Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
File: 9GRgXq8UuLXSjujQdsHjc491glM.mft (raw, json)
Hash identifier: Q6bLwQQOPDSXCSQ/dcZIAZjq6xHsRaG4gY4sXNC9XtE=
Subject key identifier: A1:75:E8:15:F1:66:E9:01:B1:DF:76:1B:BF:EF:C5:6A:FB:DD:05:C1
Authority key identifier: F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
Certificate issuer: /CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Certificate serial: 0194BBCE2E7FDF5D49EA6DF2795D598E52BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
Manifest number: 0EE8
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: 9GRgXq8UuLXSjujQdsHjc491glM.crl (hash: B3aDTAgf2D5vgf/NGhIN675o7kfpE6GLQS87Dot87Y0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2e:7f:df:5d:49:ea:6d:f2:79:5d:59:8e:52:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=a175e815f166e901b1df761bbfefc56afbdd05c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:00:c3:d7:bc:b9:2b:72:57:d1:1f:84:7d:
e1:48:bc:76:b1:34:3f:66:73:3c:6e:bc:73:a5:c9:
f1:7d:54:5b:f3:29:1e:7f:c9:a4:2d:1c:61:89:7e:
74:02:8e:21:96:99:5d:fb:f7:40:da:9e:b8:34:2d:
7b:a0:1f:77:e2:d7:a2:6b:3e:f4:9e:39:78:3d:d9:
0e:92:c1:77:22:84:c5:db:4e:bf:6a:ad:cd:5c:92:
17:f8:31:b9:67:36:2b:a9:51:f1:a1:3e:5d:66:45:
65:1a:ed:8f:8f:51:1d:06:0d:d1:f0:ca:d3:d2:da:
fa:d0:d7:58:12:60:74:45:03:eb:ee:df:f1:08:5a:
b6:35:ba:fa:12:2e:63:85:50:b0:15:c2:19:f0:ce:
3d:db:8f:60:c0:e8:9e:25:fc:47:6a:cc:cb:8d:a8:
66:f5:1d:9e:53:d8:63:b8:28:34:62:eb:de:d9:b2:
b6:27:3b:c6:9b:7f:58:d8:f6:40:96:ed:e4:3e:b2:
2e:00:ee:7b:30:53:11:f7:24:bb:e9:2e:15:97:4e:
25:6d:b3:20:19:dc:ea:cc:36:04:9a:d6:43:c5:ea:
af:b9:b3:74:f2:a3:01:a4:20:f6:f9:8f:13:70:47:
ec:ca:ae:c6:44:7d:11:e1:aa:78:77:cf:92:6e:eb:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:75:E8:15:F1:66:E9:01:B1:DF:76:1B:BF:EF:C5:6A:FB:DD:05:C1
X509v3 Authority Key Identifier:
keyid:F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9f:1a:44:8e:99:81:98:fd:46:06:df:65:8a:3b:77:7a:e7:
f2:15:4c:30:1b:42:ff:60:29:58:92:bd:58:f0:62:d6:d3:5d:
8c:d3:1b:69:9d:0a:63:3c:af:bb:96:46:04:52:9a:a2:95:d6:
2e:d6:5a:b6:f9:16:6d:21:7a:af:d5:3c:c0:5d:86:7a:6a:b2:
dd:7d:f5:ee:24:dd:26:cb:ac:2c:ef:4b:fb:7b:93:6f:f4:65:
46:52:eb:ac:d6:d5:b0:ed:b9:f5:a6:c0:67:f0:b4:e2:f9:e7:
f3:90:e9:16:dd:81:46:b1:e2:69:78:fb:02:44:3a:4d:61:46:
9a:6e:53:33:be:68:99:8a:51:14:53:3c:ce:35:b3:84:db:11:
05:16:fe:32:20:6a:0c:45:67:af:33:37:c7:ea:46:b4:ad:a9:
3c:a2:c2:76:10:a9:11:ce:b1:bd:fc:0e:e7:2d:8a:26:1c:8f:
55:7d:c1:3a:7f:ba:c8:49:1c:f5:cd:e4:a6:55:50:be:08:b5:
2e:cd:50:14:38:17:2b:2a:fc:1a:be:44:9a:2a:0e:eb:29:4c:
09:c0:d6:2f:26:0a:3e:e4:3d:c0:8a:02:5f:7c:46:be:93:8f:
7a:cb:59:ec:7c:d5:35:a6:fb:7a:e3:8c:c2:92:d3:91:8b:c9:
5f:01:ca:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zi5/311J6m3yeV1ZjlK8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NjQ2MDVlYWYxNGI4YjVkMjhlZThkMDc2YzFlMzczOGY3
NTgyNTMwHhcNMjUwMTMxMTAwMDM5WhcNMjUwMjAxMTAwMDM5WjAzMTEwLwYDVQQD
EyhhMTc1ZTgxNWYxNjZlOTAxYjFkZjc2MWJiZmVmYzU2YWZiZGQwNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroUAw9e8uStyV9EfhH3hSLx2sTQ/
ZnM8brxzpcnxfVRb8ykef8mkLRxhiX50Ao4hlpld+/dA2p64NC17oB934teiaz70
njl4PdkOksF3IoTF206/aq3NXJIX+DG5ZzYrqVHxoT5dZkVlGu2Pj1EdBg3R8MrT
0tr60NdYEmB0RQPr7t/xCFq2Nbr6Ei5jhVCwFcIZ8M49249gwOieJfxHaszLjahm
9R2eU9hjuCg0Yuve2bK2JzvGm39Y2PZAlu3kPrIuAO57MFMR9yS76S4Vl04lbbMg
GdzqzDYEmtZDxeqvubN08qMBpCD2+Y8TcEfsyq7GRH0R4ap4d8+Sbus6EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKF16BXxZukBsd92G7/vxWr73QXBMB8GA1UdIwQY
MBaAFPRkYF6vFLi10o7o0HbB43OPdYJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUdSZ1hxOFV1TFhTanVqUWRzSGpjNDkxZ2xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81MWU5OGQtZDQ4ZS00NWExLTkzMDMt
ZTJkODY0N2ZlNWRkLzEvOUdSZ1hxOFV1TFhTanVqUWRzSGpjNDkxZ2xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81MWU5OGQtZDQ4ZS00NWExLTkzMDMtZTJkODY0N2ZlNWRk
LzEvOUdSZ1hxOFV1TFhTanVqUWRzSGpjNDkxZ2xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJ8aRI6Z
gZj9RgbfZYo7d3rn8hVMMBtC/2ApWJK9WPBi1tNdjNMbaZ0KYzyvu5ZGBFKaopXW
LtZatvkWbSF6r9U8wF2Gemqy3X317iTdJsusLO9L+3uTb/RlRlLrrNbVsO259abA
Z/C04vnn85DpFt2BRrHiaXj7AkQ6TWFGmm5TM75omYpRFFM8zjWzhNsRBRb+MiBq
DEVnrzM3x+pGtK2pPKLCdhCpEc6xvfwO5y2KJhyPVX3BOn+6yEkc9c3kplVQvgi1
Ls1QFDgXKyr8Gr5EmioO6ylMCcDWLyYKPuQ9wIoCX3xGvpOPestZ7HzVNab7euOM
wpLTkYvJXwHKtw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:29 2025 by rpki-client