Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/5a6aad-a4c7-43b9-8a9e-8d7b736a695c/1/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.mft
File: Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.mft (raw, json)
Hash identifier: B499EYXmuEzEkZ5trQfgMXWAtfZX5etw5s0ZiDDQgeo=
Subject key identifier: 8E:D1:02:7E:F7:C4:7B:CB:8A:AD:6D:39:35:B8:A1:69:F1:8D:72:93
Authority key identifier: 4B:17:7C:45:0D:20:35:06:7B:AA:26:92:0B:8A:4B:D3:6C:7B:33:14
Certificate issuer: /CN=4b177c450d2035067baa26920b8a4bd36c7b3314
Certificate serial: 0194BBCE9927B84865A8A1413B5D500F5B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/5a6aad-a4c7-43b9-8a9e-8d7b736a695c/1/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.mft
Manifest number: 0B3C
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.crl (hash: TJZR3PVgCC2vfJmqBrp855FRSpHM93aJaQ5swtEK/oE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:99:27:b8:48:65:a8:a1:41:3b:5d:50:0f:5b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b177c450d2035067baa26920b8a4bd36c7b3314
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=8ed1027ef7c47bcb8aad6d3935b8a169f18d7293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:6b:c6:f5:52:26:f0:cf:5a:df:2e:7b:5a:
2e:2c:d9:5b:36:17:12:45:13:02:b3:25:78:82:69:
13:ce:71:e3:ec:b7:c8:c3:b2:41:bd:9d:fe:21:32:
57:ff:e2:98:40:fa:47:39:0c:bd:da:4f:d4:de:43:
db:28:be:21:44:23:ef:4d:3c:ae:0c:4d:6d:4b:8d:
e1:6d:91:34:99:36:1d:f1:d4:2c:9f:63:28:c8:f5:
27:1f:cf:95:20:f5:00:dc:eb:ae:54:58:b8:3a:6a:
90:2d:a3:7e:6b:12:ff:02:70:d1:95:6f:6d:cf:68:
85:35:d3:06:3c:4f:02:49:e2:b5:81:cc:6e:38:25:
21:c5:b1:a7:23:74:35:87:ef:f5:46:40:e6:97:06:
0e:df:40:98:06:c7:ad:f0:45:82:3c:8e:be:e1:7e:
15:02:3d:0c:cc:ac:2c:83:a7:20:3e:57:85:02:d8:
c1:fb:f0:e8:42:1a:e6:f6:44:4f:30:da:cd:2c:04:
de:bb:cf:e5:c4:9f:f8:f8:ac:61:0d:f1:a0:fe:10:
4c:52:ff:ae:3a:06:69:39:6a:fd:e4:5a:c7:a0:54:
b3:84:25:f0:90:96:e5:7f:e6:fa:2d:84:1d:8e:59:
6f:04:2b:60:04:00:21:68:7b:d6:84:ab:65:78:a6:
38:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D1:02:7E:F7:C4:7B:CB:8A:AD:6D:39:35:B8:A1:69:F1:8D:72:93
X509v3 Authority Key Identifier:
keyid:4B:17:7C:45:0D:20:35:06:7B:AA:26:92:0B:8A:4B:D3:6C:7B:33:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5a6aad-a4c7-43b9-8a9e-8d7b736a695c/1/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5a6aad-a4c7-43b9-8a9e-8d7b736a695c/1/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:44:26:ff:ba:cd:62:15:ea:a3:31:ac:e5:47:bb:73:51:cd:
