Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
File: R3BGWvTHI2RwAFnnll08iepGPNc.mft (raw, json)
Hash identifier: 9kvYDO7SEA6mqqDCsb3eyeLdJjmWJ/K0MTYxkQWUJP0=
Subject key identifier: 1B:87:E1:6D:99:BB:75:84:E5:AB:BC:60:64:16:D7:91:A7:72:85:C3
Authority key identifier: 47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7
Certificate issuer: /CN=4770465af4c72364700059e7965d3c89ea463cd7
Certificate serial: 0194BBCF015203738BD0354F5C135D3FFA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
Manifest number: 0DE0
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: R3BGWvTHI2RwAFnnll08iepGPNc.crl (hash: qRcigu9/z7heuaew6UYzUcfN9xewqGilrVXhPr3cRrM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:01:52:03:73:8b:d0:35:4f:5c:13:5d:3f:fa:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4770465af4c72364700059e7965d3c89ea463cd7
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=1b87e16d99bb7584e5abbc606416d791a77285c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4e:d8:e8:ea:65:d7:20:86:e7:53:30:50:91:
08:cf:b2:13:cf:50:87:70:83:cc:56:56:27:bd:05:
c2:92:d7:15:85:19:12:59:63:ba:09:d8:84:5c:93:
4a:de:f2:57:a3:7a:ee:19:d1:ad:6d:63:dd:2b:e8:
4c:40:2b:41:5b:4d:0d:c1:18:1a:54:e4:1c:92:ca:
cd:e6:45:63:0d:f2:85:d6:ab:15:3e:27:52:a4:91:
85:ea:d5:89:ba:7a:62:87:bd:76:10:51:ad:af:a6:
dc:e7:a0:f7:6b:0c:17:c7:0d:7e:1b:54:fa:00:4e:
cb:aa:c8:4a:1e:d5:16:27:11:ea:14:fc:4f:bf:b6:
a6:a6:90:ae:8e:22:06:17:e3:e9:27:a6:d3:d7:16:
1d:79:52:9b:21:f1:74:c7:86:3b:58:75:d8:16:f0:
67:71:68:2c:de:36:a3:7c:f7:ae:13:3e:49:39:26:
cb:54:61:96:4d:ef:34:39:c6:f8:b3:0b:fd:64:5e:
89:25:80:95:98:f9:ef:48:fc:e0:f9:79:f9:31:87:
62:55:6e:a7:9d:72:3d:8a:65:a9:8e:a7:70:16:ff:
87:06:af:8f:0f:18:0b:0a:29:66:7a:e6:87:06:76:
e3:75:1b:ac:91:0e:58:fa:26:c7:bd:3e:86:44:ff:
d1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:87:E1:6D:99:BB:75:84:E5:AB:BC:60:64:16:D7:91:A7:72:85:C3
X509v3 Authority Key Identifier:
keyid:47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:eb:e8:be:b4:1a:b2:9f:d9:f1:25:01:bb:b9:39:b4:52:98:
bb:8e:3e:bf:9d:06:73:55:be:a4:58:20:c9:b3:90:74:d8:a5:
33:ff:94:69:15:c0:80:a6:5d:19:65:c8:c4:79:39:57:ee:65:
ec:c1:2b:1f:2c:15:a4:d0:9e:e7:15:b8:2f:27:0d:51:ae:d9:
6c:01:4a:0e:e8:dc:a5:03:d7:e8:31:3c:60:3b:49:5a:b0:0e:
00:62:5e:4e:1d:db:76:08:9d:21:73:3b:89:e2:4c:af:8a:9a:
6d:12:37:17:d6:74:fb:a8:cd:a8:7c:f0:01:34:db:ed:43:4f:
46:06:83:ae:25:43:48:50:b5:22:72:fe:3b:08:93:c9:1e:7f:
d8:43:7e:30:f5:38:e1:04:be:36:43:f7:90:49:6b:d8:34:4c:
0f:aa:ec:62:fc:47:8e:11:2d:ec:f3:34:6a:b3:31:98:a1:08:
a0:29:d4:9c:d0:f5:a0:d2:ce:22:d5:2f:9f:37:fa:b2:4d:a3:
2d:69:45:73:45:e2:0c:54:02:9d:fe:f9:6c:7f:85:54:00:59:
6f:da:5d:02:9a:de:4f:b4:43:19:15:6c:8b:a2:f2:ae:3f:fa:
5a:a7:15:67:11:8e:05:2d:4c:cb:c1:da:fd:57:93:7f:9f:5a:
8b:cc:9b:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zwFSA3OL0DVPXBNdP/o9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NzA0NjVhZjRjNzIzNjQ3MDAwNTllNzk2NWQzYzg5ZWE0
NjNjZDcwHhcNMjUwMTMxMTAwMTMzWhcNMjUwMjAxMTAwMTMzWjAzMTEwLwYDVQQD
EygxYjg3ZTE2ZDk5YmI3NTg0ZTVhYmJjNjA2NDE2ZDc5MWE3NzI4NWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU7Y6Opl1yCG51MwUJEIz7ITz1CH
cIPMVlYnvQXCktcVhRkSWWO6CdiEXJNK3vJXo3ruGdGtbWPdK+hMQCtBW00NwRga
VOQcksrN5kVjDfKF1qsVPidSpJGF6tWJunpih712EFGtr6bc56D3awwXxw1+G1T6
AE7LqshKHtUWJxHqFPxPv7amppCujiIGF+PpJ6bT1xYdeVKbIfF0x4Y7WHXYFvBn
cWgs3jajfPeuEz5JOSbLVGGWTe80Ocb4swv9ZF6JJYCVmPnvSPzg+Xn5MYdiVW6n
nXI9imWpjqdwFv+HBq+PDxgLCilmeuaHBnbjdRuskQ5Y+ibHvT6GRP/RnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuH4W2Zu3WE5au8YGQW15GncoXDMB8GA1UdIwQY
MBaAFEdwRlr0xyNkcABZ55ZdPInqRjzXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjNCR1d2VEhJMlJ3QUZubmxsMDhpZXBHUE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85N2QwOWItZTVlMS00N2Y4LWIyNWYt
OGE5MmUwOWJmZTFiLzEvUjNCR1d2VEhJMlJ3QUZubmxsMDhpZXBHUE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC85N2QwOWItZTVlMS00N2Y4LWIyNWYtOGE5MmUwOWJmZTFi
LzEvUjNCR1d2VEhJMlJ3QUZubmxsMDhpZXBHUE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOvovrQa
sp/Z8SUBu7k5tFKYu44+v50Gc1W+pFggybOQdNilM/+UaRXAgKZdGWXIxHk5V+5l
7MErHywVpNCe5xW4LycNUa7ZbAFKDujcpQPX6DE8YDtJWrAOAGJeTh3bdgidIXM7
ieJMr4qabRI3F9Z0+6jNqHzwATTb7UNPRgaDriVDSFC1InL+OwiTyR5/2EN+MPU4
4QS+NkP3kElr2DRMD6rsYvxHjhEt7PM0arMxmKEIoCnUnND1oNLOItUvnzf6sk2j
LWlFc0XiDFQCnf75bH+FVABZb9pdApreT7RDGRVsi6Lyrj/6WqcVZxGOBS1My8Ha
/VeTf59ai8ybHQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:41:44 2025 by rpki-client