Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
File: cVYaucXzkpItp8rhgMMwc2XwI4Y.mft (raw, json)
Hash identifier: Qb54cNc3BM8+ilSO5p3phCOZzO46LOW2xRaWpgmYyQE=
Subject key identifier: 6B:2A:68:3E:53:D8:21:DA:9F:1A:C5:C5:48:2D:39:FE:73:1E:AB:81
Authority key identifier: 71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86
Certificate issuer: /CN=71561ab9c5f392922da7cae180c3307365f02386
Certificate serial: 0194BBCECDA4226DA3103BFD337400291FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
Manifest number: 0D5B
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: cVYaucXzkpItp8rhgMMwc2XwI4Y.crl (hash: Gszi6KusssrsulfVGsbnTpzeF1hg3LwCpGZRgiXzCB4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cd:a4:22:6d:a3:10:3b:fd:33:74:00:29:1f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71561ab9c5f392922da7cae180c3307365f02386
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=6b2a683e53d821da9f1ac5c5482d39fe731eab81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:6a:d0:ff:43:03:cb:4f:e1:c3:d2:1c:71:
5c:c2:73:19:75:3e:eb:ff:cf:1d:a1:5f:76:ce:7b:
e1:dd:49:c6:dd:17:b1:4c:05:cd:2a:e2:1f:1f:d4:
c6:63:e2:18:04:41:14:df:6b:96:92:0d:ea:ca:57:
5a:7e:1d:56:6d:5b:ca:a2:4f:e2:77:ae:17:6b:f1:
9c:95:95:be:83:04:08:ac:a5:f4:43:d9:46:d8:68:
b1:bc:e4:dd:fc:51:89:ae:23:50:97:07:24:00:d9:
6e:cf:5d:76:1b:56:c5:4f:91:aa:22:e0:d9:35:0f:
76:ba:43:e3:53:36:65:5e:b0:5f:53:6d:a7:61:9c:
de:e4:74:76:ba:f1:6f:d4:66:e9:45:60:73:9c:ae:
50:07:32:3c:a6:75:6a:29:65:26:21:6c:3f:b2:29:
41:f9:48:2f:46:df:ad:4a:73:47:22:48:ff:b8:da:
b4:0d:b6:4a:bf:20:63:3a:5a:19:ad:3e:a5:aa:5c:
53:2b:b8:69:34:c9:31:50:19:ae:af:63:8e:aa:3c:
c8:f0:d2:27:c3:d7:ab:58:0c:f4:07:9f:d2:5a:2d:
bd:ee:c8:a3:e6:04:64:5f:ca:78:b9:b7:0c:e5:3c:
b6:33:f3:2f:f9:35:d0:31:ed:b9:9e:df:00:4e:3a:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2A:68:3E:53:D8:21:DA:9F:1A:C5:C5:48:2D:39:FE:73:1E:AB:81
X509v3 Authority Key Identifier:
keyid:71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:60:d5:bf:c4:b5:ac:f2:f9:e1:33:24:65:21:ec:7e:20:83:
f2:f6:0d:d8:b7:46:f7:32:b7:5d:a0:22:d6:56:59:db:a9:49:
b5:f4:4b:f2:84:05:dc:d8:7f:8c:a7:d8:e4:f1:57:d1:60:11:
83:9c:9a:82:31:87:fc:72:85:4f:70:8b:9a:8d:b0:b8:58:68:
cb:e0:6f:f3:40:ef:65:f9:44:96:42:71:f1:ce:d8:82:63:2f:
ce:86:b9:d3:17:66:a4:87:ae:16:ba:b4:92:ff:11:33:e4:98:
e1:d9:b6:1e:f1:45:09:af:bf:a2:d4:c6:cd:e1:89:24:23:59:
52:07:55:18:9e:82:44:7a:1b:19:ef:d0:4c:98:2a:b1:5a:a9:
05:b7:b6:ce:40:13:a4:bb:95:8e:bb:dc:27:6c:52:af:ec:d7:
32:2c:36:68:af:7a:f3:eb:15:08:34:2c:f9:a3:c9:7b:9a:54:
21:26:bb:81:7a:ef:89:f4:0c:96:42:66:a4:ac:4c:17:47:3a:
32:04:8b:37:91:ee:cf:52:c3:a2:05:f6:ce:52:e6:70:75:fb:
25:e9:ad:fb:54:52:2f:a2:d5:93:2a:8e:9a:6b:db:94:2f:95:
fd:e6:e5:ae:34:33:d4:d9:2f:85:9a:45:7e:52:7b:e3:fc:36:
3c:b7:8c:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zs2kIm2jEDv9M3QAKR+sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNTYxYWI5YzVmMzkyOTIyZGE3Y2FlMTgwYzMzMDczNjVm
MDIzODYwHhcNMjUwMTMxMTAwMTE5WhcNMjUwMjAxMTAwMTE5WjAzMTEwLwYDVQQD
Eyg2YjJhNjgzZTUzZDgyMWRhOWYxYWM1YzU0ODJkMzlmZTczMWVhYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnZq0P9DA8tP4cPSHHFcwnMZdT7r
/88doV92znvh3UnG3RexTAXNKuIfH9TGY+IYBEEU32uWkg3qyldafh1WbVvKok/i
d64Xa/GclZW+gwQIrKX0Q9lG2GixvOTd/FGJriNQlwckANluz112G1bFT5GqIuDZ
NQ92ukPjUzZlXrBfU22nYZze5HR2uvFv1GbpRWBznK5QBzI8pnVqKWUmIWw/silB
+UgvRt+tSnNHIkj/uNq0DbZKvyBjOloZrT6lqlxTK7hpNMkxUBmur2OOqjzI8NIn
w9erWAz0B5/SWi297sij5gRkX8p4ubcM5Ty2M/Mv+TXQMe25nt8ATjqC7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsqaD5T2CHanxrFxUgtOf5zHquBMB8GA1UdIwQY
MBaAFHFWGrnF85KSLafK4YDDMHNl8COGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1ZZYXVjWHprcEl0cDhyaGdNTXdjMlh3STRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yMTM1ZTMtNTkzZi00Y2RiLWFmNTUt
YzZmNGVlODcyMzY0LzEvY1ZZYXVjWHprcEl0cDhyaGdNTXdjMlh3STRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yMTM1ZTMtNTkzZi00Y2RiLWFmNTUtYzZmNGVlODcyMzY0
LzEvY1ZZYXVjWHprcEl0cDhyaGdNTXdjMlh3STRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmDVv8S1
rPL54TMkZSHsfiCD8vYN2LdG9zK3XaAi1lZZ26lJtfRL8oQF3Nh/jKfY5PFX0WAR
g5yagjGH/HKFT3CLmo2wuFhoy+Bv80DvZflElkJx8c7YgmMvzoa50xdmpIeuFrq0
kv8RM+SY4dm2HvFFCa+/otTGzeGJJCNZUgdVGJ6CRHobGe/QTJgqsVqpBbe2zkAT
pLuVjrvcJ2xSr+zXMiw2aK968+sVCDQs+aPJe5pUISa7gXrvifQMlkJmpKxMF0c6
MgSLN5Huz1LDogX2zlLmcHX7Jemt+1RSL6LVkyqOmmvblC+V/eblrjQz1NkvhZpF
flJ74/w2PLeMnQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:34 2025 by rpki-client