Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/a58a1e-f733-4d9e-88f6-3414367b2d7e/1/h6xJPPKny2pLNPTYtva3eyqVXpc.mft
File: h6xJPPKny2pLNPTYtva3eyqVXpc.mft (raw, json)
Hash identifier: psP1WptqxFZjW+YBOC046sCznHcZN806SglsILogQrs=
Subject key identifier: EE:C0:D3:EA:37:5B:77:39:A3:C2:A4:09:0A:CF:07:11:88:DB:DB:50
Authority key identifier: 87:AC:49:3C:F2:A7:CB:6A:4B:34:F4:D8:B6:F6:B7:7B:2A:95:5E:97
Certificate issuer: /CN=87ac493cf2a7cb6a4b34f4d8b6f6b77b2a955e97
Certificate serial: 0194BD17F4981DD06E8A9D1E3DC7B7AB9261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6xJPPKny2pLNPTYtva3eyqVXpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/a58a1e-f733-4d9e-88f6-3414367b2d7e/1/h6xJPPKny2pLNPTYtva3eyqVXpc.mft
Manifest number: 096F
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: h6xJPPKny2pLNPTYtva3eyqVXpc.crl (hash: Fgmo6gkQJPt05YVy7DDHdMmiI0UbsZAjTaHoA/WOiCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f4:98:1d:d0:6e:8a:9d:1e:3d:c7:b7:ab:92:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ac493cf2a7cb6a4b34f4d8b6f6b77b2a955e97
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=eec0d3ea375b7739a3c2a4090acf071188dbdb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:cc:ff:08:ea:21:15:42:9d:2c:1b:7a:17:
f7:9b:b6:54:05:4b:5c:04:8a:61:01:0c:9e:2f:0a:
b4:98:b0:e3:6f:4d:b1:96:16:ad:a2:90:18:4a:38:
d3:ea:fd:d4:8e:ef:6c:03:12:98:68:d3:07:18:b8:
77:fc:b0:d5:56:a0:3a:16:e9:66:a5:2d:15:96:63:
ef:aa:73:60:d0:c7:0b:1e:b2:c7:76:2f:2b:65:6f:
2f:28:a8:a0:ff:35:0e:ea:99:e5:8d:5a:d4:01:08:
fa:3c:35:5c:f1:42:47:34:5a:a5:1d:c1:5f:67:09:
ad:1e:7d:df:68:0c:78:02:10:6d:03:3c:3e:4d:5d:
79:26:35:ee:af:ca:0a:eb:8a:0f:0c:81:68:ff:7a:
7d:73:9f:d8:92:27:51:fe:b7:c3:42:08:25:bd:ec:
43:c3:40:3f:8b:b0:23:e2:0a:31:9d:0c:7c:a8:83:
2d:72:cf:74:68:b1:c6:29:9e:7e:07:b1:58:05:da:
99:e2:15:45:37:0c:4b:54:da:ba:cc:44:3b:65:8d:
c7:0c:66:f3:59:5c:99:9f:98:3f:93:c0:6f:9b:da:
ae:4f:7f:a8:e5:7d:81:94:36:b0:01:32:a6:b9:b9:
e3:2b:7d:ae:4e:e5:84:81:2e:be:51:dd:74:9b:d3:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C0:D3:EA:37:5B:77:39:A3:C2:A4:09:0A:CF:07:11:88:DB:DB:50
X509v3 Authority Key Identifier:
keyid:87:AC:49:3C:F2:A7:CB:6A:4B:34:F4:D8:B6:F6:B7:7B:2A:95:5E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6xJPPKny2pLNPTYtva3eyqVXpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a58a1e-f733-4d9e-88f6-3414367b2d7e/1/h6xJPPKny2pLNPTYtva3eyqVXpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a58a1e-f733-4d9e-88f6-3414367b2d7e/1/h6xJPPKny2pLNPTYtva3eyqVXpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c7:ec:76:f7:de:1f:5e:83:3d:ae:b6:71:2d:10:fc:c5:94:
