Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
File: 2lNAluw_e_xU1lT84PAWitlmIs0.mft (raw, json)
Hash identifier: 5owA55QN7+DE5KomIo3zC9KYDmB+GLhLw+4Og4dCMkw=
Subject key identifier: 63:55:3D:2A:BB:A4:CA:DE:08:BF:8E:67:7E:1D:0E:CF:AF:81:C4:D2
Authority key identifier: DA:53:40:96:EC:3F:7B:FC:54:D6:54:FC:E0:F0:16:8A:D9:66:22:CD
Certificate issuer: /CN=da534096ec3f7bfc54d654fce0f0168ad96622cd
Certificate serial: 0194BD4EC7C43DBA0A5654F4682EEACE149C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
Manifest number: 0190
Signing time: Fri 31 Jan 2025 17:00:44 +0000
Manifest this update: Fri 31 Jan 2025 17:00:44 +0000
Manifest next update: Sat 01 Feb 2025 17:00:44 +0000
Files and hashes: 1: 2lNAluw_e_xU1lT84PAWitlmIs0.crl (hash: xyIWCsQKxwmzYkWcpoNFRU7tOspGJ3uPzf4VUck+yQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c7:c4:3d:ba:0a:56:54:f4:68:2e:ea:ce:14:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da534096ec3f7bfc54d654fce0f0168ad96622cd
Validity
Not Before: Jan 31 17:00:44 2025 GMT
Not After : Feb 1 17:00:44 2025 GMT
Subject: CN=63553d2abba4cade08bf8e677e1d0ecfaf81c4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:5c:8c:40:3a:26:ed:0e:2c:35:39:93:f9:
7e:5d:c6:60:b5:e8:71:c7:83:76:88:60:59:1b:bd:
b4:12:c5:14:37:8d:dc:ca:50:8c:a8:08:60:3e:41:
48:47:c4:a3:f2:62:8b:8f:80:56:be:93:24:5b:a5:
4c:80:56:73:1b:dc:8c:94:97:5d:60:ff:d9:6a:a0:
b1:3c:6a:ca:7e:79:49:06:b7:91:27:4e:18:47:3a:
01:3f:96:3a:98:b0:04:6e:aa:1e:de:dc:ff:20:99:
b8:17:38:3d:f2:74:93:59:4d:69:c4:47:00:0a:5a:
66:09:b9:a2:ea:40:a2:44:c8:75:a5:a9:1e:1d:22:
83:e8:ad:36:17:27:01:d1:c0:53:6c:07:59:1f:14:
85:9c:90:67:cb:1e:e0:38:de:62:ff:d6:56:60:8d:
ac:66:7c:57:84:57:85:e4:5c:b9:93:65:1c:6b:6a:
bf:9f:75:60:01:c9:39:8b:4b:95:a1:c9:59:7b:16:
90:af:b0:e8:fd:26:c3:84:5a:7c:ca:c6:67:76:7e:
28:d6:91:3f:ce:eb:ee:76:2a:8b:57:4e:ac:bc:94:
8e:a9:b5:9e:1a:e2:cf:f1:99:19:fd:4e:42:45:61:
66:2d:40:dc:b2:66:d3:57:aa:30:de:9a:c0:7b:ea:
79:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:55:3D:2A:BB:A4:CA:DE:08:BF:8E:67:7E:1D:0E:CF:AF:81:C4:D2
X509v3 Authority Key Identifier:
keyid:DA:53:40:96:EC:3F:7B:FC:54:D6:54:FC:E0:F0:16:8A:D9:66:22:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:72:3b:51:a0:b7:36:b0:fe:15:26:24:2c:b0:fd:ef:63:89:
51:1b:cc:bf:af:93:2d:f3:59:e4:e4:07:33:cb:40:79:f3:6c:
49:08:9a:e7:10:9a:59:82:32:85:85:08:ec:c1:22:fc:1a:98:
b8:82:92:ec:f4:4a:75:94:18:38:b8:d8:c0:fb:ee:1f:b1:a0:
02:e1:81:a9:f8:14:5b:38:e0:74:a2:b6:54:05:60:44:d0:df:
24:23:e0:f6:4a:b7:d9:61:d3:89:b5:b9:36:7d:be:2e:0f:f6:
fb:a2:53:b6:3a:5c:4d:bc:c4:37:7e:94:dc:9b:f5:44:86:90:
92:0f:19:f7:2c:de:88:3e:b3:fc:e2:fb:a7:dd:56:58:cd:7c:
b5:40:4b:f2:b4:5a:96:37:61:28:69:d8:dc:8e:d9:a8:11:74:
c4:41:c1:f6:e4:1e:17:e6:11:32:01:08:c0:31:38:c8:54:fb:
54:88:ed:25:2f:bd:b2:8f:2a:83:f8:ee:87:a5:ed:11:9a:9d:
d2:b5:48:28:1f:bb:d3:9e:dd:6e:85:9c:71:ce:73:5b:91:de:
34:00:f4:7f:a5:e0:38:1a:6a:8f:fb:cb:73:14:66:67:46:f7:
66:37:39:b2:94:f9:f1:80:bd:71:f3:26:92:6c:70:cd:93:20:
e5:86:62:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TsfEPboKVlT0aC7qzhScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNTM0MDk2ZWMzZjdiZmM1NGQ2NTRmY2UwZjAxNjhhZDk2
NjIyY2QwHhcNMjUwMTMxMTcwMDQ0WhcNMjUwMjAxMTcwMDQ0WjAzMTEwLwYDVQQD
Eyg2MzU1M2QyYWJiYTRjYWRlMDhiZjhlNjc3ZTFkMGVjZmFmODFjNGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxylcjEA6Ju0OLDU5k/l+XcZgtehx
x4N2iGBZG720EsUUN43cylCMqAhgPkFIR8Sj8mKLj4BWvpMkW6VMgFZzG9yMlJdd
YP/ZaqCxPGrKfnlJBreRJ04YRzoBP5Y6mLAEbqoe3tz/IJm4Fzg98nSTWU1pxEcA
ClpmCbmi6kCiRMh1pakeHSKD6K02FycB0cBTbAdZHxSFnJBnyx7gON5i/9ZWYI2s
ZnxXhFeF5Fy5k2Uca2q/n3VgAck5i0uVoclZexaQr7Do/SbDhFp8ysZndn4o1pE/
zuvudiqLV06svJSOqbWeGuLP8ZkZ/U5CRWFmLUDcsmbTV6ow3prAe+p5kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNVPSq7pMreCL+OZ34dDs+vgcTSMB8GA1UdIwQY
MBaAFNpTQJbsP3v8VNZU/ODwForZZiLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmxOQWx1d19lX3hVMWxUODRQQVdpdGxtSXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80MDUyYjUtYjU5ZS00MzNmLTg3YWEt
ODZmMmExYWY0ZDc5LzEvMmxOQWx1d19lX3hVMWxUODRQQVdpdGxtSXMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80MDUyYjUtYjU5ZS00MzNmLTg3YWEtODZmMmExYWY0ZDc5
LzEvMmxOQWx1d19lX3hVMWxUODRQQVdpdGxtSXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2HI7UaC3
NrD+FSYkLLD972OJURvMv6+TLfNZ5OQHM8tAefNsSQia5xCaWYIyhYUI7MEi/BqY
uIKS7PRKdZQYOLjYwPvuH7GgAuGBqfgUWzjgdKK2VAVgRNDfJCPg9kq32WHTibW5
Nn2+Lg/2+6JTtjpcTbzEN36U3Jv1RIaQkg8Z9yzeiD6z/OL7p91WWM18tUBL8rRa
ljdhKGnY3I7ZqBF0xEHB9uQeF+YRMgEIwDE4yFT7VIjtJS+9so8qg/juh6XtEZqd
0rVIKB+7057dboWccc5zW5HeNAD0f6XgOBpqj/vLcxRmZ0b3Zjc5spT58YC9cfMm
kmxwzZMg5YZi4g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:30 2025 by rpki-client