:71:23:8c:2b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24bcbf5e9a4fe4329f223c114507290538f9cc2
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=1be7ccf17f3d7164b56b69c9a190bcebcb766363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:a7:44:3c:3f:85:50:31:f7:b7:86:05:da:
f8:10:78:5b:cc:e9:70:73:df:38:43:b5:5d:2c:3a:
db:73:7e:db:63:31:fa:9e:57:a7:dd:5a:ff:f8:3f:
3f:bf:38:37:5b:2c:09:71:d3:7d:dd:c6:fd:b2:60:
6c:3d:c5:13:c6:de:0b:7c:d1:24:af:75:f6:a5:6c:
1f:96:90:b5:45:39:10:52:bb:bf:a6:47:31:7f:22:
58:ee:cf:3e:e5:4f:5f:63:da:6e:77:44:6a:1c:00:
bf:63:56:48:9e:3f:67:e1:60:33:ca:bf:73:4a:ee:
eb:20:5e:52:1f:4f:56:0b:b1:d0:33:e5:8a:9a:68:
b3:f7:85:07:4b:9f:e3:8e:53:03:12:44:3c:86:74:
2e:a6:0c:ad:a4:15:ff:7b:14:01:00:bd:c9:9a:94:
66:38:67:6e:3a:a1:7f:13:75:5e:d0:6c:34:a1:ca:
c5:2b:79:7c:9a:e2:65:e5:08:d5:5b:35:e4:a9:c9:
a6:df:1a:3f:28:a3:06:9c:de:ae:75:35:55:99:78:
4b:7c:cc:58:70:ee:1e:8e:d5:d4:c1:2b:db:19:b3:
7d:91:59:63:30:e9:fc:4a:c8:f4:ef:e9:99:27:96:
41:5f:aa:f4:5f:0d:55:ae:8e:e9:18:d2:8e:90:4e:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E7:CC:F1:7F:3D:71:64:B5:6B:69:C9:A1:90:BC:EB:CB:76:63:63
X509v3 Authority Key Identifier:
keyid:D2:4B:CB:F5:E9:A4:FE:43:29:F2:23:C1:14:50:72:90:53:8F:9C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:11:86:4b:c7:47:01:4d:15:5e:4f:21:c2:4d:d9:74:a9:ba:
d9:53:e7:b1:56:f8:ac:c4:7c:b9:83:e1:9f:9b:a6:04:e2:aa:
55:04:cd:43:c3:37:eb:e0:80:33:a8:ec:9b:6a:03:23:8f:79:
cc:9e:01:6c:69:6c:34:3a:f4:6b:9e:c0:1e:ec:7f:48:ec:b5:
f1:75:2c:e4:d0:2f:47:c1:13:f2:f5:56:f2:c0:30:b3:4d:5a:
df:60:92:e6:af:3b:cd:7e:94:1c:b5:7e:9c:21:08:b3:02:37:
85:b8:a5:3d:a9:2c:6b:e4:20:f8:26:56:1c:b6:14:13:74:c1:
17:d2:d6:1b:f2:4a:17:77:43:9d:a6:92:a9:48:f8:8e:92:17:
14:15:fe:48:bd:8e:18:b1:33:e7:ea:65:c7:44:bb:cf:de:29:
59:9e:10:07:c6:95:df:a8:09:b5:f9:55:2f:2f:ba:20:c5:22:
2f:50:88:ca:b4:83:20:db:37:46:f9:4c:91:fe:af:06:59:18:
68:6e:6b:7f:c3:93:93:7e:c1:4d:f8:c4:18:8c:bb:82:a1:f9:
52:9a:bf:fe:b7:e4:bc:7e:67:91:0d:79:cf:4f:d3:49:76:10:
a9:ff:f6:1b:84:98:54:a6:48:d2:e2:57:d3:c4:5d:a0:8c:c8:
4f:bd:9e:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7znY5w8otVsKh6XEjjCseMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNGJjYmY1ZTlhNGZlNDMyOWYyMjNjMTE0NTA3MjkwNTM4
ZjljYzIwHhcNMjUwMTMxMTAwMDU3WhcNMjUwMjAxMTAwMDU3WjAzMTEwLwYDVQQD
EygxYmU3Y2NmMTdmM2Q3MTY0YjU2YjY5YzlhMTkwYmNlYmNiNzY2MzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+6nRDw/hVAx97eGBdr4EHhbzOlw
c984Q7VdLDrbc37bYzH6nlen3Vr/+D8/vzg3WywJcdN93cb9smBsPcUTxt4LfNEk
r3X2pWwflpC1RTkQUru/pkcxfyJY7s8+5U9fY9pud0RqHAC/Y1ZInj9n4WAzyr9z
Su7rIF5SH09WC7HQM+WKmmiz94UHS5/jjlMDEkQ8hnQupgytpBX/exQBAL3JmpRm
OGduOqF/E3Ve0Gw0ocrFK3l8muJl5QjVWzXkqcmm3xo/KKMGnN6udTVVmXhLfMxY
cO4ejtXUwSvbGbN9kVljMOn8Ssj07+mZJ5ZBX6r0Xw1Vro7pGNKOkE4qhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvnzPF/PXFktWtpyaGQvOvLdmNjMB8GA1UdIwQY
MBaAFNJLy/XppP5DKfIjwRRQcpBTj5zCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGt2TDllbWtfa01wOGlQQkZGQnlrRk9Qbk1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iYzQxYTQtZmM5MS00OTZmLWEyMjUt
MmU2ZTVlNWY1ZDliLzEvMGt2TDllbWtfa01wOGlQQkZGQnlrRk9Qbk1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iYzQxYTQtZmM5MS00OTZmLWEyMjUtMmU2ZTVlNWY1ZDli
LzEvMGt2TDllbWtfa01wOGlQQkZGQnlrRk9Qbk1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxGGS8dH
AU0VXk8hwk3ZdKm62VPnsVb4rMR8uYPhn5umBOKqVQTNQ8M36+CAM6jsm2oDI495
zJ4BbGlsNDr0a57AHux/SOy18XUs5NAvR8ET8vVW8sAws01a32CS5q87zX6UHLV+
nCEIswI3hbilPaksa+Qg+CZWHLYUE3TBF9LWG/JKF3dDnaaSqUj4jpIXFBX+SL2O
GLEz5+plx0S7z94pWZ4QB8aV36gJtflVLy+6IMUiL1CIyrSDINs3RvlMkf6vBlkY
aG5rf8OTk37BTfjEGIy7gqH5Upq//rfkvH5nkQ15z0/TSXYQqf/2G4SYVKZI0uJX
08RdoIzIT72eNg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:27 2025 by rpki-client