Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
File: xxovfXzIw2N0bpa8P8yLBflgb-o.mft (raw, json)
Hash identifier: 6Lqx/JLhvOkYqS/2bJoOGr/luZqwWGiOqqIGl/z1u+o=
Subject key identifier: 13:20:8B:8C:98:11:96:99:25:78:ED:0A:5C:91:EB:63:A0:BB:E2:7B
Authority key identifier: C7:1A:2F:7D:7C:C8:C3:63:74:6E:96:BC:3F:CC:8B:05:F9:60:6F:EA
Certificate issuer: /CN=c71a2f7d7cc8c363746e96bc3fcc8b05f9606fea
Certificate serial: 0194BD17B264156203FAA6C970C18AF08A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxovfXzIw2N0bpa8P8yLBflgb-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: xxovfXzIw2N0bpa8P8yLBflgb-o.crl (hash: x9fHNwq6U10FO5ZNA7wayOEn9f/4hlfZCHbJe1V1Ju0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b2:64:15:62:03:fa:a6:c9:70:c1:8a:f0:8a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71a2f7d7cc8c363746e96bc3fcc8b05f9606fea
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=13208b8c981196992578ed0a5c91eb63a0bbe27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:81:58:ab:8d:68:f9:3b:76:f6:78:69:8b:
62:02:b2:d8:96:f7:c5:0d:8e:39:2f:c9:a6:6b:bb:
6a:16:d2:da:b6:8a:ba:34:67:25:5e:34:38:be:e6:
0b:3d:76:cf:bf:dd:20:fa:f5:90:ee:a9:10:9c:fa:
d2:15:3c:73:a2:21:b2:df:93:01:c6:8a:2b:7e:86:
49:fe:d9:6e:4e:31:59:6c:19:cc:a9:00:39:c5:ce:
fa:c1:49:52:e1:db:a3:0d:d8:ae:fd:26:9d:e0:ee:
3b:70:cb:78:08:6e:2d:56:c0:79:57:f3:1f:ec:be:
57:68:46:5b:4d:6a:01:36:d8:a2:17:cb:50:8a:39:
0f:22:75:6c:8d:d9:48:ff:2c:5b:49:a7:73:a2:f3:
23:02:13:bd:eb:01:7d:ca:46:de:e2:1c:16:b7:11:
ed:80:73:7d:de:05:1a:da:7e:da:89:67:52:c4:15:
11:b1:e9:af:3d:8a:18:8b:b2:48:a2:ae:e2:e8:52:
ec:9c:84:54:0b:b2:ce:6b:fc:25:99:0b:de:de:24:
95:f1:fd:47:4c:30:ae:59:52:24:bb:41:fa:b4:da:
9e:a0:5e:6b:c3:14:86:d0:f0:6d:22:54:0e:12:47:
88:dd:ac:64:8a:63:43:59:b4:18:cb:f4:37:d4:fd:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:20:8B:8C:98:11:96:99:25:78:ED:0A:5C:91:EB:63:A0:BB:E2:7B
X509v3 Authority Key Identifier:
keyid:C7:1A:2F:7D:7C:C8:C3:63:74:6E:96:BC:3F:CC:8B:05:F9:60:6F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxovfXzIw2N0bpa8P8yLBflgb-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:17:db:bc:81:03:54:ec:25:01:19:51:2a:75:72:a6:6b:fe:
71:89:49:f9:bc:37:2c:37:05:c0:74:6d:c4:6a:76:f6:a7:d3:
aa:62:18:26:56:c3:e8:83:0c:b6:9d:ba:21:73:eb:ff:a1:ab:
