Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.mft
File: dtQhWmJUV7wFMhkciAP3xkt_kGU.mft (raw, json)
Hash identifier: Kgtp2RBy9q6sDx0t6DiWUb/Y7Oa/PVH5IJ/vi7bp0Rs=
Subject key identifier: F7:FF:0E:AF:93:2A:2E:93:50:CE:FD:7B:2D:AE:5B:45:96:82:8C:B2
Authority key identifier: 76:D4:21:5A:62:54:57:BC:05:32:19:1C:88:03:F7:C6:4B:7F:90:65
Certificate issuer: /CN=76d4215a625457bc0532191c8803f7c64b7f9065
Certificate serial: 0194BCE06C69B7758B9ABCCB8C9957AA5904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtQhWmJUV7wFMhkciAP3xkt_kGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.mft
Manifest number: 0201
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: dtQhWmJUV7wFMhkciAP3xkt_kGU.crl (hash: 9GR9AGdKnexMabgtVXUb1C6YUfUJ+1o880WOAMRBDO8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6c:69:b7:75:8b:9a:bc:cb:8c:99:57:aa:59:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d4215a625457bc0532191c8803f7c64b7f9065
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=f7ff0eaf932a2e9350cefd7b2dae5b4596828cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:57:a0:8d:40:c4:d2:c2:9b:4d:1d:88:e5:75:
cd:ed:c1:d8:3e:44:2c:d0:5a:a6:52:a9:82:08:d9:
f6:b4:c7:a7:18:f7:70:c4:d0:73:5e:51:8f:92:5d:
b1:e9:01:8a:fd:89:74:65:5c:b9:0c:d6:7c:c7:f0:
f6:c8:40:c4:ea:2c:5b:1b:6c:d2:a6:5a:4c:03:78:
a3:7a:de:98:a3:72:2f:ce:55:bb:48:1c:8a:72:a0:
01:50:20:56:46:51:d5:33:a0:8d:e1:5e:30:78:4c:
78:9f:e7:ca:e6:a3:4f:83:71:ff:ac:56:1d:17:18:
47:f6:9d:1d:85:10:60:9f:28:ee:0a:58:f2:b9:ca:
f5:67:c8:01:33:33:d8:b5:e0:17:50:c7:1e:8c:15:
72:00:9e:df:7c:f7:76:43:bd:ee:17:83:22:cb:4d:
f4:bf:e8:53:f2:8c:0e:c7:37:07:f2:0a:dd:24:bc:
d6:e3:06:de:fb:75:a9:99:82:7d:06:02:ef:33:5c:
39:a7:6a:20:12:0f:47:ab:24:5d:f3:1b:a9:f3:81:
5b:d4:2c:1d:d8:80:bd:ee:2d:2e:91:5e:0a:5e:68:
22:17:2c:13:4f:54:32:76:9e:ec:24:2d:7a:ce:fd:
e4:e9:50:95:a9:07:6a:f1:55:4f:dc:2b:59:ea:ee:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FF:0E:AF:93:2A:2E:93:50:CE:FD:7B:2D:AE:5B:45:96:82:8C:B2
X509v3 Authority Key Identifier:
keyid:76:D4:21:5A:62:54:57:BC:05:32:19:1C:88:03:F7:C6:4B:7F:90:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtQhWmJUV7wFMhkciAP3xkt_kGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:83:95:67:d1:7d:63:63:53:f8:f1:8c:5e:b8:ed:5e:3c:36:
f8:52:07:f5:04:19:5d:08:54:9b:cc:0a:98:94:5b:71:71:b7:
