Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
File: lEethLhLrsR9ViHi91Yj8-rxOWA.mft (raw, json)
Hash identifier: nz7ghPVCqe8gITJdPIr07qouzutdPWO9+EB1JzUSMcU=
Subject key identifier: 1B:43:0F:24:C6:2C:51:98:B2:62:9D:10:91:8D:DA:52:16:1B:62:14
Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
Certificate issuer: /CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Certificate serial: 0194BD85A26D8D0F73E5A1A3F12BC89091B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
Manifest number: 02
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: lEethLhLrsR9ViHi91Yj8-rxOWA.crl (hash: PGFnhHMiujv6+bWuoQS36kqTdEY1fmP1RxPA2v8UDkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a2:6d:8d:0f:73:e5:a1:a3:f1:2b:c8:90:91:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=1b430f24c62c5198b2629d10918dda52161b6214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6b:72:c4:07:a0:35:14:9b:3c:fc:20:73:eb:
6c:c7:7a:bf:a8:94:c4:5b:6e:fb:cd:4c:e9:9e:de:
ea:cc:1d:ca:2d:d1:02:80:83:88:42:b0:2d:1a:99:
3b:cb:26:30:5a:d6:81:44:9d:4a:be:f0:ea:74:20:
35:fd:4a:3c:a2:e1:df:3b:17:7f:8b:a9:ae:7f:3a:
e4:02:8d:6f:68:11:15:54:7f:f2:75:c6:a3:6c:6e:
cf:72:6f:df:a0:4a:7a:e6:66:f6:c0:3d:d0:16:56:
80:2b:60:d2:5d:ee:7b:ee:67:67:29:d6:f0:98:88:
90:77:ba:b1:9e:62:bf:8c:24:14:50:16:9f:fc:50:
a6:8b:7a:18:39:ca:c8:5d:69:b2:60:00:bc:d0:33:
59:5f:ac:d3:e4:03:10:28:41:cf:3e:b5:cd:eb:f2:
ad:53:8e:58:7f:0c:0d:a4:1a:58:7e:ba:f6:a4:b6:
0e:cb:02:e6:fd:2c:11:e6:71:e3:98:fc:d4:48:80:
b1:18:18:b1:08:a2:b5:68:cd:e9:4c:dd:41:af:ed:
08:c3:82:32:ca:ae:27:0f:53:fa:53:53:75:40:19:
63:c9:33:18:af:8c:a9:ca:ae:06:fe:34:c3:56:36:
0a:14:61:73:1e:16:12:c6:70:ba:f6:20:cb:56:51:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:43:0F:24:C6:2C:51:98:B2:62:9D:10:91:8D:DA:52:16:1B:62:14
X509v3 Authority Key Identifier:
keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:45:92:d7:b4:ce:65:40:e1:64:9f:31:71:d3:7f:09:b6:3c:
a6:1c:bd:cb:e3:68:b0:06:07:91:15:28:44:b6:e1:e4:89:43:
67:5a:c9:a5:43:4f:5d:30:83:e5:9c:bb:fa:22:ef:f6:0b:06:
e4:3c:16:3f:43:93:8c:81:99:80:4e:a7:c2:20:84:af:f8:a9:
6d:63:cf:c4:c4:75:b8:b9:8c:57:89:97:08:f2:6c:3b:ff:d2:
fb:5b:f1:e4:8e:5c:8f:00:1b:c5:d5:e3:31:31:25:51:a5:af:
cb:0d:4c:89:60:62:dd:36:3d:f0:65:87:b3:55:56:b7:cc:6b:
6d:a5:10:3e:65:58:94:ae:4a:7b:41:5a:a7:12:3f:89:0e:32:
f3:df:61:13:5f:de:ba:4e:ea:68:22:56:a4:26:2b:58:1e:19:
5e:b3:ee:8c:19:be:61:10:95:f8:95:e5:44:e5:c9:94:1b:0f:
fb:d3:db:17:3e:c6:34:dc:65:40:5d:70:78:0d:e0:5b:cf:85:
65:96:ea:95:c4:34:e6:af:f3:e2:7c:3b:ad:23:0e:93:08:88:
1d:48:6e:8a:f1:57:67:02:a6:6b:53:15:67:02:48:de:4b:01:
93:80:95:f2:e9:fb:9b:22:6a:9f:2d:91:e3:13:c6:39:8b:c8:
4f:e3:e4:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9haJtjQ9z5aGj8SvIkJG0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NDdhZDg0Yjg0YmFlYzQ3ZDU2MjFlMmY3NTYyM2YzZWFm
MTM5NjAwHhcNMjUwMTMxMTgwMDM5WhcNMjUwMjAxMTgwMDM5WjAzMTEwLwYDVQQD
EygxYjQzMGYyNGM2MmM1MTk4YjI2MjlkMTA5MThkZGE1MjE2MWI2MjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02tyxAegNRSbPPwgc+tsx3q/qJTE
W277zUzpnt7qzB3KLdECgIOIQrAtGpk7yyYwWtaBRJ1KvvDqdCA1/Uo8ouHfOxd/
i6mufzrkAo1vaBEVVH/ydcajbG7Pcm/foEp65mb2wD3QFlaAK2DSXe577mdnKdbw
mIiQd7qxnmK/jCQUUBaf/FCmi3oYOcrIXWmyYAC80DNZX6zT5AMQKEHPPrXN6/Kt
U45YfwwNpBpYfrr2pLYOywLm/SwR5nHjmPzUSICxGBixCKK1aM3pTN1Br+0Iw4Iy
yq4nD1P6U1N1QBljyTMYr4ypyq4G/jTDVjYKFGFzHhYSxnC69iDLVlGw2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtDDyTGLFGYsmKdEJGN2lIWG2IUMB8GA1UdIwQY
MBaAFJRHrYS4S67EfVYh4vdWI/Pq8TlgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yMzhjNTYtYzI1ZS00ZmQ2LWI5MTYt
NWIzMThjMzQ5OWZiLzEvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8yMzhjNTYtYzI1ZS00ZmQ2LWI5MTYtNWIzMThjMzQ5OWZi
LzEvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUWS17TO
ZUDhZJ8xcdN/CbY8phy9y+NosAYHkRUoRLbh5IlDZ1rJpUNPXTCD5Zy7+iLv9gsG
5DwWP0OTjIGZgE6nwiCEr/ipbWPPxMR1uLmMV4mXCPJsO//S+1vx5I5cjwAbxdXj
MTElUaWvyw1MiWBi3TY98GWHs1VWt8xrbaUQPmVYlK5Ke0FapxI/iQ4y899hE1/e
uk7qaCJWpCYrWB4ZXrPujBm+YRCV+JXlROXJlBsP+9PbFz7GNNxlQF1weA3gW8+F
ZZbqlcQ05q/z4nw7rSMOkwiIHUhuivFXZwKma1MVZwJI3ksBk4CV8un7myJqny2R
4xPGOYvIT+PkpQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:19:09 2025 by rpki-client