Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
File: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft (raw, json)
Hash identifier: J/PE69ubVfp61ATd3jt87Fty+V+9BxYrGOS3p7eheZg=
Subject key identifier: 87:15:F5:C8:52:3B:62:A9:F6:A4:78:66:1D:D0:53:1B:C0:2D:CE:4F
Authority key identifier: F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
Certificate issuer: /CN=f0a95b78b0576501278efd7e020269ba1f06d386
Certificate serial: 0194BBCEF0B94C5787F9C5FFE8F9DD68F998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
Manifest number: 0A00
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl (hash: r2gwpDPNsB59/JXDRq7Zj+p106rNuWNucAQF2VE4IdY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f0:b9:4c:57:87:f9:c5:ff:e8:f9:dd:68:f9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a95b78b0576501278efd7e020269ba1f06d386
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=8715f5c8523b62a9f6a478661dd0531bc02dce4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d4:53:81:97:be:d6:09:a5:9f:09:74:f2:8e:
b3:1d:6b:99:26:6c:a7:a1:c2:66:f3:4a:e6:4e:a1:
ab:c3:15:65:57:9e:5a:1d:f0:b0:25:0e:0c:af:e8:
ab:c1:f7:46:0f:89:e9:fd:93:dd:18:44:7d:9a:16:
85:b7:98:6e:2c:c9:5d:66:cf:74:6a:53:d3:37:82:
03:3f:29:40:93:d8:b2:64:27:ef:a5:96:53:2b:50:
82:15:b8:4d:48:04:35:a2:fb:03:90:a2:31:3a:fc:
b6:10:98:65:49:95:d9:05:fa:ed:b4:b2:0f:f5:a7:
df:84:08:7f:8e:5f:28:b6:67:b4:51:02:48:6e:68:
27:f3:3d:46:84:c9:25:a2:a9:c1:8f:16:0d:5b:34:
20:74:09:49:af:71:0d:cd:bb:42:bc:5c:f2:2e:03:
6d:4e:4e:ce:8c:24:3b:0b:53:8f:45:c2:71:b4:07:
11:bc:30:3b:6f:f5:53:44:35:a8:bb:c1:26:d1:e8:
88:f9:df:a9:93:00:d5:4c:73:8b:76:0b:b5:6c:85:
de:d3:0a:99:c7:82:19:ff:b5:5a:d2:a3:0f:ec:76:
c7:b4:8d:b0:51:11:a5:7f:98:81:b0:41:42:3d:dd:
dd:a6:78:82:30:6b:c5:aa:4b:d0:1c:a2:e1:c9:d2:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:15:F5:C8:52:3B:62:A9:F6:A4:78:66:1D:D0:53:1B:C0:2D:CE:4F
X509v3 Authority Key Identifier:
keyid:F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:46:a4:8f:f5:88:b3:54:ac:fc:e2:57:75:bc:5a:22:4e:8c:
0e:85:49:83:4c:86:19:37:27:03:ef:94:c5:84:0d:16:0c:8b:
78:49:a3:35:6c:6b:17:87:34:05:7b:3d:70:24:cc:8a:e2:0c:
22:ad:50:9e:9f:65:bb:9e:58:a1:d1:ba:4f:eb:e6:36:46:47:
5e:4f:87:81:d6:f9:22:5a:89:0e:e7:37:9a:46:ed:9e:1a:e3:
1b:6e:ec:18:5c:32:77:a2:a3:cf:e5:63:32:d4:07:79:d4:18:
f2:b1:f3:96:66:56:d1:fe:11:d0:fa:e2:2f:91:0b:76:cc:7e:
d0:2c:73:e8:9a:a7:e3:97:37:ff:3b:da:cb:e0:94:e2:46:3f:
cf:b3:d7:28:c1:25:23:0a:fb:c1:4e:25:fa:4e:fb:fc:2b:1a:
2d:fb:bb:1c:43:ec:b2:6b:ed:14:65:d4:9e:1e:1a:fb:a1:57:
d6:0c:e9:fc:74:4e:75:ca:69:1c:83:cf:2b:fb:45:0f:22:de:
28:16:20:c3:39:f8:cc:d9:58:25:0d:7d:ac:4d:4d:9c:1e:b7:
e9:72:30:c6:ca:66:fc:fd:85:1d:00:a0:e8:39:9f:78:63:2a:
e3:4c:b2:c7:63:50:a9:37:eb:2c:a8:c1:b6:09:75:39:5d:3a:
1f:12:73:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zvC5TFeH+cX/6PndaPmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYTk1Yjc4YjA1NzY1MDEyNzhlZmQ3ZTAyMDI2OWJhMWYw
NmQzODYwHhcNMjUwMTMxMTAwMTI4WhcNMjUwMjAxMTAwMTI4WjAzMTEwLwYDVQQD
Eyg4NzE1ZjVjODUyM2I2MmE5ZjZhNDc4NjYxZGQwNTMxYmMwMmRjZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09RTgZe+1gmlnwl08o6zHWuZJmyn
ocJm80rmTqGrwxVlV55aHfCwJQ4Mr+irwfdGD4np/ZPdGER9mhaFt5huLMldZs90
alPTN4IDPylAk9iyZCfvpZZTK1CCFbhNSAQ1ovsDkKIxOvy2EJhlSZXZBfrttLIP
9affhAh/jl8otme0UQJIbmgn8z1GhMkloqnBjxYNWzQgdAlJr3ENzbtCvFzyLgNt
Tk7OjCQ7C1OPRcJxtAcRvDA7b/VTRDWou8Em0eiI+d+pkwDVTHOLdgu1bIXe0wqZ
x4IZ/7Va0qMP7HbHtI2wURGlf5iBsEFCPd3dpniCMGvFqkvQHKLhydKesQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcV9chSO2Kp9qR4Zh3QUxvALc5PMB8GA1UdIwQY
MBaAFPCpW3iwV2UBJ479fgICabofBtOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEtsYmVMQlhaUUVuanYxLUFnSnB1aDhHMDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85MmM4OWMtNDQ5My00NGRjLTgyNjEt
YmRkZWY2MGNmOWQ4LzEvOEtsYmVMQlhaUUVuanYxLUFnSnB1aDhHMDRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85MmM4OWMtNDQ5My00NGRjLTgyNjEtYmRkZWY2MGNmOWQ4
LzEvOEtsYmVMQlhaUUVuanYxLUFnSnB1aDhHMDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREakj/WI
s1Ss/OJXdbxaIk6MDoVJg0yGGTcnA++UxYQNFgyLeEmjNWxrF4c0BXs9cCTMiuIM
Iq1Qnp9lu55YodG6T+vmNkZHXk+Hgdb5IlqJDuc3mkbtnhrjG27sGFwyd6Kjz+Vj
MtQHedQY8rHzlmZW0f4R0PriL5ELdsx+0Cxz6Jqn45c3/zvay+CU4kY/z7PXKMEl
Iwr7wU4l+k77/CsaLfu7HEPssmvtFGXUnh4a+6FX1gzp/HROdcppHIPPK/tFDyLe
KBYgwzn4zNlYJQ19rE1NnB636XIwxspm/P2FHQCg6DmfeGMq40yyx2NQqTfrLKjB
tgl1OV06HxJzdQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:31:23 2025 by rpki-client