Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
File: DDvIzqseeTohA5zQseVHLHJkH2g.mft (raw, json)
Hash identifier: 1DdrgNtCE4dsg85ho6vBSXlvBn0SrsUlgD40CW0gsEY=
Subject key identifier: 96:A3:64:81:AC:DF:27:C1:48:2F:96:10:BF:91:A8:BD:C4:FB:78:28
Authority key identifier: 0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
Certificate issuer: /CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Certificate serial: 0194BCA9D18D4B5196FDC995ADF9005348F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: DDvIzqseeTohA5zQseVHLHJkH2g.crl (hash: YB4pFNnc6reAl62ZOkSWzzDRMl8f8P0NpZYUwpJIIGk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d1:8d:4b:51:96:fd:c9:95:ad:f9:00:53:48:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=96a36481acdf27c1482f9610bf91a8bdc4fb7828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:d8:a2:25:01:b5:c4:2e:3e:0a:1c:0a:e1:
f0:82:17:6b:8e:ff:c1:7c:50:ed:94:b3:b3:95:12:
f2:3d:62:d7:2c:b6:89:53:e4:8e:96:04:07:b6:a6:
23:bb:80:b6:ce:2d:1a:77:9f:02:83:71:a7:b1:60:
e4:34:af:98:6d:27:f6:c2:4a:13:c5:0e:18:4d:59:
ef:03:d0:3a:bf:b3:f3:60:81:a6:28:ae:f8:14:93:
de:ea:1b:3d:c0:0b:d3:51:65:01:a0:fc:4d:dd:c1:
7c:98:1d:55:1d:b2:97:31:9a:c9:bf:e8:4c:8e:ae:
0c:68:78:3e:a9:9a:ab:5d:c9:40:97:01:7c:e5:5f:
74:7d:e8:1c:89:b1:3c:89:c2:c6:71:1f:26:00:77:
8f:c2:2b:37:d1:b9:14:15:93:f4:44:c5:51:33:75:
70:28:e4:5e:6b:0c:19:05:44:e6:80:fa:d4:35:02:
73:d3:79:a0:9a:35:03:5e:60:87:b4:d9:31:84:67:
8a:4f:74:e2:3d:81:d5:30:14:00:12:b8:07:ec:75:
5e:fd:7c:37:41:1b:fc:5c:97:df:92:c2:a2:7c:ca:
60:6a:05:b2:4a:49:48:b1:f1:6c:7c:d3:ab:e7:b8:
e7:dc:18:71:4a:cf:b2:de:9f:ee:c2:72:33:e5:b1:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A3:64:81:AC:DF:27:C1:48:2F:96:10:BF:91:A8:BD:C4:FB:78:28
X509v3 Authority Key Identifier:
keyid:0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:03:59:67:1a:37:99:9d:56:eb:d8:e7:9e:6e:43:31:42:05:
00:d4:74:f2:9f:59:fc:58:e2:5d:d2:7f:0c:64:46:32:83:d6:
37:6c:c7:e3:5e:f5:10:a6:d1:05:96:4f:c7:d8:ae:6e:f3:22:
d2:ee:ad:01:72:a5:63:60:eb:a0:5a:cf:45:24:b9:de:fe:3f:
de:8a:7f:24:de:8b:4c:6c:df:9b:c4:a6:6c:4b:e1:bf:39:5c:
32:df:68:16:f4:05:4b:0e:49:76:b5:12:3f:05:0a:73:2f:e6:
b3:c0:6b:6a:d9:0c:99:38:7a:6c:c9:18:a4:de:71:eb:4c:2a:
84:32:b2:5f:8a:75:22:8f:b7:99:84:6e:68:e2:05:d3:da:ae:
ee:4e:b2:c5:c6:b6:00:2d:89:39:73:2f:c0:c5:68:8a:55:6a:
36:93:2c:b7:6a:c9:9a:7a:27:1d:32:d3:01:b6:f4:ff:6d:43:
42:ed:ac:f7:63:2c:98:18:cd:92:e6:fb:8a:91:d2:a3:5a:e7:
67:b0:95:89:6b:91:e5:90:69:f3:fe:8a:65:62:35:b5:16:f7:
e7:31:20:92:c2:d2:09:df:f6:86:20:a3:47:e5:3c:b2:03:4e:
1f:4b:10:3e:f5:7a:13:c4:74:7c:4a:8d:7f:9b:a1:99:09:fb:
ff:5e:90:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdGNS1GW/cmVrfkAU0j0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjM2JjOGNlYWIxZTc5M2EyMTAzOWNkMGIxZTU0NzJjNzI2
NDFmNjgwHhcNMjUwMTMxMTQwMDMzWhcNMjUwMjAxMTQwMDMzWjAzMTEwLwYDVQQD
Eyg5NmEzNjQ4MWFjZGYyN2MxNDgyZjk2MTBiZjkxYThiZGM0ZmI3ODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVXYoiUBtcQuPgocCuHwghdrjv/B
fFDtlLOzlRLyPWLXLLaJU+SOlgQHtqYju4C2zi0ad58Cg3GnsWDkNK+YbSf2wkoT
xQ4YTVnvA9A6v7PzYIGmKK74FJPe6hs9wAvTUWUBoPxN3cF8mB1VHbKXMZrJv+hM
jq4MaHg+qZqrXclAlwF85V90fegcibE8icLGcR8mAHePwis30bkUFZP0RMVRM3Vw
KOReawwZBUTmgPrUNQJz03mgmjUDXmCHtNkxhGeKT3TiPYHVMBQAErgH7HVe/Xw3
QRv8XJffksKifMpgagWySklIsfFsfNOr57jn3BhxSs+y3p/uwnIz5bGDFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJajZIGs3yfBSC+WEL+RqL3E+3goMB8GA1UdIwQY
MBaAFAw7yM6rHnk6IQOc0LHlRyxyZB9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQt
ZjhiYWM0ZmI4ZjhhLzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQtZjhiYWM0ZmI4Zjhh
LzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwNZZxo3
mZ1W69jnnm5DMUIFANR08p9Z/FjiXdJ/DGRGMoPWN2zH4171EKbRBZZPx9iubvMi
0u6tAXKlY2DroFrPRSS53v4/3op/JN6LTGzfm8SmbEvhvzlcMt9oFvQFSw5JdrUS
PwUKcy/ms8BratkMmTh6bMkYpN5x60wqhDKyX4p1Io+3mYRuaOIF09qu7k6yxca2
AC2JOXMvwMVoilVqNpMst2rJmnonHTLTAbb0/21DQu2s92MsmBjNkub7ipHSo1rn
Z7CViWuR5ZBp8/6KZWI1tRb35zEgksLSCd/2hiCjR+U8sgNOH0sQPvV6E8R0fEqN
f5uhmQn7/16QjQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:27 2025 by rpki-client