Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6ff22e-853c-4bab-84cc-1aebca4b6db8/1/b20hysOH8-N4uiOkynfeyTA7qS0.mft
File: b20hysOH8-N4uiOkynfeyTA7qS0.mft (raw, json)
Hash identifier: ZMsaLvYlMQy77DcnxpcJspwqCu+TMdkVSL1T7nt8C+0=
Subject key identifier: 15:DC:3D:B5:55:77:68:3D:EC:0D:6B:85:33:7F:3E:8C:DC:67:5C:49
Authority key identifier: 6F:6D:21:CA:C3:87:F3:E3:78:BA:23:A4:CA:77:DE:C9:30:3B:A9:2D
Certificate issuer: /CN=6f6d21cac387f3e378ba23a4ca77dec9303ba92d
Certificate serial: 0194BC72D5E71EE8D88618C8F2F7402515A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b20hysOH8-N4uiOkynfeyTA7qS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6ff22e-853c-4bab-84cc-1aebca4b6db8/1/b20hysOH8-N4uiOkynfeyTA7qS0.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: b20hysOH8-N4uiOkynfeyTA7qS0.crl (hash: tusJ/V+PEL6ftn5OleqPI/CW6iMr0kIHYhnTn54DcWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d5:e7:1e:e8:d8:86:18:c8:f2:f7:40:25:15:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6d21cac387f3e378ba23a4ca77dec9303ba92d
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=15dc3db55577683dec0d6b85337f3e8cdc675c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:02:73:cf:ad:c8:a3:f6:23:4f:d4:25:c7:8e:
b8:7c:83:44:92:78:fb:d1:38:2a:e7:23:ad:1b:74:
ee:4e:40:d5:d8:fd:33:40:f2:3d:e7:41:b0:54:12:
ee:73:dd:7e:ed:ec:ca:cc:61:c1:6a:3b:66:9f:f1:
db:58:ee:c6:cb:09:74:70:9b:a2:6e:f7:96:b5:15:
95:5c:1f:b7:27:db:6d:29:d8:bb:85:35:20:2e:cd:
0d:28:cf:31:e4:a2:f1:82:34:05:fa:48:89:92:a9:
12:b6:f0:fd:3a:1d:8a:fe:72:b4:a9:9e:af:3f:26:
17:3d:5c:32:5e:2f:f9:28:ac:2a:40:71:ea:b2:f6:
a1:45:1d:fb:70:49:7b:8e:07:21:a3:fc:83:05:ee:
e7:c6:cb:2b:d1:b9:df:c4:f2:46:6e:51:d3:af:7d:
83:2a:2c:19:44:90:3e:32:6f:7c:17:7a:5e:8f:12:
c6:8c:c5:e8:02:df:00:c3:50:f7:68:ef:c2:51:65:
21:d4:89:79:40:d3:1a:cb:94:0a:de:25:c7:40:6e:
4c:e4:77:17:fd:73:f5:21:15:37:7e:be:41:e4:22:
39:06:65:6d:a0:a4:f9:0a:27:b3:ab:28:d3:4d:f4:
98:60:38:44:fc:b3:06:cd:5e:3c:d2:2a:e7:09:63:
38:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DC:3D:B5:55:77:68:3D:EC:0D:6B:85:33:7F:3E:8C:DC:67:5C:49
X509v3 Authority Key Identifier:
keyid:6F:6D:21:CA:C3:87:F3:E3:78:BA:23:A4:CA:77:DE:C9:30:3B:A9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b20hysOH8-N4uiOkynfeyTA7qS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6ff22e-853c-4bab-84cc-1aebca4b6db8/1/b20hysOH8-N4uiOkynfeyTA7qS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6ff22e-853c-4bab-84cc-1aebca4b6db8/1/b20hysOH8-N4uiOkynfeyTA7qS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f5:30:69:11:7d:0b:9d:ca:3f:5c:2c:be:53:10:72:86:cb:
76:0a:0e:51:f5:38:63:e5:32:49:aa:62:e6:c8:39:40:68:b7:
27:d3:59:38:66:b7:2f:2f:15:5f:33:32:e3:2b:d6:df:1e:4f:
4d:5b:2f:10:0d:41:a9:ba:05:04:56:0a:c8:49:bc:55:7b:4e:
0a:58:cb:87:d9:e4:01:09:50:7f:ee:2a:96:ca:a3:31:27:19:
b3:6e:60:81:5b:cf:4a:59:da:d2:ed:7b:c4:f0:dd:e8:fe:e8:
97:e3:86:96:b1:0b:a5:7b:9f:c2:28:06:c8:30:6c:70:39:87:
64:f5:9f:99:2e:f9:cf:81:94:4b:9e:74:87:8b:8e:17:ca:c1:
93:e2:05:e5:9e:21:cc:5f:04:19:de:32:d8:3a:81:ba:47:d3:
8c:b4:ee:8b:e9:b2:3d:4d:71:54:2d:59:a3:01:c2:42:f2:84:
f0:3e:8c:99:14:da:6f:cd:da:59:13:ba:73:25:ee:99:27:29:
9e:b4:58:a4:e2:e8:a6:a2:9c:45:fe:e0:4a:ed:62:d7:e8:02:
e9:49:0f:ab:f9:8f:4d:6f:74:fe:1d:c6:fc:85:93:c8:a2:71:
94:28:ba:7a:17:e4:93:e1:66:a6:95:d7:f1:23:d0:d9:54:ea:
5e:ae:45:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ctXnHujYhhjI8vdAJRWjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNmQyMWNhYzM4N2YzZTM3OGJhMjNhNGNhNzdkZWM5MzAz
YmE5MmQwHhcNMjUwMTMxMTMwMDI5WhcNMjUwMjAxMTMwMDI5WjAzMTEwLwYDVQQD
EygxNWRjM2RiNTU1Nzc2ODNkZWMwZDZiODUzMzdmM2U4Y2RjNjc1YzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gJzz63Io/YjT9Qlx464fINEknj7
0Tgq5yOtG3TuTkDV2P0zQPI950GwVBLuc91+7ezKzGHBajtmn/HbWO7Gywl0cJui
bveWtRWVXB+3J9ttKdi7hTUgLs0NKM8x5KLxgjQF+kiJkqkStvD9Oh2K/nK0qZ6v
PyYXPVwyXi/5KKwqQHHqsvahRR37cEl7jgcho/yDBe7nxssr0bnfxPJGblHTr32D
KiwZRJA+Mm98F3pejxLGjMXoAt8Aw1D3aO/CUWUh1Il5QNMay5QK3iXHQG5M5HcX
/XP1IRU3fr5B5CI5BmVtoKT5CiezqyjTTfSYYDhE/LMGzV480irnCWM4/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXcPbVVd2g97A1rhTN/PozcZ1xJMB8GA1UdIwQY
MBaAFG9tIcrDh/PjeLojpMp33skwO6ktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjIwaHlzT0g4LU40dWlPa3luZmV5VEE3cVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82ZmYyMmUtODUzYy00YmFiLTg0Y2Mt
MWFlYmNhNGI2ZGI4LzEvYjIwaHlzT0g4LU40dWlPa3luZmV5VEE3cVMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi82ZmYyMmUtODUzYy00YmFiLTg0Y2MtMWFlYmNhNGI2ZGI4
LzEvYjIwaHlzT0g4LU40dWlPa3luZmV5VEE3cVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafUwaRF9
C53KP1wsvlMQcobLdgoOUfU4Y+UySapi5sg5QGi3J9NZOGa3Ly8VXzMy4yvW3x5P
TVsvEA1BqboFBFYKyEm8VXtOCljLh9nkAQlQf+4qlsqjMScZs25ggVvPSlna0u17
xPDd6P7ol+OGlrELpXufwigGyDBscDmHZPWfmS75z4GUS550h4uOF8rBk+IF5Z4h
zF8EGd4y2DqBukfTjLTui+myPU1xVC1ZowHCQvKE8D6MmRTab83aWRO6cyXumScp
nrRYpOLopqKcRf7gSu1i1+gC6UkPq/mPTW90/h3G/IWTyKJxlCi6ehfkk+FmppXX
8SPQ2VTqXq5Fig==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:26 2025 by rpki-client