Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
File: r03WWsHW2oS6m4HCCeCnYXNF6iM.mft (raw, json)
Hash identifier: vZnEfb9JClxCSdbNuTFUaHPXXIFBcfMSQXBGr4MW+P4=
Subject key identifier: 01:E8:8D:DC:52:90:43:C1:51:DF:3A:20:78:03:42:67:41:5E:67:F5
Authority key identifier: AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23
Certificate issuer: /CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
Certificate serial: 0194BBCDE9010C6C3BF71DED798414E8B1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
Manifest number: 075C
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: r03WWsHW2oS6m4HCCeCnYXNF6iM.crl (hash: EhwQ5ipwqSEaeb4EkJ0VQSL/2k11guuFNNZYVUn8CUM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e9:01:0c:6c:3b:f7:1d:ed:79:84:14:e8:b1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=01e88ddc529043c151df3a2078034267415e67f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a4:0e:38:08:14:d5:f1:91:6b:94:27:3a:5d:
0a:d9:0e:dd:50:5a:6c:86:1f:f2:84:78:33:ac:c0:
b0:96:5a:90:3e:f9:1f:18:ae:d3:e2:4e:45:e7:b7:
a9:ee:db:76:b6:40:d8:ab:fc:65:3c:b1:23:7c:5c:
8d:60:9b:f5:9f:a9:fe:d5:4c:28:2b:37:4c:3a:0f:
80:62:9f:ce:f4:5c:74:cd:29:b8:17:ae:21:0a:9c:
d6:1b:cc:74:ae:de:93:52:e3:20:26:c1:f5:f8:54:
65:05:c9:f1:dc:b1:02:6e:d7:69:cd:db:46:9e:af:
5f:bb:6d:80:11:07:8c:ff:a5:a6:d7:54:95:13:86:
e0:05:bd:b8:22:66:a1:3c:3c:fb:25:eb:8b:80:41:
ea:d5:d3:b3:05:0e:bf:ed:f2:7b:b1:ce:bb:39:69:
f8:e3:d7:97:28:e3:df:93:69:ff:3b:29:b1:f3:0b:
74:ba:04:98:34:e9:78:4d:00:df:44:60:b5:d5:6a:
03:bd:fa:ff:0f:4e:8c:38:df:32:7b:17:72:49:e9:
c9:07:c7:74:85:a0:b0:e0:0f:7b:10:fa:2d:63:40:
ad:eb:8e:0d:83:f3:f1:6c:9a:a3:e9:f2:4c:77:96:
54:d5:bf:ff:9e:42:ff:be:a7:52:e2:d6:e1:35:30:
aa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E8:8D:DC:52:90:43:C1:51:DF:3A:20:78:03:42:67:41:5E:67:F5
X509v3 Authority Key Identifier:
keyid:AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d5:d1:02:99:08:6f:f9:90:26:d5:1d:10:b1:6d:d6:ac:03:
b6:19:d9:a9:cb:f1:58:eb:1e:3d:05:f5:16:6c:f6:bf:2d:48:
62:31:28:19:af:e2:7e:35:e1:96:d7:3f:ac:15:e1:e1:b4:f8:
c1:bb:47:6e:77:6e:95:31:46:4f:3b:0c:13:76:52:40:10:f4:
ed:3d:ce:d2:1c:c6:d8:ce:c5:64:74:11:8b:38:9a:2a:fa:60:
da:60:fb:0c:eb:26:d5:40:61:07:19:42:52:c4:c8:f7:7f:09:
df:b7:f3:5d:d6:62:5a:0a:db:1d:de:cd:10:10:c7:cb:38:81:
ef:27:10:11:f9:93:74:54:b3:4d:62:f3:60:fc:91:c9:3f:76:
50:19:ad:2e:e2:1a:aa:80:cc:d1:ef:81:9a:45:66:fc:22:b8:
b6:b4:b3:00:4a:c8:f5:ec:94:17:92:39:49:17:f1:c7:ff:f6:
de:78:0a:31:6d:7d:a2:d7:24:a1:96:53:14:7c:7f:4d:28:6b:
9d:90:4a:97:57:f3:7b:9a:c7:d3:22:6a:20:9e:62:69:e7:b5:
62:73:56:d6:3f:13:1d:b9:a6:41:b8:fc:a7:04:a3:cb:42:38:
59:37:e8:9c:cb:7d:77:b5:3e:97:60:ac:73:ca:c1:33:44:63:
52:fe:37:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zekBDGw79x3teYQU6LHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNGRkNjVhYzFkNmRhODRiYTliODFjMjA5ZTBhNzYxNzM0
NWVhMjMwHhcNMjUwMTMxMTAwMDIxWhcNMjUwMjAxMTAwMDIxWjAzMTEwLwYDVQQD
EygwMWU4OGRkYzUyOTA0M2MxNTFkZjNhMjA3ODAzNDI2NzQxNWU2N2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKQOOAgU1fGRa5QnOl0K2Q7dUFps
hh/yhHgzrMCwllqQPvkfGK7T4k5F57ep7tt2tkDYq/xlPLEjfFyNYJv1n6n+1Uwo
KzdMOg+AYp/O9Fx0zSm4F64hCpzWG8x0rt6TUuMgJsH1+FRlBcnx3LECbtdpzdtG
nq9fu22AEQeM/6Wm11SVE4bgBb24ImahPDz7JeuLgEHq1dOzBQ6/7fJ7sc67OWn4
49eXKOPfk2n/Oymx8wt0ugSYNOl4TQDfRGC11WoDvfr/D06MON8yexdySenJB8d0
haCw4A97EPotY0Ct644Ng/PxbJqj6fJMd5ZU1b//nkL/vqdS4tbhNTCqLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHojdxSkEPBUd86IHgDQmdBXmf1MB8GA1UdIwQY
MBaAFK9N1lrB1tqEupuBwgngp2FzReojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjAzV1dzSFcyb1M2bTRIQ0NlQ25ZWE5GNmlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS85YWJkZTAtZGI1Yi00NTY0LWJkODUt
OGY5NmQ3MjlmMDg0LzEvcjAzV1dzSFcyb1M2bTRIQ0NlQ25ZWE5GNmlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS85YWJkZTAtZGI1Yi00NTY0LWJkODUtOGY5NmQ3MjlmMDg0
LzEvcjAzV1dzSFcyb1M2bTRIQ0NlQ25ZWE5GNmlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsdXRApkI
b/mQJtUdELFt1qwDthnZqcvxWOsePQX1Fmz2vy1IYjEoGa/ifjXhltc/rBXh4bT4
wbtHbndulTFGTzsME3ZSQBD07T3O0hzG2M7FZHQRiziaKvpg2mD7DOsm1UBhBxlC
UsTI938J37fzXdZiWgrbHd7NEBDHyziB7ycQEfmTdFSzTWLzYPyRyT92UBmtLuIa
qoDM0e+BmkVm/CK4trSzAErI9eyUF5I5SRfxx//23ngKMW19otckoZZTFHx/TShr
nZBKl1fze5rH0yJqIJ5iaee1YnNW1j8THbmmQbj8pwSjy0I4WTfonMt9d7U+l2Cs
c8rBM0RjUv43kg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:44 2025 by rpki-client