67:79:00:e8:89:a8:3a:ff:48:95:b4:42:40:b0:8f:8b:a7:5d:
5e:0c:cb:e7:28:37:ec:3a:39:b2:8d:fd:73:fc:02:56:3f:0e:
06:68:fa:72:ff:0c:cc:ee:6b:f0:3f:36:fe:30:70:17:38:53:
bd:10:30:60:7c:ed:37:90:34:9d:ff:77:cb:43:4b:51:db:8f:
6d:1d:6a:ec:fb:4b:c3:c7:61:23:f1:3e:84:64:3b:db:2e:cf:
3a:6b:e8:6f:9e:d9:41:a4:fb:c2:39:11:f2:f9:d2:56:a3:c4:
e2:95:17:fe:01:f0:e3:6f:bb:a2:93:bb:6d:60:13:ac:1b:38:
e8:1f:15:cd:5d:1a:e5:85:21:bf:52:4d:26:90:47:85:13:b7:
91:ce:c7:da:c9:f1:6d:3a:d9:ed:bf:7e:a7:db:52:37:49:f7:
10:78:41:14:e8:26:79:fb:14:6f:c2:fa:df:e1:cf:4b:06:12:
dc:a0:25:03:a5:f0:40:d5:d3:c4:54:70:91:01:88:74:f7:1e:
53:dc:41:ad:25:1e:52:26:5e:72:fb:70:3b:c7:65:75:66:00:
1c:65:82:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Gxpt3WLmrzLjJlXqlkEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZDQyMTVhNjI1NDU3YmMwNTMyMTkxYzg4MDNmN2M2NGI3
ZjkwNjUwHhcNMjUwMTMxMTUwMDExWhcNMjUwMjAxMTUwMDExWjAzMTEwLwYDVQQD
EyhmN2ZmMGVhZjkzMmEyZTkzNTBjZWZkN2IyZGFlNWI0NTk2ODI4Y2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVegjUDE0sKbTR2I5XXN7cHYPkQs
0FqmUqmCCNn2tMenGPdwxNBzXlGPkl2x6QGK/Yl0ZVy5DNZ8x/D2yEDE6ixbG2zS
plpMA3ijet6Yo3IvzlW7SByKcqABUCBWRlHVM6CN4V4weEx4n+fK5qNPg3H/rFYd
FxhH9p0dhRBgnyjuCljyucr1Z8gBMzPYteAXUMcejBVyAJ7ffPd2Q73uF4Miy030
v+hT8owOxzcH8grdJLzW4wbe+3WpmYJ9BgLvM1w5p2ogEg9HqyRd8xup84Fb1Cwd
2IC97i0ukV4KXmgiFywTT1Qydp7sJC16zv3k6VCVqQdq8VVP3CtZ6u6TWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPf/Dq+TKi6TUM79ey2uW0WWgoyyMB8GA1UdIwQY
MBaAFHbUIVpiVFe8BTIZHIgD98ZLf5BlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHRRaFdtSlVWN3dGTWhrY2lBUDN4a3Rfa0dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNTAxZGUtM2IxZC00ZDgwLWI2ZTkt
Zjg4ZDdlYzNhNTI2LzEvZHRRaFdtSlVWN3dGTWhrY2lBUDN4a3Rfa0dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNTAxZGUtM2IxZC00ZDgwLWI2ZTktZjg4ZDdlYzNhNTI2
LzEvZHRRaFdtSlVWN3dGTWhrY2lBUDN4a3Rfa0dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4OVZ9F9
Y2NT+PGMXrjtXjw2+FIH9QQZXQhUm8wKmJRbcXG3Z3kA6ImoOv9IlbRCQLCPi6dd
XgzL5yg37Do5so39c/wCVj8OBmj6cv8MzO5r8D82/jBwFzhTvRAwYHztN5A0nf93
y0NLUduPbR1q7PtLw8dhI/E+hGQ72y7POmvob57ZQaT7wjkR8vnSVqPE4pUX/gHw
42+7opO7bWATrBs46B8VzV0a5YUhv1JNJpBHhRO3kc7H2snxbTrZ7b9+p9tSN0n3
EHhBFOgmefsUb8L63+HPSwYS3KAlA6XwQNXTxFRwkQGIdPceU9xBrSUeUiZecvtw
O8dldWYAHGWCjQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:18 2025 by rpki-client