0e:82:97:74:1f:3e:d7:88:0e:db:08:a2:2f:ba:50:f6:66:be:
a8:65:06:d1:99:07:07:0a:d3:81:e2:e5:71:57:17:62:a8:58:
ec:37:79:52:cf:2c:d7:4c:78:f3:b5:9a:78:81:d6:c6:84:7c:
4d:54:f0:9b:9e:84:f2:3b:f6:5f:10:ad:04:4b:35:30:39:3a:
03:dc:2b:bc:82:7f:03:73:25:f5:35:ca:d9:9f:1d:25:57:46:
f1:c4:cb:6f:73:1d:79:68:c9:87:e2:b7:fb:61:4c:be:98:4f:
9b:99:76:08:e0:23:38:15:f1:7f:4a:3a:95:ed:b0:01:9a:82:
ba:b6:d1:b0:24:e2:f8:1b:fa:74:ef:58:34:5a:64:f5:1a:60:
a4:9d:e3:f8:5c:1d:b7:cb:f6:58:56:fd:a5:f6:d6:c9:15:5c:
6d:64:a1:54:9f:06:b9:9c:c5:a6:eb:e6:bf:e0:e8:11:e5:38:
8b:e1:0d:cb:55:4d:5a:e9:8d:7f:d1:6e:bf:da:45:48:81:1b:
39:38:20:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7JkFWID+qbJcMGK8IoRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MWEyZjdkN2NjOGMzNjM3NDZlOTZiYzNmY2M4YjA1Zjk2
MDZmZWEwHhcNMjUwMTMxMTYwMDM0WhcNMjUwMjAxMTYwMDM0WjAzMTEwLwYDVQQD
EygxMzIwOGI4Yzk4MTE5Njk5MjU3OGVkMGE1YzkxZWI2M2EwYmJlMjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmyBWKuNaPk7dvZ4aYtiArLYlvfF
DY45L8mma7tqFtLatoq6NGclXjQ4vuYLPXbPv90g+vWQ7qkQnPrSFTxzoiGy35MB
xoorfoZJ/tluTjFZbBnMqQA5xc76wUlS4dujDdiu/Sad4O47cMt4CG4tVsB5V/Mf
7L5XaEZbTWoBNtiiF8tQijkPInVsjdlI/yxbSadzovMjAhO96wF9ykbe4hwWtxHt
gHN93gUa2n7aiWdSxBURsemvPYoYi7JIoq7i6FLsnIRUC7LOa/wlmQve3iSV8f1H
TDCuWVIku0H6tNqeoF5rwxSG0PBtIlQOEkeI3axkimNDWbQYy/Q31P2l+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMgi4yYEZaZJXjtClyR62Ogu+J7MB8GA1UdIwQY
MBaAFMcaL318yMNjdG6WvD/MiwX5YG/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHhvdmZYekl3Mk4wYnBhOFA4eUxCZmxnYi1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wZGM5MjUtYTMzYi00ZDNhLWFkZDMt
ZDZkMTQwZTRjZTZkLzEveHhvdmZYekl3Mk4wYnBhOFA4eUxCZmxnYi1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wZGM5MjUtYTMzYi00ZDNhLWFkZDMtZDZkMTQwZTRjZTZk
LzEveHhvdmZYekl3Mk4wYnBhOFA4eUxCZmxnYi1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxfbvIED
VOwlARlRKnVypmv+cYlJ+bw3LDcFwHRtxGp29qfTqmIYJlbD6IMMtp26IXPr/6Gr
DoKXdB8+14gO2wiiL7pQ9ma+qGUG0ZkHBwrTgeLlcVcXYqhY7Dd5Us8s10x487Wa
eIHWxoR8TVTwm56E8jv2XxCtBEs1MDk6A9wrvIJ/A3Ml9TXK2Z8dJVdG8cTLb3Md
eWjJh+K3+2FMvphPm5l2COAjOBXxf0o6le2wAZqCurbRsCTi+Bv6dO9YNFpk9Rpg
pJ3j+Fwdt8v2WFb9pfbWyRVcbWShVJ8GuZzFpuvmv+DoEeU4i+ENy1VNWumNf9Fu
v9pFSIEbOTggWQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:39 2025 by rpki-client