Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
File: cNbQfLZOoOgZ46Cyngk_5Bljspo.mft (raw, json)
Hash identifier: fDLHL8XDwTZpOv+eLC5znj0r45vkW8U3aCvsw/Tu28E=
Subject key identifier: B2:67:59:9B:6F:AB:70:67:6E:3F:12:69:D9:0B:E4:32:EC:DF:6F:44
Authority key identifier: 70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A
Certificate issuer: /CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a
Certificate serial: 0194BC72D445C7574A2FF5411E175EC7F31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: cNbQfLZOoOgZ46Cyngk_5Bljspo.crl (hash: u7fM9hDdEclZO2e/FgawUSDvL6d/lV5hrZQXkyJoags=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d4:45:c7:57:4a:2f:f5:41:1e:17:5e:c7:f3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=b267599b6fab70676e3f1269d90be432ecdf6f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:b1:f3:5e:53:be:2d:cf:e0:87:f7:7d:f6:
19:6a:eb:9f:f7:b7:52:20:f0:42:a9:24:a9:d3:e5:
3e:e1:6c:12:76:77:20:a8:c0:fc:f7:19:fc:0b:cd:
b3:d3:46:e5:b5:61:90:bd:89:2b:3c:e1:aa:bb:5d:
9e:34:43:7b:e5:55:18:b9:cf:56:72:4c:5d:a2:03:
a3:77:79:8c:10:68:28:10:cb:55:16:15:33:59:1e:
48:b5:de:24:2b:74:c0:a2:53:a2:ea:10:09:8f:f2:
fc:52:cb:af:72:97:ef:33:d2:38:ab:91:85:a8:86:
bb:88:00:0f:90:f8:0e:a2:b8:7f:d2:d6:6e:32:ac:
49:cf:d8:f5:9c:d5:46:9e:2d:bf:e1:49:25:66:5f:
8e:8e:1f:a4:78:c9:aa:f3:91:56:9e:b8:63:71:5f:
d1:a0:17:1f:3a:d8:c4:a3:ca:11:01:0e:f1:e2:80:
66:db:7b:56:61:b1:24:60:f5:c7:b6:37:86:ef:47:
a1:6b:13:e3:d1:66:68:9c:0a:59:7c:d0:85:0f:08:
b0:86:e1:94:d1:86:73:fe:d4:0e:64:49:1c:5d:d2:
dd:3b:14:65:90:94:10:92:a8:eb:c7:54:f9:51:e8:
c8:94:b4:6f:87:9b:78:6b:71:a0:fc:15:1d:7d:d3:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:67:59:9B:6F:AB:70:67:6E:3F:12:69:D9:0B:E4:32:EC:DF:6F:44
X509v3 Authority Key Identifier:
keyid:70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6a:18:36:de:e4:5c:65:58:b5:aa:26:68:8b:0c:14:ee:b6:
f0:29:cd:a6:c2:9e:bb:65:81:5a:8b:37:14:ab:78:ae:9e:79:
9b:7e:a2:d2:07:90:11:a1:5a:d7:61:ec:bc:09:a0:d6:e9:d2:
1f:f7:14:16:34:94:be:b0:d6:8f:65:e8:4b:67:43:a9:a1:36:
49:8b:d7:ab:c5:84:1f:59:e3:ea:67:03:02:e3:a7:a6:74:5b:
eb:5e:54:a2:c5:5f:dd:37:e3:84:77:90:32:68:d3:7e:77:18:
e2:cf:c1:93:41:8d:c6:3c:3d:9f:39:30:03:d4:f5:e6:4f:07:
49:6e:27:4b:1f:13:ca:64:2d:5a:33:77:f6:13:e2:d1:aa:27:
a4:10:5a:a0:f7:5a:04:d8:c5:24:3b:fb:7e:ae:1c:17:6e:5f:
92:81:22:b4:93:f4:6a:8e:a3:1a:18:31:d2:af:05:b1:21:2d:
df:ab:84:c4:8b:84:42:4f:ea:6d:df:ea:93:be:a7:45:10:2d:
ae:f8:3a:8e:76:db:44:de:3a:fc:38:33:4d:58:82:f7:12:92:
ea:47:3e:6d:6e:fd:76:49:4f:3b:57:8f:f4:b0:82:f4:cf:96:
e3:e1:88:60:8a:2f:70:f7:6f:6d:cd:26:ca:25:8e:2c:be:3d:
b2:25:e6:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ctRFx1dKL/VBHhdex/MfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZDZkMDdjYjY0ZWEwZTgxOWUzYTBiMjllMDkzZmU0MTk2
M2IyOWEwHhcNMjUwMTMxMTMwMDI5WhcNMjUwMjAxMTMwMDI5WjAzMTEwLwYDVQQD
EyhiMjY3NTk5YjZmYWI3MDY3NmUzZjEyNjlkOTBiZTQzMmVjZGY2ZjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr62x815Tvi3P4If3ffYZauuf97dS
IPBCqSSp0+U+4WwSdncgqMD89xn8C82z00bltWGQvYkrPOGqu12eNEN75VUYuc9W
ckxdogOjd3mMEGgoEMtVFhUzWR5Itd4kK3TAolOi6hAJj/L8UsuvcpfvM9I4q5GF
qIa7iAAPkPgOorh/0tZuMqxJz9j1nNVGni2/4UklZl+Ojh+keMmq85FWnrhjcV/R
oBcfOtjEo8oRAQ7x4oBm23tWYbEkYPXHtjeG70ehaxPj0WZonApZfNCFDwiwhuGU
0YZz/tQOZEkcXdLdOxRlkJQQkqjrx1T5UejIlLRvh5t4a3Gg/BUdfdOBwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJnWZtvq3Bnbj8SadkL5DLs329EMB8GA1UdIwQY
MBaAFHDW0Hy2TqDoGeOgsp4JP+QZY7KaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY05iUWZMWk9vT2daNDZDeW5na181Qmxqc3BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8wNTkxMGItMjVkOC00MTNkLWFjNTgt
ODI0Yzc3Zjg5MWM5LzEvY05iUWZMWk9vT2daNDZDeW5na181Qmxqc3BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8wNTkxMGItMjVkOC00MTNkLWFjNTgtODI0Yzc3Zjg5MWM5
LzEvY05iUWZMWk9vT2daNDZDeW5na181Qmxqc3BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWoYNt7k
XGVYtaomaIsMFO628CnNpsKeu2WBWos3FKt4rp55m36i0geQEaFa12HsvAmg1unS
H/cUFjSUvrDWj2XoS2dDqaE2SYvXq8WEH1nj6mcDAuOnpnRb615UosVf3TfjhHeQ
MmjTfncY4s/Bk0GNxjw9nzkwA9T15k8HSW4nSx8TymQtWjN39hPi0aonpBBaoPda
BNjFJDv7fq4cF25fkoEitJP0ao6jGhgx0q8FsSEt36uExIuEQk/qbd/qk76nRRAt
rvg6jnbbRN46/DgzTViC9xKS6kc+bW79dklPO1eP9LCC9M+W4+GIYIovcPdvbc0m
yiWOLL49siXmyw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:02 2025 by rpki-client