Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
File: 0gXOrys2rZ_lGQaehrlONtLsS94.mft (raw, json)
Hash identifier: 2w5YriJYXrSqlSZ+UukqDDSj20z6yzV19ht5LMpL3LI=
Subject key identifier: C9:85:49:F8:53:CE:3A:C8:CE:7B:C8:46:2C:FF:D8:2E:5E:5D:AB:B0
Authority key identifier: D2:05:CE:AF:2B:36:AD:9F:E5:19:06:9E:86:B9:4E:36:D2:EC:4B:DE
Certificate issuer: /CN=d205ceaf2b36ad9fe519069e86b94e36d2ec4bde
Certificate serial: 0194BC3C0BB32DFD9B23959FB1E163D82C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
Manifest number: 075A
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: 0gXOrys2rZ_lGQaehrlONtLsS94.crl (hash: G3dIhI6Cs3Tp2RWIXuBoE8+xkMtiiV6Ydo8xnXlY5XI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0b:b3:2d:fd:9b:23:95:9f:b1:e1:63:d8:2c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d205ceaf2b36ad9fe519069e86b94e36d2ec4bde
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=c98549f853ce3ac8ce7bc8462cffd82e5e5dabb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:fe:cc:a6:06:a3:4f:6e:e2:ee:3c:28:32:
cf:bc:a8:cc:31:69:23:d1:2c:c5:b8:cc:06:a9:50:
f4:52:ac:ca:f5:b8:fc:7e:e3:ea:8f:a9:9c:5a:9e:
a5:af:d3:fc:8f:b5:8f:47:98:9d:1d:c4:09:f6:c8:
47:5e:0f:2c:84:f2:c5:77:3a:f1:2b:10:57:b0:6b:
67:46:17:63:47:89:66:a3:59:53:27:cb:ca:df:76:
81:3b:e1:f3:4a:aa:52:c6:6e:da:1b:39:9e:00:9c:
0b:a3:b9:1e:99:24:08:cf:46:59:e8:af:0b:b2:ae:
19:09:0a:44:a6:fa:8f:b8:bc:d3:2a:95:e3:52:d4:
ad:61:e6:4f:c2:dc:45:41:ea:16:b9:51:c2:ea:96:
da:37:c4:34:e6:9a:3a:56:c9:57:9f:a4:8d:f5:21:
94:bd:97:77:7e:ab:5b:fd:47:d5:98:06:10:05:e3:
a6:64:d9:3f:e9:9c:a4:2c:ee:e8:10:5f:46:8e:ee:
f8:b0:b2:ab:9d:05:ed:97:75:34:39:c6:a5:99:55:
46:78:be:57:b5:f3:5b:37:8a:ab:98:55:7d:85:32:
cd:64:ca:8c:8f:4e:25:62:a3:bd:ea:37:ce:32:20:
93:fb:38:ca:be:f5:67:4a:10:3d:5f:9d:cc:90:de:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:85:49:F8:53:CE:3A:C8:CE:7B:C8:46:2C:FF:D8:2E:5E:5D:AB:B0
X509v3 Authority Key Identifier:
keyid:D2:05:CE:AF:2B:36:AD:9F:E5:19:06:9E:86:B9:4E:36:D2:EC:4B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ae:c0:d4:5a:e7:5d:15:3c:56:01:3c:7f:0b:b3:02:69:12:
9d:96:c9:76:72:68:4d:b9:43:bd:66:58:b5:5c:1d:89:86:c1:
19:0c:aa:34:42:07:18:6a:69:72:24:11:30:22:2c:ce:f3:26:
f4:5c:e3:17:02:51:98:20:68:eb:95:b9:c7:4a:b2:b5:49:36:
6c:25:9e:8b:ee:f2:da:02:99:18:1e:75:bf:f1:ea:58:90:db:
e2:d6:7b:08:2b:48:e9:25:84:50:fa:43:7d:b7:d1:19:2a:67:
c1:74:a9:79:ce:41:d0:09:6c:1a:62:46:84:97:09:3e:46:c8:
ff:9b:d5:a5:5f:98:d1:99:8f:29:d8:a0:72:80:ad:5c:0c:94:
da:d4:7d:91:e1:10:e3:5c:33:53:fb:85:ac:76:7b:10:ff:89:
36:7f:8e:49:0c:35:ad:79:09:14:3d:dd:94:1f:ea:06:ae:77:
f0:98:2a:c2:78:dc:c2:54:5d:3a:a9:d2:5f:32:5a:7d:ba:40:
c2:b4:15:ec:ac:fe:4d:92:85:e5:69:05:42:76:c3:f0:5f:1f:
18:12:d2:d9:61:c0:87:04:9c:77:63:44:07:11:52:f8:2b:55:
09:66:e5:93:92:d0:aa:dd:c0:82:9e:a9:a5:54:88:85:b1:a2:
b4:c7:11:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PAuzLf2bI5WfseFj2CxbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMDVjZWFmMmIzNmFkOWZlNTE5MDY5ZTg2Yjk0ZTM2ZDJl
YzRiZGUwHhcNMjUwMTMxMTIwMDM5WhcNMjUwMjAxMTIwMDM5WjAzMTEwLwYDVQQD
EyhjOTg1NDlmODUzY2UzYWM4Y2U3YmM4NDYyY2ZmZDgyZTVlNWRhYmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJL+zKYGo09u4u48KDLPvKjMMWkj
0SzFuMwGqVD0UqzK9bj8fuPqj6mcWp6lr9P8j7WPR5idHcQJ9shHXg8shPLFdzrx
KxBXsGtnRhdjR4lmo1lTJ8vK33aBO+HzSqpSxm7aGzmeAJwLo7kemSQIz0ZZ6K8L
sq4ZCQpEpvqPuLzTKpXjUtStYeZPwtxFQeoWuVHC6pbaN8Q05po6VslXn6SN9SGU
vZd3fqtb/UfVmAYQBeOmZNk/6ZykLO7oEF9Gju74sLKrnQXtl3U0OcalmVVGeL5X
tfNbN4qrmFV9hTLNZMqMj04lYqO96jfOMiCT+zjKvvVnShA9X53MkN6EqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmFSfhTzjrIznvIRiz/2C5eXauwMB8GA1UdIwQY
MBaAFNIFzq8rNq2f5RkGnoa5TjbS7EveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdYT3J5czJyWl9sR1FhZWhybE9OdExzUzk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ZmExNzItOGU1NS00NzExLThjNzUt
MThmODkyNWM2NjY1LzEvMGdYT3J5czJyWl9sR1FhZWhybE9OdExzUzk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ZmExNzItOGU1NS00NzExLThjNzUtMThmODkyNWM2NjY1
LzEvMGdYT3J5czJyWl9sR1FhZWhybE9OdExzUzk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAua7A1Frn
XRU8VgE8fwuzAmkSnZbJdnJoTblDvWZYtVwdiYbBGQyqNEIHGGppciQRMCIszvMm
9FzjFwJRmCBo65W5x0qytUk2bCWei+7y2gKZGB51v/HqWJDb4tZ7CCtI6SWEUPpD
fbfRGSpnwXSpec5B0AlsGmJGhJcJPkbI/5vVpV+Y0ZmPKdigcoCtXAyU2tR9keEQ
41wzU/uFrHZ7EP+JNn+OSQw1rXkJFD3dlB/qBq538JgqwnjcwlRdOqnSXzJafbpA
wrQV7Kz+TZKF5WkFQnbD8F8fGBLS2WHAhwScd2NEBxFS+CtVCWblk5LQqt3Agp6p
pVSIhbGitMcRKw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:12 2025 by rpki-client