Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
File: r6seSN7xSynSHTQjTESOqAjmGL8.mft (raw, json)
Hash identifier: Q7TvxWhz1xnaxKHTRoduW5f4GuFiNtPLKhK5LKMYO2k=
Subject key identifier: 32:38:5E:92:02:D2:61:85:CE:47:18:FC:E7:F5:20:CB:01:01:97:83
Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
Certificate issuer: /CN=afab1e48def14b29d21d34234c448ea808e618bf
Certificate serial: 0194BC72AED21894975504780EFCE841ECB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
Manifest number: 0B0F
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: r6seSN7xSynSHTQjTESOqAjmGL8.crl (hash: YbpN3cRw59eXd6+r4ka5VEh2XHHLdlOnshiXGy0qKf4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ae:d2:18:94:97:55:04:78:0e:fc:e8:41:ec:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=32385e9202d26185ce4718fce7f520cb01019783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:71:4c:7b:f2:5e:de:57:5c:d1:e2:50:66:
6c:78:de:28:ce:96:2d:9b:8b:67:a3:a2:18:50:33:
41:79:be:fb:bb:15:ab:4a:ce:ae:a0:7a:7d:07:dc:
f7:48:4a:be:0b:d5:de:62:ce:4b:49:4a:92:0e:66:
63:bf:20:a5:fd:23:42:15:9f:5a:ab:59:fd:5a:d2:
1d:76:62:56:17:c7:3d:7c:ab:f8:b4:60:0c:ba:7a:
5d:3b:ab:0d:a7:c8:e6:78:0f:c7:24:58:ba:94:3e:
ff:f3:01:9c:b4:0d:3a:f3:46:a4:56:27:57:04:bc:
94:c1:c6:81:6e:ce:b2:b1:29:51:c5:ce:1a:6b:ae:
47:96:02:f6:e5:f2:54:e7:91:15:9a:d7:e0:f1:c3:
09:44:2e:56:6c:d9:51:5e:ce:c2:82:68:ea:33:7c:
a9:52:57:5a:de:73:20:4c:80:77:8d:fb:07:83:8c:
08:ae:11:04:2f:d9:56:54:63:9e:83:27:c3:7d:ca:
79:a0:a2:70:c4:6f:b1:0b:95:52:66:77:e3:0c:a3:
8b:5f:d2:6e:03:e1:9f:18:d6:52:47:f1:0b:f2:7e:
19:92:d7:c0:91:9d:a4:70:96:f7:35:df:fd:ce:33:
2d:84:48:a8:4b:14:60:a3:c1:e2:c5:23:9d:d5:1e:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:38:5E:92:02:D2:61:85:CE:47:18:FC:E7:F5:20:CB:01:01:97:83
X509v3 Authority Key Identifier:
keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e8:d0:3d:25:07:c6:ab:1a:7b:2a:87:f9:d0:89:27:42:2c:
15:49:e4:c8:08:6a:78:70:8f:20:0f:51:de:d4:16:db:3b:48:
93:74:9b:3d:58:a0:1a:c6:21:70:93:bb:46:45:22:d5:81:ab:
35:ae:a0:dd:75:4e:6f:df:90:78:84:9b:b2:58:b5:19:20:3d:
72:d0:83:c7:fd:67:9b:3d:db:e5:cf:2b:63:84:44:8a:56:91:
46:3a:91:0f:0c:11:1e:7f:12:76:0d:8a:28:5f:57:28:c6:a7:
85:e0:6a:09:23:b8:ee:b4:73:22:c6:8e:0a:aa:66:bf:8f:ac:
fd:27:d0:d2:1a:8e:bf:57:e0:ef:9c:8d:d0:bf:7a:f9:d1:9c:
b5:30:55:ac:43:7f:29:1c:59:95:76:c3:4e:da:2a:77:09:5d:
52:07:a7:ef:88:9a:1c:b0:e5:98:83:4e:78:fa:03:64:9c:c1:
5c:b8:e3:a4:1c:d9:72:7b:35:a8:4a:60:73:e1:66:49:50:e2:
d4:be:91:31:e1:13:8d:32:e4:6e:38:09:f4:cf:94:e9:06:aa:
97:12:98:a4:10:7c:ea:eb:36:8b:62:66:9d:c3:2e:7a:d3:7b:
3c:60:dd:ce:8c:06:a8:c5:4b:da:c8:a0:44:06:4d:cb:5e:cb:
51:a5:0a:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cq7SGJSXVQR4DvzoQey1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYWIxZTQ4ZGVmMTRiMjlkMjFkMzQyMzRjNDQ4ZWE4MDhl
NjE4YmYwHhcNMjUwMTMxMTMwMDE5WhcNMjUwMjAxMTMwMDE5WjAzMTEwLwYDVQQD
EygzMjM4NWU5MjAyZDI2MTg1Y2U0NzE4ZmNlN2Y1MjBjYjAxMDE5NzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJNxTHvyXt5XXNHiUGZseN4ozpYt
m4tno6IYUDNBeb77uxWrSs6uoHp9B9z3SEq+C9XeYs5LSUqSDmZjvyCl/SNCFZ9a
q1n9WtIddmJWF8c9fKv4tGAMunpdO6sNp8jmeA/HJFi6lD7/8wGctA0680akVidX
BLyUwcaBbs6ysSlRxc4aa65HlgL25fJU55EVmtfg8cMJRC5WbNlRXs7CgmjqM3yp
Ulda3nMgTIB3jfsHg4wIrhEEL9lWVGOegyfDfcp5oKJwxG+xC5VSZnfjDKOLX9Ju
A+GfGNZSR/EL8n4ZktfAkZ2kcJb3Nd/9zjMthEioSxRgo8HixSOd1R5ovQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDI4XpIC0mGFzkcY/Of1IMsBAZeDMB8GA1UdIwQY
MBaAFK+rHkje8Usp0h00I0xEjqgI5hi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZTYwN2YtZTIxZi00Y2ZhLWEzMzYt
OTMxNDg2MGMyYzdmLzEvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wZTYwN2YtZTIxZi00Y2ZhLWEzMzYtOTMxNDg2MGMyYzdm
LzEvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+jQPSUH
xqsaeyqH+dCJJ0IsFUnkyAhqeHCPIA9R3tQW2ztIk3SbPVigGsYhcJO7RkUi1YGr
Na6g3XVOb9+QeISbsli1GSA9ctCDx/1nmz3b5c8rY4REilaRRjqRDwwRHn8Sdg2K
KF9XKManheBqCSO47rRzIsaOCqpmv4+s/SfQ0hqOv1fg75yN0L96+dGctTBVrEN/
KRxZlXbDTtoqdwldUgen74iaHLDlmINOePoDZJzBXLjjpBzZcns1qEpgc+FmSVDi
1L6RMeETjTLkbjgJ9M+U6QaqlxKYpBB86us2i2JmncMuetN7PGDdzowGqMVL2sig
RAZNy17LUaUKPw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:31 2025 by rpki-client