Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
File: l213R7vhqAE1QKcW0lzHh_h9tmo.mft (raw, json)
Hash identifier: +0z4oID6EMEj7yg45hUzsGJSKJr4E5N9lAMX1o9VTlQ=
Subject key identifier: 7E:97:BA:61:52:36:94:D3:4E:71:CC:E5:97:F4:19:03:94:08:57:80
Authority key identifier: 97:6D:77:47:BB:E1:A8:01:35:40:A7:16:D2:5C:C7:87:F8:7D:B6:6A
Certificate issuer: /CN=976d7747bbe1a8013540a716d25cc787f87db66a
Certificate serial: 0194BBCE7A6CD21923908EBD1783D2D0E95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l213R7vhqAE1QKcW0lzHh_h9tmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
Manifest number: 0AD4
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: l213R7vhqAE1QKcW0lzHh_h9tmo.crl (hash: D+GAAXfRcz4Yxlkqqhc4Hz0pHAXyc3R2sGhTxEvV0Jk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7a:6c:d2:19:23:90:8e:bd:17:83:d2:d0:e9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976d7747bbe1a8013540a716d25cc787f87db66a
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=7e97ba61523694d34e71cce597f4190394085780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:2b:83:57:6e:b7:c6:d2:66:b8:a8:3a:75:
8d:8f:f6:4e:26:14:4d:61:d3:6d:53:05:fe:f6:3f:
3b:23:ff:c0:a8:94:0f:76:c0:e9:82:7c:04:08:95:
b9:85:31:79:e4:31:df:84:c6:12:75:b5:fc:82:e8:
e8:34:12:f1:70:f7:9d:15:c9:c1:e5:18:f0:30:56:
bb:34:8e:70:67:f2:e2:b4:16:d4:a0:f0:ac:e8:54:
d2:2d:de:3b:dc:13:1c:87:a6:7a:52:e8:ed:53:ce:
49:51:dc:5c:9b:46:b4:60:fc:34:98:74:9f:56:99:
cc:95:4c:5e:95:9c:73:7c:b6:29:8a:81:e5:f0:f9:
42:81:42:c3:8d:a0:3a:78:3e:25:3f:5d:a4:b9:e1:
ec:2d:f2:9f:b5:76:21:2c:b3:59:40:5b:db:20:b4:
07:c6:b2:16:7b:03:bb:22:4b:c6:ef:42:91:e8:48:
dc:09:07:aa:97:d4:99:ad:90:06:10:1d:c7:13:b9:
0c:a9:ee:9d:67:9a:b7:24:a8:0c:bc:ae:8c:e3:68:
1e:83:36:ef:83:29:d4:b9:bc:22:1a:a0:f4:f6:8a:
e4:04:b3:35:a2:9a:d9:f1:46:26:54:67:e9:15:01:
78:62:e3:c8:92:ba:b4:e7:40:2a:68:52:14:af:a2:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:97:BA:61:52:36:94:D3:4E:71:CC:E5:97:F4:19:03:94:08:57:80
X509v3 Authority Key Identifier:
keyid:97:6D:77:47:BB:E1:A8:01:35:40:A7:16:D2:5C:C7:87:F8:7D:B6:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l213R7vhqAE1QKcW0lzHh_h9tmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:21:01:59:19:e9:b9:b0:fc:a6:eb:dc:44:eb:9a:3d:02:01:
3b:1c:e5:3c:41:47:09:5d:54:b2:31:ce:c8:48:26:67:0c:1b:
