Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
File: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft (raw, json)
Hash identifier: 70MOhKXG+UZxHj0w35N6n+ULoVv4AD+zj5Y3/W/IQGI=
Subject key identifier: AE:3C:EF:00:4D:0D:BD:FB:B4:04:4F:D8:62:4B:E0:50:5D:9F:5E:E8
Authority key identifier: D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
Certificate issuer: /CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Certificate serial: 0194BC04B2FDE76D4DEEB2A68E6FC5CE2805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
Manifest number: 03F6
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl (hash: DEOB9Vm/oZg9AZ1EZ5GO9EtXC2yvVAE3ZpsVXwWZEKA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b2:fd:e7:6d:4d:ee:b2:a6:8e:6f:c5:ce:28:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=ae3cef004d0dbdfbb4044fd8624be0505d9f5ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:1e:d0:4f:8e:e4:be:f8:dd:ef:b0:f8:0a:
e4:04:88:4b:41:3a:36:72:1c:8e:6e:1d:bd:7c:95:
fb:34:51:99:16:09:bc:9a:15:bd:95:04:48:67:0c:
0b:75:f8:b6:42:09:4f:4e:1c:78:b4:18:12:e3:24:
36:f9:9c:f8:7f:c2:ae:0b:f9:85:99:4e:d3:4a:4e:
74:76:b9:aa:37:bb:f1:85:3e:73:8e:06:b6:32:6d:
5b:e2:71:f6:1a:ea:fb:f2:5c:89:7b:d7:dc:80:f3:
3e:96:75:fe:fb:c0:29:da:cf:f0:5e:b8:f5:bb:d0:
73:f7:58:11:44:04:3e:7f:cd:89:92:52:65:31:93:
f4:c2:3f:c2:b6:7c:3b:17:57:5e:8b:a0:46:51:18:
5d:bb:36:1e:67:86:59:d3:28:1e:31:c3:1a:af:d8:
9c:dd:ea:b9:90:f7:71:aa:fa:bc:0e:33:18:7e:f6:
7a:f1:ed:e5:fa:d8:9d:eb:1a:48:f7:09:e3:d3:0d:
3f:72:4a:d2:4e:d8:d6:3a:9f:5e:c5:84:4a:9b:7b:
6c:e0:0f:0e:c9:2a:28:5f:a1:d4:90:63:f7:8c:19:
1a:9a:26:22:c0:ba:4e:4c:1b:54:ee:b7:a1:04:e7:
01:95:8d:57:0d:fa:3e:e1:fb:2a:52:48:3c:7a:7f:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3C:EF:00:4D:0D:BD:FB:B4:04:4F:D8:62:4B:E0:50:5D:9F:5E:E8
X509v3 Authority Key Identifier:
keyid:D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2e:56:4a:ac:6e:e9:35:67:62:71:40:b9:f0:f0:82:86:86:
7d:e9:d8:8c:d5:ed:31:59:d6:68:84:6a:ef:8a:72:31:e1:14:
cc:65:0f:0c:5a:b0:c4:f9:d5:96:4d:61:a4:ac:a0:78:6d:07:
d4:fb:d1:dc:e5:26:01:1f:15:7c:61:fa:bf:73:dd:6b:0e:45:
93:5a:31:d7:bf:68:fa:4b:20:b6:38:84:13:b6:66:35:c2:b5:
31:b1:4e:31:d2:01:1b:98:4b:76:8a:ab:db:f1:ab:b6:8e:58:
4e:00:6a:db:33:ee:95:22:59:08:5b:1d:e7:4f:e8:1a:d6:e6:
91:9c:e9:02:54:9b:d0:c1:ac:01:2b:8a:43:7b:f2:56:7c:0e:
d1:e1:4c:a0:4d:6e:0b:60:ac:00:c4:f3:44:b1:7f:f4:22:03:
f1:ea:b9:f9:87:9f:c9:8a:4b:32:41:fd:93:88:83:96:7f:9b:
35:94:25:b0:ec:b2:93:6d:14:15:12:7e:94:52:be:80:35:74:
b5:ca:dc:59:01:c9:d1:9c:ff:df:0e:af:e3:ed:73:62:1a:ff:
d6:f6:ef:0b:ac:5e:e8:f2:ee:db:cb:1e:c7:47:33:dd:60:9d:
25:3d:2c:87:ed:8c:7a:ab:00:77:85:10:fe:00:d7:92:1a:ef:
4d:05:d1:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLL9521N7rKmjm/FzigFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZGYzMzA5YjNmMThmYmJlYzk5OWM0MTJmZGVmMWRjNDQy
MGU0MmMwHhcNMjUwMTMxMTEwMDEyWhcNMjUwMjAxMTEwMDEyWjAzMTEwLwYDVQQD
EyhhZTNjZWYwMDRkMGRiZGZiYjQwNDRmZDg2MjRiZTA1MDVkOWY1ZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5Me0E+O5L743e+w+ArkBIhLQTo2
chyObh29fJX7NFGZFgm8mhW9lQRIZwwLdfi2QglPThx4tBgS4yQ2+Zz4f8KuC/mF
mU7TSk50drmqN7vxhT5zjga2Mm1b4nH2Gur78lyJe9fcgPM+lnX++8Ap2s/wXrj1
u9Bz91gRRAQ+f82JklJlMZP0wj/Ctnw7F1dei6BGURhduzYeZ4ZZ0ygeMcMar9ic
3eq5kPdxqvq8DjMYfvZ68e3l+tid6xpI9wnj0w0/ckrSTtjWOp9exYRKm3ts4A8O
ySooX6HUkGP3jBkamiYiwLpOTBtU7rehBOcBlY1XDfo+4fsqUkg8en+gFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK487wBNDb37tARP2GJL4FBdn17oMB8GA1UdIwQY
MBaAFNDfMwmz8Y+77JmcQS/e8dxEIOQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME44ekNiUHhqN3ZzbVp4Qkw5N3gzRVFnNUN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yZjcxNWItY2RhZi00MDJjLTkyMDkt
MWZmOTE1YmZlZDk5LzEvME44ekNiUHhqN3ZzbVp4Qkw5N3gzRVFnNUN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8yZjcxNWItY2RhZi00MDJjLTkyMDktMWZmOTE1YmZlZDk5
LzEvME44ekNiUHhqN3ZzbVp4Qkw5N3gzRVFnNUN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASi5WSqxu
6TVnYnFAufDwgoaGfenYjNXtMVnWaIRq74pyMeEUzGUPDFqwxPnVlk1hpKygeG0H
1PvR3OUmAR8VfGH6v3Pdaw5Fk1ox179o+ksgtjiEE7ZmNcK1MbFOMdIBG5hLdoqr
2/Grto5YTgBq2zPulSJZCFsd50/oGtbmkZzpAlSb0MGsASuKQ3vyVnwO0eFMoE1u
C2CsAMTzRLF/9CID8eq5+YefyYpLMkH9k4iDln+bNZQlsOyyk20UFRJ+lFK+gDV0
tcrcWQHJ0Zz/3w6v4+1zYhr/1vbvC6xe6PLu28sex0cz3WCdJT0sh+2MeqsAd4UQ
/gDXkhrvTQXRIw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:40 2025 by rpki-client