Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
File: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json)
Hash identifier: 2gL5hJjYgyAUetM1JdWDBShaQ0Atd5G64AoA74WuWV4=
Subject key identifier: 83:8D:26:52:06:E6:C0:46:EA:84:E0:C8:1B:60:C4:F0:D1:50:27:30
Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
Certificate issuer: /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Certificate serial: 0194BBCE7343B3C40DF674097FE30ACFC168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: vApmwT+cNs2agEeND4ovyfHfyTvkCprO1JgME17i7hw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:73:43:b3:c4:0d:f6:74:09:7f:e3:0a:cf:c1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=838d265206e6c046ea84e0c81b60c4f0d1502730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:27:b4:5f:9c:66:0a:ca:97:b3:18:b2:a6:
c0:ad:cf:06:e4:c1:f2:72:12:89:68:1a:bc:bd:42:
c7:5b:24:cc:78:6f:61:0d:b4:5e:c9:ba:16:cc:78:
59:8e:9c:58:09:ed:a6:cb:90:01:e5:43:ba:c7:13:
3b:12:5b:2f:be:14:cc:23:23:d7:f0:05:ae:6f:6a:
4b:51:59:90:26:cc:17:97:6c:06:4d:d6:a7:15:84:
75:b2:7e:b5:98:e6:b6:cc:35:e7:ac:61:55:3a:b1:
7a:a0:1d:c1:cc:2f:ce:b2:81:1e:01:01:04:e6:5f:
c4:1e:b2:ef:07:90:69:58:06:3e:99:99:f5:99:27:
90:d3:12:43:7d:0b:9b:0b:ad:79:a2:a0:d0:36:fa:
52:46:b1:b4:45:9d:83:26:c0:47:80:ea:b7:c7:d9:
66:d2:18:40:f3:ed:92:6f:5e:ec:ec:06:29:49:45:
5f:d6:24:29:83:a8:fb:73:02:c1:49:d6:cb:d9:a9:
23:7e:3e:8e:09:43:ee:0e:63:87:31:dc:de:b7:f5:
17:bc:c3:70:01:c9:fe:7c:93:70:f2:41:71:3e:a1:
b5:1b:cf:83:1c:84:06:a0:e3:52:89:a4:8e:b6:bd:
e4:50:d3:b6:0c:45:48:d8:79:98:c3:48:a4:33:12:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8D:26:52:06:E6:C0:46:EA:84:E0:C8:1B:60:C4:F0:D1:50:27:30
X509v3 Authority Key Identifier:
keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5b:3b:b2:fd:35:35:66:97:38:41:86:f5:2b:c2:a8:70:8b:
16:8d:80:34:8b:91:5d:94:e1:aa:44:b9:f2:3f:c9:e3:9b:38:
e5:bd:b2:7c:f2:ee:a4:da:c5:d8:0a:6a:d5:48:19:5e:27:43:
a4:84:14:ae:39:f8:d1:b0:1d:7e:da:b1:d1:25:be:32:50:4a:
f9:d1:b9:d3:b0:f1:cb:d7:82:23:17:d9:6a:4d:69:63:20:d9:
e0:4d:5c:21:b6:ab:44:e9:93:d0:8b:b6:ca:40:a2:6e:91:f4:
25:72:b4:4d:f0:b3:d1:2d:6b:90:66:51:86:87:cc:a8:6a:e6:
a0:36:a5:1b:73:59:cd:97:2c:ae:68:22:ae:38:a5:e7:7a:bc:
ba:cf:58:29:f2:c7:a6:f3:36:2e:4a:e3:76:1d:47:03:4b:26:
b8:40:40:a8:38:bc:ac:24:07:c3:99:98:02:19:eb:1f:41:33:
81:c3:c8:0f:73:85:6b:fd:d7:b6:cd:65:e0:f4:d5:f1:d6:6c:
fa:32:eb:db:6f:e1:8e:e2:98:09:1b:f4:dc:94:a1:56:84:fb:
ab:63:d9:11:ef:05:bc:14:ea:14:db:e8:9d:56:8a:69:af:79:
8f:d8:a5:95:f1:02:0d:64:40:f1:e7:97:a0:70:c0:22:b7:84:
a1:62:0b:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7znNDs8QN9nQJf+MKz8FoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhN2RjYjA4MWM3MzgwMmZjMTg5NWM2ZWI0YTI3MjY2NmJk
NDI3OWEwHhcNMjUwMTMxMTAwMDU2WhcNMjUwMjAxMTAwMDU2WjAzMTEwLwYDVQQD
Eyg4MzhkMjY1MjA2ZTZjMDQ2ZWE4NGUwYzgxYjYwYzRmMGQxNTAyNzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK8ntF+cZgrKl7MYsqbArc8G5MHy
chKJaBq8vULHWyTMeG9hDbReyboWzHhZjpxYCe2my5AB5UO6xxM7ElsvvhTMIyPX
8AWub2pLUVmQJswXl2wGTdanFYR1sn61mOa2zDXnrGFVOrF6oB3BzC/OsoEeAQEE
5l/EHrLvB5BpWAY+mZn1mSeQ0xJDfQubC615oqDQNvpSRrG0RZ2DJsBHgOq3x9lm
0hhA8+2Sb17s7AYpSUVf1iQpg6j7cwLBSdbL2akjfj6OCUPuDmOHMdzet/UXvMNw
Acn+fJNw8kFxPqG1G8+DHIQGoONSiaSOtr3kUNO2DEVI2HmYw0ikMxI9pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIONJlIG5sBG6oTgyBtgxPDRUCcwMB8GA1UdIwQY
MBaAFNp9ywgcc4AvwYlcbrSicmZr1CeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm4zTENCeHpnQ19CaVZ4dXRLSnlabXZVSjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80YWJmMTItNDVhNi00ZTJhLWJjODUt
NjhiNjhlNDk5YjRiLzEvMm4zTENCeHpnQ19CaVZ4dXRLSnlabXZVSjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS80YWJmMTItNDVhNi00ZTJhLWJjODUtNjhiNjhlNDk5YjRi
LzEvMm4zTENCeHpnQ19CaVZ4dXRLSnlabXZVSjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVs7sv01
NWaXOEGG9SvCqHCLFo2ANIuRXZThqkS58j/J45s45b2yfPLupNrF2Apq1UgZXidD
pIQUrjn40bAdftqx0SW+MlBK+dG507Dxy9eCIxfZak1pYyDZ4E1cIbarROmT0Iu2
ykCibpH0JXK0TfCz0S1rkGZRhofMqGrmoDalG3NZzZcsrmgirjil53q8us9YKfLH
pvM2Lkrjdh1HA0smuEBAqDi8rCQHw5mYAhnrH0EzgcPID3OFa/3Xts1l4PTV8dZs
+jLr22/hjuKYCRv03JShVoT7q2PZEe8FvBTqFNvonVaKaa95j9illfECDWRA8eeX
oHDAIreEoWIL7w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:24 2025 by rpki-client