Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/742f7b-a946-4c22-8581-dc5a86564da9/1/R_0xZFbhuX__wjKZ9uvNoF93nzw.mft
File: R_0xZFbhuX__wjKZ9uvNoF93nzw.mft (raw, json)
Hash identifier: ks6tRHMk4iYk7E9NVXqppfQFeM3Mwd7LZq2u2IMYVI4=
Subject key identifier: ED:3D:1C:ED:BF:40:12:11:B6:BE:E1:BF:78:66:B1:F4:B4:87:A1:8E
Authority key identifier: 47:FD:31:64:56:E1:B9:7F:FF:C2:32:99:F6:EB:CD:A0:5F:77:9F:3C
Certificate issuer: /CN=47fd316456e1b97fffc23299f6ebcda05f779f3c
Certificate serial: 0194BC72897ECA326762DD0F3E7A9DCA8605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_0xZFbhuX__wjKZ9uvNoF93nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/742f7b-a946-4c22-8581-dc5a86564da9/1/R_0xZFbhuX__wjKZ9uvNoF93nzw.mft
Manifest number: 0B0F
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: R_0xZFbhuX__wjKZ9uvNoF93nzw.crl (hash: zX/qfJLl23Ml7dA61udZOgIEQuJJr1myqa+eghtnYnA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:89:7e:ca:32:67:62:dd:0f:3e:7a:9d:ca:86:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47fd316456e1b97fffc23299f6ebcda05f779f3c
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=ed3d1cedbf401211b6bee1bf7866b1f4b487a18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:a5:57:d2:9b:f0:60:01:d7:a6:7e:15:a3:
60:0f:48:ad:a1:9c:9a:b8:46:48:d6:b2:e7:75:31:
c3:f5:2c:27:4b:6c:0e:d2:76:0b:ec:06:bb:65:c5:
84:b1:3e:76:54:51:1f:11:38:28:a3:b7:b2:bd:32:
4a:4b:71:e6:d5:91:95:e9:83:cd:02:48:c3:fd:e5:
34:0e:87:c6:30:e5:3d:df:f4:93:81:52:da:0b:40:
0c:e6:0a:fb:97:22:c8:5b:30:35:78:23:ef:5b:fa:
ca:df:fe:8a:e5:b7:33:a6:36:2a:ee:8b:bc:8f:cc:
3b:f8:99:e8:96:9c:83:ec:2e:9a:90:9f:79:1e:8d:
ad:8e:ed:f8:b2:6a:23:15:38:f7:72:81:c6:84:9d:
e0:68:46:78:7e:09:89:2e:a1:fc:49:31:6e:f5:68:
de:e1:aa:e8:d6:1b:b6:2c:39:ea:81:bf:06:49:d4:
d2:22:e0:92:45:40:55:7c:e9:aa:9b:ae:94:56:1e:
48:43:75:e0:59:50:80:85:5b:cb:96:4c:89:e7:34:
ef:46:46:79:96:2e:aa:37:5b:50:ba:bf:fc:3e:3f:
7d:68:b2:98:b8:12:c3:ca:94:fb:d3:5e:6f:95:8c:
66:93:97:20:63:ff:6a:39:02:36:23:f8:aa:6a:0a:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3D:1C:ED:BF:40:12:11:B6:BE:E1:BF:78:66:B1:F4:B4:87:A1:8E
X509v3 Authority Key Identifier:
keyid:47:FD:31:64:56:E1:B9:7F:FF:C2:32:99:F6:EB:CD:A0:5F:77:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_0xZFbhuX__wjKZ9uvNoF93nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/742f7b-a946-4c22-8581-dc5a86564da9/1/R_0xZFbhuX__wjKZ9uvNoF93nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/742f7b-a946-4c22-8581-dc5a86564da9/1/R_0xZFbhuX__wjKZ9uvNoF93nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:dd:d6:23:53:52:07:95:f4:85:39:fa:dc:28:7f:40:5a:df:
