Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
File: tDtWqlNz6PXng0dnQkDv98KCctw.mft (raw, json)
Hash identifier: sqY8iwD44SFpis0oCxsHwE0JBVOvyaG3IUwXIG3bqhQ=
Subject key identifier: C5:C7:C7:8D:E0:76:CA:8C:00:C8:29:8A:FF:69:FA:97:39:E0:89:E9
Authority key identifier: B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
Certificate issuer: /CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Certificate serial: 0194BBCE25A8022EB220A1D51E281DF2AC90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
Manifest number: 0D62
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: tDtWqlNz6PXng0dnQkDv98KCctw.crl (hash: yr/0nGg1SLeqxtBXdssryaUUIOa1e4SBA2Uph2yEl/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:25:a8:02:2e:b2:20:a1:d5:1e:28:1d:f2:ac:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=c5c7c78de076ca8c00c8298aff69fa9739e089e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:10:06:e5:70:9a:cc:8e:b7:5e:14:0a:9d:
26:39:3b:4f:dc:e2:0a:5d:5a:0c:6e:dc:c8:f5:7a:
9a:c9:6f:f2:f6:86:f0:1a:20:fb:58:0c:74:be:e8:
81:43:50:d9:3f:62:e7:e9:8d:b0:a5:a7:c5:75:79:
89:86:9c:1c:56:b6:4e:ab:9a:28:de:d1:89:c9:f8:
25:34:a6:84:26:66:f0:4b:c0:36:e4:60:86:4b:f6:
e6:bb:58:cb:d9:d1:73:a7:6a:c5:06:b8:56:58:2f:
16:0e:56:9e:fd:82:a3:2b:eb:07:e5:7c:77:55:e4:
c5:8b:16:8d:72:02:28:53:a9:7e:00:78:db:a0:3c:
41:d6:c0:c0:17:ec:41:3e:8c:23:2b:54:75:ac:3b:
a4:eb:41:56:4d:7a:f8:be:77:e7:65:31:eb:1b:40:
05:b6:d5:15:2e:92:f6:2f:21:a1:c3:67:41:7f:f6:
7e:72:46:18:42:b4:39:7a:f9:02:8e:d8:b8:2b:67:
e4:26:d6:e7:33:b7:ca:74:cd:ad:f0:5b:ce:37:bb:
8d:b8:7c:e8:a5:67:f5:64:71:db:1c:c7:fe:8a:d3:
77:41:a1:8e:59:3e:5a:31:75:66:d5:89:62:4d:40:
ab:da:b0:4d:82:0d:99:53:6d:e5:26:e3:cf:7d:5e:
ab:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C7:C7:8D:E0:76:CA:8C:00:C8:29:8A:FF:69:FA:97:39:E0:89:E9
X509v3 Authority Key Identifier:
keyid:B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:26:95:cd:8b:c3:6c:30:cf:2d:5c:35:c7:26:f0:69:90:4a:
55:64:2e:9f:e3:6f:f9:c8:b6:bd:e4:18:51:7e:42:ec:c3:51:
07:23:1d:e8:c1:2f:bb:9d:0b:b0:a6:6d:ce:98:21:dc:06:2a:
37:12:20:ff:f4:6c:7b:b4:86:11:8e:3e:7a:de:f1:b0:d5:f5:
1b:77:ec:f4:80:56:70:2e:be:d2:60:90:13:e2:93:a2:3d:9e:
02:32:04:42:52:cc:93:f7:f2:d8:83:de:cb:bd:58:a7:4d:16:
05:a4:47:b2:42:f7:2f:5d:cd:a8:d4:ca:4e:1e:3a:80:f9:8d:
ed:81:9d:85:b5:eb:d7:ca:2a:cb:54:15:d9:9b:83:a9:af:ea:
2b:8d:34:6f:ca:d4:68:8f:93:22:a3:a4:58:05:fc:e8:17:29:
d5:cf:d6:4a:8e:4b:cd:86:b7:fc:7d:4a:13:eb:2f:30:7b:db:
3b:3b:e1:fc:57:79:09:8f:5a:08:e9:0d:b1:aa:7f:4c:76:d5:
36:3a:28:7a:08:d5:f3:51:c9:24:23:7a:02:8a:36:7c:eb:17:
6f:d8:81:f5:b1:f7:e5:56:5b:f1:5a:4e:c0:f6:c5:6c:7a:ba:
0f:92:7e:c9:21:2d:be:89:ff:9b:d9:e7:cc:4d:bc:24:df:46:
ca:9c:34:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ziWoAi6yIKHVHigd8qyQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0M2I1NmFhNTM3M2U4ZjVlNzgzNDc2NzQyNDBlZmY3YzI4
MjcyZGMwHhcNMjUwMTMxMTAwMDM2WhcNMjUwMjAxMTAwMDM2WjAzMTEwLwYDVQQD
EyhjNWM3Yzc4ZGUwNzZjYThjMDBjODI5OGFmZjY5ZmE5NzM5ZTA4OWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvMQBuVwmsyOt14UCp0mOTtP3OIK
XVoMbtzI9XqayW/y9obwGiD7WAx0vuiBQ1DZP2Ln6Y2wpafFdXmJhpwcVrZOq5oo
3tGJyfglNKaEJmbwS8A25GCGS/bmu1jL2dFzp2rFBrhWWC8WDlae/YKjK+sH5Xx3
VeTFixaNcgIoU6l+AHjboDxB1sDAF+xBPowjK1R1rDuk60FWTXr4vnfnZTHrG0AF
ttUVLpL2LyGhw2dBf/Z+ckYYQrQ5evkCjti4K2fkJtbnM7fKdM2t8FvON7uNuHzo
pWf1ZHHbHMf+itN3QaGOWT5aMXVm1YliTUCr2rBNgg2ZU23lJuPPfV6rdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXHx43gdsqMAMgpiv9p+pc54InpMB8GA1UdIwQY
MBaAFLQ7VqpTc+j154NHZ0JA7/fCgnLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdER0V3FsTno2UFhuZzBkblFrRHY5OEtDY3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNGFlZGYtY2FiNS00MTk5LWEyMDct
NWNmNjc0OGQ4Nzg0LzEvdER0V3FsTno2UFhuZzBkblFrRHY5OEtDY3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNGFlZGYtY2FiNS00MTk5LWEyMDctNWNmNjc0OGQ4Nzg0
LzEvdER0V3FsTno2UFhuZzBkblFrRHY5OEtDY3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCaVzYvD
bDDPLVw1xybwaZBKVWQun+Nv+ci2veQYUX5C7MNRByMd6MEvu50LsKZtzpgh3AYq
NxIg//Rse7SGEY4+et7xsNX1G3fs9IBWcC6+0mCQE+KToj2eAjIEQlLMk/fy2IPe
y71Yp00WBaRHskL3L13NqNTKTh46gPmN7YGdhbXr18oqy1QV2ZuDqa/qK400b8rU
aI+TIqOkWAX86Bcp1c/WSo5LzYa3/H1KE+svMHvbOzvh/Fd5CY9aCOkNsap/THbV
NjooegjV81HJJCN6Aoo2fOsXb9iB9bH35VZb8VpOwPbFbHq6D5J+ySEtvon/m9nn
zE28JN9Gypw02Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:23 2025 by rpki-client