Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
File: 2lPr-vXBh42KIqk44XMqigdxTzU.mft (raw, json)
Hash identifier: u8qYIB1779wuH6v67d3d7yLLv5/EZ+6LBZ8ARKu8Epw=
Subject key identifier: 2D:72:5A:F2:04:98:C1:02:F9:A6:53:BD:BE:67:5A:10:42:F0:12:DB
Authority key identifier: DA:53:EB:FA:F5:C1:87:8D:8A:22:A9:38:E1:73:2A:8A:07:71:4F:35
Certificate issuer: /CN=da53ebfaf5c1878d8a22a938e1732a8a07714f35
Certificate serial: 0194BD175FC72FE4585823DDF54C213063F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lPr-vXBh42KIqk44XMqigdxTzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: 2lPr-vXBh42KIqk44XMqigdxTzU.crl (hash: A8msktkvXZ33Ixeap65F636ekEowsGlIdTWRZSSQ62I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5f:c7:2f:e4:58:58:23:dd:f5:4c:21:30:63:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da53ebfaf5c1878d8a22a938e1732a8a07714f35
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=2d725af20498c102f9a653bdbe675a1042f012db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e4:84:8c:af:ca:f9:54:e3:58:91:01:e2:fb:
d9:a0:9e:e2:32:a9:23:65:67:76:fc:f8:97:67:fc:
82:69:4d:21:5d:13:eb:70:91:15:7e:06:18:7c:db:
95:f2:75:a8:db:8d:f3:c1:ae:19:06:0d:8f:9b:25:
a8:9e:bc:c2:e9:cd:cf:f6:5c:b7:a7:e8:6d:45:e6:
3b:1c:c5:cc:b7:ca:c8:e8:f3:01:d8:9b:27:25:0d:
a9:a5:83:69:c9:5b:0e:3d:f8:0d:b5:30:fe:cb:9a:
48:cb:5b:e6:44:f8:f0:36:ad:da:2d:29:b0:a8:54:
ac:dd:37:a5:b0:52:e5:cf:ad:b2:37:4f:91:54:ec:
2c:b3:de:eb:ac:70:66:a0:4d:2b:f9:0f:75:0e:20:
3e:1f:31:49:31:56:f0:e0:46:50:d8:c8:7e:7f:6c:
ab:ad:6f:a5:44:83:29:d7:51:da:60:83:57:6c:86:
c8:53:06:81:ab:76:65:c8:1c:30:66:5b:32:2b:5e:
82:b4:dd:c4:27:8c:a0:93:bf:54:dc:a9:ea:7f:72:
72:ee:46:14:da:07:02:97:63:76:09:1d:5d:86:77:
da:ef:d2:b6:f7:4d:21:b3:38:f1:4c:b4:c9:2c:c1:
0b:08:95:84:cc:ab:21:2a:b1:b4:6d:66:db:a2:f1:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:72:5A:F2:04:98:C1:02:F9:A6:53:BD:BE:67:5A:10:42:F0:12:DB
X509v3 Authority Key Identifier:
keyid:DA:53:EB:FA:F5:C1:87:8D:8A:22:A9:38:E1:73:2A:8A:07:71:4F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lPr-vXBh42KIqk44XMqigdxTzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:fa:02:cc:27:a3:7f:40:cd:7c:3c:00:b5:ec:a0:4a:fd:0e:
b6:34:cb:86:46:bd:26:9b:0d:bd:5d:ea:c0:c0:e4:a6:65:b4:
06:61:ba:d4:c7:b1:b7:b6:66:5b:c3:de:f3:02:bd:01:60:b5:
