Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
File: I6lUuSO6IAjpheuiQdG3AHF_iEM.mft (raw, json)
Hash identifier: 50TrWNFVh0CgrTp9a3dI0G5R9l+4DRRsoOdJaUnp/5U=
Subject key identifier: CF:C2:7E:16:A1:B0:92:91:48:85:EC:AB:94:F4:7F:B1:77:D9:21:EF
Authority key identifier: 23:A9:54:B9:23:BA:20:08:E9:85:EB:A2:41:D1:B7:00:71:7F:88:43
Certificate issuer: /CN=23a954b923ba2008e985eba241d1b700717f8843
Certificate serial: 0194BBCDE153869D34D0F40A3A09D53787AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
Manifest number: 1272
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: I6lUuSO6IAjpheuiQdG3AHF_iEM.crl (hash: aynOHRPIZRxE2y0VqBFtiEdSC/Xm1SDKTClVFhqlaJ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e1:53:86:9d:34:d0:f4:0a:3a:09:d5:37:87:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a954b923ba2008e985eba241d1b700717f8843
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=cfc27e16a1b092914885ecab94f47fb177d921ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:19:35:fa:51:e5:1e:3f:79:fa:18:25:d2:
17:20:65:bd:04:fe:42:20:da:21:65:27:2a:ad:df:
98:d2:78:72:9d:3e:b9:c8:f5:e0:e1:9a:a1:5c:cd:
7d:9d:18:3e:e0:c5:53:fc:2e:b5:37:da:58:3d:9d:
ec:aa:c6:45:09:73:2b:94:ec:d3:87:e5:b7:c5:ec:
09:35:ae:a2:fd:28:aa:cf:06:0f:49:9d:c6:c6:dc:
bc:2f:7a:34:3a:4f:58:5c:9f:a3:2f:ce:e7:2f:5f:
3a:e1:40:70:27:9a:4d:10:07:be:4c:6f:d5:02:29:
e0:7a:7e:6b:59:73:74:33:3c:00:73:49:73:d6:cc:
7d:e7:26:13:cd:7f:81:a8:aa:2f:40:d4:e6:9f:cb:
16:91:fe:e0:fa:99:e7:5f:3c:be:25:40:78:55:11:
00:a1:e8:40:43:eb:ea:e5:5b:f7:45:88:cb:81:72:
cb:56:19:e2:a5:a2:e5:b4:0b:72:fb:df:3a:29:d8:
25:0a:c3:4d:aa:b9:ea:fb:b4:d6:e3:0b:08:d2:4a:
58:56:4f:db:51:be:23:16:17:cf:c0:55:13:5e:b5:
ae:05:59:2d:a4:6c:74:6e:ce:a7:79:19:78:60:2e:
bd:c6:3d:d8:a4:f3:46:11:f4:bc:12:19:3d:bf:fe:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C2:7E:16:A1:B0:92:91:48:85:EC:AB:94:F4:7F:B1:77:D9:21:EF
X509v3 Authority Key Identifier:
keyid:23:A9:54:B9:23:BA:20:08:E9:85:EB:A2:41:D1:B7:00:71:7F:88:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c2:d4:fc:f1:3c:92:68:58:fe:87:1c:ac:76:0b:cb:ff:9c:
e4:f5:6c:82:a8:77:63:29:d1:c2:54:40:95:5d:bc:5e:2c:3f:
c5:f4:8a:fe:df:d0:4d:aa:f5:f9:ec:49:d4:45:0b:ae:51:1e:
c8:92:f5:ef:d3:c8:ce:b8:2b:d0:11:eb:5f:aa:8d:22:33:e2:
30:34:f0:67:be:4c:a1:53:6e:ab:5c:7e:86:92:07:f0:62:b5:
bf:b6:89:b5:7b:43:99:db:69:74:08:2d:0b:91:76:7e:37:32:
49:b0:5d:64:cf:88:99:52:69:90:bb:8c:84:95:ed:55:82:c3:
31:db:f9:28:18:3f:3a:97:9c:b5:06:3b:f2:27:0b:ee:1b:05:
9c:b9:33:b2:d6:a3:45:92:53:d5:31:bd:05:c3:7f:ee:a7:b7:
85:db:29:ef:9d:1c:9f:d9:3d:3d:c1:9d:3c:58:68:7e:1b:ad:
25:72:e5:06:89:c3:c0:84:75:0c:cf:c6:6e:80:35:f8:04:d7:
93:73:1e:ab:cb:5d:e6:61:f7:6b:18:87:cb:2a:c4:49:cc:7c:
b7:b3:1b:0c:b5:82:85:e8:ef:ed:b6:8a:e5:98:b0:d9:eb:d9:
5d:06:24:02:be:5f:c4:80:16:43:2b:f7:ad:7d:7f:3d:c6:f7:
6d:c0:66:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zeFThp000PQKOgnVN4evMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTk1NGI5MjNiYTIwMDhlOTg1ZWJhMjQxZDFiNzAwNzE3
Zjg4NDMwHhcNMjUwMTMxMTAwMDE5WhcNMjUwMjAxMTAwMDE5WjAzMTEwLwYDVQQD
EyhjZmMyN2UxNmExYjA5MjkxNDg4NWVjYWI5NGY0N2ZiMTc3ZDkyMWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHoZNfpR5R4/efoYJdIXIGW9BP5C
INohZScqrd+Y0nhynT65yPXg4ZqhXM19nRg+4MVT/C61N9pYPZ3sqsZFCXMrlOzT
h+W3xewJNa6i/SiqzwYPSZ3Gxty8L3o0Ok9YXJ+jL87nL1864UBwJ5pNEAe+TG/V
Aingen5rWXN0MzwAc0lz1sx95yYTzX+BqKovQNTmn8sWkf7g+pnnXzy+JUB4VREA
oehAQ+vq5Vv3RYjLgXLLVhnipaLltAty+986KdglCsNNqrnq+7TW4wsI0kpYVk/b
Ub4jFhfPwFUTXrWuBVktpGx0bs6neRl4YC69xj3YpPNGEfS8Ehk9v/6F3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/CfhahsJKRSIXsq5T0f7F32SHvMB8GA1UdIwQY
MBaAFCOpVLkjuiAI6YXrokHRtwBxf4hDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZsVXVTTzZJQWpwaGV1aVFkRzNBSEZfaUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81ZDk3NjAtZTM2ZS00N2MyLTk2ZTMt
NmRjNTEwZTk4YjczLzEvSTZsVXVTTzZJQWpwaGV1aVFkRzNBSEZfaUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81ZDk3NjAtZTM2ZS00N2MyLTk2ZTMtNmRjNTEwZTk4Yjcz
LzEvSTZsVXVTTzZJQWpwaGV1aVFkRzNBSEZfaUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsLU/PE8
kmhY/occrHYLy/+c5PVsgqh3YynRwlRAlV28Xiw/xfSK/t/QTar1+exJ1EULrlEe
yJL179PIzrgr0BHrX6qNIjPiMDTwZ75MoVNuq1x+hpIH8GK1v7aJtXtDmdtpdAgt
C5F2fjcySbBdZM+ImVJpkLuMhJXtVYLDMdv5KBg/OpectQY78icL7hsFnLkzstaj
RZJT1TG9BcN/7qe3hdsp750cn9k9PcGdPFhofhutJXLlBonDwIR1DM/GboA1+ATX
k3Meq8td5mH3axiHyyrEScx8t7MbDLWChejv7baK5Ziw2evZXQYkAr5fxIAWQyv3
rX1/Pcb3bcBmnw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:18 2025 by rpki-client