5c:b8:51:99:82:3e:7d:57:8a:e4:1b:49:6c:e4:15:9e:c4:0c:
7b:a1:d8:9b:9c:ca:e1:e9:09:f8:fc:4e:7a:ca:68:81:df:a7:
31:2d:22:0c:3f:17:c3:56:9d:f5:2f:3c:de:05:c8:8f:35:a9:
47:85:1a:1a:cd:34:7b:fb:0f:a2:99:a8:40:4d:d3:7f:92:d1:
f0:aa:ff:8b:42:1f:f6:46:8e:33:df:8e:d1:ee:22:f6:2f:c4:
ee:8b:28:59:ad:f0:10:cd:c3:8b:f2:9f:78:ba:29:14:a4:97:
61:c6:97:c5:1f:43:1e:65:d4:65:3f:04:6d:08:36:4f:3c:86:
f9:77:1c:d3:0a:a2:ed:76:87:41:53:d9:8e:0d:46:17:4f:8a:
5b:58:cd:62:b7:25:9c:7f:22:61:ef:4b:ba:d0:f0:22:45:75:
32:dd:15:37:37:a6:25:fc:49:6d:79:97:39:3a:1d:76:c1:d4:
0d:fb:42:bd:39:f8:48:fc:da:48:78:35:7c:cb:6f:61:85:5e:
97:ac:f9:1e:3c:cd:28:28:f2:71:04:3b:68:2c:1b:97:f4:70:
a3:09:f5:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7znps0hkjkI69F4PS0OlbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NmQ3NzQ3YmJlMWE4MDEzNTQwYTcxNmQyNWNjNzg3Zjg3
ZGI2NmEwHhcNMjUwMTMxMTAwMDU4WhcNMjUwMjAxMTAwMDU4WjAzMTEwLwYDVQQD
Eyg3ZTk3YmE2MTUyMzY5NGQzNGU3MWNjZTU5N2Y0MTkwMzk0MDg1NzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncIrg1dut8bSZrioOnWNj/ZOJhRN
YdNtUwX+9j87I//AqJQPdsDpgnwECJW5hTF55DHfhMYSdbX8gujoNBLxcPedFcnB
5RjwMFa7NI5wZ/LitBbUoPCs6FTSLd473BMch6Z6UujtU85JUdxcm0a0YPw0mHSf
VpnMlUxelZxzfLYpioHl8PlCgULDjaA6eD4lP12kueHsLfKftXYhLLNZQFvbILQH
xrIWewO7IkvG70KR6EjcCQeql9SZrZAGEB3HE7kMqe6dZ5q3JKgMvK6M42gegzbv
gynUubwiGqD09orkBLM1oprZ8UYmVGfpFQF4YuPIkrq050AqaFIUr6LTfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6XumFSNpTTTnHM5Zf0GQOUCFeAMB8GA1UdIwQY
MBaAFJdtd0e74agBNUCnFtJcx4f4fbZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDIxM1I3dmhxQUUxUUtjVzBsekhoX2g5dG1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iNDkyZmYtMzE1NC00MzA0LWI5Mjct
ZDk5ODMyNjU3YTQ1LzEvbDIxM1I3dmhxQUUxUUtjVzBsekhoX2g5dG1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9iNDkyZmYtMzE1NC00MzA0LWI5MjctZDk5ODMyNjU3YTQ1
LzEvbDIxM1I3dmhxQUUxUUtjVzBsekhoX2g5dG1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCEBWRnp
ubD8puvcROuaPQIBOxzlPEFHCV1UsjHOyEgmZwwbXLhRmYI+fVeK5BtJbOQVnsQM
e6HYm5zK4ekJ+PxOespogd+nMS0iDD8Xw1ad9S883gXIjzWpR4UaGs00e/sPopmo
QE3Tf5LR8Kr/i0If9kaOM9+O0e4i9i/E7osoWa3wEM3Di/KfeLopFKSXYcaXxR9D
HmXUZT8EbQg2TzyG+Xcc0wqi7XaHQVPZjg1GF0+KW1jNYrclnH8iYe9LutDwIkV1
Mt0VNzemJfxJbXmXOToddsHUDftCvTn4SPzaSHg1fMtvYYVel6z5HjzNKCjycQQ7
aCwbl/Rwown1JQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:35 2025 by rpki-client