Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
File: 11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft (raw, json)
Hash identifier: XLI8eALcXBntSjhzIMQrJL2PZcZYsMoHXILgTL/U9kw=
Subject key identifier: A4:82:0E:38:4B:CF:89:2D:F4:AF:25:3B:89:67:AE:7A:F7:31:5E:A1
Authority key identifier: D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F
Certificate issuer: /CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
Certificate serial: 0194BBCEBA553FDD798414AF4C8FADA86522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: 11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl (hash: HA2XTnASlWUXg1DGHaFOrcdzDsOxa5kpETvNQSV246s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ba:55:3f:dd:79:84:14:af:4c:8f:ad:a8:65:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=a4820e384bcf892df4af253b8967ae7af7315ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:70:a8:4c:77:e6:a0:68:0a:45:1a:9d:ee:
a5:3b:85:4b:6f:54:17:b1:cd:82:84:43:a8:85:5f:
66:a8:a8:b0:50:06:67:90:03:74:29:26:32:72:42:
82:a0:9f:a7:e1:05:7a:c7:b2:27:db:28:40:ba:dc:
57:4c:10:b1:ab:9e:e4:dc:a0:32:0b:67:07:89:7d:
5c:38:00:11:51:f9:74:bb:6d:7d:68:9e:b6:e9:bc:
b4:0a:78:7b:69:dc:a1:b5:40:a0:65:69:92:a8:06:
57:65:98:be:eb:37:5e:e3:0d:fe:56:29:f2:bc:4e:
bb:f9:fb:81:80:98:ad:53:de:fd:f7:de:18:3d:c6:
5a:a3:3f:4f:fb:70:0a:ff:0b:40:e3:2a:e5:d3:df:
13:51:fb:92:8a:96:f3:e1:e1:de:68:41:ca:6a:36:
fd:c1:d3:49:8d:b5:dc:8c:bb:3a:72:1d:3e:ef:8f:
e1:91:c8:09:96:1c:e1:e2:33:37:9a:9e:e3:bb:f0:
f9:e6:70:94:c9:a8:6f:71:59:c1:ae:f0:df:8c:73:
43:e2:40:3f:f8:2d:42:ee:89:bc:be:5a:31:9f:61:
e6:7c:81:76:ae:8d:37:7d:9c:6b:7f:8b:24:a0:09:
80:f9:1e:6d:e5:8f:ed:c3:d2:55:b5:2b:c1:b2:5c:
8d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:82:0E:38:4B:CF:89:2D:F4:AF:25:3B:89:67:AE:7A:F7:31:5E:A1
X509v3 Authority Key Identifier:
keyid:D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:65:47:36:24:88:60:de:ab:d1:c3:c2:34:73:42:8a:1b:43:
8d:14:ba:36:32:2b:fb:04:c9:2f:d7:52:7e:21:74:2c:84:f1:
e1:40:8e:f6:7e:36:86:2e:8f:7e:15:f5:bc:be:21:2b:22:94:
cb:1c:56:96:b0:b0:34:fe:ef:60:5e:d7:98:49:2f:54:2a:6f:
ba:d9:d0:b5:a3:49:6b:d4:e7:b6:30:4d:7e:06:7e:25:f3:d3:
e4:b0:f4:8a:cd:23:a5:31:1f:25:71:9b:2c:9a:05:99:17:05:
7d:19:b2:a9:61:d9:88:54:4d:9f:a7:f0:e2:cb:60:28:6f:f9:
9e:74:8f:ad:e3:45:bd:d6:7b:76:67:50:77:63:da:44:9c:c6:
54:77:ef:90:4e:d4:8d:9f:3f:1c:fc:e3:3b:ea:f2:8c:01:2e:
ff:df:2c:38:78:b2:0b:68:fd:76:08:31:65:c4:6b:39:fd:1b:
06:58:cd:4a:a8:1d:03:23:da:38:6a:a8:4c:7c:04:c7:ac:cd:
bc:b1:8c:1b:9d:86:3c:64:8f:ed:cd:69:d3:fa:ae:11:a0:07:
81:5e:fb:f1:a5:6a:43:cd:9a:9d:b0:de:78:45:62:65:92:d6:
37:55:ee:75:81:c3:25:43:d0:f9:82:fc:61:cf:26:c6:0b:08:
7f:cd:b4:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zrpVP915hBSvTI+tqGUiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NTY3MWNkYzE0YTM3ZmJjYjlmMDE1MGNjZjkxOGRiMTVj
MjMyNmYwHhcNMjUwMTMxMTAwMTE0WhcNMjUwMjAxMTAwMTE0WjAzMTEwLwYDVQQD
EyhhNDgyMGUzODRiY2Y4OTJkZjRhZjI1M2I4OTY3YWU3YWY3MzE1ZWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4JwqEx35qBoCkUane6lO4VLb1QX
sc2ChEOohV9mqKiwUAZnkAN0KSYyckKCoJ+n4QV6x7In2yhAutxXTBCxq57k3KAy
C2cHiX1cOAARUfl0u219aJ626by0Cnh7adyhtUCgZWmSqAZXZZi+6zde4w3+Viny
vE67+fuBgJitU979994YPcZaoz9P+3AK/wtA4yrl098TUfuSipbz4eHeaEHKajb9
wdNJjbXcjLs6ch0+74/hkcgJlhzh4jM3mp7ju/D55nCUyahvcVnBrvDfjHND4kA/
+C1C7om8vloxn2HmfIF2ro03fZxrf4skoAmA+R5t5Y/tw9JVtSvBslyNWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSCDjhLz4kt9K8lO4lnrnr3MV6hMB8GA1UdIwQY
MBaAFNdWcc3BSjf7y58BUMz5GNsVwjJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTFaeHpjRktOX3ZMbndGUXpQa1kyeFhDTW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYmQ5ZTMtOGExZi00ZTA2LTk2NTMt
N2Q0NjczYjdlMTg1LzEvMTFaeHpjRktOX3ZMbndGUXpQa1kyeFhDTW04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9iYmQ5ZTMtOGExZi00ZTA2LTk2NTMtN2Q0NjczYjdlMTg1
LzEvMTFaeHpjRktOX3ZMbndGUXpQa1kyeFhDTW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGVHNiSI
YN6r0cPCNHNCihtDjRS6NjIr+wTJL9dSfiF0LITx4UCO9n42hi6PfhX1vL4hKyKU
yxxWlrCwNP7vYF7XmEkvVCpvutnQtaNJa9TntjBNfgZ+JfPT5LD0is0jpTEfJXGb
LJoFmRcFfRmyqWHZiFRNn6fw4stgKG/5nnSPreNFvdZ7dmdQd2PaRJzGVHfvkE7U
jZ8/HPzjO+ryjAEu/98sOHiyC2j9dggxZcRrOf0bBljNSqgdAyPaOGqoTHwEx6zN
vLGMG52GPGSP7c1p0/quEaAHgV778aVqQ82anbDeeEViZZLWN1XudYHDJUPQ+YL8
Yc8mxgsIf820fA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:46 2025 by rpki-client