Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
File: rAsK5lTCnX8fDU4tNRarfe8Msp0.mft (raw, json)
Hash identifier: LcKy9E4bUpJaY60Sbby57IDGDhJStR3qajBUxF6fqGk=
Subject key identifier: D0:FA:EB:A0:49:65:69:DE:5E:F2:7C:04:24:B1:2F:E7:B4:9E:2D:35
Authority key identifier: AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D
Certificate issuer: /CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d
Certificate serial: 0194BC3C52694F33A67720C70E0FC028B6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
Manifest number: 0349
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: rAsK5lTCnX8fDU4tNRarfe8Msp0.crl (hash: uVbNcgchuYJKW8dFtTHGnvRqSxjj1y3/V+nRGHzfM1g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:52:69:4f:33:a6:77:20:c7:0e:0f:c0:28:b6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=d0faeba0496569de5ef27c0424b12fe7b49e2d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1b:79:5f:d5:e6:c7:c3:1b:b0:03:07:0f:31:
b8:cb:d7:05:ae:49:47:c7:6d:b4:74:92:28:8d:ec:
b5:b9:19:a7:6c:42:dd:fd:3e:25:52:b2:4b:73:ae:
3d:e0:7a:55:9f:68:1f:a5:73:b8:5e:5f:00:cc:e5:
47:64:dc:d8:66:41:b9:75:85:e7:62:9d:6f:24:7d:
04:27:0d:8b:1a:61:46:3d:06:c8:81:17:b7:14:38:
b0:45:73:70:49:31:40:1a:05:be:29:60:24:47:b5:
40:9c:bd:37:d5:ca:c2:f2:f8:59:81:bf:4e:dc:96:
09:7f:3a:3e:42:e5:62:80:40:d8:8b:91:d0:98:ba:
61:3e:0d:d6:a8:12:69:f2:d6:03:3a:10:ee:3c:c5:
f0:41:7f:6d:a5:3e:68:aa:36:b5:b6:74:65:db:82:
99:27:aa:27:a9:f0:b2:d6:87:88:2a:f3:ab:f1:41:
5d:23:ac:8a:b4:27:0a:13:84:da:4d:34:f0:0d:6c:
1b:89:90:6e:80:72:e3:19:54:6b:a7:8f:89:b3:e9:
02:ca:97:88:3e:f5:59:64:3e:64:34:4d:7f:5e:b5:
77:83:32:50:f8:95:1c:e4:11:3d:c5:e0:b4:b0:76:
90:00:37:df:12:14:ab:26:1a:0b:21:60:cf:43:44:
4d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FA:EB:A0:49:65:69:DE:5E:F2:7C:04:24:B1:2F:E7:B4:9E:2D:35
X509v3 Authority Key Identifier:
keyid:AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6c:b6:eb:7e:53:63:3b:d7:98:85:a5:5a:90:67:3a:31:78:
00:83:e4:be:bb:5f:c4:fa:b3:f9:dd:59:61:f7:9b:e2:23:d0:
0f:5b:24:4b:61:db:da:50:01:53:37:d8:5e:d6:7a:12:3f:02:
69:cb:51:8d:7d:17:43:b3:0c:86:86:63:dd:50:80:db:87:c5:
32:28:06:99:e0:02:35:50:0d:04:ee:76:b0:c4:33:7c:78:e2:
e4:8a:3a:c6:f0:11:ef:51:42:50:26:37:ea:f5:74:75:77:81:
6c:7a:b3:5d:99:17:3e:bd:aa:f1:3b:02:25:43:c4:23:80:2c:
22:bc:24:d6:3a:52:32:84:43:7c:6d:bb:7e:ce:fe:29:f0:52:
69:96:65:a4:d2:32:3c:28:2e:36:e3:1a:b3:3e:81:26:61:e6:
77:a2:a2:b3:41:dd:22:56:89:0e:a7:fb:a6:bd:d1:38:58:ba:
4e:4d:c7:6e:97:5f:36:31:d3:c7:50:e8:35:9b:08:32:63:3e:
e8:5f:3f:ee:6c:41:42:52:ca:cf:3c:85:54:9e:dc:ea:ad:52:
ae:e5:ac:e1:7f:10:be:eb:d2:1c:36:85:d6:f2:df:9c:bc:c9:
ed:44:a3:f0:53:bd:e6:e7:a3:77:f3:5f:d9:26:7f:7e:26:01:
b0:4d:02:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFJpTzOmdyDHDg/AKLbMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMGIwYWU2NTRjMjlkN2YxZjBkNGUyZDM1MTZhYjdkZWYw
Y2IyOWQwHhcNMjUwMTMxMTIwMDU3WhcNMjUwMjAxMTIwMDU3WjAzMTEwLwYDVQQD
EyhkMGZhZWJhMDQ5NjU2OWRlNWVmMjdjMDQyNGIxMmZlN2I0OWUyZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ht5X9Xmx8MbsAMHDzG4y9cFrklH
x220dJIojey1uRmnbELd/T4lUrJLc6494HpVn2gfpXO4Xl8AzOVHZNzYZkG5dYXn
Yp1vJH0EJw2LGmFGPQbIgRe3FDiwRXNwSTFAGgW+KWAkR7VAnL031crC8vhZgb9O
3JYJfzo+QuVigEDYi5HQmLphPg3WqBJp8tYDOhDuPMXwQX9tpT5oqja1tnRl24KZ
J6onqfCy1oeIKvOr8UFdI6yKtCcKE4TaTTTwDWwbiZBugHLjGVRrp4+Js+kCypeI
PvVZZD5kNE1/XrV3gzJQ+JUc5BE9xeC0sHaQADffEhSrJhoLIWDPQ0RNTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFND666BJZWneXvJ8BCSxL+e0ni01MB8GA1UdIwQY
MBaAFKwLCuZUwp1/Hw1OLTUWq33vDLKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFzSzVsVENuWDhmRFU0dE5SYXJmZThNc3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MzVkNDUtYmVlMi00OTFhLWIyODct
NjVmNDJlZmU1OWRlLzEvckFzSzVsVENuWDhmRFU0dE5SYXJmZThNc3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80MzVkNDUtYmVlMi00OTFhLWIyODctNjVmNDJlZmU1OWRl
LzEvckFzSzVsVENuWDhmRFU0dE5SYXJmZThNc3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGy2635T
YzvXmIWlWpBnOjF4AIPkvrtfxPqz+d1ZYfeb4iPQD1skS2Hb2lABUzfYXtZ6Ej8C
actRjX0XQ7MMhoZj3VCA24fFMigGmeACNVANBO52sMQzfHji5Io6xvAR71FCUCY3
6vV0dXeBbHqzXZkXPr2q8TsCJUPEI4AsIrwk1jpSMoRDfG27fs7+KfBSaZZlpNIy
PCguNuMasz6BJmHmd6Kis0HdIlaJDqf7pr3ROFi6Tk3HbpdfNjHTx1DoNZsIMmM+
6F8/7mxBQlLKzzyFVJ7c6q1SruWs4X8QvuvSHDaF1vLfnLzJ7USj8FO95uejd/Nf
2SZ/fiYBsE0CYQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:42:55 2025 by rpki-client