Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
File: k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json)
Hash identifier: 7y//OpOXmVTUXEBVyA4neMpKCME1unmh1oM4V/p7zPo=
Subject key identifier: C8:36:CC:9B:13:77:42:9D:9A:50:1F:DB:44:AA:9B:D8:B9:EE:C9:60
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Certificate issuer: /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial: 0194BC3C85862BCFA22E8421043FC9B1F6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: 23AgD+taUxOL+GFKEyPyECkm1wl8kdTURR0Qu6iDNFQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:85:86:2b:cf:a2:2e:84:21:04:3f:c9:b1:f6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=c836cc9b1377429d9a501fdb44aa9bd8b9eec960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:07:04:53:6d:55:3d:6d:7c:43:e4:ec:55:d7:
2e:72:b1:b3:2c:41:4c:59:9e:ed:44:1f:e6:a2:04:
29:63:cf:98:98:d3:f0:c5:2e:1f:a9:c0:d7:00:9a:
1d:c5:f9:62:7d:3d:9b:af:83:24:7a:33:ff:65:43:
0c:68:6d:7e:59:c7:f9:fe:3c:2d:16:f8:45:9c:91:
f9:9b:78:c7:c2:cf:bb:76:81:e2:8a:e6:59:b0:eb:
8d:98:be:ca:2a:5b:76:9a:fe:56:d1:3b:c6:23:48:
6d:ee:ef:69:14:82:85:e7:b6:b6:4e:8f:d1:6f:23:
37:1e:17:38:84:a5:8d:77:1d:3f:dc:0a:3e:55:29:
22:b4:64:ea:ba:b6:08:e3:66:ad:7d:f7:a6:0d:20:
85:86:82:94:5b:2d:73:bd:1b:98:c1:79:e6:51:4f:
ab:f9:e9:b4:02:b3:3d:ff:7b:d2:3a:a0:44:4c:69:
d3:2a:7d:f0:fb:ba:44:18:76:8d:dc:8a:53:f2:ff:
9a:33:50:79:42:60:84:f9:c7:c5:e1:5f:3d:cd:e5:
00:70:31:c6:83:14:1d:9f:1a:2a:02:ab:0e:f6:94:
9c:bb:97:54:65:9c:40:bd:b4:5e:7d:03:97:2b:b9:
f1:ea:5c:f2:b4:28:e7:9d:74:c4:0c:cc:a6:6e:8e:
18:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:36:CC:9B:13:77:42:9D:9A:50:1F:DB:44:AA:9B:D8:B9:EE:C9:60
X509v3 Authority Key Identifier:
keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:27:9d:65:d0:78:dd:58:a2:4a:4a:8f:ba:c5:55:3c:7e:89:
97:c6:9e:04:bd:b0:8f:9f:36:c7:dc:df:b7:b7:b5:f2:fb:7f:
03:69:61:d9:65:8f:60:73:ea:a3:d3:f0:24:ed:2a:ea:ad:78:
ef:6d:5c:1e:3d:1a:7f:47:51:69:2e:0f:7a:8b:c8:85:60:b6:
a2:0e:73:1f:5b:59:3c:85:74:78:46:fc:3b:a0:96:b6:5f:f4:
4d:55:4a:ba:63:7d:e7:34:8f:57:0e:46:f4:fd:88:27:8f:f8:
c5:ed:44:cb:ef:22:93:d8:26:28:70:c3:ac:e8:f8:92:2b:86:
b1:af:33:52:ee:ad:6f:26:a3:2e:5c:39:4f:54:0f:f9:44:09:
20:90:9b:ae:5f:88:5c:78:6d:90:71:35:52:6d:9a:c7:42:e1:
1d:ed:c4:18:4a:5b:6b:6e:ca:78:47:bf:74:e1:c1:93:4d:ef:
e4:b6:30:15:b6:b3:6b:67:21:f4:e6:4e:54:ed:11:33:77:e1:
88:b0:8d:73:23:cf:45:72:9a:10:d0:2e:99:6d:8e:35:e3:ed:
c7:f4:21:0e:78:17:42:ce:48:f3:36:88:e7:22:5a:b1:0d:60:
aa:39:ad:83:48:89:53:cb:a1:df:9a:30:85:65:7a:c1:6e:e0:
5f:16:f1:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PIWGK8+iLoQhBD/JsfbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjc2YWM5ZjdhODRhZDc5MGFkNTdjODgwYmM5Zjg2MmFk
NGM5ZTcwHhcNMjUwMTMxMTIwMTEwWhcNMjUwMjAxMTIwMTEwWjAzMTEwLwYDVQQD
EyhjODM2Y2M5YjEzNzc0MjlkOWE1MDFmZGI0NGFhOWJkOGI5ZWVjOTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gcEU21VPW18Q+TsVdcucrGzLEFM
WZ7tRB/mogQpY8+YmNPwxS4fqcDXAJodxflifT2br4MkejP/ZUMMaG1+Wcf5/jwt
FvhFnJH5m3jHws+7doHiiuZZsOuNmL7KKlt2mv5W0TvGI0ht7u9pFIKF57a2To/R
byM3Hhc4hKWNdx0/3Ao+VSkitGTqurYI42atffemDSCFhoKUWy1zvRuYwXnmUU+r
+em0ArM9/3vSOqBETGnTKn3w+7pEGHaN3IpT8v+aM1B5QmCE+cfF4V89zeUAcDHG
gxQdnxoqAqsO9pScu5dUZZxAvbRefQOXK7nx6lzytCjnnXTEDMymbo4YgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMg2zJsTd0KdmlAf20Sqm9i57slgMB8GA1UdIwQY
MBaAFJO3asn3qErXkK1XyIC8n4Yq1MnnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzkt
OTk4Mjc4ZjRmYmIyLzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzktOTk4Mjc4ZjRmYmIy
LzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiedZdB4
3ViiSkqPusVVPH6Jl8aeBL2wj582x9zft7e18vt/A2lh2WWPYHPqo9PwJO0q6q14
721cHj0af0dRaS4PeovIhWC2og5zH1tZPIV0eEb8O6CWtl/0TVVKumN95zSPVw5G
9P2IJ4/4xe1Ey+8ik9gmKHDDrOj4kiuGsa8zUu6tbyajLlw5T1QP+UQJIJCbrl+I
XHhtkHE1Um2ax0LhHe3EGEpba27KeEe/dOHBk03v5LYwFbaza2ch9OZOVO0RM3fh
iLCNcyPPRXKaENAumW2ONePtx/QhDngXQs5I8zaI5yJasQ1gqjmtg0iJU8uh35ow
hWV6wW7gXxbxAQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:15:24 2025 by rpki-client