Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
File: fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json)
Hash identifier: 84lMek510kj30Yu69yIJcOhTsfY1WioU5IWsJjxW9mg=
Subject key identifier: CA:D2:12:05:61:DF:FF:AB:1D:66:98:AA:7C:B3:2B:79:0F:0F:A8:D5
Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
Certificate issuer: /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Certificate serial: 0194BC72CF3BBDA4161F95FA0C206B2D153D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
Manifest number: 07BD
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: iuzzJwyllJ8SsfsmUXwUWRHpk1fiFrf0DS8a9nQ4z1g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cf:3b:bd:a4:16:1f:95:fa:0c:20:6b:2d:15:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=cad2120561dfffab1d6698aa7cb32b790f0fa8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:83:5d:da:13:3e:d9:b7:82:77:63:57:31:
b3:2b:87:e9:b1:a1:92:57:8e:42:de:74:2b:e9:53:
4c:22:76:31:47:98:7d:4d:d1:ef:57:be:7c:ce:81:
93:5f:8c:c0:25:9e:f8:d8:b4:a4:d6:3f:03:36:56:
2d:89:67:3a:a4:7a:d9:1b:6f:4c:c3:5e:f7:61:29:
88:03:44:01:a2:4f:09:16:86:55:19:3b:04:64:38:
58:68:02:fd:98:0b:18:34:d8:84:12:ed:92:64:ed:
0f:50:b9:77:a1:f8:97:38:ec:0e:ae:b2:09:63:4a:
51:d2:ae:e9:5b:ce:0c:81:b6:03:2b:8c:a6:22:f2:
f9:c2:3a:78:e7:06:a5:07:e7:99:32:1a:2e:9c:f1:
06:3e:e9:11:e8:5a:c6:bd:14:a7:36:a6:39:4f:5a:
6b:77:c8:f8:b4:a4:12:4c:e3:38:ab:ca:93:43:6f:
d5:7b:e2:ef:d4:53:dc:1a:7d:ed:64:83:78:86:a0:
22:38:84:e4:e0:62:8c:90:e3:4d:d4:e3:f7:5c:e6:
13:66:0d:26:a6:24:eb:09:9d:4b:48:c3:9a:90:36:
71:e8:84:da:57:e0:80:7d:d8:4c:e7:f6:e0:24:43:
f9:8a:1e:c8:53:6d:3d:0f:8b:0f:f1:80:23:8c:e8:
b4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D2:12:05:61:DF:FF:AB:1D:66:98:AA:7C:B3:2B:79:0F:0F:A8:D5
X509v3 Authority Key Identifier:
keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:44:e9:00:e8:c8:12:52:79:97:8b:34:af:65:c4:e9:8f:fe:
95:4f:e7:fc:3b:fb:ea:40:48:6a:19:25:d6:f4:c4:f5:ac:a8:
18:fd:51:35:20:6f:0b:fc:9a:0c:51:6a:8b:8d:68:58:30:e0:
63:92:94:86:5f:eb:ae:bd:7e:67:af:b7:b0:a3:a2:d9:2d:11:
9a:be:86:33:f1:8a:b6:4d:c2:ba:70:62:ec:32:ee:c1:b3:62:
84:f8:30:bb:64:6d:1f:18:c8:9d:61:59:0a:64:1f:a1:fd:a5:
41:14:b6:90:a1:d3:58:9d:01:4b:ee:ee:b9:2c:d1:39:9d:52:
ad:b0:53:af:df:b7:df:d7:5c:6c:1b:4a:2a:a3:fa:3a:a4:a2:
4b:a1:e1:45:6b:f5:8f:02:fd:5a:ac:03:22:25:d8:4d:1a:fd:
07:dd:76:b3:a8:32:eb:3c:df:0a:5b:66:b9:7f:19:2f:c9:47:
af:cf:d5:b4:82:10:b8:0e:50:86:c0:41:9f:83:59:93:4d:b5:
b4:36:98:23:0b:b0:4a:26:6f:ee:8a:38:55:11:3b:da:15:52:
7a:fb:cd:b5:2a:14:9d:bb:e0:29:ae:08:d8:3f:d3:7c:fc:d5:
d6:96:04:0d:e4:8c:15:5d:58:1c:90:34:de:cb:61:78:a9:e5:
81:f0:c5:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cs87vaQWH5X6DCBrLRU9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjY2Q4YjhmNzk3OWQ2Y2ExNzEyYzFkNTBhNDBkNGU1NTVj
OTRlMTMwHhcNMjUwMTMxMTMwMDI4WhcNMjUwMjAxMTMwMDI4WjAzMTEwLwYDVQQD
EyhjYWQyMTIwNTYxZGZmZmFiMWQ2Njk4YWE3Y2IzMmI3OTBmMGZhOGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL6DXdoTPtm3gndjVzGzK4fpsaGS
V45C3nQr6VNMInYxR5h9TdHvV758zoGTX4zAJZ742LSk1j8DNlYtiWc6pHrZG29M
w173YSmIA0QBok8JFoZVGTsEZDhYaAL9mAsYNNiEEu2SZO0PULl3ofiXOOwOrrIJ
Y0pR0q7pW84MgbYDK4ymIvL5wjp45walB+eZMhounPEGPukR6FrGvRSnNqY5T1pr
d8j4tKQSTOM4q8qTQ2/Ve+Lv1FPcGn3tZIN4hqAiOITk4GKMkONN1OP3XOYTZg0m
piTrCZ1LSMOakDZx6ITaV+CAfdhM5/bgJEP5ih7IU209D4sP8YAjjOi0UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrSEgVh3/+rHWaYqnyzK3kPD6jVMB8GA1UdIwQY
MBaAFHzNi495edbKFxLB1QpA1OVVyU4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMt
Y2FiNzg2MDc3ZTgzLzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMtY2FiNzg2MDc3ZTgz
LzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkTpAOjI
ElJ5l4s0r2XE6Y/+lU/n/Dv76kBIahkl1vTE9ayoGP1RNSBvC/yaDFFqi41oWDDg
Y5KUhl/rrr1+Z6+3sKOi2S0Rmr6GM/GKtk3CunBi7DLuwbNihPgwu2RtHxjInWFZ
CmQfof2lQRS2kKHTWJ0BS+7uuSzROZ1SrbBTr9+339dcbBtKKqP6OqSiS6HhRWv1
jwL9WqwDIiXYTRr9B912s6gy6zzfCltmuX8ZL8lHr8/VtIIQuA5QhsBBn4NZk021
tDaYIwuwSiZv7oo4VRE72hVSevvNtSoUnbvgKa4I2D/TfPzV1pYEDeSMFV1YHJA0
3stheKnlgfDFgA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:51 2025 by rpki-client