82:5d:01:bb:e4:9e:90:5f:4f:4c:16:95:3c:41:c8:40:e1:fa:
0a:71:76:08:6d:9f:af:bb:94:cc:00:e4:9b:40:5f:23:2d:79:
fc:57:df:bd:61:73:d9:6d:53:bf:b5:1e:6b:38:4c:e5:d4:e1:
a0:c8:c7:53:91:42:ed:cd:a4:f2:85:59:db:33:92:b1:b0:ec:
b3:e2:93:ce:2e:d5:a1:80:2a:ae:67:6e:a3:4a:bb:cb:70:be:
50:5c:85:7f:c6:fc:49:60:55:db:5c:97:15:c3:76:7d:a3:bb:
8f:df:83:7f:8e:58:07:50:7f:c0:27:a7:e3:0c:0d:f6:fa:63:
08:ab:dd:35:b8:6b:56:a2:90:d5:cc:f9:18:cc:3e:56:b7:87:
2f:d2:90:4d:c7:1f:ff:1d:0b:f0:c5:1b:2e:38:c4:cb:25:57:
8c:d2:22:d0:2d:fd:dd:84:37:16:3a:77:ff:0b:5b:61:10:78:
9a:23:e3:77:16:c0:ba:45:c8:cd:c4:6a:6e:f5:6a:7f:a5:b3:
6f:02:30:1a:84:f5:78:67:d9:5c:d3:10:c7:f9:b8:ca:48:e0:
83:e7:e8:96:cc:53:59:ce:2c:ae:a9:59:b7:e7:5d:e9:1a:4f:
38:fe:a1:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8col+yjJnYt0PPnqdyoYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZmQzMTY0NTZlMWI5N2ZmZmMyMzI5OWY2ZWJjZGEwNWY3
NzlmM2MwHhcNMjUwMTMxMTMwMDEwWhcNMjUwMjAxMTMwMDEwWjAzMTEwLwYDVQQD
EyhlZDNkMWNlZGJmNDAxMjExYjZiZWUxYmY3ODY2YjFmNGI0ODdhMThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A+lV9Kb8GAB16Z+FaNgD0itoZya
uEZI1rLndTHD9SwnS2wO0nYL7Aa7ZcWEsT52VFEfETgoo7eyvTJKS3Hm1ZGV6YPN
AkjD/eU0DofGMOU93/STgVLaC0AM5gr7lyLIWzA1eCPvW/rK3/6K5bczpjYq7ou8
j8w7+JnolpyD7C6akJ95Ho2tju34smojFTj3coHGhJ3gaEZ4fgmJLqH8STFu9Wje
4aro1hu2LDnqgb8GSdTSIuCSRUBVfOmqm66UVh5IQ3XgWVCAhVvLlkyJ5zTvRkZ5
li6qN1tQur/8Pj99aLKYuBLDypT7015vlYxmk5cgY/9qOQI2I/iqagrEOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO09HO2/QBIRtr7hv3hmsfS0h6GOMB8GA1UdIwQY
MBaAFEf9MWRW4bl//8IymfbrzaBfd588MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUl8weFpGYmh1WF9fd2pLWjl1dk5vRjkzbnp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83NDJmN2ItYTk0Ni00YzIyLTg1ODEt
ZGM1YTg2NTY0ZGE5LzEvUl8weFpGYmh1WF9fd2pLWjl1dk5vRjkzbnp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS83NDJmN2ItYTk0Ni00YzIyLTg1ODEtZGM1YTg2NTY0ZGE5
LzEvUl8weFpGYmh1WF9fd2pLWjl1dk5vRjkzbnp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgd3WI1NS
B5X0hTn63Ch/QFrfgl0Bu+SekF9PTBaVPEHIQOH6CnF2CG2fr7uUzADkm0BfIy15
/FffvWFz2W1Tv7UeazhM5dThoMjHU5FC7c2k8oVZ2zOSsbDss+KTzi7VoYAqrmdu
o0q7y3C+UFyFf8b8SWBV21yXFcN2faO7j9+Df45YB1B/wCen4wwN9vpjCKvdNbhr
VqKQ1cz5GMw+VreHL9KQTccf/x0L8MUbLjjEyyVXjNIi0C393YQ3Fjp3/wtbYRB4
miPjdxbAukXIzcRqbvVqf6WzbwIwGoT1eGfZXNMQx/m4ykjgg+folsxTWc4srqlZ
t+dd6RpPOP6h4Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:58 2025 by rpki-client