Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
File: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft (raw, json)
Hash identifier: eulOXb4tHXkaglVwFnYT+I46aK3fLMoqn3jRiXi1A0g=
Subject key identifier: 25:D9:ED:2D:64:81:85:8E:82:8C:79:9A:DE:08:CD:CA:A9:99:30:D8
Authority key identifier: AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
Certificate issuer: /CN=adec58a002495d03ad5d9d11dd1421f195128524
Certificate serial: 0194BCA9FBAE7CCCD0B4D7C27A57E410683B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
Manifest number: 0324
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl (hash: jKyrymQZoeoGndWsYhrJDU6Cawm/eDr8Q1tLr7QCYmM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fb:ae:7c:cc:d0:b4:d7:c2:7a:57:e4:10:68:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adec58a002495d03ad5d9d11dd1421f195128524
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=25d9ed2d6481858e828c799ade08cdcaa99930d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:61:21:69:d1:bb:37:90:e7:25:fb:24:46:
c1:cd:03:c0:05:d9:ff:39:8b:f0:83:f7:8f:17:39:
d0:45:40:16:bc:68:c9:ad:86:c0:4a:01:7c:12:8e:
dd:08:11:e9:73:ed:de:5f:de:ec:e8:52:f1:40:00:
5c:c9:ff:65:1a:f7:15:d4:8e:be:cc:e4:d7:81:07:
cd:72:69:49:1b:19:58:8e:55:a0:19:17:9e:cc:c2:
a0:4e:85:b7:4d:53:46:07:ec:f1:9e:7a:8b:d2:e6:
ab:50:38:43:1a:1e:30:33:33:df:28:36:f6:f6:24:
70:7d:ae:ae:df:b4:ef:2a:1c:07:af:ee:15:1e:11:
2f:63:a2:a0:51:6e:b3:69:61:e2:a0:ef:51:dc:91:
91:7d:0a:63:c2:1e:a1:35:2a:b1:31:29:b1:ba:ff:
49:e7:11:43:7c:64:59:45:71:57:04:35:c1:0e:25:
0c:1c:48:f6:30:b9:70:e6:82:cc:27:27:19:96:24:
64:f8:bd:a5:ab:e9:1a:97:0a:80:51:75:a2:fb:e6:
87:8b:ec:71:a1:a0:6a:d2:7a:c9:c8:fe:b3:50:8c:
31:9c:17:ee:ad:a7:3b:1f:d4:3a:89:5d:95:04:8d:
2b:95:5a:b7:c4:b4:82:dc:05:3f:21:9a:97:62:41:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D9:ED:2D:64:81:85:8E:82:8C:79:9A:DE:08:CD:CA:A9:99:30:D8
X509v3 Authority Key Identifier:
keyid:AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:19:2a:7d:1f:f1:3e:47:8a:ca:bf:c2:42:d5:5e:79:38:ad:
e6:d8:91:0c:29:00:a6:44:9e:e4:0d:dc:cd:f0:af:4e:d6:7b:
8c:9d:67:16:4e:f9:c6:0d:e0:38:92:7d:61:8e:f0:61:28:dc:
9d:16:87:1a:86:59:b4:38:36:fb:f0:25:18:64:c3:97:b4:1c:
d9:d8:7a:5a:ce:db:4d:f5:cb:16:cb:f0:b3:71:78:5c:a5:ed:
8b:77:aa:d5:c3:4e:c8:91:3c:b8:fb:a0:12:62:d4:9e:17:74:
b1:b7:8a:81:44:0a:2e:c8:c2:ec:03:53:ed:27:dc:21:6c:a2:
83:15:e0:d0:0d:87:c5:80:c7:a5:10:79:05:3b:71:8b:a6:12:
f5:7c:15:26:6e:f9:b5:af:6e:48:fa:ab:cf:e9:1c:9a:59:eb:
ae:98:df:34:bd:8b:2d:6b:b0:73:83:fc:16:42:bf:47:44:24:
24:28:f2:a4:dd:0f:e4:cc:f5:a8:38:7d:fa:61:44:e8:1a:bf:
00:93:89:bf:81:24:70:0f:a3:7e:5b:71:01:04:95:d3:03:da:
7b:1e:2e:f4:d1:af:a4:16:24:9a:a1:db:e8:7b:00:f5:26:ae:
fe:3c:3c:28:9d:21:8e:f3:c8:bc:f1:47:a5:4c:5a:a3:f8:88:
d9:9e:07:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qfuufMzQtNfCelfkEGg7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZWM1OGEwMDI0OTVkMDNhZDVkOWQxMWRkMTQyMWYxOTUx
Mjg1MjQwHhcNMjUwMTMxMTQwMDQ0WhcNMjUwMjAxMTQwMDQ0WjAzMTEwLwYDVQQD
EygyNWQ5ZWQyZDY0ODE4NThlODI4Yzc5OWFkZTA4Y2RjYWE5OTkzMGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI5hIWnRuzeQ5yX7JEbBzQPABdn/
OYvwg/ePFznQRUAWvGjJrYbASgF8Eo7dCBHpc+3eX97s6FLxQABcyf9lGvcV1I6+
zOTXgQfNcmlJGxlYjlWgGReezMKgToW3TVNGB+zxnnqL0uarUDhDGh4wMzPfKDb2
9iRwfa6u37TvKhwHr+4VHhEvY6KgUW6zaWHioO9R3JGRfQpjwh6hNSqxMSmxuv9J
5xFDfGRZRXFXBDXBDiUMHEj2MLlw5oLMJycZliRk+L2lq+kalwqAUXWi++aHi+xx
oaBq0nrJyP6zUIwxnBfurac7H9Q6iV2VBI0rlVq3xLSC3AU/IZqXYkEWgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXZ7S1kgYWOgox5mt4IzcqpmTDYMB8GA1UdIwQY
MBaAFK3sWKACSV0DrV2dEd0UIfGVEoUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmV4WW9BSkpYUU90WFowUjNSUWg4WlVTaFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lZGQ1NTEtYmFmMC00YTU3LTk3YTgt
NzQ1ZTUwMGQ4ZmNmLzEvcmV4WW9BSkpYUU90WFowUjNSUWg4WlVTaFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9lZGQ1NTEtYmFmMC00YTU3LTk3YTgtNzQ1ZTUwMGQ4ZmNm
LzEvcmV4WW9BSkpYUU90WFowUjNSUWg4WlVTaFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxkqfR/x
PkeKyr/CQtVeeTit5tiRDCkApkSe5A3czfCvTtZ7jJ1nFk75xg3gOJJ9YY7wYSjc
nRaHGoZZtDg2+/AlGGTDl7Qc2dh6Ws7bTfXLFsvws3F4XKXti3eq1cNOyJE8uPug
EmLUnhd0sbeKgUQKLsjC7ANT7SfcIWyigxXg0A2HxYDHpRB5BTtxi6YS9XwVJm75
ta9uSPqrz+kcmlnrrpjfNL2LLWuwc4P8FkK/R0QkJCjypN0P5Mz1qDh9+mFE6Bq/
AJOJv4EkcA+jfltxAQSV0wPaex4u9NGvpBYkmqHb6HsA9Sau/jw8KJ0hjvPIvPFH
pUxao/iI2Z4H5Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:10 2025 by rpki-client