Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
File: 4UYAGfiAaeNhThUQkhzH5E0cq-I.mft (raw, json)
Hash identifier: sGFJSKqyjJ1KVc6I+hzbh0a/jjqe7vUFhE6Fds5+n/g=
Subject key identifier: B2:A4:26:41:33:55:19:B2:E9:04:D6:20:6D:EE:03:7C:B9:6A:8D:0E
Authority key identifier: E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
Certificate issuer: /CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Certificate serial: 0194BC7299D43B0D931CE6C768E2B4062CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: 4UYAGfiAaeNhThUQkhzH5E0cq-I.crl (hash: V+HBWY4jM6c8KR0CEDr6Wj9enL2JiRxzdfcSA7Nm4Ck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:99:d4:3b:0d:93:1c:e6:c7:68:e2:b4:06:2c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=b2a42641335519b2e904d6206dee037cb96a8d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:ab:0a:12:5e:19:c7:fa:04:8d:bf:89:c3:
6b:7c:ab:c7:0f:00:47:01:b2:7d:16:28:ac:ec:60:
0f:c5:32:00:2c:91:9e:23:c0:09:31:5e:45:72:11:
f3:2d:a0:6f:f1:db:ce:0b:aa:e0:fa:a0:fa:74:4f:
90:e6:40:23:10:8a:0e:6d:15:da:51:a0:a2:6a:26:
1b:db:25:76:b8:a3:b2:1a:39:4f:39:05:d4:a3:1e:
78:1c:7f:01:57:ce:c5:ca:8b:aa:0c:95:58:09:e4:
e5:9a:29:d9:2d:90:02:0a:4f:cc:97:36:be:81:56:
9c:b9:f6:6f:57:dc:dc:78:c9:84:e5:38:5c:06:9f:
f7:0d:d5:fd:15:b2:d0:e4:4e:0f:18:2b:dd:97:b9:
ae:79:41:f8:81:dc:9d:e7:b1:ce:12:24:e4:c4:3c:
b2:3a:54:cc:7e:4f:0a:e9:39:20:c4:a6:32:21:be:
d2:13:52:e7:b0:ab:d5:03:6d:97:1a:ac:3b:f7:41:
cf:38:aa:62:23:18:ff:97:23:76:53:b6:61:99:7c:
47:15:ea:c7:ea:27:ed:9d:fc:50:b3:86:43:d3:05:
16:2b:cb:b0:0e:e0:15:a1:38:d0:78:da:52:d4:10:
86:f2:ad:58:36:e0:3e:af:b4:84:e6:e9:de:33:b7:
cf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A4:26:41:33:55:19:B2:E9:04:D6:20:6D:EE:03:7C:B9:6A:8D:0E
X509v3 Authority Key Identifier:
keyid:E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ef:ae:a1:9d:e4:f2:f1:4a:6d:35:17:7a:e5:7a:9a:a5:38:
6f:50:02:7b:1a:09:93:35:21:53:9b:b7:d5:a1:fa:17:60:76:
3a:74:58:31:67:59:56:9e:45:57:76:23:12:fe:2d:21:a2:c7:
d0:3d:a9:fa:de:1d:31:81:0e:19:3d:99:4e:6b:74:e8:6e:68:
ae:4b:b0:b2:a2:be:19:f8:5f:16:03:3a:77:c7:53:ab:c9:f1:
7b:2a:eb:5e:d2:9d:b1:86:56:10:8c:1b:db:64:fc:03:87:56:
ef:c6:21:8c:70:c1:4c:dc:7d:09:7e:ba:eb:3f:4b:56:51:b3:
c6:1a:37:83:22:d5:b1:0d:e9:19:ee:84:ef:98:64:e6:f0:22:
48:60:0e:5e:59:09:a4:e4:89:a4:22:c9:a8:ff:c5:0d:86:7e:
2a:89:7b:ed:16:6f:63:a3:35:0e:a8:87:b2:df:1b:ef:64:7d:
83:fe:44:3c:b2:9c:a0:a6:ea:60:a6:68:79:a1:6e:db:e9:bd:
28:58:ae:4b:df:34:88:a0:01:8d:13:5e:2c:22:40:8e:60:b2:
f4:eb:8c:71:34:dd:5f:ae:c8:59:7a:49:39:cd:25:8b:39:82:
20:28:2f:f3:ba:78:2b:0e:f7:6b:8d:71:9e:1c:ed:71:ee:f5:
a3:0c:43:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cpnUOw2THObHaOK0BizaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNDYwMDE5Zjg4MDY5ZTM2MTRlMTUxMDkyMWNjN2U0NGQx
Y2FiZTIwHhcNMjUwMTMxMTMwMDE0WhcNMjUwMjAxMTMwMDE0WjAzMTEwLwYDVQQD
EyhiMmE0MjY0MTMzNTUxOWIyZTkwNGQ2MjA2ZGVlMDM3Y2I5NmE4ZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllGrChJeGcf6BI2/icNrfKvHDwBH
AbJ9Fiis7GAPxTIALJGeI8AJMV5FchHzLaBv8dvOC6rg+qD6dE+Q5kAjEIoObRXa
UaCiaiYb2yV2uKOyGjlPOQXUox54HH8BV87FyouqDJVYCeTlminZLZACCk/Mlza+
gVacufZvV9zceMmE5ThcBp/3DdX9FbLQ5E4PGCvdl7mueUH4gdyd57HOEiTkxDyy
OlTMfk8K6TkgxKYyIb7SE1LnsKvVA22XGqw790HPOKpiIxj/lyN2U7ZhmXxHFerH
6iftnfxQs4ZD0wUWK8uwDuAVoTjQeNpS1BCG8q1YNuA+r7SE5uneM7fPNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKkJkEzVRmy6QTWIG3uA3y5ao0OMB8GA1UdIwQY
MBaAFOFGABn4gGnjYU4VEJIcx+RNHKviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVZQUdmaUFhZU5oVGhVUWtoekg1RTBjcS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8zZTQ0NGQtNjcyMC00NDRhLWFlNTQt
ZmNkMWE2M2M1YzQ1LzEvNFVZQUdmaUFhZU5oVGhVUWtoekg1RTBjcS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8zZTQ0NGQtNjcyMC00NDRhLWFlNTQtZmNkMWE2M2M1YzQ1
LzEvNFVZQUdmaUFhZU5oVGhVUWtoekg1RTBjcS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY++uoZ3k
8vFKbTUXeuV6mqU4b1ACexoJkzUhU5u31aH6F2B2OnRYMWdZVp5FV3YjEv4tIaLH
0D2p+t4dMYEOGT2ZTmt06G5orkuwsqK+GfhfFgM6d8dTq8nxeyrrXtKdsYZWEIwb
22T8A4dW78YhjHDBTNx9CX666z9LVlGzxho3gyLVsQ3pGe6E75hk5vAiSGAOXlkJ
pOSJpCLJqP/FDYZ+Kol77RZvY6M1DqiHst8b72R9g/5EPLKcoKbqYKZoeaFu2+m9
KFiuS980iKABjRNeLCJAjmCy9OuMcTTdX67IWXpJOc0lizmCICgv87p4Kw73a41x
nhztce71owxDhg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:59 2025 by rpki-client