Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
File: _sl9DBu8zD2GcSKhFxD1X3AjAI4.mft (raw, json)
Hash identifier: dZyZHJVGoTdOWbWWpGwsg7SmDFzcW0a6D1idFHn3I94=
Subject key identifier: 15:19:37:46:03:91:67:CB:7E:B0:AE:7E:8F:9F:19:2B:DA:0A:38:61
Authority key identifier: FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
Certificate issuer: /CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Certificate serial: 0194BC7317637717A21E1EE04AC5934CDCF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
Manifest number: 0322
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: _sl9DBu8zD2GcSKhFxD1X3AjAI4.crl (hash: X0efytgcEbgCsPUf8SEbUoOnZJ8iULkD9+vncBjqMn0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:17:63:77:17:a2:1e:1e:e0:4a:c5:93:4c:dc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=15193746039167cb7eb0ae7e8f9f192bda0a3861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:09:c9:5b:33:1b:ba:8d:d5:e0:28:79:f9:
1e:37:de:2f:45:d1:82:44:4b:96:46:dd:09:ee:70:
4d:10:c1:6b:f8:99:4c:bc:18:fc:72:2f:12:11:20:
90:3b:f6:ef:ee:58:98:7d:f7:65:03:73:e1:0a:18:
ff:7c:3c:ea:c9:d2:f8:e9:91:e3:6e:fa:ad:84:b7:
73:aa:e3:6e:17:a4:78:48:b7:0c:7e:c8:81:46:02:
fd:75:bb:e2:ac:35:1e:8c:13:4c:c5:df:80:cc:bc:
e4:a8:b9:af:19:ec:14:4f:58:89:6b:34:71:cc:e4:
70:b4:d6:9e:ac:bb:8f:c0:7f:a3:e7:41:e7:34:a5:
81:90:2a:72:d5:76:94:83:9f:a1:cb:1d:2f:d0:92:
c8:a4:f3:49:08:23:14:8c:47:ea:f7:8b:ab:d2:2d:
1d:4f:55:5d:dd:8e:2a:d1:d5:8d:79:5e:50:80:bd:
5f:34:77:fc:04:cd:fc:d3:0a:e3:8d:b2:93:2f:b2:
90:44:12:8a:23:81:7d:b4:0e:b5:df:24:d0:ee:00:
a6:b2:0a:b6:79:17:05:9c:c5:bd:7c:77:aa:35:b6:
ff:f0:0e:71:cd:ac:60:17:94:13:97:d5:55:17:da:
df:17:ba:9f:28:9a:33:98:95:c7:b4:a0:f9:52:19:
0c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:19:37:46:03:91:67:CB:7E:B0:AE:7E:8F:9F:19:2B:DA:0A:38:61
X509v3 Authority Key Identifier:
keyid:FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:27:60:31:0b:ef:98:c6:ea:02:20:75:b6:3f:3a:98:4f:a8:
3b:c2:df:01:20:1e:f6:21:da:8d:21:a1:cc:79:ff:70:9a:67:
e9:2e:69:31:3e:39:a1:b6:b8:70:e2:76:d1:50:72:ca:b7:b3:
4d:ab:36:0f:97:5f:ac:c0:23:ed:da:53:09:e1:9b:80:d5:73:
5c:8e:c8:cd:e8:4f:cb:cc:c9:b1:ff:19:87:dc:bb:7e:2f:51:
c6:c8:ce:13:33:9f:b7:51:b4:85:69:56:f5:fe:4a:47:2a:48:
51:ce:d4:53:24:04:e4:90:0f:8b:57:f3:78:8f:b5:07:fe:97:
14:75:9c:56:ab:26:49:20:7c:90:1b:c2:bd:b5:3e:40:30:9e:
8f:4f:11:6d:4a:10:58:5e:6f:c2:15:e5:38:b2:69:3e:c6:f7:
ce:f8:da:45:14:bb:bf:fc:26:2d:40:d4:76:cf:03:08:2d:21:
31:42:11:af:a2:e7:9e:ae:72:72:45:aa:78:bf:89:5a:e2:da:
af:98:83:c4:54:79:de:04:78:a1:d3:63:30:d8:e2:7e:0c:65:
37:ea:cb:0a:23:70:66:80:c4:1f:d8:44:c3:e4:41:5e:21:07:
b7:34:5f:ce:94:46:38:51:fc:b9:06:31:e2:54:3a:20:27:31:
07:4e:0a:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cxdjdxeiHh7gSsWTTNz3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzk3ZDBjMWJiY2NjM2Q4NjcxMjJhMTE3MTBmNTVmNzAy
MzAwOGUwHhcNMjUwMTMxMTMwMDQ2WhcNMjUwMjAxMTMwMDQ2WjAzMTEwLwYDVQQD
EygxNTE5Mzc0NjAzOTE2N2NiN2ViMGFlN2U4ZjlmMTkyYmRhMGEzODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyQJyVszG7qN1eAoefkeN94vRdGC
REuWRt0J7nBNEMFr+JlMvBj8ci8SESCQO/bv7liYffdlA3PhChj/fDzqydL46ZHj
bvqthLdzquNuF6R4SLcMfsiBRgL9dbvirDUejBNMxd+AzLzkqLmvGewUT1iJazRx
zORwtNaerLuPwH+j50HnNKWBkCpy1XaUg5+hyx0v0JLIpPNJCCMUjEfq94ur0i0d
T1Vd3Y4q0dWNeV5QgL1fNHf8BM380wrjjbKTL7KQRBKKI4F9tA613yTQ7gCmsgq2
eRcFnMW9fHeqNbb/8A5xzaxgF5QTl9VVF9rfF7qfKJozmJXHtKD5UhkMCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUZN0YDkWfLfrCufo+fGSvaCjhhMB8GA1UdIwQY
MBaAFP7JfQwbvMw9hnEioRcQ9V9wIwCOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iZTc1ODAtNTExMi00YWFiLWFhNzkt
OTM5Zjg3YTMxYmYwLzEvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9iZTc1ODAtNTExMi00YWFiLWFhNzktOTM5Zjg3YTMxYmYw
LzEvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPydgMQvv
mMbqAiB1tj86mE+oO8LfASAe9iHajSGhzHn/cJpn6S5pMT45oba4cOJ20VByyrez
Tas2D5dfrMAj7dpTCeGbgNVzXI7IzehPy8zJsf8Zh9y7fi9RxsjOEzOft1G0hWlW
9f5KRypIUc7UUyQE5JAPi1fzeI+1B/6XFHWcVqsmSSB8kBvCvbU+QDCej08RbUoQ
WF5vwhXlOLJpPsb3zvjaRRS7v/wmLUDUds8DCC0hMUIRr6Lnnq5yckWqeL+JWuLa
r5iDxFR53gR4odNjMNjifgxlN+rLCiNwZoDEH9hEw+RBXiEHtzRfzpRGOFH8uQYx
4lQ6ICcxB04KjQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:32 2025 by rpki-client