Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
File: t6K9aUc7So6Fp2r72OW77ptLs0s.mft (raw, json)
Hash identifier: JIXIu0Siu2WqTe5C8M6xPNPYoVOMdqJkeKUqoEQiC3A=
Subject key identifier: 59:47:BD:08:85:96:BF:E7:32:9C:74:0C:9F:A6:F1:80:C6:F2:48:2C
Authority key identifier: B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
Certificate issuer: /CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Certificate serial: 0194BBCDFC71A715612AFDB51FCC7ED3146C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
Manifest number: 0D8E
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: t6K9aUc7So6Fp2r72OW77ptLs0s.crl (hash: Q2ps3YkaOKHk5OAyfK6fzd2VbYeeB/c+gPrDMtEw6Jk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fc:71:a7:15:61:2a:fd:b5:1f:cc:7e:d3:14:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=5947bd088596bfe7329c740c9fa6f180c6f2482c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:ab:96:96:d0:3b:b2:7c:0c:9e:99:59:26:
bc:c4:7b:a2:c1:9e:35:fe:8c:dc:fe:c0:f5:0f:63:
69:f2:6f:dd:b7:ff:c1:88:95:60:d3:73:c2:fe:6c:
40:db:19:16:4c:86:1b:0a:61:b3:9b:11:01:b1:02:
21:dd:2c:94:df:ae:5b:bb:17:4b:e4:71:ba:ad:5d:
bc:a4:fc:f9:2c:c1:5b:a1:c5:d5:93:0d:bf:95:ba:
e2:45:1d:a9:5f:0b:68:1b:a3:2d:bf:13:a6:f1:e5:
00:f6:e7:ee:82:90:10:3d:d0:c0:a3:61:6c:3f:5f:
57:19:b8:ca:90:f8:77:10:eb:61:6e:7d:03:89:2c:
58:49:7d:37:85:9a:0d:fc:3b:ca:bc:2d:b7:26:d1:
91:d7:1d:bd:66:7e:09:12:48:54:89:e5:40:7a:19:
d4:b4:2d:97:c9:9b:2a:7c:f6:f3:14:f8:95:f5:4d:
a0:5e:33:59:0f:c4:b9:45:c9:5a:a7:9d:94:f8:0c:
79:a1:c7:7a:b1:63:f5:28:cb:98:b3:e2:38:dc:2a:
42:f4:49:3e:53:e7:e9:3d:b9:76:87:c2:a6:67:ea:
38:bd:94:c9:bb:e0:2b:78:6b:8a:c4:52:0b:75:5b:
91:3c:69:4f:7e:ec:15:67:cb:bd:30:5a:05:05:c1:
f3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:47:BD:08:85:96:BF:E7:32:9C:74:0C:9F:A6:F1:80:C6:F2:48:2C
X509v3 Authority Key Identifier:
keyid:B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:35:99:db:87:29:b4:00:a2:d5:26:0b:19:0e:19:fe:df:0b:
73:8b:f8:fb:57:3c:a2:a3:3a:e3:2b:10:78:e5:cc:c3:4e:e0:
13:2b:1d:3b:5a:c2:5b:ac:a9:7a:43:fa:67:54:9a:a6:e1:b8:
7e:3e:de:b4:ad:4c:cb:06:7a:02:b0:cb:d7:3c:33:26:e0:6d:
9d:80:29:e4:cc:d8:4f:20:43:63:58:4b:8f:15:a2:01:cb:ce:
91:0d:25:91:a1:bc:40:44:7e:53:d8:1f:2c:cd:56:e8:29:ca:
a7:20:b0:c7:f2:87:e2:52:70:22:f9:5a:ce:7d:59:3f:7e:d8:
67:41:80:de:f0:e5:3d:b1:46:3c:95:01:fe:4d:55:28:49:8e:
27:40:f3:a6:46:ff:c6:3b:7f:8a:a1:04:0d:92:09:dd:6f:62:
0d:6e:c2:dd:aa:67:ad:34:3d:10:f2:11:3b:09:6d:a2:91:9b:
d8:74:48:97:ad:88:72:35:51:96:0d:a2:3c:6f:c8:6b:7b:45:
09:79:bd:67:51:7c:f4:21:bf:83:99:0a:d3:30:13:54:27:87:
6c:8e:e8:0b:99:f2:78:89:01:eb:6c:6a:f6:8a:3c:8d:0d:87:
50:e5:89:0d:88:0e:27:20:b4:f6:5f:38:61:0f:e9:09:39:22:
40:8b:69:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zfxxpxVhKv21H8x+0xRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YTJiZDY5NDczYjRhOGU4NWE3NmFmYmQ4ZTViYmVlOWI0
YmIzNGIwHhcNMjUwMTMxMTAwMDI2WhcNMjUwMjAxMTAwMDI2WjAzMTEwLwYDVQQD
Eyg1OTQ3YmQwODg1OTZiZmU3MzI5Yzc0MGM5ZmE2ZjE4MGM2ZjI0ODJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YqrlpbQO7J8DJ6ZWSa8xHuiwZ41
/ozc/sD1D2Np8m/dt//BiJVg03PC/mxA2xkWTIYbCmGzmxEBsQIh3SyU365buxdL
5HG6rV28pPz5LMFbocXVkw2/lbriRR2pXwtoG6MtvxOm8eUA9ufugpAQPdDAo2Fs
P19XGbjKkPh3EOthbn0DiSxYSX03hZoN/DvKvC23JtGR1x29Zn4JEkhUieVAehnU
tC2XyZsqfPbzFPiV9U2gXjNZD8S5Rclap52U+Ax5ocd6sWP1KMuYs+I43CpC9Ek+
U+fpPbl2h8KmZ+o4vZTJu+AreGuKxFILdVuRPGlPfuwVZ8u9MFoFBcHzzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlHvQiFlr/nMpx0DJ+m8YDG8kgsMB8GA1UdIwQY
MBaAFLeivWlHO0qOhadq+9jlu+6bS7NLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZLOWFVYzdTbzZGcDJyNzJPVzc3cHRMczBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NGQ1ZjYtZTY0MS00NDA4LWE3NmUt
NTM4ODliZGM4NGY1LzEvdDZLOWFVYzdTbzZGcDJyNzJPVzc3cHRMczBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83NGQ1ZjYtZTY0MS00NDA4LWE3NmUtNTM4ODliZGM4NGY1
LzEvdDZLOWFVYzdTbzZGcDJyNzJPVzc3cHRMczBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzWZ24cp
tACi1SYLGQ4Z/t8Lc4v4+1c8oqM64ysQeOXMw07gEysdO1rCW6ypekP6Z1SapuG4
fj7etK1MywZ6ArDL1zwzJuBtnYAp5MzYTyBDY1hLjxWiAcvOkQ0lkaG8QER+U9gf
LM1W6CnKpyCwx/KH4lJwIvlazn1ZP37YZ0GA3vDlPbFGPJUB/k1VKEmOJ0Dzpkb/
xjt/iqEEDZIJ3W9iDW7C3apnrTQ9EPIROwltopGb2HRIl62IcjVRlg2iPG/Ia3tF
CXm9Z1F89CG/g5kK0zATVCeHbI7oC5nyeIkB62xq9oo8jQ2HUOWJDYgOJyC09l84
YQ/pCTkiQItpPg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:40 2025 by rpki-client