Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
File: p3tNEFqlxNZemaq2926tWJ5ih8w.mft (raw, json)
Hash identifier: RTv+gS6JyQ5IkIMgeeQCNfzL5qvAiexAIJWb9Yv2/YU=
Subject key identifier: CE:21:CD:22:5F:3B:16:54:23:AC:02:1D:B9:26:DE:DE:17:3F:2B:9E
Authority key identifier: A7:7B:4D:10:5A:A5:C4:D6:5E:99:AA:B6:F7:6E:AD:58:9E:62:87:CC
Certificate issuer: /CN=a77b4d105aa5c4d65e99aab6f76ead589e6287cc
Certificate serial: 0194BC3BFBAB87CAEBA725E401F142C05DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
Manifest number: 0227
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: p3tNEFqlxNZemaq2926tWJ5ih8w.crl (hash: hlLOthVSD//WzwoROyWLDHtOo4AM6nBEzOHy5Xj8rr4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fb:ab:87:ca:eb:a7:25:e4:01:f1:42:c0:5d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77b4d105aa5c4d65e99aab6f76ead589e6287cc
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=ce21cd225f3b165423ac021db926dede173f2b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:db:e2:bf:99:03:ee:3f:d5:6f:3d:24:53:
21:27:f9:9b:46:23:3f:d5:44:4a:57:da:66:98:05:
e6:94:99:88:0f:9a:4f:00:54:54:9a:1d:63:cb:e6:
57:9b:34:5c:84:d6:6f:5f:d8:4d:e2:43:5b:6a:f1:
d2:29:d0:68:5e:96:04:a7:ed:0e:10:5b:94:ad:43:
29:d1:ed:94:fe:3b:3e:6d:8d:77:01:ea:74:3f:69:
c6:34:9d:87:c6:4e:15:f1:b5:4d:10:2f:53:c3:e6:
c2:81:8e:c9:bc:be:a5:d0:77:dd:dd:c1:d2:a0:61:
d2:51:46:c3:3f:98:10:c4:7d:61:c0:c4:01:e6:0c:
9a:4b:8f:d2:29:96:bd:c9:8c:50:fb:eb:01:a2:e9:
b1:10:22:60:1d:b6:be:c0:4b:70:1f:02:7f:9b:bf:
38:45:bc:18:6f:6f:a5:6c:29:12:33:81:e0:15:2a:
b0:b1:42:14:b0:86:66:00:ad:7e:69:2a:f3:62:73:
1f:50:f6:94:24:95:a2:8d:40:cf:55:b1:55:d3:26:
b2:f6:44:05:3b:e1:51:51:6c:9a:67:df:36:4c:54:
7c:49:81:23:99:1f:63:5a:d9:1a:77:bd:be:b9:78:
9c:56:40:24:60:6f:fd:36:bf:b6:83:a7:bc:5c:a7:
00:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:21:CD:22:5F:3B:16:54:23:AC:02:1D:B9:26:DE:DE:17:3F:2B:9E
X509v3 Authority Key Identifier:
keyid:A7:7B:4D:10:5A:A5:C4:D6:5E:99:AA:B6:F7:6E:AD:58:9E:62:87:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c0:32:10:d4:dc:e6:c6:12:84:d1:27:a5:92:86:6e:c9:39:
8b:4a:fc:bc:a9:17:18:7c:4e:28:b0:c7:23:97:17:3e:cd:30:
96:6d:79:70:c6:f2:39:46:03:45:60:30:14:36:c1:99:6e:a9:
d0:e8:b6:b2:14:de:ab:77:41:7a:8b:01:94:02:5e:de:47:b7:
24:76:17:95:d3:1f:9e:d3:ce:47:fc:e2:82:7f:9d:db:f7:de:
f1:55:3b:25:a9:e0:f1:df:46:0d:10:62:ae:0e:41:8f:ba:a5:
d8:38:fc:84:e6:5d:b7:f8:35:dc:64:7a:fa:ef:9f:8b:74:c3:
42:43:c2:f6:d0:34:6c:aa:cb:5b:70:b4:06:0f:cb:39:fd:07:
b1:99:06:a0:cd:20:2c:a2:73:d6:06:84:6f:83:bf:da:ec:ed:
00:f4:34:4c:fd:40:0d:c4:63:fe:d4:66:a2:c3:d6:b5:12:65:
5c:3f:cb:98:cc:12:99:61:83:69:8f:dd:dc:f6:e7:e1:12:00:
24:67:c6:f0:10:78:63:63:94:de:68:00:13:b5:5c:dc:e4:39:
95:00:51:18:86:08:10:ac:ee:e5:d0:c8:71:9f:07:95:80:d5:
d8:42:cc:f6:36:a9:7c:75:55:83:3a:31:00:5e:04:d9:2f:b4:
14:a4:13:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/urh8rrpyXkAfFCwF23MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3N2I0ZDEwNWFhNWM0ZDY1ZTk5YWFiNmY3NmVhZDU4OWU2
Mjg3Y2MwHhcNMjUwMTMxMTIwMDM1WhcNMjUwMjAxMTIwMDM1WjAzMTEwLwYDVQQD
EyhjZTIxY2QyMjVmM2IxNjU0MjNhYzAyMWRiOTI2ZGVkZTE3M2YyYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz7b4r+ZA+4/1W89JFMhJ/mbRiM/
1URKV9pmmAXmlJmID5pPAFRUmh1jy+ZXmzRchNZvX9hN4kNbavHSKdBoXpYEp+0O
EFuUrUMp0e2U/js+bY13Aep0P2nGNJ2Hxk4V8bVNEC9Tw+bCgY7JvL6l0Hfd3cHS
oGHSUUbDP5gQxH1hwMQB5gyaS4/SKZa9yYxQ++sBoumxECJgHba+wEtwHwJ/m784
RbwYb2+lbCkSM4HgFSqwsUIUsIZmAK1+aSrzYnMfUPaUJJWijUDPVbFV0yay9kQF
O+FRUWyaZ982TFR8SYEjmR9jWtkad72+uXicVkAkYG/9Nr+2g6e8XKcAVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4hzSJfOxZUI6wCHbkm3t4XPyueMB8GA1UdIwQY
MBaAFKd7TRBapcTWXpmqtvdurVieYofMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDN0TkVGcWx4TlplbWFxMjkyNnRXSjVpaDh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81ZWEyYTYtZmYyZi00N2ZkLWI3Yzgt
ZjRmNDUwNDNiOGJjLzEvcDN0TkVGcWx4TlplbWFxMjkyNnRXSjVpaDh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81ZWEyYTYtZmYyZi00N2ZkLWI3YzgtZjRmNDUwNDNiOGJj
LzEvcDN0TkVGcWx4TlplbWFxMjkyNnRXSjVpaDh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcAyENTc
5sYShNEnpZKGbsk5i0r8vKkXGHxOKLDHI5cXPs0wlm15cMbyOUYDRWAwFDbBmW6p
0Oi2shTeq3dBeosBlAJe3ke3JHYXldMfntPOR/zign+d2/fe8VU7Jang8d9GDRBi
rg5Bj7ql2Dj8hOZdt/g13GR6+u+fi3TDQkPC9tA0bKrLW3C0Bg/LOf0HsZkGoM0g
LKJz1gaEb4O/2uztAPQ0TP1ADcRj/tRmosPWtRJlXD/LmMwSmWGDaY/d3Pbn4RIA
JGfG8BB4Y2OU3mgAE7Vc3OQ5lQBRGIYIEKzu5dDIcZ8HlYDV2ELM9japfHVVgzox
AF4E2S+0FKQTpw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:00 2025 by rpki-client