Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/97bc6c-349f-4374-9e98-864911d6d31b/1/c4ISPo5kUEq7qBA5tsdBj2qrVl0.mft
File: c4ISPo5kUEq7qBA5tsdBj2qrVl0.mft (raw, json)
Hash identifier: LWdDG3fkb4nJm8ZjTHZnm2pyuUzn4XvCGjMts0w3p58=
Subject key identifier: 82:AC:87:35:25:56:DB:01:2A:09:07:62:01:D6:BA:5A:94:B1:D4:46
Authority key identifier: 73:82:12:3E:8E:64:50:4A:BB:A8:10:39:B6:C7:41:8F:6A:AB:56:5D
Certificate issuer: /CN=7382123e8e64504abba81039b6c7418f6aab565d
Certificate serial: 0194BCA9D00A38E2C51DEB0EFB46C9E11887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4ISPo5kUEq7qBA5tsdBj2qrVl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/97bc6c-349f-4374-9e98-864911d6d31b/1/c4ISPo5kUEq7qBA5tsdBj2qrVl0.mft
Manifest number: 08E4
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: c4ISPo5kUEq7qBA5tsdBj2qrVl0.crl (hash: CJFmehXXBxG/NHI7Yqu5Za9nMx7pmkzNds1eJJMCTPU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d0:0a:38:e2:c5:1d:eb:0e:fb:46:c9:e1:18:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7382123e8e64504abba81039b6c7418f6aab565d
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=82ac87352556db012a09076201d6ba5a94b1d446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:16:96:b4:9b:01:89:c3:87:dc:d3:62:21:
1c:a1:a8:b0:fd:f3:08:90:93:34:12:e5:00:85:19:
4e:4d:52:ef:3d:0e:5e:49:fa:c3:45:d3:8a:25:9e:
fb:60:fb:89:f1:13:10:56:4e:04:41:b7:21:07:06:
b7:79:10:88:9f:9c:69:5f:85:21:67:73:67:1e:c5:
02:1a:4a:10:13:e1:03:0f:89:af:3e:a7:68:92:54:
43:f8:b1:3d:3c:a9:a6:68:5a:89:ae:2d:80:71:30:
dd:c5:b1:6c:dd:71:4d:e7:14:37:5b:df:72:1b:00:
73:af:54:bf:f3:b9:89:3c:59:67:75:4e:36:72:bf:
61:b6:cf:22:c9:39:12:2a:91:0d:b4:11:9c:63:fb:
7e:25:26:85:fe:63:f1:3e:6f:d7:b8:ce:2d:f1:75:
41:85:65:37:9d:a0:35:ef:46:53:f5:b7:76:52:73:
8a:e1:ab:a0:cf:e9:29:c9:fb:f2:93:ca:09:10:c7:
d2:1b:8d:8e:97:ed:04:13:2b:6c:cc:9e:0d:84:f2:
b5:1f:2e:7d:c5:ae:60:db:e4:7f:b7:0a:65:af:37:
6b:65:d7:b8:d1:1c:55:24:7d:f0:83:86:33:64:46:
52:c5:38:63:b1:7a:2c:b4:1b:01:67:12:30:b0:e9:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AC:87:35:25:56:DB:01:2A:09:07:62:01:D6:BA:5A:94:B1:D4:46
X509v3 Authority Key Identifier:
keyid:73:82:12:3E:8E:64:50:4A:BB:A8:10:39:B6:C7:41:8F:6A:AB:56:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4ISPo5kUEq7qBA5tsdBj2qrVl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/97bc6c-349f-4374-9e98-864911d6d31b/1/c4ISPo5kUEq7qBA5tsdBj2qrVl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/97bc6c-349f-4374-9e98-864911d6d31b/1/c4ISPo5kUEq7qBA5tsdBj2qrVl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d8:fd:cc:3b:7c:3e:a2:54:1b:75:21:02:ce:91:85:72:d2:
5f:d5:73:12:69:7f:2d:2c:70:62:99:3b:c3:ee:89:9d:ec:e6:
4d:2d:50:7d:bb:2c:1a:1e:61:7e:d4:0a:fa:55:af:2b:82:67:
bd:ab:3a:dd:82:e2:68:b8:d3:49:b0:d1:24:72:07:a2:46:14:
cb:14:b6:c8:02:87:ee:91:3e:c2:ec:50:c5:2e:ea:40:cd:c8:
3d:1b:e3:7a:76:33:f6:be:65:6a:2e:35:cd:37:9b:04:59:5b:
78:18:b5:14:a6:25:aa:8a:27:09:46:bc:be:f8:d9:06:f3:4b:
91:e6:ee:7d:fe:aa:91:48:f4:44:5a:12:3c:1c:3c:b9:c4:e8:
19:6d:90:2b:bb:0d:72:4c:5b:bb:2c:b5:52:d9:d0:1c:23:73:
4b:9d:6a:25:5e:27:16:98:3b:a6:1d:47:9e:6c:35:59:22:99:
3d:37:87:aa:2b:51:67:48:71:43:b9:9b:05:22:e4:53:6a:b6:
93:de:2c:a4:c1:fc:8c:6a:b4:bc:70:ec:ef:f1:7f:fd:e6:d7:
12:2d:68:7c:34:52:e3:1c:f5:db:29:c4:71:00:5e:29:4d:98:
de:a4:59:83:a2:14:5e:97:39:f3:2e:0a:81:74:ae:3c:65:3a:
1c:18:69:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdAKOOLFHesO+0bJ4RiHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczODIxMjNlOGU2NDUwNGFiYmE4MTAzOWI2Yzc0MThmNmFh
YjU2NWQwHhcNMjUwMTMxMTQwMDMyWhcNMjUwMjAxMTQwMDMyWjAzMTEwLwYDVQQD
Eyg4MmFjODczNTI1NTZkYjAxMmEwOTA3NjIwMWQ2YmE1YTk0YjFkNDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIIWlrSbAYnDh9zTYiEcoaiw/fMI
kJM0EuUAhRlOTVLvPQ5eSfrDRdOKJZ77YPuJ8RMQVk4EQbchBwa3eRCIn5xpX4Uh
Z3NnHsUCGkoQE+EDD4mvPqdoklRD+LE9PKmmaFqJri2AcTDdxbFs3XFN5xQ3W99y
GwBzr1S/87mJPFlndU42cr9hts8iyTkSKpENtBGcY/t+JSaF/mPxPm/XuM4t8XVB
hWU3naA170ZT9bd2UnOK4augz+kpyfvyk8oJEMfSG42Ol+0EEytszJ4NhPK1Hy59
xa5g2+R/twplrzdrZde40RxVJH3wg4YzZEZSxThjsXostBsBZxIwsOnuTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKshzUlVtsBKgkHYgHWulqUsdRGMB8GA1UdIwQY
MBaAFHOCEj6OZFBKu6gQObbHQY9qq1ZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzRJU1BvNWtVRXE3cUJBNXRzZEJqMnFyVmwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85N2JjNmMtMzQ5Zi00Mzc0LTllOTgt
ODY0OTExZDZkMzFiLzEvYzRJU1BvNWtVRXE3cUJBNXRzZEJqMnFyVmwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi85N2JjNmMtMzQ5Zi00Mzc0LTllOTgtODY0OTExZDZkMzFi
LzEvYzRJU1BvNWtVRXE3cUJBNXRzZEJqMnFyVmwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9j9zDt8
PqJUG3UhAs6RhXLSX9VzEml/LSxwYpk7w+6JnezmTS1QfbssGh5hftQK+lWvK4Jn
vas63YLiaLjTSbDRJHIHokYUyxS2yAKH7pE+wuxQxS7qQM3IPRvjenYz9r5lai41
zTebBFlbeBi1FKYlqoonCUa8vvjZBvNLkebuff6qkUj0RFoSPBw8ucToGW2QK7sN
ckxbuyy1UtnQHCNzS51qJV4nFpg7ph1Hnmw1WSKZPTeHqitRZ0hxQ7mbBSLkU2q2
k94spMH8jGq0vHDs7/F//ebXEi1ofDRS4xz12ynEcQBeKU2Y3qRZg6IUXpc58y4K
gXSuPGU6HBhpCw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:39 2025 by rpki-client