07:ed:39:2d:a5:22:56:85:67:cc:e0:68:31:ed:aa:51:2a:36:
95:d5:41:57:c5:e5:da:b9:cf:da:55:78:07:a0:e8:dd:86:d6:
4f:90:eb:f3:95:2a:fb:ba:6b:99:ad:5a:9f:aa:87:dd:93:0f:
2e:3d:31:5a:c4:f1:b3:ba:b9:a5:66:02:3a:b2:00:44:dc:41:
8a:a6:80:e2:39:76:f5:75:a3:4f:58:9b:ff:3c:25:a8:8e:9e:
59:7a:9b:b2:59:9c:cb:43:32:45:6c:e8:c7:9f:77:0a:63:72:
89:d4:4f:3f:f4:d2:77:bb:f1:46:19:fb:62:ce:cb:05:cc:e2:
9f:da:57:0d:c9:fa:c9:9a:ba:79:f4:88:05:d2:16:e6:2c:f5:
2a:c6:e8:7f:fd:b1:b1:d9:ee:8c:03:cf:f3:5b:9d:5f:17:6d:
4f:b1:3f:37:da:1d:46:0a:5a:15:35:5a:67:6a:57:54:24:77:
14:98:19:60:d3:54:6b:b0:85:fd:a8:73:de:f1:77:14:e3:bf:
b4:6d:c3:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F1/HL+RYWCPd9UwhMGP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNTNlYmZhZjVjMTg3OGQ4YTIyYTkzOGUxNzMyYThhMDc3
MTRmMzUwHhcNMjUwMTMxMTYwMDEyWhcNMjUwMjAxMTYwMDEyWjAzMTEwLwYDVQQD
EygyZDcyNWFmMjA0OThjMTAyZjlhNjUzYmRiZTY3NWExMDQyZjAxMmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uSEjK/K+VTjWJEB4vvZoJ7iMqkj
ZWd2/PiXZ/yCaU0hXRPrcJEVfgYYfNuV8nWo243zwa4ZBg2PmyWonrzC6c3P9ly3
p+htReY7HMXMt8rI6PMB2JsnJQ2ppYNpyVsOPfgNtTD+y5pIy1vmRPjwNq3aLSmw
qFSs3TelsFLlz62yN0+RVOwss97rrHBmoE0r+Q91DiA+HzFJMVbw4EZQ2Mh+f2yr
rW+lRIMp11HaYINXbIbIUwaBq3ZlyBwwZlsyK16CtN3EJ4ygk79U3Knqf3Jy7kYU
2gcCl2N2CR1dhnfa79K2900hszjxTLTJLMELCJWEzKshKrG0bWbbovGFXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1yWvIEmMEC+aZTvb5nWhBC8BLbMB8GA1UdIwQY
MBaAFNpT6/r1wYeNiiKpOOFzKooHcU81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmxQci12WEJoNDJLSXFrNDRYTXFpZ2R4VHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xYzdjMGUtMjNhMS00MTQyLWJlZTgt
OTNjOWU2YjA5M2JjLzEvMmxQci12WEJoNDJLSXFrNDRYTXFpZ2R4VHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8xYzdjMGUtMjNhMS00MTQyLWJlZTgtOTNjOWU2YjA5M2Jj
LzEvMmxQci12WEJoNDJLSXFrNDRYTXFpZ2R4VHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPoCzCej
f0DNfDwAteygSv0OtjTLhka9JpsNvV3qwMDkpmW0BmG61Mext7ZmW8Pe8wK9AWC1
B+05LaUiVoVnzOBoMe2qUSo2ldVBV8Xl2rnP2lV4B6Do3YbWT5Dr85Uq+7prma1a
n6qH3ZMPLj0xWsTxs7q5pWYCOrIARNxBiqaA4jl29XWjT1ib/zwlqI6eWXqbslmc
y0MyRWzox593CmNyidRPP/TSd7vxRhn7Ys7LBczin9pXDcn6yZq6efSIBdIW5iz1
Ksbof/2xsdnujAPP81udXxdtT7E/N9odRgpaFTVaZ2pXVCR3FJgZYNNUa7CF/ahz
3vF3FOO/tG3Dvw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:15 2025 by rpki-client