Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
File: k4EH0RRkaaEaY-X10tfbj28717M.mft (raw, json)
Hash identifier: N2aApVfhglpjtdKEW9G+jMM0Yj8KM1vRFZhUOljx+3k=
Subject key identifier: 77:5E:2D:34:20:C9:4F:6A:40:B1:F4:9A:96:B3:72:8E:D4:4D:29:7B
Authority key identifier: 93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3
Certificate issuer: /CN=938107d1146469a11a63e5f5d2d7db8f6f3bd7b3
Certificate serial: 0194BBCE028C7E4FEB3EE4B93B0BAADE2150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
Manifest number: 048E
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: k4EH0RRkaaEaY-X10tfbj28717M.crl (hash: 6A57vNG1eKkPFzhs/FkpurhMA6zbtOOD2zG7v5xdd1M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:02:8c:7e:4f:eb:3e:e4:b9:3b:0b:aa:de:21:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938107d1146469a11a63e5f5d2d7db8f6f3bd7b3
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=775e2d3420c94f6a40b1f49a96b3728ed44d297b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:d1:67:f2:a4:18:f0:b3:f8:12:42:eb:7b:
2d:11:6f:df:77:c1:ba:db:63:70:ec:e0:09:99:3b:
6c:6b:09:be:e2:8e:f3:28:d1:15:07:c6:38:6d:46:
5c:7a:4d:68:2c:ef:cd:e4:de:19:c7:c2:3a:5c:81:
5f:e5:6b:d4:30:1a:30:d9:27:7f:de:0f:f7:4d:d3:
9d:7a:d7:2c:1b:ea:bf:a4:b8:3c:9e:73:72:2f:c3:
7d:ba:12:4c:b0:74:b3:d3:9c:df:fd:74:d7:15:0c:
fc:69:f8:92:73:39:aa:60:b5:4c:94:b2:a5:20:d6:
11:77:3f:a9:b3:15:e3:02:fd:e7:f9:8d:e9:8f:ab:
e9:77:1d:4b:f2:1f:61:52:1f:d1:f1:4c:78:39:2b:
4a:6c:41:1b:7b:dd:9f:f4:14:e2:b5:73:84:60:34:
38:4e:c2:37:b5:4d:a4:d7:31:2b:53:16:98:d9:ec:
5d:27:88:5f:42:58:d6:48:1f:16:4b:f8:cf:d4:c8:
46:e7:06:0e:32:22:a2:c9:ec:fd:8d:3f:ed:e6:4c:
53:20:cf:9f:fa:33:2c:e1:9a:01:74:21:42:a8:41:
66:3d:e1:42:47:da:35:63:f3:10:db:52:4b:97:48:
01:3c:74:62:14:72:09:27:3b:13:4e:c5:ff:a9:b5:
d7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5E:2D:34:20:C9:4F:6A:40:B1:F4:9A:96:B3:72:8E:D4:4D:29:7B
X509v3 Authority Key Identifier:
keyid:93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7f:78:7d:18:b5:87:42:99:67:ae:e0:ce:fd:10:b7:c3:1b:
09:1f:ec:72:50:de:18:0b:15:4b:66:3f:14:99:87:9e:94:53:
69:b4:b1:33:91:78:8f:c5:ae:c5:80:20:31:69:5d:17:df:f0:
7e:8c:d7:ca:bb:be:f9:7d:c2:d5:d6:e0:d7:b8:37:f8:4b:ac:
77:80:7b:cb:8a:98:a8:55:92:38:a4:f5:d2:91:5d:71:23:e2:
22:31:0d:da:cd:23:86:09:de:ea:75:ab:78:67:2a:3e:ac:e5:
26:c3:16:19:0c:f0:e5:6e:35:54:8d:67:34:6a:38:01:a7:0c:
4c:59:52:06:9c:5e:d7:ba:84:98:60:e6:9f:60:9a:29:f8:21:
eb:b5:4b:86:60:78:36:94:5d:90:01:bc:88:0f:89:1c:fc:39:
8b:48:b5:c7:13:4a:8b:ec:d5:f5:e5:d0:6f:31:7e:36:f7:e5:
b4:16:d7:05:9d:d9:9b:b3:5f:d2:8d:0c:6d:18:ed:6f:28:50:
e4:06:6d:93:98:d7:b9:44:40:a0:9f:d4:c6:b3:94:13:2e:e8:
07:89:00:a1:c4:34:67:57:e0:d1:63:84:82:12:7f:a7:1c:5e:
15:5c:c8:24:25:f7:75:0f:68:79:1f:bd:26:97:b9:41:34:70:
70:3e:2e:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgKMfk/rPuS5Owuq3iFQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzODEwN2QxMTQ2NDY5YTExYTYzZTVmNWQyZDdkYjhmNmYz
YmQ3YjMwHhcNMjUwMTMxMTAwMDI3WhcNMjUwMjAxMTAwMDI3WjAzMTEwLwYDVQQD
Eyg3NzVlMmQzNDIwYzk0ZjZhNDBiMWY0OWE5NmIzNzI4ZWQ0NGQyOTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/fRZ/KkGPCz+BJC63stEW/fd8G6
22Nw7OAJmTtsawm+4o7zKNEVB8Y4bUZcek1oLO/N5N4Zx8I6XIFf5WvUMBow2Sd/
3g/3TdOdetcsG+q/pLg8nnNyL8N9uhJMsHSz05zf/XTXFQz8afiSczmqYLVMlLKl
INYRdz+psxXjAv3n+Y3pj6vpdx1L8h9hUh/R8Ux4OStKbEEbe92f9BTitXOEYDQ4
TsI3tU2k1zErUxaY2exdJ4hfQljWSB8WS/jP1MhG5wYOMiKiyez9jT/t5kxTIM+f
+jMs4ZoBdCFCqEFmPeFCR9o1Y/MQ21JLl0gBPHRiFHIJJzsTTsX/qbXX0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdeLTQgyU9qQLH0mpazco7UTSl7MB8GA1UdIwQY
MBaAFJOBB9EUZGmhGmPl9dLX249vO9ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazRFSDBSUmthYUVhWS1YMTB0ZmJqMjg3MTdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hZmY0YTktM2M1ZS00YTcxLWI1MjQt
Y2JjNmNjYzA4OTMyLzEvazRFSDBSUmthYUVhWS1YMTB0ZmJqMjg3MTdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hZmY0YTktM2M1ZS00YTcxLWI1MjQtY2JjNmNjYzA4OTMy
LzEvazRFSDBSUmthYUVhWS1YMTB0ZmJqMjg3MTdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADX94fRi1
h0KZZ67gzv0Qt8MbCR/sclDeGAsVS2Y/FJmHnpRTabSxM5F4j8WuxYAgMWldF9/w
fozXyru++X3C1dbg17g3+Eusd4B7y4qYqFWSOKT10pFdcSPiIjEN2s0jhgne6nWr
eGcqPqzlJsMWGQzw5W41VI1nNGo4AacMTFlSBpxe17qEmGDmn2CaKfgh67VLhmB4
NpRdkAG8iA+JHPw5i0i1xxNKi+zV9eXQbzF+NvfltBbXBZ3Zm7Nf0o0MbRjtbyhQ
5AZtk5jXuURAoJ/UxrOUEy7oB4kAocQ0Z1fg0WOEghJ/pxxeFVzIJCX3dQ9oeR+9
Jpe5QTRwcD4umw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:10:37 2025 by rpki-client