Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.mft
File: h00SbPtCScNLlJJESW1rSTeJWBQ.mft (raw, json)
Hash identifier: BA1dhIuVSvcqt9yIcvONh/kP+nkeJ5eDrXp9SCewmzM=
Subject key identifier: 66:C4:21:47:C4:BD:37:20:49:C3:50:B3:04:43:7A:5B:D7:CD:A4:C9
Authority key identifier: 87:4D:12:6C:FB:42:49:C3:4B:94:92:44:49:6D:6B:49:37:89:58:14
Certificate issuer: /CN=874d126cfb4249c34b949244496d6b4937895814
Certificate serial: 0194BBCE82077D89DE9641C880404F48BE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h00SbPtCScNLlJJESW1rSTeJWBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.mft
Manifest number: 08EF
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: h00SbPtCScNLlJJESW1rSTeJWBQ.crl (hash: WX0WjmVSkYyLsK225Orrw+ynJnrSdxo43IGp1/I6oRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:82:07:7d:89:de:96:41:c8:80:40:4f:48:be:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874d126cfb4249c34b949244496d6b4937895814
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=66c42147c4bd372049c350b304437a5bd7cda4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:ab:f7:07:75:da:63:43:60:df:74:9b:4e:
0c:b0:9f:be:87:3f:9f:2d:c0:1b:33:ec:df:d0:9c:
55:08:e7:56:c8:c3:c6:00:a3:68:2a:c4:01:8a:2d:
90:79:6d:5f:15:c6:13:94:37:4e:ef:d5:75:7f:d6:
53:d4:6b:8d:07:a4:21:87:22:3e:8d:c2:f0:db:3c:
2c:4e:73:48:62:ae:dc:ab:c7:64:5e:ae:7e:4c:1e:
6d:83:22:b8:27:d3:d0:bc:2e:49:f0:0b:e7:c4:f2:
ff:99:cc:75:dd:3a:e8:10:65:73:34:bd:73:7b:49:
13:8a:77:f5:4c:45:6a:1e:98:76:67:fd:b6:3a:da:
ef:0d:85:bd:40:70:17:71:81:e5:8b:50:ef:8d:01:
49:46:5c:2d:12:a1:59:35:f5:82:05:c1:6b:ed:1e:
69:de:0b:2c:fa:bb:59:bc:6a:53:10:78:f8:96:4f:
97:9e:54:e6:42:31:64:a1:40:1f:8e:f8:b5:1e:61:
65:c7:38:c2:a1:6e:b8:c4:83:32:e9:50:f9:ae:db:
35:83:df:a9:4b:4d:e8:86:3a:50:c5:e0:02:13:bd:
10:cd:ec:8e:f9:d8:24:63:fe:5d:d2:0e:d3:4c:38:
5a:fd:f6:83:c6:e4:6b:58:db:09:88:d3:8e:80:14:
9e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C4:21:47:C4:BD:37:20:49:C3:50:B3:04:43:7A:5B:D7:CD:A4:C9
X509v3 Authority Key Identifier:
keyid:87:4D:12:6C:FB:42:49:C3:4B:94:92:44:49:6D:6B:49:37:89:58:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h00SbPtCScNLlJJESW1rSTeJWBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2b:4d:c9:c1:51:6c:88:2d:a8:28:15:95:ac:8f:28:73:87:
96:96:88:cb:65:82:ca:82:22:dc:d3:88:3b:90:b7:1d:ae:b2:
ba:1b:e7:b2:e6:ef:87:65:26:4b:71:48:b8:04:03:5f:22:7e:
83:bd:96:ca:fa:c5:13:c6:fd:c6:6a:5b:83:34:db:2b:02:2a:
00:26:22:ca:12:c4:42:72:a7:0c:8d:f3:7f:62:f9:02:ab:3b:
c9:95:5a:bf:77:ac:89:1e:22:ee:86:7b:20:ef:85:69:8e:dc:
08:9a:8c:0f:2b:f0:76:2a:22:02:08:d1:d5:f6:07:ac:ec:24:
a1:4b:f8:89:15:e6:27:52:34:ca:dc:22:8f:2a:ef:32:3e:2a:
43:b0:e2:9f:ed:f3:01:56:f0:4a:f6:8a:5a:1f:7d:5d:91:20:
ec:48:e9:f5:da:23:e4:d9:19:6b:c6:9a:43:0c:f0:68:0c:0a:
ba:ff:f1:d9:ca:87:c6:93:61:e1:65:9f:bd:8d:85:a2:77:41:
69:82:a0:df:62:67:06:25:8e:8a:d0:38:30:0c:78:b8:2b:a2:
c4:ed:e8:16:9e:30:79:44:ef:3c:04:cc:7e:08:ad:80:19:9e:
a1:6d:07:bf:28:2e:a5:d8:71:2a:48:63:89:24:d6:a1:5f:62:
82:18:0c:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zoIHfYnelkHIgEBPSL6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGQxMjZjZmI0MjQ5YzM0Yjk0OTI0NDQ5NmQ2YjQ5Mzc4
OTU4MTQwHhcNMjUwMTMxMTAwMTAwWhcNMjUwMjAxMTAwMTAwWjAzMTEwLwYDVQQD
Eyg2NmM0MjE0N2M0YmQzNzIwNDljMzUwYjMwNDQzN2E1YmQ3Y2RhNGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8er9wd12mNDYN90m04MsJ++hz+f
LcAbM+zf0JxVCOdWyMPGAKNoKsQBii2QeW1fFcYTlDdO79V1f9ZT1GuNB6QhhyI+
jcLw2zwsTnNIYq7cq8dkXq5+TB5tgyK4J9PQvC5J8AvnxPL/mcx13TroEGVzNL1z
e0kTinf1TEVqHph2Z/22OtrvDYW9QHAXcYHli1DvjQFJRlwtEqFZNfWCBcFr7R5p
3gss+rtZvGpTEHj4lk+XnlTmQjFkoUAfjvi1HmFlxzjCoW64xIMy6VD5rts1g9+p
S03ohjpQxeACE70QzeyO+dgkY/5d0g7TTDha/faDxuRrWNsJiNOOgBSe6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbEIUfEvTcgScNQswRDelvXzaTJMB8GA1UdIwQY
MBaAFIdNEmz7QknDS5SSRElta0k3iVgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDAwU2JQdENTY05MbEpKRVNXMXJTVGVKV0JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zMmE5YjMtNjBkYS00YTU4LWJkMzct
MTU2ODAxNDY0NjMwLzEvaDAwU2JQdENTY05MbEpKRVNXMXJTVGVKV0JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8zMmE5YjMtNjBkYS00YTU4LWJkMzctMTU2ODAxNDY0NjMw
LzEvaDAwU2JQdENTY05MbEpKRVNXMXJTVGVKV0JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMitNycFR
bIgtqCgVlayPKHOHlpaIy2WCyoIi3NOIO5C3Ha6yuhvnsubvh2UmS3FIuAQDXyJ+
g72WyvrFE8b9xmpbgzTbKwIqACYiyhLEQnKnDI3zf2L5Aqs7yZVav3esiR4i7oZ7
IO+FaY7cCJqMDyvwdioiAgjR1fYHrOwkoUv4iRXmJ1I0ytwijyrvMj4qQ7Din+3z
AVbwSvaKWh99XZEg7Ejp9doj5NkZa8aaQwzwaAwKuv/x2cqHxpNh4WWfvY2FondB
aYKg32JnBiWOitA4MAx4uCuixO3oFp4weUTvPATMfgitgBmeoW0HvygupdhxKkhj
iSTWoV9ighgMIg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:47 2025 by rpki-client