Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
File: _4MmzOvF_DL70ONP7n85u6iPuaI.mft (raw, json)
Hash identifier: Ym2I2zfdIpUpTqcWoMxaJLU9fiyhn8GXiw7sM6bFMvo=
Subject key identifier: D0:A6:E1:49:CC:B2:37:7D:88:05:35:E5:65:F2:72:40:AC:52:74:E0
Authority key identifier: FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2
Certificate issuer: /CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2
Certificate serial: 0194BCA98A776F4F375226F5F88216CD00DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
Manifest number: 0FAA
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: _4MmzOvF_DL70ONP7n85u6iPuaI.crl (hash: I5sxrAfqaJf2hoplAHxI5ogb26LowoGYI6G9UyZ2ZTw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8a:77:6f:4f:37:52:26:f5:f8:82:16:cd:00:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=d0a6e149ccb2377d880535e565f27240ac5274e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:05:f6:5c:eb:60:f8:4f:8c:e3:ae:ac:c7:a3:
61:3c:a8:62:b6:5b:e5:ca:8a:b2:cf:87:33:b2:93:
86:24:6d:6d:76:15:f2:57:5f:29:31:cf:4a:8c:45:
7f:93:bd:48:07:f4:7f:7a:d1:15:c5:ea:ff:43:24:
dd:9c:63:9f:5c:14:0b:e1:bf:7f:1b:ce:5e:7c:93:
23:73:98:e7:21:36:26:44:3a:1f:2f:9c:fc:9c:63:
ec:30:6d:c2:64:c0:fe:fb:49:1a:8a:fc:86:e3:26:
5c:7a:05:c4:23:9b:24:15:59:53:ba:a4:ab:c2:41:
b7:f2:a1:46:76:c1:b8:19:fb:8e:8e:6b:32:79:21:
ae:f5:89:db:21:d6:1b:9e:51:d4:dd:79:f0:b6:51:
1f:1f:3a:ae:19:fb:d9:90:39:ea:0d:3f:65:fa:09:
60:2c:fd:0e:e3:79:9e:01:e0:2c:34:c8:4a:5e:01:
c1:5f:68:1d:da:8f:e8:f9:83:da:76:a6:15:93:16:
98:d3:5d:a4:df:e9:47:32:2f:99:93:e6:ff:c3:e2:
54:6b:dd:81:b1:59:60:5a:07:4e:e2:2e:d1:87:ae:
b9:41:a0:ce:2c:80:e3:bc:d1:cb:8b:9d:7b:dc:a0:
ea:59:1b:07:aa:13:4b:38:dd:d8:35:6b:b0:1e:85:
93:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A6:E1:49:CC:B2:37:7D:88:05:35:E5:65:F2:72:40:AC:52:74:E0
X509v3 Authority Key Identifier:
keyid:FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5e:53:4e:8f:c4:3d:64:39:77:07:16:65:36:68:7a:eb:c5:
90:4f:d0:6c:9e:47:6a:9a:87:64:fb:09:64:38:77:9f:1a:57:
d5:af:01:89:dd:57:26:a3:08:6b:2d:d2:31:f4:a0:61:2f:83:
c6:67:e3:94:e1:78:5c:d1:28:aa:7e:4f:96:36:59:9b:52:4f:
21:10:6b:b1:bf:11:52:b5:a4:0f:45:53:25:a7:8d:48:32:1d:
9f:23:67:39:51:21:c3:c2:4d:65:22:a9:1e:46:bf:45:6d:32:
67:d4:9b:ca:d6:52:92:41:52:cc:ed:fb:31:b6:f0:c1:d8:c6:
46:dc:35:11:12:8f:93:75:09:25:60:6b:52:28:54:3c:a5:55:
e3:21:b8:07:be:97:05:2e:1c:b9:24:fa:92:78:41:69:b4:7a:
be:ca:dd:e7:92:be:29:00:39:91:3d:fd:9f:d1:8c:4b:82:19:
26:9d:2f:f4:11:6c:7b:97:5d:ec:80:3c:b7:f3:d0:d1:95:3e:
e1:7f:27:e2:f4:67:36:9a:51:76:cb:e1:05:52:a5:ed:79:0e:
4c:f8:1b:8d:6d:ba:93:9f:2a:31:01:4d:aa:4a:e2:ea:91:05:
f9:7a:d9:f8:6b:93:d2:e8:49:13:09:c6:35:6d:5c:82:a2:8b:
04:b6:19:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYp3b083Uib1+IIWzQDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODMyNmNjZWJjNWZjMzJmYmQwZTM0ZmVlN2YzOWJiYTg4
ZmI5YTIwHhcNMjUwMTMxMTQwMDE1WhcNMjUwMjAxMTQwMDE1WjAzMTEwLwYDVQQD
EyhkMGE2ZTE0OWNjYjIzNzdkODgwNTM1ZTU2NWYyNzI0MGFjNTI3NGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAX2XOtg+E+M466sx6NhPKhitlvl
yoqyz4czspOGJG1tdhXyV18pMc9KjEV/k71IB/R/etEVxer/QyTdnGOfXBQL4b9/
G85efJMjc5jnITYmRDofL5z8nGPsMG3CZMD++0kaivyG4yZcegXEI5skFVlTuqSr
wkG38qFGdsG4GfuOjmsyeSGu9YnbIdYbnlHU3XnwtlEfHzquGfvZkDnqDT9l+glg
LP0O43meAeAsNMhKXgHBX2gd2o/o+YPadqYVkxaY012k3+lHMi+Zk+b/w+JUa92B
sVlgWgdO4i7Rh665QaDOLIDjvNHLi5173KDqWRsHqhNLON3YNWuwHoWTFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCm4UnMsjd9iAU15WXyckCsUnTgMB8GA1UdIwQY
MBaAFP+DJszrxfwy+9DjT+5/Obuoj7miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRNbXpPdkZfREw3ME9OUDduODV1NmlQdWFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82ZjViNmEtZjRiYi00ZmRlLThhNTEt
OGIxMzQ0YjdkNWE2LzEvXzRNbXpPdkZfREw3ME9OUDduODV1NmlQdWFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS82ZjViNmEtZjRiYi00ZmRlLThhNTEtOGIxMzQ0YjdkNWE2
LzEvXzRNbXpPdkZfREw3ME9OUDduODV1NmlQdWFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOV5TTo/E
PWQ5dwcWZTZoeuvFkE/QbJ5HapqHZPsJZDh3nxpX1a8Bid1XJqMIay3SMfSgYS+D
xmfjlOF4XNEoqn5PljZZm1JPIRBrsb8RUrWkD0VTJaeNSDIdnyNnOVEhw8JNZSKp
Hka/RW0yZ9SbytZSkkFSzO37MbbwwdjGRtw1ERKPk3UJJWBrUihUPKVV4yG4B76X
BS4cuST6knhBabR6vsrd55K+KQA5kT39n9GMS4IZJp0v9BFse5dd7IA8t/PQ0ZU+
4X8n4vRnNppRdsvhBVKl7XkOTPgbjW26k58qMQFNqkri6pEF+XrZ+GuT0uhJEwnG
NW1cgqKLBLYZfw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:47 2025 by rpki-client