Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bc91d2-e209-4a1d-9f78-33d31293f0e1/1/DXtk3YGIxSbrXrReqB6mqK-cWek.mft
File: DXtk3YGIxSbrXrReqB6mqK-cWek.mft (raw, json)
Hash identifier: ZUypoR7OW4mGrf3sOIVOHc2M5FTWIdNQeaL62PI5Q7E=
Subject key identifier: 90:2E:02:4C:4E:D9:AC:9D:29:90:A1:3F:64:72:25:CC:16:A0:FB:D2
Authority key identifier: 0D:7B:64:DD:81:88:C5:26:EB:5E:B4:5E:A8:1E:A6:A8:AF:9C:59:E9
Certificate issuer: /CN=0d7b64dd8188c526eb5eb45ea81ea6a8af9c59e9
Certificate serial: 0194BC3C1692C654E0A2A17E4FE84372D85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXtk3YGIxSbrXrReqB6mqK-cWek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bc91d2-e209-4a1d-9f78-33d31293f0e1/1/DXtk3YGIxSbrXrReqB6mqK-cWek.mft
Manifest number: B0
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: DXtk3YGIxSbrXrReqB6mqK-cWek.crl (hash: qofdXlyqHfO7cRZVai6GhV2RSJITuotIWOM2XYUjrw8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:16:92:c6:54:e0:a2:a1:7e:4f:e8:43:72:d8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7b64dd8188c526eb5eb45ea81ea6a8af9c59e9
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=902e024c4ed9ac9d2990a13f647225cc16a0fbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:ce:f9:5c:42:a1:18:f6:1a:97:3f:20:20:
62:52:71:c0:26:97:75:27:89:08:22:3c:86:5f:28:
ae:e4:2c:77:d9:c8:10:62:08:14:fe:26:86:64:08:
86:87:ba:4f:9b:be:a0:b9:10:bd:c7:b3:e6:ac:44:
27:90:4b:f8:43:11:3a:1d:2f:6c:d4:a3:42:41:30:
e8:6c:4d:c6:58:2c:a1:14:fe:ed:df:21:a8:d3:74:
a1:3f:91:50:fa:8e:98:00:66:7c:5f:fe:67:80:f2:
be:ab:3c:c3:29:13:0a:24:a8:55:61:15:69:18:86:
b0:e4:8d:ac:b9:84:81:b3:35:17:67:96:17:18:ce:
b2:59:55:03:40:a2:f8:6f:9f:18:4e:55:ad:d4:65:
d4:fd:cc:68:17:28:6f:1c:d3:7a:1e:72:08:8a:0d:
64:e3:5b:f3:8c:67:45:a4:21:32:79:53:d9:e1:2d:
73:11:17:24:1b:74:61:bb:57:78:79:a0:f4:5a:1b:
16:bf:9c:f4:17:0b:88:02:0d:44:43:17:1a:9d:c5:
7c:87:f8:5c:98:6d:de:b8:12:85:95:2a:1f:1d:24:
da:00:4b:07:6a:6b:57:79:4d:11:f3:6b:e1:b7:9a:
ac:ce:90:1b:05:55:f3:cb:aa:3c:4e:39:e3:28:e2:
10:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2E:02:4C:4E:D9:AC:9D:29:90:A1:3F:64:72:25:CC:16:A0:FB:D2
X509v3 Authority Key Identifier:
keyid:0D:7B:64:DD:81:88:C5:26:EB:5E:B4:5E:A8:1E:A6:A8:AF:9C:59:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXtk3YGIxSbrXrReqB6mqK-cWek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bc91d2-e209-4a1d-9f78-33d31293f0e1/1/DXtk3YGIxSbrXrReqB6mqK-cWek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bc91d2-e209-4a1d-9f78-33d31293f0e1/1/DXtk3YGIxSbrXrReqB6mqK-cWek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:84:92:44:fa:c2:9f:a6:35:77:0e:10:68:d1:a7:b8:a3:77:
f9:dc:87:77:8d:29:f8:fc:71:22:d3:23:50:e9:dd:b6:4c:72:
4b:5a:3c:8d:fe:7d:a6:0d:29:88:c2:1d:d3:7b:da:85:ba:cf:
5d:75:68:99:ba:44:c3:75:15:18:74:77:ca:6f:07:2a:cb:38:
18:08:8a:50:6f:9a:99:7d:63:ec:0d:0e:a6:81:b2:a6:f7:db:
78:c9:18:27:7a:8c:a2:b3:3f:e4:cb:4d:da:9b:d4:54:b9:d3:
52:e7:87:70:50:33:2a:00:8c:66:5b:6c:c8:cf:af:3a:c4:bc:
42:97:d6:ca:b3:e5:11:60:42:b8:f9:34:b2:dd:c9:76:ec:2e:
f0:c1:0b:0b:6b:cf:10:7d:7c:98:18:78:41:fb:4d:a5:64:47:
97:0c:13:1d:a8:78:4f:54:77:49:24:4e:34:12:1a:4d:e5:38:
6b:17:0f:d2:76:03:32:68:99:b1:8d:54:57:fc:31:d4:dc:2a:
3b:5c:65:1b:4b:c4:34:d4:53:f6:e1:36:d4:99:12:13:71:cc:
34:ec:54:16:76:58:d1:f6:68:b7:42:84:a6:46:c9:c3:63:53:
c0:16:d6:3d:5c:bc:4e:e6:35:7f:f1:a4:fe:05:32:80:75:b7:
e0:df:f0:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PBaSxlTgoqF+T+hDctheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkN2I2NGRkODE4OGM1MjZlYjVlYjQ1ZWE4MWVhNmE4YWY5
YzU5ZTkwHhcNMjUwMTMxMTIwMDQyWhcNMjUwMjAxMTIwMDQyWjAzMTEwLwYDVQQD
Eyg5MDJlMDI0YzRlZDlhYzlkMjk5MGExM2Y2NDcyMjVjYzE2YTBmYmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwXO+VxCoRj2Gpc/ICBiUnHAJpd1
J4kIIjyGXyiu5Cx32cgQYggU/iaGZAiGh7pPm76guRC9x7PmrEQnkEv4QxE6HS9s
1KNCQTDobE3GWCyhFP7t3yGo03ShP5FQ+o6YAGZ8X/5ngPK+qzzDKRMKJKhVYRVp
GIaw5I2suYSBszUXZ5YXGM6yWVUDQKL4b58YTlWt1GXU/cxoFyhvHNN6HnIIig1k
41vzjGdFpCEyeVPZ4S1zERckG3Rhu1d4eaD0WhsWv5z0FwuIAg1EQxcancV8h/hc
mG3euBKFlSofHSTaAEsHamtXeU0R82vht5qszpAbBVXzy6o8TjnjKOIQnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAuAkxO2aydKZChP2RyJcwWoPvSMB8GA1UdIwQY
MBaAFA17ZN2BiMUm6160XqgepqivnFnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFh0azNZR0l4U2JyWHJSZXFCNm1xSy1jV2VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iYzkxZDItZTIwOS00YTFkLTlmNzgt
MzNkMzEyOTNmMGUxLzEvRFh0azNZR0l4U2JyWHJSZXFCNm1xSy1jV2VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iYzkxZDItZTIwOS00YTFkLTlmNzgtMzNkMzEyOTNmMGUx
LzEvRFh0azNZR0l4U2JyWHJSZXFCNm1xSy1jV2VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtYSSRPrC
n6Y1dw4QaNGnuKN3+dyHd40p+PxxItMjUOndtkxyS1o8jf59pg0piMId03vahbrP
XXVombpEw3UVGHR3ym8HKss4GAiKUG+amX1j7A0OpoGypvfbeMkYJ3qMorM/5MtN
2pvUVLnTUueHcFAzKgCMZltsyM+vOsS8QpfWyrPlEWBCuPk0st3Jduwu8MELC2vP
EH18mBh4QftNpWRHlwwTHah4T1R3SSRONBIaTeU4axcP0nYDMmiZsY1UV/wx1Nwq
O1xlG0vENNRT9uE21JkSE3HMNOxUFnZY0fZot0KEpkbJw2NTwBbWPVy8TuY1f/Gk
/gUygHW34N/w8A==
-----END CERTIFICATE-----
Generated at Sat May 3 20:01:21 2025 by rpki-client