Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
File: rD5tWdR-c37cMaZfMQUUzUuV04c.mft (raw, json)
Hash identifier: B8U3pryaQPNFgudoLUntiBFQ7mRP/I3smIWfbeCy9WM=
Subject key identifier: 3D:6E:15:11:11:46:01:F0:13:CC:60:FC:E7:9C:93:4D:C9:A8:D7:81
Authority key identifier: AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
Certificate issuer: /CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Certificate serial: 0194BC3C2B501A1C2E4DD213BE8D2CF2AB35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: rD5tWdR-c37cMaZfMQUUzUuV04c.crl (hash: TZqxQUn0mbIiPsnJ0qZb95nxTxSGeHfini/NsTojB30=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2b:50:1a:1c:2e:4d:d2:13:be:8d:2c:f2:ab:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=3d6e1511114601f013cc60fce79c934dc9a8d781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5b:13:d4:9f:f7:bb:8c:ca:d4:7e:4f:00:10:
a6:2a:03:ac:a1:d0:9d:98:cf:9e:25:9e:97:fe:38:
ce:c0:99:07:8e:f6:fb:75:98:a6:15:2d:e1:9a:e0:
d0:d4:d7:0a:6d:39:96:62:59:3d:68:6d:42:2b:bd:
b4:73:26:00:dc:2c:59:1e:29:f8:31:78:13:eb:4a:
01:e2:65:b5:07:b9:36:a0:43:de:25:49:01:00:e3:
1b:1b:98:84:f1:b9:6a:42:f5:bb:7c:00:49:2c:67:
a5:24:8b:fc:69:ff:69:9d:7d:ea:04:d6:03:e3:7a:
99:d5:ac:b6:b8:2b:16:06:36:a1:da:d7:f3:4d:fa:
e9:13:68:97:07:c8:22:55:41:46:a7:30:a7:38:86:
e2:7e:aa:f3:71:a2:0d:6c:57:2e:9b:c2:4f:92:cd:
db:66:3f:3e:c7:8b:8f:9d:6f:61:23:a8:cb:18:c2:
6a:1a:82:94:93:98:68:57:77:1e:a7:20:8f:04:ab:
67:d3:70:af:72:7d:f9:c1:5d:d5:22:90:e4:5b:d1:
3f:fc:bf:52:0c:92:bc:4b:af:a0:6e:69:dc:61:bd:
04:ab:98:3e:c5:b4:2b:af:eb:92:b6:fb:69:24:8b:
ac:20:1a:91:6f:76:7f:95:c9:d3:21:1b:30:d1:c9:
17:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6E:15:11:11:46:01:F0:13:CC:60:FC:E7:9C:93:4D:C9:A8:D7:81
X509v3 Authority Key Identifier:
keyid:AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a0:98:11:64:70:4e:36:0d:0c:d0:d4:72:77:3f:ac:3a:4d:
68:91:84:0b:88:99:70:7d:1f:84:b9:52:a4:3f:53:33:31:b9:
d3:7f:bf:86:b4:24:ef:df:b3:e5:7f:72:dc:f6:7a:9d:66:50:
1f:84:70:a8:43:e5:de:59:42:40:23:ea:6c:a1:a8:80:e2:d4:
a4:10:81:11:2b:11:a5:1d:0f:f5:b5:3b:30:93:70:57:e0:bd:
1d:42:2f:86:b1:d6:91:7b:72:24:36:d7:50:be:5c:e4:cc:25:
e2:10:ce:b1:84:46:22:d1:3b:0f:1e:9e:f0:a0:22:00:45:10:
04:42:12:ab:31:e8:dc:eb:91:2e:0a:a6:55:7c:68:75:c4:f9:
da:61:0d:f5:d9:fc:53:b2:e5:e3:ed:79:62:41:31:2d:22:2e:
75:e7:d3:f5:3d:fd:ab:4c:c1:17:a4:bc:e5:00:99:31:8f:0b:
a4:6b:fa:d6:36:fe:ac:6f:75:30:b4:30:bc:b3:ab:7e:b3:c5:
d7:3f:a5:f7:49:18:f6:db:c8:9e:6a:7b:5d:80:2f:96:4b:92:
3b:9e:fd:56:8d:a7:ee:4f:cc:40:e3:fd:cc:de:93:5c:1d:83:
15:94:2a:63:80:7c:0e:78:4a:fb:62:8e:3a:fa:7b:83:19:95:
7c:27:54:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PCtQGhwuTdITvo0s8qs1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjM2U2ZDU5ZDQ3ZTczN2VkYzMxYTY1ZjMxMDUxNGNkNGI5
NWQzODcwHhcNMjUwMTMxMTIwMDQ3WhcNMjUwMjAxMTIwMDQ3WjAzMTEwLwYDVQQD
EygzZDZlMTUxMTExNDYwMWYwMTNjYzYwZmNlNzljOTM0ZGM5YThkNzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lsT1J/3u4zK1H5PABCmKgOsodCd
mM+eJZ6X/jjOwJkHjvb7dZimFS3hmuDQ1NcKbTmWYlk9aG1CK720cyYA3CxZHin4
MXgT60oB4mW1B7k2oEPeJUkBAOMbG5iE8blqQvW7fABJLGelJIv8af9pnX3qBNYD
43qZ1ay2uCsWBjah2tfzTfrpE2iXB8giVUFGpzCnOIbifqrzcaINbFcum8JPks3b
Zj8+x4uPnW9hI6jLGMJqGoKUk5hoV3cepyCPBKtn03Cvcn35wV3VIpDkW9E//L9S
DJK8S6+gbmncYb0Eq5g+xbQrr+uStvtpJIusIBqRb3Z/lcnTIRsw0ckXmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1uFRERRgHwE8xg/Oeck03JqNeBMB8GA1UdIwQY
MBaAFKw+bVnUfnN+3DGmXzEFFM1LldOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckQ1dFdkUi1jMzdjTWFaZk1RVVV6VXVWMDRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82ZTEwMDMtODE5YS00MzkyLTkzOGEt
NWFlNTNjMjFiOGNkLzEvckQ1dFdkUi1jMzdjTWFaZk1RVVV6VXVWMDRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS82ZTEwMDMtODE5YS00MzkyLTkzOGEtNWFlNTNjMjFiOGNk
LzEvckQ1dFdkUi1jMzdjTWFaZk1RVVV6VXVWMDRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqCYEWRw
TjYNDNDUcnc/rDpNaJGEC4iZcH0fhLlSpD9TMzG503+/hrQk79+z5X9y3PZ6nWZQ
H4RwqEPl3llCQCPqbKGogOLUpBCBESsRpR0P9bU7MJNwV+C9HUIvhrHWkXtyJDbX
UL5c5Mwl4hDOsYRGItE7Dx6e8KAiAEUQBEISqzHo3OuRLgqmVXxodcT52mEN9dn8
U7Ll4+15YkExLSIudefT9T39q0zBF6S85QCZMY8LpGv61jb+rG91MLQwvLOrfrPF
1z+l90kY9tvInmp7XYAvlkuSO579Vo2n7k/MQOP9zN6TXB2DFZQqY4B8DnhK+2KO
Ovp7gxmVfCdUAA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:20:45 2025 by rpki-client