Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
File: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json)
Hash identifier: jFTHuZHy2fC4flGMpxILlfjlelF+kkKYCYDbrI7hTsg=
Subject key identifier: F3:41:11:68:28:59:59:62:6C:19:5B:F4:B7:30:69:94:62:79:E8:70
Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
Certificate issuer: /CN=f94df3b8463da119fdd56d85da547a042a1798c4
Certificate serial: 0194BBCEF00C88A1727453D3EE60FD3D5316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: vzzvR2mQ+fcufso+J3e42IGnioKbv9up7Knq4XjGNyU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f0:0c:88:a1:72:74:53:d3:ee:60:fd:3d:53:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=f3411168285959626c195bf4b73069946279e870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:1b:52:be:02:b1:c5:34:c3:81:70:c7:4f:
d4:c3:e1:ab:c7:ce:71:56:22:e0:67:27:ca:6b:f2:
3c:4f:b7:71:f4:9f:f5:cf:8a:33:86:5f:b6:46:f2:
6c:a9:56:bc:f9:46:af:ce:c6:61:c7:bc:62:be:5e:
97:23:4e:b6:71:e6:82:81:60:12:85:64:6f:e9:bf:
34:c0:52:c0:5b:12:2e:76:f0:a7:86:c4:5a:60:d9:
ff:f2:8e:d5:6d:25:9b:dd:55:14:c3:fb:7e:53:2f:
65:41:1b:d6:1b:ac:d5:e3:0c:9b:81:56:ec:a0:5e:
13:c0:c9:32:8b:5d:e5:64:2d:ff:fd:ff:f7:ea:5e:
6f:ed:2d:aa:a7:9e:e1:c0:87:76:e4:35:e0:db:74:
6f:19:b6:3a:87:27:e9:74:86:a7:1a:31:c0:89:4d:
11:a3:24:33:16:8a:9d:7f:39:39:65:41:70:56:e9:
13:e7:5e:b1:d6:ee:6b:89:aa:53:b5:cd:80:34:a3:
72:e3:d4:9c:c1:24:58:ef:85:4f:90:cf:81:37:4f:
ff:6a:fe:c9:37:78:f3:81:d6:37:28:99:de:09:e1:
f1:72:99:19:f1:74:d3:67:fa:fd:94:9e:a5:76:0c:
3a:e7:95:59:3f:70:8b:16:6d:8c:c0:d5:ab:36:fc:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:41:11:68:28:59:59:62:6C:19:5B:F4:B7:30:69:94:62:79:E8:70
X509v3 Authority Key Identifier:
keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ba:50:18:2e:61:f9:dc:d1:2f:a2:1a:9b:ea:d7:a3:90:8c:
52:d5:60:09:44:88:ad:7b:69:9d:2b:78:0a:15:7c:7e:81:77:
c9:2c:5a:aa:e4:9d:79:3e:ff:66:2e:a4:41:7c:55:73:5e:bf:
6a:d9:ad:0b:89:c1:ba:87:d7:8c:3c:eb:b6:e9:3b:5c:7e:d6:
e4:a1:b2:1b:03:3d:32:ac:38:d4:56:dd:67:cf:ea:1b:5c:85:
bb:52:63:91:7b:e0:3f:e8:e3:f5:a4:63:63:af:5a:de:49:df:
8c:16:18:76:f6:53:18:fa:e7:1d:a3:c1:66:ec:7e:d5:a0:af:
6e:23:72:2a:d5:93:e8:f8:d9:01:5d:22:1b:ef:24:16:c5:9c:
ae:e0:16:40:8b:36:28:ec:d7:26:56:e4:f9:f1:f0:8a:10:d8:
78:74:3b:1f:58:c4:c9:57:b3:59:89:58:46:87:d0:bb:56:78:
9a:ec:bd:6a:78:d2:0b:ac:0b:0d:25:f3:1d:b7:0a:01:37:5a:
14:09:1e:79:91:07:f1:b3:e3:15:31:67:f9:d8:db:3d:15:3c:
d3:96:ac:52:87:f3:9d:f0:ee:09:7b:fd:f2:ee:77:b7:26:c8:
4a:a2:cd:6e:c6:fa:86:80:35:9c:5e:74:70:0a:f0:3b:0a:58:
80:ce:44:bf
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS7zvAMiKFydFPT7mD9PVMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NGRmM2I4NDYzZGExMTlmZGQ1NmQ4NWRhNTQ3YTA0MmEx
Nzk4YzQwHhcNMjUwMTMxMTAwMTI4WhcNMjUwMjAxMTAwMTI4WjAzMTEwLwYDVQQD
EyhmMzQxMTE2ODI4NTk1OTYyNmMxOTViZjRiNzMwNjk5NDYyNzllODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc4bUr4CscU0w4Fwx0/Uw+Grx85x
ViLgZyfKa/I8T7dx9J/1z4ozhl+2RvJsqVa8+UavzsZhx7xivl6XI062ceaCgWAS
hWRv6b80wFLAWxIudvCnhsRaYNn/8o7VbSWb3VUUw/t+Uy9lQRvWG6zV4wybgVbs
oF4TwMkyi13lZC3//f/36l5v7S2qp57hwId25DXg23RvGbY6hyfpdIanGjHAiU0R
oyQzFoqdfzk5ZUFwVukT516x1u5riapTtc2ANKNy49ScwSRY74VPkM+BN0//av7J
N3jzgdY3KJneCeHxcpkZ8XTTZ/r9lJ6ldgw655VZP3CLFm2MwNWrNvx6qwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPNBEWgoWVlibBlb9LcwaZRieehwMB8GA1UdIwQY
MBaAFPlN87hGPaEZ/dVthdpUegQqF5jEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1VM3p1RVk5b1JuOTFXMkYybFI2QkNvWG1NUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvOWM5MzIzLTQ4MDAtNDFhYy05OGUy
LTI1ZTg2MWNkNmIzNC8xLzEtVTN6dUVZOW9SbjkxVzJGMmxSNkJDb1htTVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzVkLzljOTMyMy00ODAwLTQxYWMtOThlMi0yNWU4NjFjZDZi
MzQvMS8xLVUzenVFWTlvUm45MVcyRjJsUjZCQ29YbU1RLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7pQ
GC5h+dzRL6Iam+rXo5CMUtVgCUSIrXtpnSt4ChV8foF3ySxaquSdeT7/Zi6kQXxV
c16/atmtC4nBuofXjDzrtuk7XH7W5KGyGwM9Mqw41FbdZ8/qG1yFu1JjkXvgP+jj
9aRjY69a3knfjBYYdvZTGPrnHaPBZux+1aCvbiNyKtWT6PjZAV0iG+8kFsWcruAW
QIs2KOzXJlbk+fHwihDYeHQ7H1jEyVezWYlYRofQu1Z4muy9anjSC6wLDSXzHbcK
ATdaFAkeeZEH8bPjFTFn+djbPRU805asUofznfDuCXv98u53tybISqLNbsb6hoA1
nF50cArwOwpYgM5Evw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:14 2025 by rpki-client