Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
File: ISApS0bJAtk8B5wWhs_kW7ozGMs.mft (raw, json)
Hash identifier: qFx1DbDqCdynDfqP2YSbJivpoCQzJhE6NLrOf9gtrFs=
Subject key identifier: 86:13:50:E2:6E:B3:08:A0:AA:14:85:D2:F9:A5:51:60:80:87:A3:74
Authority key identifier: 21:20:29:4B:46:C9:02:D9:3C:07:9C:16:86:CF:E4:5B:BA:33:18:CB
Certificate issuer: /CN=2120294b46c902d93c079c1686cfe45bba3318cb
Certificate serial: 0194BBCDD445BC10F7A5766E32F744ABFEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
Manifest number: 0BC0
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: ISApS0bJAtk8B5wWhs_kW7ozGMs.crl (hash: EC9Ajv2H+R4XVotolcvuyMaPuQfP7A9js6DRzZ6LwjI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d4:45:bc:10:f7:a5:76:6e:32:f7:44:ab:fe:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2120294b46c902d93c079c1686cfe45bba3318cb
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=861350e26eb308a0aa1485d2f9a551608087a374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:22:b6:5b:ab:67:3f:6d:5d:c4:64:a6:31:
de:a0:57:43:75:71:cc:5f:4c:03:7d:8b:8b:b4:12:
59:1d:e4:fb:f5:04:26:d7:fd:ca:fc:29:5b:27:40:
0e:2e:b5:79:6a:05:e0:93:37:c9:ff:b6:bc:4e:74:
14:d4:58:87:09:dd:37:a6:f7:cc:e3:d3:df:8a:86:
49:a3:0a:cc:9b:51:34:f6:b4:50:25:6d:ba:62:8d:
f0:62:ca:16:74:1f:0c:9c:ca:88:9c:66:c3:89:92:
8a:08:8b:9a:39:63:ed:e6:90:8e:8d:23:1c:e1:10:
8a:63:8a:9f:00:d8:a7:ce:6b:67:2b:07:b3:35:59:
a5:d1:c2:4b:40:d6:2e:fa:ef:96:b7:84:3d:48:7b:
ac:33:50:a8:be:17:57:76:dd:89:95:36:17:18:ed:
02:fc:d2:c6:c8:3f:80:a8:31:57:7a:fc:91:b1:55:
65:dc:38:f1:30:3d:da:f2:49:86:82:dd:50:84:51:
30:33:51:79:21:7a:cb:c0:d7:81:2a:d3:7d:e5:5d:
c6:4b:b0:4f:0b:04:12:12:b3:66:ea:d7:d8:3a:12:
71:85:8f:81:c4:59:f2:e9:e6:de:4a:1b:04:f6:c1:
ac:bb:6b:2b:67:9f:6b:55:d2:df:13:a0:85:98:b6:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:13:50:E2:6E:B3:08:A0:AA:14:85:D2:F9:A5:51:60:80:87:A3:74
X509v3 Authority Key Identifier:
keyid:21:20:29:4B:46:C9:02:D9:3C:07:9C:16:86:CF:E4:5B:BA:33:18:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b6:0a:5f:3f:92:7d:ab:a2:10:d1:50:04:a0:a4:61:24:ac:
7b:67:4f:70:dd:b1:d2:90:56:39:22:c8:d0:31:89:88:a7:6d:
0d:44:c2:f9:28:ae:59:07:2b:7b:e5:cd:86:8f:66:2e:ab:a7:
2d:f5:da:e3:51:cc:cf:46:d5:53:2e:d7:fc:94:e2:52:ac:bf:
c0:e7:2b:d6:71:d3:25:ce:73:ac:b2:8f:f4:92:d0:3f:8d:2a:
17:6e:8c:66:60:3f:51:1a:06:b5:8f:db:5d:c3:9b:4c:f6:23:
27:0a:62:a0:bf:46:8c:a0:c8:e3:ba:7a:b6:53:e4:6b:fa:61:
4b:62:a4:84:7d:9d:75:ae:68:f7:11:d6:bb:4b:30:d9:29:47:
59:6e:35:38:8d:a5:80:ae:25:2d:1d:1f:d7:4f:eb:48:9f:47:
33:01:d6:54:86:29:db:a3:73:59:8a:97:17:53:4d:2e:e7:3a:
e2:23:d3:1d:7f:6d:6c:4b:71:3d:ec:9a:25:02:76:7d:e6:53:
59:4f:98:d7:e2:93:61:23:50:f1:b5:18:84:6f:45:61:83:4b:
66:ac:95:18:06:6c:99:bc:f8:54:85:22:46:67:33:e9:02:19:
b3:a0:07:d0:b3:53:a6:fb:9b:e7:2e:f8:52:e8:9a:3c:7f:df:
7f:2a:81:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdRFvBD3pXZuMvdEq/7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMjAyOTRiNDZjOTAyZDkzYzA3OWMxNjg2Y2ZlNDViYmEz
MzE4Y2IwHhcNMjUwMTMxMTAwMDE2WhcNMjUwMjAxMTAwMDE2WjAzMTEwLwYDVQQD
Eyg4NjEzNTBlMjZlYjMwOGEwYWExNDg1ZDJmOWE1NTE2MDgwODdhMzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/QitlurZz9tXcRkpjHeoFdDdXHM
X0wDfYuLtBJZHeT79QQm1/3K/ClbJ0AOLrV5agXgkzfJ/7a8TnQU1FiHCd03pvfM
49PfioZJowrMm1E09rRQJW26Yo3wYsoWdB8MnMqInGbDiZKKCIuaOWPt5pCOjSMc
4RCKY4qfANinzmtnKwezNVml0cJLQNYu+u+Wt4Q9SHusM1CovhdXdt2JlTYXGO0C
/NLGyD+AqDFXevyRsVVl3DjxMD3a8kmGgt1QhFEwM1F5IXrLwNeBKtN95V3GS7BP
CwQSErNm6tfYOhJxhY+BxFny6ebeShsE9sGsu2srZ59rVdLfE6CFmLY3pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYTUOJuswigqhSF0vmlUWCAh6N0MB8GA1UdIwQY
MBaAFCEgKUtGyQLZPAecFobP5Fu6MxjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVNBcFMwYkpBdGs4QjV3V2hzX2tXN296R01zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9kN2JjYjctOTRmMi00OTA4LTk3N2Qt
YTIwZGE1NmM0MTg0LzEvSVNBcFMwYkpBdGs4QjV3V2hzX2tXN296R01zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9kN2JjYjctOTRmMi00OTA4LTk3N2QtYTIwZGE1NmM0MTg0
LzEvSVNBcFMwYkpBdGs4QjV3V2hzX2tXN296R01zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLYKXz+S
fauiENFQBKCkYSSse2dPcN2x0pBWOSLI0DGJiKdtDUTC+SiuWQcre+XNho9mLqun
LfXa41HMz0bVUy7X/JTiUqy/wOcr1nHTJc5zrLKP9JLQP40qF26MZmA/URoGtY/b
XcObTPYjJwpioL9GjKDI47p6tlPka/phS2KkhH2dda5o9xHWu0sw2SlHWW41OI2l
gK4lLR0f10/rSJ9HMwHWVIYp26NzWYqXF1NNLuc64iPTHX9tbEtxPeyaJQJ2feZT
WU+Y1+KTYSNQ8bUYhG9FYYNLZqyVGAZsmbz4VIUiRmcz6QIZs6AH0LNTpvub5y74
UuiaPH/ffyqBng==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:09 2025 by rpki-client