Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/57021d-7345-4eab-a710-d73a4573c1b4/1/s3fTy2Ur05jE2752zbAILp3u1tQ.mft
File: s3fTy2Ur05jE2752zbAILp3u1tQ.mft (raw, json)
Hash identifier: +UOEUghabiE4KzSQWKUiWK7X5mUiUsDuKyGkimnvluc=
Subject key identifier: 05:AE:5B:FB:52:62:EC:A5:11:EA:68:FB:05:13:6E:9B:63:DD:FA:E2
Authority key identifier: B3:77:D3:CB:65:2B:D3:98:C4:DB:BE:76:CD:B0:08:2E:9D:EE:D6:D4
Certificate issuer: /CN=b377d3cb652bd398c4dbbe76cdb0082e9deed6d4
Certificate serial: 0194BC050354C2BC3EBB662E7EC3A4D43B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3fTy2Ur05jE2752zbAILp3u1tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/57021d-7345-4eab-a710-d73a4573c1b4/1/s3fTy2Ur05jE2752zbAILp3u1tQ.mft
Manifest number: 02BE
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: s3fTy2Ur05jE2752zbAILp3u1tQ.crl (hash: 28TtHSDk+6ebQeqfih1FHCXY/T08RbjQCOLjm/A5JJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:03:54:c2:bc:3e:bb:66:2e:7e:c3:a4:d4:3b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b377d3cb652bd398c4dbbe76cdb0082e9deed6d4
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=05ae5bfb5262eca511ea68fb05136e9b63ddfae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:24:47:5a:e9:a6:34:5f:3b:e1:10:45:ed:
d4:5e:f2:9b:9a:a6:aa:21:51:84:fa:62:9f:4f:97:
e6:4f:cb:18:9f:f0:fa:84:d4:32:9a:c3:f0:1a:fb:
f8:8a:1a:f0:27:3a:1b:0c:66:e7:01:4e:e0:96:b2:
3c:18:4d:85:5d:47:57:07:88:0b:e1:e9:40:50:5b:
fc:88:03:fb:ff:75:0d:f1:2a:be:36:13:31:82:68:
ef:3a:a2:16:0c:1e:60:83:02:0a:d9:b2:e2:62:e9:
fa:cd:44:40:a8:73:3d:54:2f:35:7c:0d:05:5b:48:
49:2f:83:37:4b:41:04:7c:03:04:da:fa:0e:a3:c4:
03:a5:bd:eb:e5:b9:ca:3e:02:d1:38:e0:41:cf:e1:
01:f5:09:05:5f:23:04:03:85:9b:6d:cf:c4:13:ce:
ae:92:9b:57:47:4d:14:53:7c:b2:69:0d:9e:89:33:
cf:a0:31:cb:bf:9a:65:00:92:c6:f1:1c:0c:7f:03:
6d:bf:87:d3:95:66:9b:1c:87:cb:30:f7:04:2a:00:
23:be:40:b7:52:58:59:0c:c1:02:45:e8:12:7f:70:
c4:9f:4a:aa:bf:3b:de:9b:b4:0c:01:c2:cb:28:85:
e9:38:f6:cd:cc:40:a3:f6:c1:aa:65:11:c0:83:f0:
c9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AE:5B:FB:52:62:EC:A5:11:EA:68:FB:05:13:6E:9B:63:DD:FA:E2
X509v3 Authority Key Identifier:
keyid:B3:77:D3:CB:65:2B:D3:98:C4:DB:BE:76:CD:B0:08:2E:9D:EE:D6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3fTy2Ur05jE2752zbAILp3u1tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/57021d-7345-4eab-a710-d73a4573c1b4/1/s3fTy2Ur05jE2752zbAILp3u1tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/57021d-7345-4eab-a710-d73a4573c1b4/1/s3fTy2Ur05jE2752zbAILp3u1tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:65:f3:79:a4:cd:47:18:86:54:3a:ff:1d:90:50:b7:75:ca:
