Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
File: Ay1SsyOaHOPN00MxNIzngN3xZMA.mft (raw, json)
Hash identifier: aYrSLC8dOHt3CP/pcCmEqHKmm4MSKLifzz698N8XHtA=
Subject key identifier: D6:3C:05:72:88:33:71:4C:AD:A9:6E:03:FE:1B:3A:78:EC:F0:CE:63
Authority key identifier: 03:2D:52:B3:23:9A:1C:E3:CD:D3:43:31:34:8C:E7:80:DD:F1:64:C0
Certificate issuer: /CN=032d52b3239a1ce3cdd34331348ce780ddf164c0
Certificate serial: 0194BBCDEADFB500C8C9AD80D682DCE31B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
Manifest number: 04DB
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: Ay1SsyOaHOPN00MxNIzngN3xZMA.crl (hash: y+1AXjRmvye0KwatzA8EOHX9VbQSYzyCWWoN5RdYd3w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ea:df:b5:00:c8:c9:ad:80:d6:82:dc:e3:1b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032d52b3239a1ce3cdd34331348ce780ddf164c0
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=d63c05728833714cada96e03fe1b3a78ecf0ce63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:88:06:7e:d6:ed:2d:6c:47:1c:1d:c7:be:
cd:44:a1:70:31:33:9b:16:ed:2e:6c:6f:71:d6:46:
94:80:f1:fd:0c:88:39:4c:6a:bd:fd:23:e3:41:ff:
df:bd:3e:d2:f5:d2:aa:1a:ea:06:b4:79:96:1e:a0:
16:79:f4:d6:22:8d:df:f8:08:a9:2f:fc:41:e1:06:
e9:fb:e0:29:84:9d:79:9a:7e:bf:44:80:8a:61:99:
67:1e:af:08:55:05:50:f9:82:03:01:ff:eb:21:dc:
9c:27:df:52:08:80:8e:0d:fe:fb:ea:c2:55:bc:fc:
48:24:ef:ff:6a:4e:9e:8e:db:ae:c5:47:0e:75:64:
7b:99:a9:37:f2:cc:1e:bb:0a:dd:4e:12:7e:8d:4d:
61:1f:a3:53:49:e0:bb:b5:4d:01:ff:34:cd:c7:2e:
11:87:80:63:ce:9e:71:f6:d3:8f:a9:9c:d0:0c:4b:
b3:d5:5a:4e:c2:fb:c9:ae:30:09:1b:46:ed:4a:21:
cb:98:92:34:98:18:b5:f9:74:24:f6:67:72:96:26:
75:ce:7f:b0:51:78:ec:7e:d0:90:2b:74:7f:e0:a4:
1f:a4:36:de:3d:42:59:aa:b0:d9:35:57:17:55:17:
74:d3:62:c9:b6:14:5a:8d:e0:80:8e:14:60:42:fe:
a3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3C:05:72:88:33:71:4C:AD:A9:6E:03:FE:1B:3A:78:EC:F0:CE:63
X509v3 Authority Key Identifier:
keyid:03:2D:52:B3:23:9A:1C:E3:CD:D3:43:31:34:8C:E7:80:DD:F1:64:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:26:58:ab:99:91:3f:5f:e3:11:39:b4:14:0f:52:f1:c9:76:
29:f7:a3:f4:aa:a0:17:20:1e:a2:0e:e4:fd:63:db:e2:18:9d:
e4:ed:75:76:d9:b5:5b:ac:2f:51:80:14:71:a9:ac:2f:dd:05:
b0:61:f9:43:0a:08:d4:c4:ff:58:dc:0b:1e:fc:81:5a:6b:f3:
8d:84:6f:92:ea:21:db:80:03:ae:a3:51:08:14:01:d9:98:94:
3e:d5:50:4c:d7:0c:0a:56:d2:a9:db:29:7a:3f:7e:50:42:4d:
48:b8:26:44:e7:6c:3b:75:42:ff:1c:9d:8e:e0:eb:d2:b3:81:
7d:31:40:7d:e2:97:5f:b4:3a:f0:b4:19:7f:78:33:cc:d0:d1:
85:ab:08:a3:15:7c:c2:10:2f:91:76:dc:93:1f:27:15:3f:5f:
c2:dc:b8:b1:f0:ed:05:0c:4b:ff:4d:e0:08:79:07:2c:7b:35:
e2:1a:a8:6f:55:a7:d9:f5:7c:c8:82:dd:0a:d8:4a:c0:a8:ca:
69:e6:c7:6e:ce:bb:2d:f7:93:d1:5f:e1:01:06:43:86:1b:80:
8a:e3:ad:da:c2:e4:4c:f2:9f:ea:61:0e:ab:af:c0:b7:3d:76:
f6:bd:d4:6f:66:5e:ab:c0:6b:c3:60:2b:b1:83:ea:ce:15:b9:
a3:fb:95:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zerftQDIya2A1oLc4xuCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMmQ1MmIzMjM5YTFjZTNjZGQzNDMzMTM0OGNlNzgwZGRm
MTY0YzAwHhcNMjUwMTMxMTAwMDIxWhcNMjUwMjAxMTAwMDIxWjAzMTEwLwYDVQQD
EyhkNjNjMDU3Mjg4MzM3MTRjYWRhOTZlMDNmZTFiM2E3OGVjZjBjZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtKIBn7W7S1sRxwdx77NRKFwMTOb
Fu0ubG9x1kaUgPH9DIg5TGq9/SPjQf/fvT7S9dKqGuoGtHmWHqAWefTWIo3f+Aip
L/xB4Qbp++AphJ15mn6/RICKYZlnHq8IVQVQ+YIDAf/rIdycJ99SCICODf776sJV
vPxIJO//ak6ejtuuxUcOdWR7mak38sweuwrdThJ+jU1hH6NTSeC7tU0B/zTNxy4R
h4Bjzp5x9tOPqZzQDEuz1VpOwvvJrjAJG0btSiHLmJI0mBi1+XQk9mdyliZ1zn+w
UXjsftCQK3R/4KQfpDbePUJZqrDZNVcXVRd002LJthRajeCAjhRgQv6jTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNY8BXKIM3FMraluA/4bOnjs8M5jMB8GA1UdIwQY
MBaAFAMtUrMjmhzjzdNDMTSM54Dd8WTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXkxU3N5T2FIT1BOMDBNeE5Jem5nTjN4Wk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iYzVmMTUtNThhZS00ZGYwLTljNmQt
ZTdhZDczYmJjYzg5LzEvQXkxU3N5T2FIT1BOMDBNeE5Jem5nTjN4Wk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iYzVmMTUtNThhZS00ZGYwLTljNmQtZTdhZDczYmJjYzg5
LzEvQXkxU3N5T2FIT1BOMDBNeE5Jem5nTjN4Wk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCZYq5mR
P1/jETm0FA9S8cl2Kfej9KqgFyAeog7k/WPb4hid5O11dtm1W6wvUYAUcamsL90F
sGH5QwoI1MT/WNwLHvyBWmvzjYRvkuoh24ADrqNRCBQB2ZiUPtVQTNcMClbSqdsp
ej9+UEJNSLgmROdsO3VC/xydjuDr0rOBfTFAfeKXX7Q68LQZf3gzzNDRhasIoxV8
whAvkXbckx8nFT9fwty4sfDtBQxL/03gCHkHLHs14hqob1Wn2fV8yILdCthKwKjK
aebHbs67LfeT0V/hAQZDhhuAiuOt2sLkTPKf6mEOq6/Atz129r3Ub2Zeq8Brw2Ar
sYPqzhW5o/uV7Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:19 2025 by rpki-client