Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
File: SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft (raw, json)
Hash identifier: 9HktBsE6+6MSqQ6Nm8Vd1r7onBqElK9rDNN3KaFQ2oc=
Subject key identifier: DD:80:05:5D:F4:5B:65:BB:97:BE:55:9D:12:40:B7:89:BB:57:F6:CB
Authority key identifier: 4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73
Certificate issuer: /CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
Certificate serial: 0194BCE08CEA9A6B973D97D33EF856020FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
Manifest number: 09
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl (hash: hVJoRn7dTyoVLZMBY6Lt2eHAj9azghmgpoNUJ4qA+CA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8c:ea:9a:6b:97:3d:97:d3:3e:f8:56:02:0f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=dd80055df45b65bb97be559d1240b789bb57f6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c5:3e:c3:bc:9d:8b:5c:8c:06:b4:cb:bd:15:
c0:26:f9:17:df:59:ba:90:ad:61:fd:58:db:e0:d9:
fc:7b:6c:69:5a:95:46:fd:e9:f5:b1:e0:c7:1e:fb:
2a:cc:3b:7d:04:b8:b4:a3:75:c6:eb:57:aa:43:39:
2c:0c:d1:87:a2:95:6a:f8:b8:a1:b8:32:d7:b7:cb:
ff:e3:0d:4e:dd:a6:0b:52:dd:0b:bd:29:a0:ae:c0:
1a:2d:7a:28:5c:55:da:6d:b4:27:e6:b7:42:bf:2f:
3a:98:2b:74:67:ca:6f:b1:01:a5:cd:47:23:34:2b:
f1:bb:c6:52:55:3c:7b:6b:16:88:7a:09:6b:ce:24:
aa:86:4d:3c:92:33:ac:66:47:50:f0:15:33:c0:5a:
fb:31:0c:7c:19:d4:cb:34:2f:c1:7a:08:ca:13:13:
ba:00:7c:a8:e3:d6:31:a3:23:46:80:05:c3:b1:86:
fb:7f:0b:9b:96:7c:15:75:0c:63:47:6c:69:c6:e4:
16:e1:2f:f9:3a:dd:49:e2:cd:50:84:9f:0f:ed:cc:
98:b5:ab:61:3d:96:5a:01:79:a1:5e:dc:da:1a:92:
df:7e:43:b1:95:7e:41:a9:a1:89:66:bf:cb:4c:73:
20:7b:f8:34:c5:4b:01:03:a3:8c:d2:a3:c3:b5:f4:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:80:05:5D:F4:5B:65:BB:97:BE:55:9D:12:40:B7:89:BB:57:F6:CB
X509v3 Authority Key Identifier:
keyid:4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:df:9b:a8:5d:d4:b1:87:a1:e8:4b:7e:d4:2e:01:ff:4f:15:
54:d4:d4:16:e3:23:b8:11:27:59:2b:c1:59:61:99:a8:c8:e3:
f1:9c:ed:97:66:23:23:61:3a:bc:ee:7e:d1:4e:6b:bc:6b:c2:
bd:40:2f:9d:97:a0:b0:f9:54:01:f6:30:5a:43:d4:16:da:5c:
a5:43:06:97:90:68:d9:f3:02:32:6e:63:cb:a8:db:85:e4:da:
06:f0:e9:b3:89:f1:7e:68:89:7a:4b:40:da:46:21:51:60:4e:
d6:b4:97:03:f0:29:7d:ee:b3:c9:41:c3:36:43:1a:ee:29:28:
82:cc:2e:11:15:d9:08:dd:4e:4f:30:6b:4a:ac:ec:b7:b5:ab:
9a:7d:72:55:06:2a:f0:15:cc:5b:7d:d2:48:f7:7d:fe:76:79:
10:c6:a6:62:73:dd:93:b7:50:0d:94:59:ac:54:bd:b6:7f:00:
2e:26:6f:0d:0a:2d:0c:04:c1:30:74:a6:78:bd:e4:77:f9:99:
9d:54:fe:56:ae:16:ca:7a:14:60:95:2e:bc:c8:0e:c8:32:e0:
a8:3f:bb:de:dc:48:d4:46:04:82:cc:f9:0a:ec:05:f3:9d:76:
d4:a6:29:49:80:ad:d3:4e:28:9e:8c:71:04:1f:15:d3:87:63:
57:bd:5c:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84IzqmmuXPZfTPvhWAg+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYTJmYTZmNjc3MGY3MmQ4MDg0YmM2YzE4MzA1OGI4MGU4
MzhkNzMwHhcNMjUwMTMxMTUwMDIwWhcNMjUwMjAxMTUwMDIwWjAzMTEwLwYDVQQD
EyhkZDgwMDU1ZGY0NWI2NWJiOTdiZTU1OWQxMjQwYjc4OWJiNTdmNmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMU+w7ydi1yMBrTLvRXAJvkX31m6
kK1h/Vjb4Nn8e2xpWpVG/en1seDHHvsqzDt9BLi0o3XG61eqQzksDNGHopVq+Lih
uDLXt8v/4w1O3aYLUt0LvSmgrsAaLXooXFXabbQn5rdCvy86mCt0Z8pvsQGlzUcj
NCvxu8ZSVTx7axaIeglrziSqhk08kjOsZkdQ8BUzwFr7MQx8GdTLNC/BegjKExO6
AHyo49YxoyNGgAXDsYb7fwublnwVdQxjR2xpxuQW4S/5Ot1J4s1QhJ8P7cyYtath
PZZaAXmhXtzaGpLffkOxlX5BqaGJZr/LTHMge/g0xUsBA6OM0qPDtfTGiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2ABV30W2W7l75VnRJAt4m7V/bLMB8GA1UdIwQY
MBaAFEqi+m9ncPctgIS8bBgwWLgOg41zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3FMNmIyZHc5eTJBaEx4c0dEQll1QTZEalhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yOTdiZDgtYmVhZi00NjA5LTljNjAt
NzQ3NGY5MTZkYjQ3LzEvU3FMNmIyZHc5eTJBaEx4c0dEQll1QTZEalhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yOTdiZDgtYmVhZi00NjA5LTljNjAtNzQ3NGY5MTZkYjQ3
LzEvU3FMNmIyZHc5eTJBaEx4c0dEQll1QTZEalhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAt+bqF3U
sYeh6Et+1C4B/08VVNTUFuMjuBEnWSvBWWGZqMjj8Zztl2YjI2E6vO5+0U5rvGvC
vUAvnZegsPlUAfYwWkPUFtpcpUMGl5Bo2fMCMm5jy6jbheTaBvDps4nxfmiJektA
2kYhUWBO1rSXA/Apfe6zyUHDNkMa7ikogswuERXZCN1OTzBrSqzst7Wrmn1yVQYq
8BXMW33SSPd9/nZ5EMamYnPdk7dQDZRZrFS9tn8ALiZvDQotDATBMHSmeL3kd/mZ
nVT+Vq4WynoUYJUuvMgOyDLgqD+73txI1EYEgsz5CuwF85121KYpSYCt004onoxx
BB8V04djV71c6w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:20 2025 by rpki-client