Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft
File: hUYNJS18tlxJNM6stG-pbctrVws.mft (raw, json)
Hash identifier: GsuFSvm2eOfdrZhJ1IfHYspxUMNG7X5NMJQaoIX57ys=
Subject key identifier: 8B:04:E5:F5:45:25:08:87:D7:2B:FE:81:11:45:81:B0:07:E6:25:6A
Authority key identifier: 85:46:0D:25:2D:7C:B6:5C:49:34:CE:AC:B4:6F:A9:6D:CB:6B:57:0B
Certificate issuer: /CN=85460d252d7cb65c4934ceacb46fa96dcb6b570b
Certificate serial: 0194BCE06E2B2A595BE72F7EE1AC61CFD797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUYNJS18tlxJNM6stG-pbctrVws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft
Manifest number: 0559
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: hUYNJS18tlxJNM6stG-pbctrVws.crl (hash: KdYJzs96lwlRrdOLT+EHYhYixER9GM9qWKozqfujLXw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6e:2b:2a:59:5b:e7:2f:7e:e1:ac:61:cf:d7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85460d252d7cb65c4934ceacb46fa96dcb6b570b
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=8b04e5f545250887d72bfe81114581b007e6256a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:db:a4:0b:66:34:8a:fc:75:70:70:07:c9:
b8:b5:f7:2b:0f:00:20:b5:f9:85:20:6f:0e:21:72:
3b:1c:63:46:d1:f5:63:0b:7c:16:8e:ed:6a:b0:64:
02:dd:54:a5:3c:8d:f0:a7:25:67:e3:a3:ad:bc:47:
8c:21:40:9b:00:99:68:c9:35:b3:f8:d1:38:a8:34:
c1:83:23:7a:98:6d:c2:1a:48:bb:ac:bd:1d:44:aa:
56:66:7e:3b:91:2b:2e:64:bc:e3:2f:4b:99:41:94:
f5:76:98:b2:c4:de:fe:5f:83:a1:67:5c:82:f6:16:
b1:2d:6f:38:67:46:46:fc:e5:7c:08:f1:2c:db:14:
2b:39:f1:53:6e:46:38:29:e4:4b:ac:d3:1a:0b:f9:
58:51:0e:c7:bf:bd:62:ce:0d:29:05:c6:0a:22:1d:
d2:ef:43:71:a2:5d:30:cd:bc:a5:35:d3:a5:3a:eb:
e5:00:2c:c8:e7:a5:37:f9:3b:80:df:30:38:65:94:
8f:23:4a:6b:e6:f6:5f:d5:8d:c6:bc:8e:42:18:84:
2a:d8:4b:af:af:09:23:34:8f:78:82:ae:aa:74:cc:
0c:62:f8:11:e0:cb:98:df:17:8d:10:ab:cc:4e:e4:
a2:6b:23:ad:e7:39:68:bf:45:f8:e7:c9:38:02:14:
42:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:04:E5:F5:45:25:08:87:D7:2B:FE:81:11:45:81:B0:07:E6:25:6A
X509v3 Authority Key Identifier:
keyid:85:46:0D:25:2D:7C:B6:5C:49:34:CE:AC:B4:6F:A9:6D:CB:6B:57:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUYNJS18tlxJNM6stG-pbctrVws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:84:6c:05:63:7f:e4:6c:83:5a:a5:63:9e:67:6c:0a:5b:a9:
ff:dd:0f:9c:34:32:57:bb:e4:d7:f7:71:c3:b8:15:a8:8b:7e:
8e:25:2d:1a:a2:22:fd:e3:04:8b:2f:57:9e:4b:f2:da:51:bf:
93:17:65:ac:e7:af:d2:70:aa:c1:64:e3:e8:84:50:1f:c1:ba:
05:2b:82:ef:4d:12:e8:ab:0a:37:d9:51:87:3e:0d:e0:b9:ee:
2c:a6:e8:98:61:59:27:6a:76:21:96:3e:e5:34:8c:bd:54:c4:
a5:79:9b:34:3e:f8:cc:8a:c9:87:8b:71:78:29:c3:25:06:73:
3d:d3:d9:80:24:62:68:23:ef:4b:e1:86:9b:1b:b9:f2:f8:7d:
ea:f0:d8:37:46:e5:9b:d9:2d:86:48:19:4e:3b:8f:dd:e0:36:
aa:74:48:a3:8e:99:be:ec:df:49:a5:2e:c4:75:4f:b2:63:f6:
7d:ad:4e:78:fc:a8:36:cf:db:53:b1:55:56:21:57:06:c8:b4:
4f:41:2f:45:43:27:eb:54:25:8c:dc:4d:9a:02:dd:37:d8:32:
47:b2:0f:14:e7:8e:dd:81:b7:38:0d:32:54:2b:86:0a:be:65:
70:3c:a2:4d:3c:8b:5d:ce:be:d3:ea:fc:99:81:14:54:1b:0a:
64:4a:70:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84G4rKllb5y9+4axhz9eXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NDYwZDI1MmQ3Y2I2NWM0OTM0Y2VhY2I0NmZhOTZkY2I2
YjU3MGIwHhcNMjUwMTMxMTUwMDEyWhcNMjUwMjAxMTUwMDEyWjAzMTEwLwYDVQQD
Eyg4YjA0ZTVmNTQ1MjUwODg3ZDcyYmZlODExMTQ1ODFiMDA3ZTYyNTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg/bpAtmNIr8dXBwB8m4tfcrDwAg
tfmFIG8OIXI7HGNG0fVjC3wWju1qsGQC3VSlPI3wpyVn46OtvEeMIUCbAJloyTWz
+NE4qDTBgyN6mG3CGki7rL0dRKpWZn47kSsuZLzjL0uZQZT1dpiyxN7+X4OhZ1yC
9haxLW84Z0ZG/OV8CPEs2xQrOfFTbkY4KeRLrNMaC/lYUQ7Hv71izg0pBcYKIh3S
70Nxol0wzbylNdOlOuvlACzI56U3+TuA3zA4ZZSPI0pr5vZf1Y3GvI5CGIQq2Euv
rwkjNI94gq6qdMwMYvgR4MuY3xeNEKvMTuSiayOt5zlov0X458k4AhRCaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsE5fVFJQiH1yv+gRFFgbAH5iVqMB8GA1UdIwQY
MBaAFIVGDSUtfLZcSTTOrLRvqW3La1cLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFVZTkpTMTh0bHhKTk02c3RHLXBiY3RyVndzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hYzNiNGYtNGZlOS00NDJmLThiY2Qt
OTI2YTBiMmQ1N2FkLzEvaFVZTkpTMTh0bHhKTk02c3RHLXBiY3RyVndzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9hYzNiNGYtNGZlOS00NDJmLThiY2QtOTI2YTBiMmQ1N2Fk
LzEvaFVZTkpTMTh0bHhKTk02c3RHLXBiY3RyVndzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYRsBWN/
5GyDWqVjnmdsClup/90PnDQyV7vk1/dxw7gVqIt+jiUtGqIi/eMEiy9Xnkvy2lG/
kxdlrOev0nCqwWTj6IRQH8G6BSuC700S6KsKN9lRhz4N4LnuLKbomGFZJ2p2IZY+
5TSMvVTEpXmbND74zIrJh4txeCnDJQZzPdPZgCRiaCPvS+GGmxu58vh96vDYN0bl
m9kthkgZTjuP3eA2qnRIo46ZvuzfSaUuxHVPsmP2fa1OePyoNs/bU7FVViFXBsi0
T0EvRUMn61QljNxNmgLdN9gyR7IPFOeO3YG3OA0yVCuGCr5lcDyiTTyLXc6+0+r8
mYEUVBsKZEpw0A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:44 2025 by rpki-client