Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
File: r1UJ13Yi0who8jYTxagW5ySEAWU.mft (raw, json)
Hash identifier: iYx4ki6h4IlKYtx0106HudpED5gARR84bQOOkhul+Jw=
Subject key identifier: 28:FD:4F:E1:F8:ED:08:7B:78:AC:6A:53:92:34:A0:C3:13:63:47:A5
Authority key identifier: AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
Certificate issuer: /CN=af5509d77622d30868f23613c5a816e724840165
Certificate serial: 0194BBCDE200A155A6FFC758C6E08D285870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
Manifest number: 04DE
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: r1UJ13Yi0who8jYTxagW5ySEAWU.crl (hash: g2siOmh8KpLjPguhxWJMGz8dl8EY3tjEEUUBAvIZWfE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e2:00:a1:55:a6:ff:c7:58:c6:e0:8d:28:58:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5509d77622d30868f23613c5a816e724840165
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=28fd4fe1f8ed087b78ac6a539234a0c3136347a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2f:4c:50:a7:19:df:11:6c:e3:8e:03:2c:75:
5a:35:34:8c:5c:1d:0e:e5:04:68:f9:6f:a9:c2:95:
0a:43:3f:2b:43:fe:4f:29:3f:f9:30:52:b7:fe:71:
47:ef:e3:59:0b:80:26:83:65:11:7c:ab:51:4a:b2:
80:b1:b4:32:e8:9a:84:a3:25:c0:cc:eb:c0:e3:8c:
c4:ff:35:62:8b:6e:74:08:36:85:c3:4e:9b:e4:c4:
a6:7b:10:2b:ed:e1:73:e7:40:56:dc:7e:39:55:52:
17:9e:31:ef:03:d9:c9:76:b4:7e:1f:e6:93:e8:26:
4b:6b:db:5c:b6:19:41:df:54:90:77:f8:c6:5c:65:
71:9e:69:3c:d5:a7:1d:11:a0:fc:4c:43:57:23:2a:
b3:c3:de:4d:1b:f6:d3:22:e3:ce:b4:a9:4c:6f:7e:
53:27:d8:18:e1:47:e3:05:57:76:5b:ea:cf:65:f5:
ac:d1:51:ad:95:ae:e2:48:18:0a:6e:f5:d3:b0:c6:
7d:57:79:fb:44:4c:29:41:75:78:7a:f0:d8:ca:1a:
f2:63:98:f8:98:14:13:46:ad:c2:33:d2:69:84:dd:
20:71:bc:f6:ca:be:b3:82:f5:2b:eb:5e:72:09:db:
db:de:ef:66:64:4d:ce:95:d7:a2:f1:c6:a7:7e:3f:
51:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FD:4F:E1:F8:ED:08:7B:78:AC:6A:53:92:34:A0:C3:13:63:47:A5
X509v3 Authority Key Identifier:
keyid:AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:18:39:cc:64:c7:a9:c7:f6:d1:b2:d7:20:81:82:36:78:75:
f9:ba:55:da:0b:0c:5c:38:22:b9:a2:ad:1b:af:57:50:ff:e2:
68:9f:18:2c:7b:73:14:80:61:ca:66:72:85:0b:1c:e7:14:8a:
2e:53:3d:4b:f2:63:94:3c:4c:2d:ca:d4:5c:a8:6a:98:f5:80:
55:30:de:c2:a5:58:a5:a9:49:24:1f:39:cf:49:e1:af:dc:c5:
57:8a:97:6a:03:b2:34:ba:0b:22:e0:31:3f:4d:f3:89:93:35:
43:3c:42:d8:5f:9c:08:e9:f3:85:29:21:be:3a:f0:d0:2b:1e:
bb:b3:1f:ae:a5:85:37:c3:0c:71:19:eb:fe:c6:45:fc:ec:3d:
3d:e1:d6:b1:59:dc:64:b6:c7:04:8e:06:9e:3b:49:23:30:7a:
d0:04:50:88:34:92:cc:e5:5e:f0:5c:0b:de:e9:ab:a1:df:d1:
0a:44:48:8d:e8:f3:4c:1e:0c:66:75:ea:08:f8:cc:9f:2d:0c:
a4:5a:73:69:9d:17:9a:15:70:14:af:c0:5f:00:cd:e4:4d:77:
92:69:e9:39:f0:f8:3d:8e:69:a3:93:b6:14:c0:5c:5f:b9:d1:
c4:42:c9:13:de:4a:73:ae:3d:6e:0a:3b:9b:21:c6:4c:82:96:
a4:e6:6c:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zeIAoVWm/8dYxuCNKFhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNTUwOWQ3NzYyMmQzMDg2OGYyMzYxM2M1YTgxNmU3MjQ4
NDAxNjUwHhcNMjUwMTMxMTAwMDE5WhcNMjUwMjAxMTAwMDE5WjAzMTEwLwYDVQQD
EygyOGZkNGZlMWY4ZWQwODdiNzhhYzZhNTM5MjM0YTBjMzEzNjM0N2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7S9MUKcZ3xFs444DLHVaNTSMXB0O
5QRo+W+pwpUKQz8rQ/5PKT/5MFK3/nFH7+NZC4Amg2URfKtRSrKAsbQy6JqEoyXA
zOvA44zE/zVii250CDaFw06b5MSmexAr7eFz50BW3H45VVIXnjHvA9nJdrR+H+aT
6CZLa9tcthlB31SQd/jGXGVxnmk81acdEaD8TENXIyqzw95NG/bTIuPOtKlMb35T
J9gY4UfjBVd2W+rPZfWs0VGtla7iSBgKbvXTsMZ9V3n7REwpQXV4evDYyhryY5j4
mBQTRq3CM9JphN0gcbz2yr6zgvUr615yCdvb3u9mZE3Oldei8canfj9R1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCj9T+H47Qh7eKxqU5I0oMMTY0elMB8GA1UdIwQY
MBaAFK9VCdd2ItMIaPI2E8WoFuckhAFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjFVSjEzWWkwd2hvOGpZVHhhZ1c1eVNFQVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85OTcxZTEtNTdmYy00ZjhjLTlmMDMt
MGFlZTZlMjM3MjQzLzEvcjFVSjEzWWkwd2hvOGpZVHhhZ1c1eVNFQVdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85OTcxZTEtNTdmYy00ZjhjLTlmMDMtMGFlZTZlMjM3MjQz
LzEvcjFVSjEzWWkwd2hvOGpZVHhhZ1c1eVNFQVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRg5zGTH
qcf20bLXIIGCNnh1+bpV2gsMXDgiuaKtG69XUP/iaJ8YLHtzFIBhymZyhQsc5xSK
LlM9S/JjlDxMLcrUXKhqmPWAVTDewqVYpalJJB85z0nhr9zFV4qXagOyNLoLIuAx
P03ziZM1QzxC2F+cCOnzhSkhvjrw0Cseu7MfrqWFN8MMcRnr/sZF/Ow9PeHWsVnc
ZLbHBI4GnjtJIzB60ARQiDSSzOVe8FwL3umrod/RCkRIjejzTB4MZnXqCPjMny0M
pFpzaZ0XmhVwFK/AXwDN5E13kmnpOfD4PY5po5O2FMBcX7nRxELJE95Kc649bgo7
myHGTIKWpOZsDw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:12 2025 by rpki-client