Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
File: 0jhr7YO2RaK64TifU9llfZGedtE.mft (raw, json)
Hash identifier: vrusYffEDblE8jp+Jj8d/1hbXji/Fw98jT4CogmKv/c=
Subject key identifier: C9:61:E5:4A:A8:26:B9:AE:3C:87:FF:64:5D:E7:37:CB:E5:5D:26:B5
Authority key identifier: D2:38:6B:ED:83:B6:45:A2:BA:E1:38:9F:53:D9:65:7D:91:9E:76:D1
Certificate issuer: /CN=d2386bed83b645a2bae1389f53d9657d919e76d1
Certificate serial: 0194BBCEC15E21232C02266881651B1489BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jhr7YO2RaK64TifU9llfZGedtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
Manifest number: 07EF
Signing time: Fri 31 Jan 2025 10:01:16 +0000
Manifest this update: Fri 31 Jan 2025 10:01:16 +0000
Manifest next update: Sat 01 Feb 2025 10:01:16 +0000
Files and hashes: 1: 0jhr7YO2RaK64TifU9llfZGedtE.crl (hash: +NpoLP+S+RJwlg3lTAXV5Pm92d4U2bB+YLpLeCny2dk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c1:5e:21:23:2c:02:26:68:81:65:1b:14:89:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2386bed83b645a2bae1389f53d9657d919e76d1
Validity
Not Before: Jan 31 10:01:16 2025 GMT
Not After : Feb 1 10:01:16 2025 GMT
Subject: CN=c961e54aa826b9ae3c87ff645de737cbe55d26b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:7d:fc:77:2e:df:8c:89:08:33:05:4f:96:
09:f4:e8:3c:cf:b9:f8:53:53:91:e6:f3:55:b4:4b:
52:d9:bb:b3:7a:bf:b7:9a:a4:b7:a8:12:b5:69:ed:
6e:9a:f0:16:a8:f2:56:0f:d6:b9:51:85:89:a7:c8:
c1:c8:34:c5:11:e9:b4:00:ec:17:0a:b4:72:2f:f3:
11:e2:d3:32:0a:4b:e5:3c:93:7e:79:83:eb:bd:a7:
9c:da:a9:e5:ef:4a:f7:d9:f6:2f:4b:93:ad:5b:75:
a7:4a:21:99:df:9b:d5:3a:de:84:a0:9f:b0:46:1b:
00:0a:fc:ad:a9:48:89:cf:f8:11:c5:be:10:83:c4:
3d:2c:e8:29:a6:cb:20:c4:9f:6b:04:34:cf:55:46:
42:d8:f0:05:7e:fa:d6:81:42:db:f9:3a:49:ab:23:
b0:66:04:8a:10:9b:db:a0:91:59:7f:ee:98:d4:b1:
01:2a:fb:d3:e0:c6:a7:3e:ad:b4:35:78:46:71:ce:
66:78:cb:fe:77:a0:64:b4:5a:d0:29:6a:5b:ac:b4:
76:e9:4b:7c:fb:ca:6d:5d:b0:11:6c:77:86:f3:23:
cd:0d:8d:9d:fb:5b:6c:77:d2:de:f3:14:84:89:fc:
69:b3:49:aa:ac:9d:63:96:7b:1b:71:75:91:52:81:
e2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:61:E5:4A:A8:26:B9:AE:3C:87:FF:64:5D:E7:37:CB:E5:5D:26:B5
X509v3 Authority Key Identifier:
keyid:D2:38:6B:ED:83:B6:45:A2:BA:E1:38:9F:53:D9:65:7D:91:9E:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jhr7YO2RaK64TifU9llfZGedtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:05:e0:f9:dc:2a:b5:e2:b1:6a:d1:b3:11:30:52:1e:96:ff:
