Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
File: k2eWXig08Yk8-oYxpIQHHmotRbc.mft (raw, json)
Hash identifier: YdfMQz6opSGupiczLqfmbZpyKKW6FP2JKAXda/yGkbI=
Subject key identifier: 8A:8A:DB:3A:61:CF:4F:AA:3B:F9:5D:1C:70:60:B5:E4:7D:3C:51:97
Authority key identifier: 93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7
Certificate issuer: /CN=9367965e2834f1893cfa8631a484071e6a2d45b7
Certificate serial: 0194BBCEAD5EB331BBB7B7C0A094C3152862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: k2eWXig08Yk8-oYxpIQHHmotRbc.crl (hash: xX6nILHcX727motQKdHlOd20yuZHFUSO+K8OF64oK/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ad:5e:b3:31:bb:b7:b7:c0:a0:94:c3:15:28:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9367965e2834f1893cfa8631a484071e6a2d45b7
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=8a8adb3a61cf4faa3bf95d1c7060b5e47d3c5197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:22:3c:3d:51:f4:de:ea:be:cb:a8:e2:db:f5:
27:62:e2:a8:b6:03:02:df:5f:04:e2:1e:ca:2a:3f:
ca:fa:bb:5b:d6:6b:39:73:29:54:e2:66:37:15:2a:
fc:7a:e6:d7:3b:e6:91:3a:bb:29:6a:85:de:c5:f1:
ce:b8:f6:e8:14:5a:3d:34:7f:49:88:30:98:dd:81:
4d:20:f9:09:19:8c:41:32:be:bf:85:5d:d4:80:36:
59:0a:ed:ba:7a:b7:14:0a:8b:7d:6f:4a:b0:4e:a3:
b8:65:6a:ac:7f:c0:9c:ed:19:b3:26:ea:73:96:77:
74:f3:fb:4f:4a:36:9b:ef:6d:26:e2:1a:d9:d5:ea:
c1:3a:b0:1f:2a:73:f9:c0:9b:6f:0c:b4:06:45:29:
bc:89:b9:6a:95:3a:7c:06:c8:23:f7:94:4f:37:91:
6b:dc:f5:01:e2:0a:3a:7f:83:d3:09:f3:6a:c4:14:
f1:92:4a:49:7a:ac:f4:42:00:1a:16:c4:39:c4:cd:
48:89:e8:1a:c9:77:2b:7a:e6:51:32:7f:4b:44:62:
83:ef:52:66:75:dc:53:d3:32:ee:35:e5:8e:30:91:
c9:b1:a6:6e:2e:e2:04:e9:3c:7d:73:30:d7:71:57:
65:52:b0:ef:b9:5e:37:d9:3d:13:a5:79:87:63:0e:
6d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8A:DB:3A:61:CF:4F:AA:3B:F9:5D:1C:70:60:B5:E4:7D:3C:51:97
X509v3 Authority Key Identifier:
keyid:93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8a:58:57:d4:8a:0d:0a:33:e5:85:cc:5c:be:47:a5:f1:da:
59:fc:5e:e9:90:07:8a:de:90:0a:19:88:46:90:6f:01:d8:c2:
cd:e7:c3:cf:19:9e:cc:2f:c5:7f:8e:6f:8c:45:e6:23:2c:2c:
97:12:f1:1d:58:52:a8:2e:49:3b:6e:60:41:dd:53:5f:12:ec:
ed:8c:67:7d:d2:0f:ed:72:1a:ea:7c:13:da:59:bc:6d:b1:84:
84:bd:5d:25:7c:41:16:9c:7d:3b:0e:04:f1:23:e6:06:b4:82:
61:0b:ad:75:fa:74:32:e5:15:bc:0b:14:b9:28:35:5c:c9:4c:
63:99:ef:46:3b:5a:82:38:cb:ed:af:d5:0f:74:a8:98:24:7f:
bf:79:46:58:fb:36:2e:52:6c:0a:eb:c7:a9:75:bf:da:cf:9e:
29:68:87:06:ce:66:12:0e:aa:25:21:cd:a6:15:25:4f:19:e2:
6f:ce:cc:90:25:37:57:5a:92:28:a3:1d:67:3f:45:67:11:34:
ea:0e:55:cf:1a:b2:09:fa:60:c5:91:8c:36:2a:c6:74:5d:0f:
34:77:b7:c4:39:63:25:af:d1:b6:7b:2a:43:9a:0b:a9:f4:5c:
60:5c:43:f4:30:95:d2:50:34:8d:18:db:4f:8a:ab:50:b9:cb:
6f:a9:48:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zq1eszG7t7fAoJTDFShiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc5NjVlMjgzNGYxODkzY2ZhODYzMWE0ODQwNzFlNmEy
ZDQ1YjcwHhcNMjUwMTMxMTAwMTExWhcNMjUwMjAxMTAwMTExWjAzMTEwLwYDVQQD
Eyg4YThhZGIzYTYxY2Y0ZmFhM2JmOTVkMWM3MDYwYjVlNDdkM2M1MTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyI8PVH03uq+y6ji2/UnYuKotgMC
318E4h7KKj/K+rtb1ms5cylU4mY3FSr8eubXO+aROrspaoXexfHOuPboFFo9NH9J
iDCY3YFNIPkJGYxBMr6/hV3UgDZZCu26ercUCot9b0qwTqO4ZWqsf8Cc7RmzJupz
lnd08/tPSjab720m4hrZ1erBOrAfKnP5wJtvDLQGRSm8iblqlTp8Bsgj95RPN5Fr
3PUB4go6f4PTCfNqxBTxkkpJeqz0QgAaFsQ5xM1IiegayXcreuZRMn9LRGKD71Jm
ddxT0zLuNeWOMJHJsaZuLuIE6Tx9czDXcVdlUrDvuV432T0TpXmHYw5tJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqK2zphz0+qO/ldHHBgteR9PFGXMB8GA1UdIwQY
MBaAFJNnll4oNPGJPPqGMaSEBx5qLUW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJlV1hpZzA4WWs4LW9ZeHBJUUhIbW90UmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQt
ZjA5M2UxN2IyN2VmLzEvazJlV1hpZzA4WWs4LW9ZeHBJUUhIbW90UmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQtZjA5M2UxN2IyN2Vm
LzEvazJlV1hpZzA4WWs4LW9ZeHBJUUhIbW90UmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWopYV9SK
DQoz5YXMXL5HpfHaWfxe6ZAHit6QChmIRpBvAdjCzefDzxmezC/Ff45vjEXmIyws
lxLxHVhSqC5JO25gQd1TXxLs7YxnfdIP7XIa6nwT2lm8bbGEhL1dJXxBFpx9Ow4E
8SPmBrSCYQutdfp0MuUVvAsUuSg1XMlMY5nvRjtagjjL7a/VD3SomCR/v3lGWPs2
LlJsCuvHqXW/2s+eKWiHBs5mEg6qJSHNphUlTxnib87MkCU3V1qSKKMdZz9FZxE0
6g5VzxqyCfpgxZGMNirGdF0PNHe3xDljJa/RtnsqQ5oLqfRcYFxD9DCV0lA0jRjb
T4qrULnLb6lIuQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:38 2025 by rpki-client