Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
File: 4V293KWBZpetEkXADKt2ryHsLjs.mft (raw, json)
Hash identifier: GqiHSIy9jjJKWUfeRepbbkWZnf7U4VoKUkhy7F77OX4=
Subject key identifier: 19:07:DC:34:AD:AF:BE:46:4F:8A:4C:D0:89:90:6B:2C:2D:20:D5:B5
Authority key identifier: E1:5D:BD:DC:A5:81:66:97:AD:12:45:C0:0C:AB:76:AF:21:EC:2E:3B
Certificate issuer: /CN=e15dbddca5816697ad1245c00cab76af21ec2e3b
Certificate serial: 0194BC3C12DB9CDEEBDAABAE767AB129272D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4V293KWBZpetEkXADKt2ryHsLjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: 4V293KWBZpetEkXADKt2ryHsLjs.crl (hash: 2iP7hOpbNwPC/vYHZJ8SU8Lwx31mdkbvvSgNAqQBr/w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:12:db:9c:de:eb:da:ab:ae:76:7a:b1:29:27:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15dbddca5816697ad1245c00cab76af21ec2e3b
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=1907dc34adafbe464f8a4cd089906b2c2d20d5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ff:e2:2f:84:8d:4b:15:50:83:7f:0e:d7:2e:
a6:09:6c:df:c5:17:36:73:28:53:b1:16:8c:a5:0e:
a4:48:98:11:c7:4d:85:79:97:8e:3a:83:07:d7:28:
d9:4c:9d:66:5b:6f:73:d4:cb:49:9d:b5:a9:3b:3b:
d1:d0:24:2d:ba:c4:50:6f:9b:76:96:59:b6:59:1a:
8e:f0:54:28:95:57:c6:69:d8:41:19:23:c2:d5:73:
ac:e0:ba:62:31:2e:c3:ee:7e:30:1e:bc:d4:5a:17:
8c:e1:0b:56:1e:9f:21:78:1f:5c:43:9d:78:4e:b5:
a4:40:01:eb:c0:87:7d:96:50:15:39:a5:c5:57:54:
85:ec:6b:4c:cc:48:b7:e5:29:4e:a0:ca:cd:47:28:
90:05:0d:4c:d2:f3:c0:64:11:5b:29:57:c8:24:c0:
9a:70:06:81:5b:4b:ec:c7:06:f9:35:6a:96:52:64:
5e:06:12:e8:80:bb:6f:1c:39:b2:d9:ea:ae:43:69:
65:ae:75:fc:82:7c:4d:97:c0:98:c0:72:fb:f9:1c:
7c:23:52:d0:5e:af:85:96:2a:4b:f2:01:5e:c7:8e:
70:79:fc:cb:a5:65:d4:69:ea:89:13:4f:78:e0:85:
97:0a:d6:1b:46:d7:65:f8:29:07:da:4e:ad:2d:dc:
e6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:07:DC:34:AD:AF:BE:46:4F:8A:4C:D0:89:90:6B:2C:2D:20:D5:B5
X509v3 Authority Key Identifier:
keyid:E1:5D:BD:DC:A5:81:66:97:AD:12:45:C0:0C:AB:76:AF:21:EC:2E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4V293KWBZpetEkXADKt2ryHsLjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d7:2d:c1:4d:ce:f6:6c:31:35:92:69:c8:28:81:b8:3f:0a:
e8:5e:45:c5:a3:69:0a:14:44:2a:ba:d7:cb:d4:8c:76:40:27:
c2:bc:1d:09:93:22:2d:3c:7a:85:5a:1f:8f:45:75:b8:89:7f:
15:2c:e2:38:74:dc:56:f3:e1:c3:d7:6c:14:80:b5:4e:b1:89:
f2:28:e4:3e:ee:49:f9:ac:77:c2:72:da:b7:0c:1a:09:04:dc:
52:6c:4f:65:47:d8:3d:9e:48:64:70:7e:6f:3f:0a:06:c4:32:
3d:e7:d1:ad:94:a3:94:ca:74:7d:02:2d:7e:e7:c5:3a:6e:b5:
7a:25:87:41:de:4c:64:45:0a:f7:ac:82:b6:12:2d:77:23:73:
22:7f:eb:e5:19:2e:c6:5c:e3:c8:51:b0:56:2d:17:71:4a:53:
89:67:64:9e:e7:b3:a4:5b:84:5c:47:a5:d4:04:4a:8d:61:01:
d5:59:c1:f6:d8:a4:52:00:f0:b5:25:09:b5:3c:69:72:47:b2:
df:0c:e2:39:8c:ed:03:13:76:03:bd:5e:7f:98:38:df:a5:9a:
6d:85:f7:15:78:ec:55:b7:06:0e:98:f4:cb:55:56:09:b2:fe:
ba:e4:fd:cc:ba:13:eb:e5:65:11:e2:5a:66:0e:fd:ff:60:8a:
99:10:f6:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PBLbnN7r2quudnqxKSctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNWRiZGRjYTU4MTY2OTdhZDEyNDVjMDBjYWI3NmFmMjFl
YzJlM2IwHhcNMjUwMTMxMTIwMDQwWhcNMjUwMjAxMTIwMDQwWjAzMTEwLwYDVQQD
EygxOTA3ZGMzNGFkYWZiZTQ2NGY4YTRjZDA4OTkwNmIyYzJkMjBkNWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf/iL4SNSxVQg38O1y6mCWzfxRc2
cyhTsRaMpQ6kSJgRx02FeZeOOoMH1yjZTJ1mW29z1MtJnbWpOzvR0CQtusRQb5t2
llm2WRqO8FQolVfGadhBGSPC1XOs4LpiMS7D7n4wHrzUWheM4QtWHp8heB9cQ514
TrWkQAHrwId9llAVOaXFV1SF7GtMzEi35SlOoMrNRyiQBQ1M0vPAZBFbKVfIJMCa
cAaBW0vsxwb5NWqWUmReBhLogLtvHDmy2equQ2llrnX8gnxNl8CYwHL7+Rx8I1LQ
Xq+FlipL8gFex45wefzLpWXUaeqJE0944IWXCtYbRtdl+CkH2k6tLdzmIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkH3DStr75GT4pM0ImQaywtINW1MB8GA1UdIwQY
MBaAFOFdvdylgWaXrRJFwAyrdq8h7C47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFYyOTNLV0JacGV0RWtYQURLdDJyeUhzTGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mYTU5MDMtNmJmOC00ZDJlLWJmYmEt
NmIyYjcyYzI1ZWQxLzEvNFYyOTNLV0JacGV0RWtYQURLdDJyeUhzTGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9mYTU5MDMtNmJmOC00ZDJlLWJmYmEtNmIyYjcyYzI1ZWQx
LzEvNFYyOTNLV0JacGV0RWtYQURLdDJyeUhzTGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdctwU3O
9mwxNZJpyCiBuD8K6F5FxaNpChREKrrXy9SMdkAnwrwdCZMiLTx6hVofj0V1uIl/
FSziOHTcVvPhw9dsFIC1TrGJ8ijkPu5J+ax3wnLatwwaCQTcUmxPZUfYPZ5IZHB+
bz8KBsQyPefRrZSjlMp0fQItfufFOm61eiWHQd5MZEUK96yCthItdyNzIn/r5Rku
xlzjyFGwVi0XcUpTiWdknuezpFuEXEel1ARKjWEB1VnB9tikUgDwtSUJtTxpckey
3wziOYztAxN2A71ef5g436WabYX3FXjsVbcGDpj0y1VWCbL+uuT9zLoT6+VlEeJa
Zg79/2CKmRD2Og==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:15:19 2025 by rpki-client