4c:c2:cf:f0:2a:02:50:5a:16:c2:e0:b8:78:29:82:9e:be:7d:
d8:9b:68:05:cd:c4:82:0b:1b:1a:6a:12:a7:91:dd:85:88:20:
de:fc:b0:f3:c3:16:44:0b:42:b8:fc:12:0a:3b:ca:cd:1e:1c:
0d:74:2d:23:21:a3:1f:69:ee:7c:95:8d:c2:e2:2e:0a:b8:2a:
00:af:6d:45:d3:a6:6e:64:77:8b:04:02:d3:86:a6:da:cc:f6:
7d:e4:df:e5:51:27:87:de:7b:aa:40:d6:ff:3b:a5:b9:68:e4:
a1:a7:b8:46:88:92:16:c9:19:73:b3:0a:1e:d3:74:9f:0a:b1:
5f:cc:97:e5:fe:62:0b:b5:5c:c4:52:ed:d7:f7:29:f3:43:52:
90:b0:f1:e5:30:d2:67:9d:db:7e:6e:b4:61:fe:ed:17:e0:f3:
d6:64:c2:63:91:93:29:c2:43:16:e9:8d:bf:95:ba:cd:b1:2a:
5b:15:c9:29:e0:94:d6:71:7f:4c:44:4c:9e:84:60:d0:60:14:
79:d8:7f:01:cc:2d:20:cd:4c:04:7d:40:45:60:0e:85:4d:8b:
1a:11:d2:b7:c1:9a:1d:28:2b:0e:29:a1:86:79:69:b2:3e:84:
5b:e4:e3:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zpknuEhlqKFBO11QD1sfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMTc3YzQ1MGQyMDM1MDY3YmFhMjY5MjBiOGE0YmQzNmM3
YjMzMTQwHhcNMjUwMTMxMTAwMTA2WhcNMjUwMjAxMTAwMTA2WjAzMTEwLwYDVQQD
Eyg4ZWQxMDI3ZWY3YzQ3YmNiOGFhZDZkMzkzNWI4YTE2OWYxOGQ3MjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlxrxvVSJvDPWt8ue1ouLNlbNhcS
RRMCsyV4gmkTznHj7LfIw7JBvZ3+ITJX/+KYQPpHOQy92k/U3kPbKL4hRCPvTTyu
DE1tS43hbZE0mTYd8dQsn2MoyPUnH8+VIPUA3OuuVFi4OmqQLaN+axL/AnDRlW9t
z2iFNdMGPE8CSeK1gcxuOCUhxbGnI3Q1h+/1RkDmlwYO30CYBset8EWCPI6+4X4V
Aj0MzKwsg6cgPleFAtjB+/DoQhrm9kRPMNrNLATeu8/lxJ/4+KxhDfGg/hBMUv+u
OgZpOWr95FrHoFSzhCXwkJblf+b6LYQdjllvBCtgBAAhaHvWhKtleKY4kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7RAn73xHvLiq1tOTW4oWnxjXKTMB8GA1UdIwQY
MBaAFEsXfEUNIDUGe6omkguKS9NsezMUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3hkOFJRMGdOUVo3cWlhU0M0cEwwMng3TXhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS81YTZhYWQtYTRjNy00M2I5LThhOWUt
OGQ3YjczNmE2OTVjLzEvU3hkOFJRMGdOUVo3cWlhU0M0cEwwMng3TXhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS81YTZhYWQtYTRjNy00M2I5LThhOWUtOGQ3YjczNmE2OTVj
LzEvU3hkOFJRMGdOUVo3cWlhU0M0cEwwMng3TXhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACEQm/7rN
YhXqozGs5Ue7c1HNTMLP8CoCUFoWwuC4eCmCnr592JtoBc3EggsbGmoSp5HdhYgg
3vyw88MWRAtCuPwSCjvKzR4cDXQtIyGjH2nufJWNwuIuCrgqAK9tRdOmbmR3iwQC
04am2sz2feTf5VEnh957qkDW/zuluWjkoae4RoiSFskZc7MKHtN0nwqxX8yX5f5i
C7VcxFLt1/cp80NSkLDx5TDSZ53bfm60Yf7tF+Dz1mTCY5GTKcJDFumNv5W6zbEq
WxXJKeCU1nF/TERMnoRg0GAUedh/AcwtIM1MBH1ARWAOhU2LGhHSt8GaHSgrDimh
hnlpsj6EW+TjoA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:09 2025 by rpki-client