Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
File: P5oSEPUJkiOdOn8uXoATtatJH_8.mft (raw, json)
Hash identifier: 97RDW9irbv77eBqivBMQssyx2SaWscx8lDgsrLF1uCM=
Subject key identifier: 1C:91:A7:9C:73:73:17:4A:56:FE:BB:F1:17:53:00:54:86:FB:E6:0E
Authority key identifier: 3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
Certificate issuer: /CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Certificate serial: 0194BD17F0128ADD1EDF5538F32F2262AB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
Manifest number: 0FF9
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: P5oSEPUJkiOdOn8uXoATtatJH_8.crl (hash: FkIrY4JXauTeRsrumEcVyf/lDZAw22WNOPCzUbhGhBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f0:12:8a:dd:1e:df:55:38:f3:2f:22:62:ab:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=1c91a79c7373174a56febbf11753005486fbe60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:01:29:8a:fb:ff:ef:dd:67:a5:4a:e6:8c:
29:a5:0b:bf:7b:e6:f3:55:38:06:28:b0:f0:09:ad:
47:b9:35:c6:e9:d8:05:c1:b6:7a:5c:c7:d8:20:90:
b4:60:c1:42:ec:16:4d:aa:d6:32:0b:16:4e:96:a6:
19:bc:3c:55:67:6e:f7:75:4c:e9:44:b0:f0:72:a7:
00:5e:c6:39:05:fa:ff:6d:b0:5b:04:4c:53:28:41:
bb:ea:b3:69:1f:28:bd:36:bf:63:0d:8f:41:71:0d:
2d:68:0c:c8:2d:ce:3b:7a:fb:65:39:23:dc:db:c1:
62:b2:2d:d4:77:4d:86:8d:76:90:75:b4:56:8c:08:
43:4c:bc:d3:4d:6b:85:58:d3:77:a3:0a:86:d2:c9:
48:75:2e:81:62:93:0e:ca:8f:4f:66:10:2e:85:af:
32:64:ed:4e:b0:e9:cb:98:f9:2b:da:f4:5c:8e:c4:
a3:28:9d:ef:a3:46:f8:df:57:35:ec:cb:a4:6b:9f:
d9:fd:df:c8:78:90:c4:b6:7f:26:06:e5:92:05:08:
f1:37:f7:50:a3:56:f2:1c:fa:e7:a9:2f:f6:16:d9:
9f:c6:05:24:08:d4:54:ab:65:93:2a:4a:2e:4f:13:
f3:5c:c2:04:20:3d:2b:b5:c8:0e:ff:0d:e3:53:65:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:91:A7:9C:73:73:17:4A:56:FE:BB:F1:17:53:00:54:86:FB:E6:0E
X509v3 Authority Key Identifier:
keyid:3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:de:76:a4:94:16:5c:10:a3:e8:d7:a8:95:b3:1e:6d:d9:44:
f7:9e:8d:79:bc:82:82:8f:cf:44:93:b8:79:08:6f:ba:ee:46:
58:bc:af:e0:e0:5a:67:5a:5d:0a:d6:46:8c:50:b9:94:f6:7e:
5b:d6:9c:80:65:07:b7:22:f3:5e:41:67:65:7e:80:68:eb:0a:
0b:85:8a:e0:7d:f9:af:f8:71:2f:e1:31:92:34:e3:2f:91:3b:
ba:5a:84:38:c7:b0:6a:38:4c:3b:39:ea:e8:58:ad:cd:fb:61:
a2:04:30:d6:83:86:4d:43:2d:1b:82:f5:b9:53:f5:e4:27:69:
a5:82:87:b8:b0:2c:ed:d5:45:a5:f4:cd:62:62:5a:fb:31:72:
dd:86:5e:10:8d:77:ee:a2:42:79:23:ac:51:b0:d5:de:03:56:
b8:18:ca:39:5c:17:bd:cd:1f:c9:ac:56:70:36:72:c6:13:63:
8a:8b:1f:15:19:83:46:c8:70:93:10:10:f3:11:2d:d8:d4:d4:
de:56:38:0d:bf:08:ab:83:fd:95:76:f9:7d:8f:f1:55:18:ee:
bd:04:3a:97:1c:bd:1a:5d:37:4d:9e:d2:7c:b9:c3:3b:8a:c9:
8e:89:5a:f9:41:64:5b:a6:48:50:05:17:d4:d3:f3:c4:be:51:
91:44:49:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/ASit0e31U48y8iYquPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOWExMjEwZjUwOTkyMjM5ZDNhN2YyZTVlODAxM2I1YWI0
OTFmZmYwHhcNMjUwMTMxMTYwMDUwWhcNMjUwMjAxMTYwMDUwWjAzMTEwLwYDVQQD
EygxYzkxYTc5YzczNzMxNzRhNTZmZWJiZjExNzUzMDA1NDg2ZmJlNjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxkBKYr7/+/dZ6VK5owppQu/e+bz
VTgGKLDwCa1HuTXG6dgFwbZ6XMfYIJC0YMFC7BZNqtYyCxZOlqYZvDxVZ273dUzp
RLDwcqcAXsY5Bfr/bbBbBExTKEG76rNpHyi9Nr9jDY9BcQ0taAzILc47evtlOSPc
28Fisi3Ud02GjXaQdbRWjAhDTLzTTWuFWNN3owqG0slIdS6BYpMOyo9PZhAuha8y
ZO1OsOnLmPkr2vRcjsSjKJ3vo0b431c17Muka5/Z/d/IeJDEtn8mBuWSBQjxN/dQ
o1byHPrnqS/2FtmfxgUkCNRUq2WTKkouTxPzXMIEID0rtcgO/w3jU2XhNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByRp5xzcxdKVv678RdTAFSG++YOMB8GA1UdIwQY
MBaAFD+aEhD1CZIjnTp/Ll6AE7WrSR//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVvU0VQVUpraU9kT244dVhvQVR0YXRKSF84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNGE1ZTgtZjNiZi00MmY5LWEyODUt
YTg3MzRmNzAzYjk4LzEvUDVvU0VQVUpraU9kT244dVhvQVR0YXRKSF84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xNGE1ZTgtZjNiZi00MmY5LWEyODUtYTg3MzRmNzAzYjk4
LzEvUDVvU0VQVUpraU9kT244dVhvQVR0YXRKSF84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACt52pJQW
XBCj6NeolbMebdlE956NebyCgo/PRJO4eQhvuu5GWLyv4OBaZ1pdCtZGjFC5lPZ+
W9acgGUHtyLzXkFnZX6AaOsKC4WK4H35r/hxL+ExkjTjL5E7ulqEOMewajhMOznq
6FitzfthogQw1oOGTUMtG4L1uVP15CdppYKHuLAs7dVFpfTNYmJa+zFy3YZeEI13
7qJCeSOsUbDV3gNWuBjKOVwXvc0fyaxWcDZyxhNjiosfFRmDRshwkxAQ8xEt2NTU
3lY4Db8Iq4P9lXb5fY/xVRjuvQQ6lxy9Gl03TZ7SfLnDO4rJjola+UFkW6ZIUAUX
1NPzxL5RkURJcg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:05 2025 by rpki-client