09:9d:f9:f6:11:18:ac:38:66:32:ab:93:ad:7c:a9:f9:bd:c0:
32:ef:e5:75:1e:c5:ce:ca:3f:66:f1:55:28:3e:01:8b:aa:a5:
9d:24:93:0c:12:e8:ee:18:1d:a4:94:76:a9:8b:65:28:4e:0b:
ff:e4:1f:8b:10:74:0b:28:21:69:b1:11:a6:8b:a7:b0:a6:67:
10:a4:73:ae:9c:ca:57:c9:73:9b:7b:d9:1e:bb:7f:fb:f7:e9:
50:3d:92:42:42:22:c2:d3:ad:dd:02:0c:3d:4f:bf:d3:02:c8:
63:dd:c4:5b:2f:c6:11:df:c7:b1:d7:d7:be:44:80:e8:3e:8b:
6d:fe:fb:03:9f:2d:b4:8d:21:64:2c:a7:f8:f1:c0:2f:5d:e3:
18:27:30:72:c2:1d:5f:d5:03:60:03:41:00:3d:af:6b:2f:e8:
2a:7e:d8:1c:3a:4c:3a:5a:de:09:24:eb:b8:b1:4f:a3:3b:db:
a4:fc:7a:9d:23:d3:82:52:86:19:3d:88:6e:9c:8b:b7:6a:ac:
1f:fc:ed:bc:48:d7:de:7d:bd:a5:e6:01:f5:24:b7:45:5c:ad:
ea:62:16:e4:6f:77:3c:8c:ce:95:26:aa:09:5e:c9:27:c7:2b:
6b:a1:2f:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zsFeISMsAiZogWUbFIm8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzg2YmVkODNiNjQ1YTJiYWUxMzg5ZjUzZDk2NTdkOTE5
ZTc2ZDEwHhcNMjUwMTMxMTAwMTE2WhcNMjUwMjAxMTAwMTE2WjAzMTEwLwYDVQQD
EyhjOTYxZTU0YWE4MjZiOWFlM2M4N2ZmNjQ1ZGU3MzdjYmU1NWQyNmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEl9/Hcu34yJCDMFT5YJ9Og8z7n4
U1OR5vNVtEtS2buzer+3mqS3qBK1ae1umvAWqPJWD9a5UYWJp8jByDTFEem0AOwX
CrRyL/MR4tMyCkvlPJN+eYPrvaec2qnl70r32fYvS5OtW3WnSiGZ35vVOt6EoJ+w
RhsACvytqUiJz/gRxb4Qg8Q9LOgppssgxJ9rBDTPVUZC2PAFfvrWgULb+TpJqyOw
ZgSKEJvboJFZf+6Y1LEBKvvT4ManPq20NXhGcc5meMv+d6BktFrQKWpbrLR26Ut8
+8ptXbARbHeG8yPNDY2d+1tsd9Le8xSEifxps0mqrJ1jlnsbcXWRUoHiEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlh5UqoJrmuPIf/ZF3nN8vlXSa1MB8GA1UdIwQY
MBaAFNI4a+2DtkWiuuE4n1PZZX2RnnbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpocjdZTzJSYUs2NFRpZlU5bGxmWkdlZHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81NjMyOTctNjA1Ni00Njc1LTgzOTkt
MDM0MzgzNTFhMzY5LzEvMGpocjdZTzJSYUs2NFRpZlU5bGxmWkdlZHRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81NjMyOTctNjA1Ni00Njc1LTgzOTktMDM0MzgzNTFhMzY5
LzEvMGpocjdZTzJSYUs2NFRpZlU5bGxmWkdlZHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyQXg+dwq
teKxatGzETBSHpb/CZ359hEYrDhmMquTrXyp+b3AMu/ldR7Fzso/ZvFVKD4Bi6ql
nSSTDBLo7hgdpJR2qYtlKE4L/+QfixB0CyghabERpounsKZnEKRzrpzKV8lzm3vZ
Hrt/+/fpUD2SQkIiwtOt3QIMPU+/0wLIY93EWy/GEd/HsdfXvkSA6D6Lbf77A58t
tI0hZCyn+PHAL13jGCcwcsIdX9UDYANBAD2vay/oKn7YHDpMOlreCSTruLFPozvb
pPx6nSPTglKGGT2IbpyLt2qsH/ztvEjX3n29peYB9SS3RVyt6mIW5G93PIzOlSaq
CV7JJ8cra6EvrA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:29 2025 by rpki-client