Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
File: d11030Q8uAUXzkFQ3OImYpQPHXw.mft (raw, json)
Hash identifier: 2svBsnGM+xMSJ8gAz/SVGhzuUT+wVu6Vlj7e08o99Jo=
Subject key identifier: 12:AA:CD:B3:0C:1C:65:36:B3:5D:85:9C:CB:FC:AA:5A:62:07:C3:12
Authority key identifier: 77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C
Certificate issuer: /CN=775d74df443cb80517ce4150dce22662940f1d7c
Certificate serial: 0194BC3C3781B05024EF5EA7F7B67DAD97E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
Manifest number: 0865
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: d11030Q8uAUXzkFQ3OImYpQPHXw.crl (hash: F+tC8k06qVT3/jYRDu46YSu5RyVnbMMznfen0/xVbXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:37:81:b0:50:24:ef:5e:a7:f7:b6:7d:ad:97:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775d74df443cb80517ce4150dce22662940f1d7c
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=12aacdb30c1c6536b35d859ccbfcaa5a6207c312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e6:5a:c0:42:73:8f:c9:f0:0c:cf:23:99:d4:
b4:4d:0d:48:98:b6:38:e5:84:58:7c:78:1e:d9:03:
de:a1:66:57:58:0b:e6:39:a6:04:ed:1b:e1:35:9e:
be:3c:8c:a8:3b:71:f3:cc:db:56:f3:d2:9d:a2:da:
a2:f0:f5:9a:dc:55:44:ee:57:56:89:94:5c:c1:09:
af:e9:9f:9b:5f:f6:54:1b:72:ab:44:54:28:cf:23:
fd:f5:93:bd:8f:79:d1:38:54:33:3d:87:d7:16:a1:
53:0a:9f:30:5c:05:89:1b:59:aa:6f:69:66:56:14:
6f:c3:df:b5:2a:3d:f5:50:c4:39:2e:2a:e5:ed:91:
77:50:ad:82:81:b7:fd:76:d7:bd:c8:84:36:60:fd:
20:4b:93:c0:ef:3b:3b:0d:b8:20:8f:86:0d:2b:0b:
6b:da:08:fc:a8:08:02:cf:83:ea:3a:44:26:e4:55:
3f:5b:a0:65:59:90:fb:7c:9b:d7:53:6e:3c:ef:4b:
c4:7f:cf:30:c1:3a:32:0d:1e:0d:d6:5c:c0:a4:f6:
53:3d:7c:5c:a7:cd:bf:26:7d:bd:1a:82:a6:0e:56:
cc:24:bc:e3:c0:84:1a:27:05:dc:f1:df:0a:52:18:
7d:b9:3a:dc:fe:13:9c:ac:d4:c3:13:f8:38:45:f1:
f0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AA:CD:B3:0C:1C:65:36:B3:5D:85:9C:CB:FC:AA:5A:62:07:C3:12
X509v3 Authority Key Identifier:
keyid:77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b3:2b:b1:ec:b6:6b:97:56:54:19:ee:74:90:37:15:ed:18:
0a:84:d6:50:1a:96:95:f9:85:b4:58:17:0b:f6:95:93:22:ca:
5e:8c:1a:05:23:3d:25:03:03:cd:12:20:65:a5:01:8a:38:a4:
17:8e:58:4f:ec:1a:4b:47:3d:f6:d2:fc:07:75:b1:b7:b8:b5:
f5:04:83:df:21:94:27:5d:f5:ee:54:a4:6e:95:f0:b3:9b:8a:
46:c1:f5:cf:7e:97:36:7e:8c:7a:45:5a:fb:55:f2:62:fd:48:
dc:55:16:21:8f:02:5f:2e:d5:fd:45:02:70:43:c7:02:c9:b4:
31:5e:08:79:cc:99:63:14:ab:f1:f6:20:97:75:01:e8:08:9a:
9f:4f:59:7e:81:12:da:f7:5b:f8:6c:5f:95:db:05:c6:2f:99:
1f:70:37:68:53:69:0c:d3:13:88:bb:67:60:3c:b6:89:42:70:
72:58:9f:66:ec:7f:0b:b4:c7:b5:21:4f:2c:f3:c0:8c:c6:01:
f7:da:3d:eb:17:77:7a:99:fb:9b:54:bb:af:70:2e:5b:d5:00:
69:2f:0e:ca:86:9a:b1:c9:82:04:19:22:82:35:1d:16:27:03:
28:5f:c6:d1:34:50:9f:ae:03:49:fa:0d:5c:ee:f6:a3:81:fa:
16:45:87:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDeBsFAk716n97Z9rZfpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NWQ3NGRmNDQzY2I4MDUxN2NlNDE1MGRjZTIyNjYyOTQw
ZjFkN2MwHhcNMjUwMTMxMTIwMDUwWhcNMjUwMjAxMTIwMDUwWjAzMTEwLwYDVQQD
EygxMmFhY2RiMzBjMWM2NTM2YjM1ZDg1OWNjYmZjYWE1YTYyMDdjMzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eZawEJzj8nwDM8jmdS0TQ1ImLY4
5YRYfHge2QPeoWZXWAvmOaYE7RvhNZ6+PIyoO3HzzNtW89Kdotqi8PWa3FVE7ldW
iZRcwQmv6Z+bX/ZUG3KrRFQozyP99ZO9j3nROFQzPYfXFqFTCp8wXAWJG1mqb2lm
VhRvw9+1Kj31UMQ5Lirl7ZF3UK2Cgbf9dte9yIQ2YP0gS5PA7zs7Dbggj4YNKwtr
2gj8qAgCz4PqOkQm5FU/W6BlWZD7fJvXU24870vEf88wwToyDR4N1lzApPZTPXxc
p82/Jn29GoKmDlbMJLzjwIQaJwXc8d8KUhh9uTrc/hOcrNTDE/g4RfHwpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKqzbMMHGU2s12FnMv8qlpiB8MSMB8GA1UdIwQY
MBaAFHdddN9EPLgFF85BUNziJmKUDx18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDExMDMwUTh1QVVYemtGUTNPSW1ZcFFQSFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xYzc3YjctYjgyYS00ZGZkLWI2YjUt
NmY3NTg2MTk4MzdmLzEvZDExMDMwUTh1QVVYemtGUTNPSW1ZcFFQSFh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8xYzc3YjctYjgyYS00ZGZkLWI2YjUtNmY3NTg2MTk4Mzdm
LzEvZDExMDMwUTh1QVVYemtGUTNPSW1ZcFFQSFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELMrsey2
a5dWVBnudJA3Fe0YCoTWUBqWlfmFtFgXC/aVkyLKXowaBSM9JQMDzRIgZaUBijik
F45YT+waS0c99tL8B3Wxt7i19QSD3yGUJ1317lSkbpXws5uKRsH1z36XNn6MekVa
+1XyYv1I3FUWIY8CXy7V/UUCcEPHAsm0MV4IecyZYxSr8fYgl3UB6Aian09ZfoES
2vdb+GxfldsFxi+ZH3A3aFNpDNMTiLtnYDy2iUJwclifZux/C7THtSFPLPPAjMYB
99o96xd3epn7m1S7r3AuW9UAaS8OyoaascmCBBkigjUdFicDKF/G0TRQn64DSfoN
XO72o4H6FkWHzg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:40 2025 by rpki-client