Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
File: frYDcECoYM2RunejcY7VgMrfXdg.mft (raw, json)
Hash identifier: MCLaAkqDuF9/UVIFNeyznL/aaknXszFnJ7UefgeRd/E=
Subject key identifier: 27:67:F2:94:BF:96:9F:3B:79:4E:66:C7:B6:93:5D:34:0F:4C:60:1E
Authority key identifier: 7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8
Certificate issuer: /CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8
Certificate serial: 0194BCAA51F100D74E6DDFE02626D831028E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
Manifest number: 040C
Signing time: Fri 31 Jan 2025 14:01:06 +0000
Manifest this update: Fri 31 Jan 2025 14:01:06 +0000
Manifest next update: Sat 01 Feb 2025 14:01:06 +0000
Files and hashes: 1: frYDcECoYM2RunejcY7VgMrfXdg.crl (hash: xDN+wIqLMg0eD2H+ItjQdw6pMisBAzNirSmXh26xYV0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:51:f1:00:d7:4e:6d:df:e0:26:26:d8:31:02:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8
Validity
Not Before: Jan 31 14:01:06 2025 GMT
Not After : Feb 1 14:01:06 2025 GMT
Subject: CN=2767f294bf969f3b794e66c7b6935d340f4c601e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9e:16:cd:5a:27:16:5e:d0:08:d3:ce:81:21:
eb:c4:23:3c:59:df:b9:d5:95:89:ea:42:15:4e:6c:
e6:a0:5c:fb:f7:6a:5b:e1:84:5e:f9:93:52:a6:65:
b7:31:60:17:ec:c5:8e:d8:e2:9d:a3:99:57:c4:3f:
32:04:e1:f0:c8:0b:34:81:8c:9a:c6:76:f7:fe:0f:
85:0f:11:01:3b:21:38:81:64:61:10:93:c4:af:e0:
86:b8:6f:10:b6:81:58:cf:7f:81:9f:81:54:01:0e:
5c:98:83:ba:be:0f:de:0a:3d:42:01:d7:6c:f3:eb:
e9:f0:1c:cc:f1:ee:ea:07:6f:4f:73:88:50:65:bb:
d5:03:19:39:11:1d:78:5e:6f:16:ce:65:10:7c:e8:
00:8e:3f:a9:a9:e7:9f:18:7f:2c:b6:69:a5:ec:5c:
c2:8c:84:21:6e:e6:4c:7b:2c:19:da:83:ec:08:85:
9e:ba:c7:0a:d2:b3:ee:86:12:d3:d6:19:bf:83:b1:
5c:27:0f:79:18:d7:a5:75:6c:8b:57:16:5b:73:9c:
5c:a5:c2:ae:e2:2e:32:92:65:14:17:ed:a5:da:b7:
f3:bd:28:f0:a5:d6:07:00:2c:bf:f2:52:d1:ce:22:
17:ef:90:4b:28:ab:f7:2e:1a:96:5e:88:74:20:9d:
fb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:67:F2:94:BF:96:9F:3B:79:4E:66:C7:B6:93:5D:34:0F:4C:60:1E
X509v3 Authority Key Identifier:
keyid:7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:64:88:1c:25:7d:78:98:6b:00:05:90:a3:ca:1a:b3:fb:00:
1f:4a:ff:49:c3:cb:e2:22:d3:d6:25:96:53:a6:db:2b:79:90:
8f:b3:99:be:84:43:cc:03:96:93:2b:42:4c:36:3b:e6:af:11:
b8:94:41:4e:68:4a:8d:5d:55:7b:ce:c3:71:56:0b:86:f3:ba:
bb:f7:82:73:a7:ae:68:4a:bc:8e:84:8c:7f:59:17:10:a2:d0:
71:76:f9:78:2d:a9:12:92:f3:f0:65:9c:2f:43:9f:fd:db:59:
16:7b:6e:6f:11:6b:7c:bc:bc:a2:79:07:e8:1e:b1:c0:39:83:
3f:2c:4f:8f:6d:74:1e:84:0b:bc:1d:df:4e:a5:9d:da:ef:51:
5a:39:fd:05:81:15:18:67:e0:19:96:b2:7d:3c:f5:05:62:43:
61:62:df:bf:b6:04:25:e5:e4:75:bd:b8:8a:5c:c0:04:cc:3e:
3d:75:16:81:2f:cb:b4:e0:9b:ac:69:f1:6c:3c:c2:1b:94:4a:
b8:9f:7e:e2:aa:a8:24:d8:98:38:93:ca:13:b2:51:02:64:d9:
8d:27:f6:3a:88:ac:e5:c2:c2:e7:5c:76:ec:63:67:10:12:7f:
2b:b4:a1:91:22:22:57:04:71:71:2c:01:be:96:13:c2:9b:a9:
a4:a6:f0:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qlHxANdObd/gJibYMQKOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYjYwMzcwNDBhODYwY2Q5MWJhNzdhMzcxOGVkNTgwY2Fk
ZjVkZDgwHhcNMjUwMTMxMTQwMTA2WhcNMjUwMjAxMTQwMTA2WjAzMTEwLwYDVQQD
EygyNzY3ZjI5NGJmOTY5ZjNiNzk0ZTY2YzdiNjkzNWQzNDBmNGM2MDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ4WzVonFl7QCNPOgSHrxCM8Wd+5
1ZWJ6kIVTmzmoFz792pb4YRe+ZNSpmW3MWAX7MWO2OKdo5lXxD8yBOHwyAs0gYya
xnb3/g+FDxEBOyE4gWRhEJPEr+CGuG8QtoFYz3+Bn4FUAQ5cmIO6vg/eCj1CAdds
8+vp8BzM8e7qB29Pc4hQZbvVAxk5ER14Xm8WzmUQfOgAjj+pqeefGH8stmml7FzC
jIQhbuZMeywZ2oPsCIWeuscK0rPuhhLT1hm/g7FcJw95GNeldWyLVxZbc5xcpcKu
4i4ykmUUF+2l2rfzvSjwpdYHACy/8lLRziIX75BLKKv3LhqWXoh0IJ37qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdn8pS/lp87eU5mx7aTXTQPTGAeMB8GA1UdIwQY
MBaAFH62A3BAqGDNkbp3o3GO1YDK313YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnJZRGNFQ29ZTTJSdW5lamNZN1ZnTXJmWGRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iZjk5OTktMjM0MS00YWNmLTg0ZTkt
Yjg4NjZlOTQxOTYzLzEvZnJZRGNFQ29ZTTJSdW5lamNZN1ZnTXJmWGRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9iZjk5OTktMjM0MS00YWNmLTg0ZTktYjg4NjZlOTQxOTYz
LzEvZnJZRGNFQ29ZTTJSdW5lamNZN1ZnTXJmWGRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGSIHCV9
eJhrAAWQo8oas/sAH0r/ScPL4iLT1iWWU6bbK3mQj7OZvoRDzAOWkytCTDY75q8R
uJRBTmhKjV1Ve87DcVYLhvO6u/eCc6euaEq8joSMf1kXEKLQcXb5eC2pEpLz8GWc
L0Of/dtZFntubxFrfLy8onkH6B6xwDmDPyxPj210HoQLvB3fTqWd2u9RWjn9BYEV
GGfgGZayfTz1BWJDYWLfv7YEJeXkdb24ilzABMw+PXUWgS/LtOCbrGnxbDzCG5RK
uJ9+4qqoJNiYOJPKE7JRAmTZjSf2Oois5cLC51x27GNnEBJ/K7ShkSIiVwRxcSwB
vpYTwpuppKbwrw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:17 2025 by rpki-client