93:18:38:aa:9d:df:43:7c:77:04:d2:89:25:30:f6:86:53:83:
16:3f:fe:d1:7b:a2:98:a2:36:7a:84:da:2c:0a:fd:ad:08:c6:
4f:b4:11:72:22:ad:f1:2d:0e:5f:d3:a5:c7:db:4a:5d:f5:3d:
3a:bf:58:82:d9:17:30:ea:e9:14:a4:56:ae:88:1c:26:54:df:
55:e2:86:b9:66:e1:0a:32:ae:75:70:3e:90:b2:17:88:80:14:
de:43:6f:ed:95:fa:9d:cd:f1:4c:a4:c5:fa:79:1b:e2:ad:65:
f3:58:44:01:bd:24:2d:3c:1a:68:0d:af:1a:3d:e3:3f:e4:a0:
e6:bb:69:e6:2b:be:c2:f8:86:2b:0c:f1:0f:4f:32:19:37:d4:
74:df:0a:14:c4:4e:3b:30:1d:66:86:20:87:f6:20:fe:ed:21:
e4:b4:2e:6f:9b:c8:f1:09:91:d3:2c:fc:d9:82:c4:e9:ae:01:
ee:a1:82:78:c3:ad:1b:1c:c8:0c:1c:54:1b:0b:49:65:78:51:
f7:36:e6:4d:99:b0:6b:e8:95:46:bb:82:b7:d2:1f:10:b2:f6:
5f:ce:a9:e1:97:44:ee:1a:cc:96:90:ec:ca:c8:f3:a0:05:3c:
8b:0b:d9:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQNUwrw+u2YufsOk1Dt8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNzdkM2NiNjUyYmQzOThjNGRiYmU3NmNkYjAwODJlOWRl
ZWQ2ZDQwHhcNMjUwMTMxMTEwMDMyWhcNMjUwMjAxMTEwMDMyWjAzMTEwLwYDVQQD
EygwNWFlNWJmYjUyNjJlY2E1MTFlYTY4ZmIwNTEzNmU5YjYzZGRmYWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAkkR1rppjRfO+EQRe3UXvKbmqaq
IVGE+mKfT5fmT8sYn/D6hNQymsPwGvv4ihrwJzobDGbnAU7glrI8GE2FXUdXB4gL
4elAUFv8iAP7/3UN8Sq+NhMxgmjvOqIWDB5ggwIK2bLiYun6zURAqHM9VC81fA0F
W0hJL4M3S0EEfAME2voOo8QDpb3r5bnKPgLROOBBz+EB9QkFXyMEA4Wbbc/EE86u
kptXR00UU3yyaQ2eiTPPoDHLv5plAJLG8RwMfwNtv4fTlWabHIfLMPcEKgAjvkC3
UlhZDMECRegSf3DEn0qqvzvem7QMAcLLKIXpOPbNzECj9sGqZRHAg/DJAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWuW/tSYuylEepo+wUTbptj3friMB8GA1UdIwQY
MBaAFLN308tlK9OYxNu+ds2wCC6d7tbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczNmVHkyVXIwNWpFMjc1MnpiQUlMcDN1MXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81NzAyMWQtNzM0NS00ZWFiLWE3MTAt
ZDczYTQ1NzNjMWI0LzEvczNmVHkyVXIwNWpFMjc1MnpiQUlMcDN1MXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC81NzAyMWQtNzM0NS00ZWFiLWE3MTAtZDczYTQ1NzNjMWI0
LzEvczNmVHkyVXIwNWpFMjc1MnpiQUlMcDN1MXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2XzeaTN
RxiGVDr/HZBQt3XKkxg4qp3fQ3x3BNKJJTD2hlODFj/+0XuimKI2eoTaLAr9rQjG
T7QRciKt8S0OX9Olx9tKXfU9Or9YgtkXMOrpFKRWrogcJlTfVeKGuWbhCjKudXA+
kLIXiIAU3kNv7ZX6nc3xTKTF+nkb4q1l81hEAb0kLTwaaA2vGj3jP+Sg5rtp5iu+
wviGKwzxD08yGTfUdN8KFMROOzAdZoYgh/Yg/u0h5LQub5vI8QmR0yz82YLE6a4B
7qGCeMOtGxzIDBxUGwtJZXhR9zbmTZmwa+iVRruCt9IfELL2X86p4ZdE7hrMlpDs
ysjzoAU8iwvZ5w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:49 2025 by rpki-client