Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.mft
File: iX81rEgorqlfpdLYBNM6ewz_RYo.mft (raw, json)
Hash identifier: 5TxC0ewjYht0NNmK69/dTSLMMKU7/5oCgFDBnImETA0=
Subject key identifier: 3F:CE:EE:38:C0:B4:C6:33:46:15:E0:6B:82:3C:C3:76:48:38:1F:D1
Authority key identifier: 89:7F:35:AC:48:28:AE:A9:5F:A5:D2:D8:04:D3:3A:7B:0C:FF:45:8A
Certificate issuer: /CN=897f35ac4828aea95fa5d2d804d33a7b0cff458a
Certificate serial: 0194BD4EABBC2EC2AB43C863ADD0AA4C1725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX81rEgorqlfpdLYBNM6ewz_RYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.mft
Manifest number: 02EC
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: iX81rEgorqlfpdLYBNM6ewz_RYo.crl (hash: yrAumBbRoocVkZksAxqYwCR1q1KpAFRuyXN+9fAqoZc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ab:bc:2e:c2:ab:43:c8:63:ad:d0:aa:4c:17:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897f35ac4828aea95fa5d2d804d33a7b0cff458a
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=3fceee38c0b4c6334615e06b823cc37648381fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:06:e8:11:24:6e:3a:0c:9f:af:1c:c8:8c:72:
29:f4:0f:c7:19:f8:4f:67:c3:32:c0:39:ae:47:58:
ba:58:9e:5d:20:24:13:be:45:13:a8:42:66:24:69:
fd:65:aa:e8:37:a9:18:ab:57:d9:61:bf:b9:a4:6e:
8e:aa:05:0f:c8:77:35:62:14:bc:e4:29:49:9a:69:
e5:3b:cc:ab:ba:f7:36:b2:87:e5:69:f7:b9:4b:35:
14:7b:df:c9:42:79:18:b6:87:ec:62:a1:3e:68:2d:
9d:ba:a4:57:57:b4:73:72:e7:4d:05:8b:73:36:f4:
aa:83:3d:32:b6:45:d5:40:06:ac:ad:d8:4b:80:f9:
56:a7:7c:15:ff:ea:d0:37:9e:a8:3d:9d:36:43:8d:
65:9a:d8:6b:6d:99:39:9c:04:2b:2f:c5:61:ab:21:
df:6a:85:1b:ed:c1:9f:a3:cb:72:10:bc:1f:ec:6e:
f6:6f:95:35:a2:ae:ea:ef:ba:f4:b6:e2:a6:15:d5:
66:28:20:5d:22:0f:96:40:a9:cf:1c:90:87:4c:1f:
73:e8:0a:6b:d9:e5:6d:a3:f4:bf:40:3f:06:95:da:
26:30:97:45:a0:26:9c:e1:94:68:f7:06:20:ed:72:
2e:40:2a:07:c0:49:11:e6:da:9c:9c:dc:55:3c:02:
6c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CE:EE:38:C0:B4:C6:33:46:15:E0:6B:82:3C:C3:76:48:38:1F:D1
X509v3 Authority Key Identifier:
keyid:89:7F:35:AC:48:28:AE:A9:5F:A5:D2:D8:04:D3:3A:7B:0C:FF:45:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX81rEgorqlfpdLYBNM6ewz_RYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:59:e7:25:d6:00:d9:b1:d6:56:33:18:e2:d4:52:8d:5c:4a:
47:c6:05:d6:7b:a5:48:c9:6e:f1:b2:fc:a9:84:76:78:97:3f:
bb:82:3f:f7:3e:72:0b:73:41:2f:39:09:a1:3c:83:d8:65:83:
5a:05:a0:a2:08:dc:20:8a:79:28:b6:61:68:75:5f:d8:67:83:
bd:5a:58:c9:3e:36:b7:c1:e4:78:89:e0:2a:d9:b8:d2:88:dd:
c7:c8:71:b5:f2:84:0e:46:93:de:b0:d0:19:52:84:3b:0a:91:
cd:c2:55:d1:a2:d6:34:7e:93:33:c8:7a:19:38:1f:83:fd:8b:
0d:f0:15:1a:d0:b0:2c:a6:70:7e:09:f1:ba:20:46:61:51:5e:
e3:15:bb:d3:6d:df:c4:4b:2d:43:86:6a:49:82:99:2b:bc:ea:
4e:98:b4:5e:53:9d:aa:55:6d:a7:57:b5:ca:b3:8b:34:39:3d:
f7:5d:3a:ee:91:68:1b:17:65:54:ae:76:6c:16:d9:8b:8a:e2:
65:48:c1:b1:1b:a6:6d:a2:2c:75:e2:01:97:10:5a:8f:6a:ee:
5d:b5:ac:9d:e6:ad:fc:5a:e4:5f:6a:3b:bb:8f:c8:b9:80:88:
33:d2:18:cd:2b:b8:ba:19:53:92:2f:5d:47:e0:97:44:26:18:
42:9c:26:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tqu8LsKrQ8hjrdCqTBclMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5N2YzNWFjNDgyOGFlYTk1ZmE1ZDJkODA0ZDMzYTdiMGNm
ZjQ1OGEwHhcNMjUwMTMxMTcwMDM2WhcNMjUwMjAxMTcwMDM2WjAzMTEwLwYDVQQD
EygzZmNlZWUzOGMwYjRjNjMzNDYxNWUwNmI4MjNjYzM3NjQ4MzgxZmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywboESRuOgyfrxzIjHIp9A/HGfhP
Z8MywDmuR1i6WJ5dICQTvkUTqEJmJGn9ZaroN6kYq1fZYb+5pG6OqgUPyHc1YhS8
5ClJmmnlO8yruvc2soflafe5SzUUe9/JQnkYtofsYqE+aC2duqRXV7RzcudNBYtz
NvSqgz0ytkXVQAasrdhLgPlWp3wV/+rQN56oPZ02Q41lmthrbZk5nAQrL8VhqyHf
aoUb7cGfo8tyELwf7G72b5U1oq7q77r0tuKmFdVmKCBdIg+WQKnPHJCHTB9z6Apr
2eVto/S/QD8GldomMJdFoCac4ZRo9wYg7XIuQCoHwEkR5tqcnNxVPAJsBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/O7jjAtMYzRhXga4I8w3ZIOB/RMB8GA1UdIwQY
MBaAFIl/NaxIKK6pX6XS2ATTOnsM/0WKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVg4MXJFZ29ycWxmcGRMWUJOTTZld3pfUllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kYmEyZjctN2MyYi00NjcwLWExZGYt
YjBlNDEwM2Y0OTYyLzEvaVg4MXJFZ29ycWxmcGRMWUJOTTZld3pfUllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9kYmEyZjctN2MyYi00NjcwLWExZGYtYjBlNDEwM2Y0OTYy
LzEvaVg4MXJFZ29ycWxmcGRMWUJOTTZld3pfUllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVnnJdYA
2bHWVjMY4tRSjVxKR8YF1nulSMlu8bL8qYR2eJc/u4I/9z5yC3NBLzkJoTyD2GWD
WgWgogjcIIp5KLZhaHVf2GeDvVpYyT42t8HkeIngKtm40ojdx8hxtfKEDkaT3rDQ
GVKEOwqRzcJV0aLWNH6TM8h6GTgfg/2LDfAVGtCwLKZwfgnxuiBGYVFe4xW7023f
xEstQ4ZqSYKZK7zqTpi0XlOdqlVtp1e1yrOLNDk991067pFoGxdlVK52bBbZi4ri
ZUjBsRumbaIsdeIBlxBaj2ruXbWsneat/FrkX2o7u4/IuYCIM9IYzSu4uhlTki9d
R+CXRCYYQpwmNQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:26 2025 by rpki-client