Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
File: S3DLCl46TlMIm1HemjcKXyM4dMY.mft (raw, json)
Hash identifier: yDCEF/NdFYT0y3C04P8wUQh71BZh6FiIqtun/UqvahM=
Subject key identifier: 95:13:1A:B2:B4:B3:82:84:5F:CF:74:41:5E:93:6F:B2:BF:93:9D:7A
Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Certificate serial: 0194BBCDCDAF969B984EA013EAC2A79F1483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: S3DLCl46TlMIm1HemjcKXyM4dMY.crl (hash: zEDYRS+yXFLtmuqD+u74fJROu/B+EJvroA2xYO474fQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cd:af:96:9b:98:4e:a0:13:ea:c2:a7:9f:14:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=95131ab2b4b382845fcf74415e936fb2bf939d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:a1:c5:ca:bf:f3:5c:1f:a7:fe:e1:02:2b:
92:45:eb:32:1c:9c:3f:66:43:73:99:59:d6:3c:f7:
af:e6:e3:dd:d6:56:5e:4e:6a:2a:25:3c:9d:54:21:
9c:0e:6e:8c:8b:f5:82:92:36:8c:0e:47:3e:dd:6f:
8e:43:5a:1e:3f:e8:8c:f2:8c:fc:2b:71:56:89:0a:
19:e8:24:e8:c5:fe:ef:bd:65:2e:9b:1e:ce:5a:45:
8e:2b:69:33:2e:a6:62:fa:96:1d:b3:0d:8b:f2:52:
75:50:53:2d:29:90:07:0f:5d:d3:bd:6e:c6:fc:22:
23:10:a7:17:bf:f3:77:dc:37:49:8f:4f:95:72:d3:
ee:dc:b0:fa:cd:0c:16:15:81:6c:36:13:81:6a:3b:
d0:4c:23:db:cc:01:49:e7:bb:8a:dd:5c:3f:21:60:
f6:ad:2c:f3:4e:c7:0a:41:9b:3d:9d:52:df:49:3d:
d2:35:9f:5b:40:93:aa:c0:d2:85:9e:f2:db:29:fe:
a3:e0:64:65:41:b5:dc:3e:c3:40:c4:78:94:8a:af:
28:cf:62:7c:ae:bf:6d:60:e2:db:e1:93:eb:c0:5a:
01:70:8d:16:44:e6:94:ab:64:aa:e6:fe:39:0b:92:
41:61:73:65:a5:03:10:ec:3f:9c:2a:87:a8:55:90:
5b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:13:1A:B2:B4:B3:82:84:5F:CF:74:41:5E:93:6F:B2:BF:93:9D:7A
X509v3 Authority Key Identifier:
keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:93:83:9c:1e:c8:6a:be:b5:ae:cc:7c:2d:be:62:8e:cf:97:
c4:50:4a:d5:26:7c:36:52:e4:e5:df:22:64:1f:4b:04:a6:35:
d4:38:43:5c:35:7c:45:d4:31:fb:f1:92:7f:46:e3:b7:db:37:
a8:71:2f:89:96:70:1c:b2:75:cf:52:80:80:7f:6e:18:27:04:
b8:47:46:2d:d2:7c:a1:b9:34:8a:d1:50:1f:f4:e1:75:7c:64:
9b:0b:3e:e9:5f:1d:f4:b1:58:05:5e:da:2d:ce:4a:33:7b:b6:
cc:e6:1c:42:1d:3e:e4:79:10:1f:96:6a:b0:08:2d:d2:2a:e2:
fa:8b:75:6a:07:46:95:01:af:96:69:9d:c7:56:60:47:2b:af:
0f:99:79:b0:0c:83:f7:fc:e2:31:65:53:f8:c7:b2:b4:61:b2:
9b:19:8f:fb:8a:ca:94:ba:4e:11:70:2e:74:d2:f1:3c:f4:12:
d4:2e:53:10:70:da:9f:c3:99:a1:f2:ad:2d:22:fd:1e:c9:75:
70:f7:8d:7f:63:64:b3:b1:6f:e9:10:d9:ce:4f:84:b9:3f:f8:
e8:73:0d:73:fe:ba:49:99:0f:2b:11:df:25:b9:8e:a4:4b:16:
f3:f2:56:42:2c:46:11:cd:6f:65:c6:88:a2:ec:4c:5d:05:d3:
24:8d:89:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zc2vlpuYTqAT6sKnnxSDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzBjYjBhNWUzYTRlNTMwODliNTFkZTlhMzcwYTVmMjMz
ODc0YzYwHhcNMjUwMTMxMTAwMDE0WhcNMjUwMjAxMTAwMDE0WjAzMTEwLwYDVQQD
Eyg5NTEzMWFiMmI0YjM4Mjg0NWZjZjc0NDE1ZTkzNmZiMmJmOTM5ZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmChxcq/81wfp/7hAiuSResyHJw/
ZkNzmVnWPPev5uPd1lZeTmoqJTydVCGcDm6Mi/WCkjaMDkc+3W+OQ1oeP+iM8oz8
K3FWiQoZ6CToxf7vvWUumx7OWkWOK2kzLqZi+pYdsw2L8lJ1UFMtKZAHD13TvW7G
/CIjEKcXv/N33DdJj0+VctPu3LD6zQwWFYFsNhOBajvQTCPbzAFJ57uK3Vw/IWD2
rSzzTscKQZs9nVLfST3SNZ9bQJOqwNKFnvLbKf6j4GRlQbXcPsNAxHiUiq8oz2J8
rr9tYOLb4ZPrwFoBcI0WROaUq2Sq5v45C5JBYXNlpQMQ7D+cKoeoVZBb0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUTGrK0s4KEX890QV6Tb7K/k516MB8GA1UdIwQY
MBaAFEtwywpeOk5TCJtR3po3Cl8jOHTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2Yt
Y2U1OTUyMmVmNjZmLzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2YtY2U1OTUyMmVmNjZm
LzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJODnB7I
ar61rsx8Lb5ijs+XxFBK1SZ8NlLk5d8iZB9LBKY11DhDXDV8RdQx+/GSf0bjt9s3
qHEviZZwHLJ1z1KAgH9uGCcEuEdGLdJ8obk0itFQH/ThdXxkmws+6V8d9LFYBV7a
Lc5KM3u2zOYcQh0+5HkQH5ZqsAgt0iri+ot1agdGlQGvlmmdx1ZgRyuvD5l5sAyD
9/ziMWVT+MeytGGymxmP+4rKlLpOEXAudNLxPPQS1C5TEHDan8OZofKtLSL9Hsl1
cPeNf2Nks7Fv6RDZzk+EuT/46HMNc/66SZkPKxHfJbmOpEsW8/JWQixGEc1vZcaI
ouxMXQXTJI2Jgg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:07 2025 by rpki-client