Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
File: 2QrRERMYMAumeOiOBQKx_FHjU3k.mft (raw, json)
Hash identifier: 8+U9rmd8jWLMgzzCrioqwB+fO7ClA7+8gY8yRmhyeCE=
Subject key identifier: 3E:37:3C:E0:F7:6A:86:47:C0:9A:17:4E:2A:BD:DA:73:C0:AC:99:89
Authority key identifier: D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
Certificate issuer: /CN=d90ad1111318300ba678e88e0502b1fc51e35379
Certificate serial: 0194BC050A74009D04BCF5984024010937C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
Manifest number: 34
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: 2QrRERMYMAumeOiOBQKx_FHjU3k.crl (hash: JjCoE2ZLVISDn8cgeledDP+VW0mlcqsalTIMqJaKip0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0a:74:00:9d:04:bc:f5:98:40:24:01:09:37:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90ad1111318300ba678e88e0502b1fc51e35379
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=3e373ce0f76a8647c09a174e2abdda73c0ac9989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:df:f1:f3:73:14:71:4d:be:81:e4:ae:4b:c9:
10:a3:2f:62:8c:b5:42:7a:c7:16:31:d7:87:28:b4:
3a:fb:4a:22:db:c6:5f:83:bd:57:a6:d9:3c:3b:36:
86:24:37:78:eb:92:b8:96:82:57:aa:45:85:5e:d9:
8c:f2:0d:08:66:3c:35:a6:c2:69:93:3c:06:1c:31:
d2:41:c6:60:6d:57:a7:91:e7:a2:5e:a5:8d:dd:17:
5a:13:5b:61:dc:6d:51:9d:8a:ab:1b:49:bc:f9:c4:
66:36:10:da:bc:17:ab:d1:cd:6a:80:0f:19:46:e1:
f2:bc:96:0a:82:cf:6b:8c:92:37:b1:38:98:fb:3c:
ac:74:0e:6f:3e:09:7b:4f:92:37:03:e2:cf:3f:f5:
94:e2:dd:53:e6:3c:c8:60:a7:be:c1:af:53:bd:a7:
50:6e:0b:6e:42:50:4a:57:ff:74:00:fc:15:00:ed:
67:c5:78:29:fd:d2:f6:69:17:89:06:52:e8:e9:3f:
3c:0e:04:a6:0c:26:89:45:b5:c3:55:e5:af:10:59:
2c:5b:a5:b8:a1:11:e3:c9:d3:f0:e0:30:d5:63:73:
f7:ed:8d:23:14:b8:b9:96:98:fc:04:6f:d0:3d:57:
14:b7:07:8f:95:9e:e7:f7:9c:75:7a:df:3d:f1:b5:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:37:3C:E0:F7:6A:86:47:C0:9A:17:4E:2A:BD:DA:73:C0:AC:99:89
X509v3 Authority Key Identifier:
keyid:D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:48:fc:27:a9:e0:1f:8c:f5:9d:f9:a5:6c:91:bd:d9:b9:27:
9a:31:d2:1c:60:64:82:3b:0f:7e:ae:d9:30:99:7a:0b:74:45:
2c:a6:06:ff:fb:4a:26:e8:b8:07:67:f2:b4:cb:99:59:27:52:
6f:5c:6b:93:3b:3a:b3:ea:3c:82:ef:89:cf:4f:38:dc:b1:19:
e8:98:22:ef:1c:c7:29:57:4d:74:9b:fe:11:a2:d9:1f:bc:70:
2d:72:97:dc:61:94:28:28:06:1b:f2:6e:55:13:cb:41:56:7d:
19:a5:c9:21:48:13:d4:f3:5d:5b:ff:95:fc:23:93:5c:45:9c:
7e:92:02:36:21:98:f6:bd:69:c9:0f:7e:df:7f:ff:aa:8e:bd:
86:65:7f:94:9b:3b:d2:06:5f:67:74:05:ba:8e:df:c7:21:53:
23:d4:62:a1:d5:87:c0:12:ae:9d:cd:0e:c8:a9:6b:a5:84:f6:
9a:0b:3e:62:8b:44:88:7b:30:b8:a9:a1:49:c2:03:d5:6e:1f:
83:30:f6:9e:47:7d:d3:fe:af:15:f2:2c:0b:6e:fa:b6:ff:98:
5d:8a:43:77:8a:7f:8b:6e:0b:7e:5c:fc:74:1c:3a:7b:10:a6:
01:ca:0d:2b:4c:00:ee:d5:e8:61:52:e1:a5:3f:5e:94:38:d4:
61:0f:86:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQp0AJ0EvPWYQCQBCTfHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MGFkMTExMTMxODMwMGJhNjc4ZTg4ZTA1MDJiMWZjNTFl
MzUzNzkwHhcNMjUwMTMxMTEwMDM0WhcNMjUwMjAxMTEwMDM0WjAzMTEwLwYDVQQD
EygzZTM3M2NlMGY3NmE4NjQ3YzA5YTE3NGUyYWJkZGE3M2MwYWM5OTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN/x83MUcU2+geSuS8kQoy9ijLVC
escWMdeHKLQ6+0oi28Zfg71Xptk8OzaGJDd465K4loJXqkWFXtmM8g0IZjw1psJp
kzwGHDHSQcZgbVenkeeiXqWN3RdaE1th3G1RnYqrG0m8+cRmNhDavBer0c1qgA8Z
RuHyvJYKgs9rjJI3sTiY+zysdA5vPgl7T5I3A+LPP/WU4t1T5jzIYKe+wa9TvadQ
bgtuQlBKV/90APwVAO1nxXgp/dL2aReJBlLo6T88DgSmDCaJRbXDVeWvEFksW6W4
oRHjydPw4DDVY3P37Y0jFLi5lpj8BG/QPVcUtwePlZ7n95x1et898bXTgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD43POD3aoZHwJoXTiq92nPArJmJMB8GA1UdIwQY
MBaAFNkK0RETGDALpnjojgUCsfxR41N5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFyUkVSTVlNQXVtZU9pT0JRS3hfRkhqVTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83NThhMGYtM2M0Yy00MzEwLTlhNzIt
NWEyN2I4YWYyOGE1LzEvMlFyUkVSTVlNQXVtZU9pT0JRS3hfRkhqVTNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83NThhMGYtM2M0Yy00MzEwLTlhNzItNWEyN2I4YWYyOGE1
LzEvMlFyUkVSTVlNQXVtZU9pT0JRS3hfRkhqVTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUj8J6ng
H4z1nfmlbJG92bknmjHSHGBkgjsPfq7ZMJl6C3RFLKYG//tKJui4B2fytMuZWSdS
b1xrkzs6s+o8gu+Jz0843LEZ6Jgi7xzHKVdNdJv+EaLZH7xwLXKX3GGUKCgGG/Ju
VRPLQVZ9GaXJIUgT1PNdW/+V/COTXEWcfpICNiGY9r1pyQ9+33//qo69hmV/lJs7
0gZfZ3QFuo7fxyFTI9RiodWHwBKunc0OyKlrpYT2mgs+YotEiHswuKmhScID1W4f
gzD2nkd90/6vFfIsC276tv+YXYpDd4p/i24Lflz8dBw6exCmAcoNK0wA7tXoYVLh
pT9elDjUYQ+GcQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:16 2025 by rpki-client