74:92:87:e9:00:38:01:7b:fe:b4:32:ce:35:88:c8:0c:a4:46:
1a:7e:62:71:67:05:ed:1a:a5:2a:49:bf:d0:c0:a6:61:e8:d5:
34:21:a3:5a:9f:4a:82:25:60:f2:7b:0f:b2:d2:27:da:6e:17:
13:48:56:79:8f:cc:fd:a8:3d:63:be:ae:7d:62:5b:80:55:de:
9e:ec:93:62:d6:f9:a8:2f:7c:58:5d:8e:94:86:50:89:e2:a8:
98:d8:df:39:09:e9:bf:31:67:5d:98:60:0c:a3:f3:d4:bf:dc:
3b:d9:91:02:8c:fe:5e:36:f4:28:f9:43:2a:9d:a9:93:ab:80:
46:2e:20:e8:b5:e8:39:d1:0e:d9:5b:02:8d:e1:74:79:aa:2f:
c2:6b:d4:81:72:40:f1:93:58:f8:60:90:db:45:bc:c8:ed:b6:
b8:0c:cd:e1:8f:a5:41:b8:00:04:87:27:e1:74:49:86:01:c1:
0a:fe:05:b4:7b:f7:cf:b7:88:0c:9c:5e:bc:56:a7:19:18:b6:
2d:1e:51:f1:7d:b1:54:88:19:b3:fd:00:cc:21:9c:ed:64:e1:
69:82:4c:d9:96:dc:c5:4a:ac:ee:c9:44:30:79:66:ef:00:d2:
55:e2:32:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/SYHdBuip0ePce3q5JhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YWM0OTNjZjJhN2NiNmE0YjM0ZjRkOGI2ZjZiNzdiMmE5
NTVlOTcwHhcNMjUwMTMxMTYwMDUxWhcNMjUwMjAxMTYwMDUxWjAzMTEwLwYDVQQD
EyhlZWMwZDNlYTM3NWI3NzM5YTNjMmE0MDkwYWNmMDcxMTg4ZGJkYjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIvM/wjqIRVCnSwbehf3m7ZUBUtc
BIphAQyeLwq0mLDjb02xlhatopAYSjjT6v3Uju9sAxKYaNMHGLh3/LDVVqA6Fulm
pS0VlmPvqnNg0McLHrLHdi8rZW8vKKig/zUO6pnljVrUAQj6PDVc8UJHNFqlHcFf
ZwmtHn3faAx4AhBtAzw+TV15JjXur8oK64oPDIFo/3p9c5/YkidR/rfDQgglvexD
w0A/i7Aj4goxnQx8qIMtcs90aLHGKZ5+B7FYBdqZ4hVFNwxLVNq6zEQ7ZY3HDGbz
WVyZn5g/k8Bvm9quT3+o5X2BlDawATKmubnjK32uTuWEgS6+Ud10m9OunwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7A0+o3W3c5o8KkCQrPBxGI29tQMB8GA1UdIwQY
MBaAFIesSTzyp8tqSzT02Lb2t3sqlV6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDZ4SlBQS255MnBMTlBUWXR2YTNleXFWWHBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9hNThhMWUtZjczMy00ZDllLTg4ZjYt
MzQxNDM2N2IyZDdlLzEvaDZ4SlBQS255MnBMTlBUWXR2YTNleXFWWHBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9hNThhMWUtZjczMy00ZDllLTg4ZjYtMzQxNDM2N2IyZDdl
LzEvaDZ4SlBQS255MnBMTlBUWXR2YTNleXFWWHBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8fsdvfe
H16DPa62cS0Q/MWUdJKH6QA4AXv+tDLONYjIDKRGGn5icWcF7RqlKkm/0MCmYejV
NCGjWp9KgiVg8nsPstIn2m4XE0hWeY/M/ag9Y76ufWJbgFXenuyTYtb5qC98WF2O
lIZQieKomNjfOQnpvzFnXZhgDKPz1L/cO9mRAoz+Xjb0KPlDKp2pk6uARi4g6LXo
OdEO2VsCjeF0eaovwmvUgXJA8ZNY+GCQ20W8yO22uAzN4Y+lQbgABIcn4XRJhgHB
Cv4FtHv3z7eIDJxevFanGRi2LR5R8X2xVIgZs/0AzCGc7WThaYJM2ZbcxUqs7slE
MHlm7wDSVeIyTA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:27 2025 by rpki-client