Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
File: cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft (raw, json)
Hash identifier: Qi+PKnx8jarhD8+5gYCS2yMEuzFGBlkglNkMScpUVFo=
Subject key identifier: AE:65:B4:48:9C:74:48:8F:3B:50:CB:B9:52:2F:69:BF:C7:5E:4C:F4
Authority key identifier: 72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B
Certificate issuer: /CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b
Certificate serial: 0194BC3C2DD1EE3AEAFEDD4E217536E7DF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
Manifest number: 0E89
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl (hash: 0bjjn+Jxve0BedfYqt9GMQfuCegh7aRa+kOYQJTgByc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2d:d1:ee:3a:ea:fe:dd:4e:21:75:36:e7:df:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=ae65b4489c74488f3b50cbb9522f69bfc75e4cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:39:a7:24:f1:b8:98:c4:4e:bd:04:a3:84:
cb:6b:55:d4:fc:3e:a6:e7:20:62:e2:1e:7a:6a:fc:
40:3a:f9:05:f0:d9:e9:0a:fb:33:1b:c2:0d:cf:a6:
93:8b:af:a5:50:64:37:1f:ce:e1:f7:2e:19:83:63:
16:b3:15:52:bd:98:90:2a:d9:49:61:03:09:ed:6d:
a5:fb:2f:96:3c:82:5c:0b:08:27:7b:da:48:25:7f:
1f:d4:ec:c8:b7:ff:44:29:4e:7b:b6:77:e5:f5:bd:
86:ec:6b:de:8b:a8:3e:42:ac:f8:2c:a0:86:93:e9:
61:e6:d9:77:58:6a:83:7a:9f:2c:75:0a:1c:00:43:
6b:8b:e6:86:38:0e:34:3c:ad:75:8d:d4:8a:f1:79:
ca:e7:df:aa:cf:0b:16:29:5b:8c:c6:18:10:50:ea:
9f:a1:b1:94:28:cc:bd:37:22:8b:bc:42:4e:f7:28:
46:01:1e:9d:44:06:c7:31:8e:0c:18:0b:9c:1a:7c:
a8:e5:8b:1b:57:ab:01:b5:4b:ba:4e:fa:1d:9b:6a:
46:2d:2b:31:d9:ce:25:06:c3:70:c0:89:2e:42:70:
37:3a:51:4f:4c:b5:37:fa:8a:75:44:79:e9:7a:63:
3b:dc:c1:6a:b4:52:23:5d:f1:90:a5:37:d4:0d:4a:
c4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:65:B4:48:9C:74:48:8F:3B:50:CB:B9:52:2F:69:BF:C7:5E:4C:F4
X509v3 Authority Key Identifier:
keyid:72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:cf:7d:ee:58:2b:93:f0:4d:9e:f4:08:43:6b:b6:39:99:ae:
cd:6a:c9:27:b4:6b:98:a8:9c:78:f4:5b:10:bb:b0:f6:fa:6f:
a7:cd:4b:71:b6:cb:78:fb:19:78:2e:8b:17:74:9a:d8:ec:2a:
89:e3:c6:44:e8:0a:6c:a5:99:64:dd:c9:b1:7c:2a:3e:b4:46:
12:c4:ce:82:34:fb:48:20:c6:e3:e9:ef:32:42:c6:ed:4f:53:
dc:8b:9a:bc:b9:e1:6f:81:c0:f1:13:d3:6f:7b:b9:1b:71:31:
9a:e3:a1:bb:44:5f:08:da:79:83:31:1a:b6:55:f4:86:75:56:
08:8c:82:75:57:53:03:55:76:93:a7:17:1e:6e:4e:c6:97:02:
22:79:e0:29:1b:01:6a:f6:01:af:7c:fa:f6:08:62:85:25:40:
62:b8:bf:1a:be:38:2d:2d:74:56:97:83:0b:78:e7:44:1e:ef:
94:3e:68:0c:9c:dd:99:a3:a3:ee:47:03:2d:0a:41:e0:fb:34:
ff:49:30:9d:97:a3:ab:63:2e:cd:1e:44:4c:8e:53:fb:16:91:
37:4f:58:e8:44:3b:36:e1:8a:31:e5:6b:e4:4f:cc:79:00:0f:
c5:12:b4:53:92:58:a3:de:57:57:8e:de:82:94:ee:b1:5e:59:
2e:23:2e:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PC3R7jrq/t1OIXU259+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNmJkZjZkZmE2NDk5ZTJjNGFhZGVlZTEwNjY0M2RhMDFj
MGZmOGIwHhcNMjUwMTMxMTIwMDQ3WhcNMjUwMjAxMTIwMDQ3WjAzMTEwLwYDVQQD
EyhhZTY1YjQ0ODljNzQ0ODhmM2I1MGNiYjk1MjJmNjliZmM3NWU0Y2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteY5pyTxuJjETr0Eo4TLa1XU/D6m
5yBi4h56avxAOvkF8NnpCvszG8INz6aTi6+lUGQ3H87h9y4Zg2MWsxVSvZiQKtlJ
YQMJ7W2l+y+WPIJcCwgne9pIJX8f1OzIt/9EKU57tnfl9b2G7Gvei6g+Qqz4LKCG
k+lh5tl3WGqDep8sdQocAENri+aGOA40PK11jdSK8XnK59+qzwsWKVuMxhgQUOqf
obGUKMy9NyKLvEJO9yhGAR6dRAbHMY4MGAucGnyo5YsbV6sBtUu6Tvodm2pGLSsx
2c4lBsNwwIkuQnA3OlFPTLU3+op1RHnpemM73MFqtFIjXfGQpTfUDUrEswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5ltEicdEiPO1DLuVIvab/HXkz0MB8GA1UdIwQY
MBaAFHJr3236ZJnixKre7hBmQ9oBwP+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY212ZmJmcGttZUxFcXQ3dUVHWkQyZ0hBXzRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMDVmMjAtNjM1Zi00ZTI1LThiNmEt
NzViNTQ5ZThiYjRkLzEvY212ZmJmcGttZUxFcXQ3dUVHWkQyZ0hBXzRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mMDVmMjAtNjM1Zi00ZTI1LThiNmEtNzViNTQ5ZThiYjRk
LzEvY212ZmJmcGttZUxFcXQ3dUVHWkQyZ0hBXzRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8997lgr
k/BNnvQIQ2u2OZmuzWrJJ7RrmKicePRbELuw9vpvp81LcbbLePsZeC6LF3Sa2Owq
iePGROgKbKWZZN3JsXwqPrRGEsTOgjT7SCDG4+nvMkLG7U9T3IuavLnhb4HA8RPT
b3u5G3ExmuOhu0RfCNp5gzEatlX0hnVWCIyCdVdTA1V2k6cXHm5OxpcCInngKRsB
avYBr3z69ghihSVAYri/Gr44LS10VpeDC3jnRB7vlD5oDJzdmaOj7kcDLQpB4Ps0
/0kwnZejq2MuzR5ETI5T+xaRN09Y6EQ7NuGKMeVr5E/MeQAPxRK0U5JYo95XV47e
gpTusV5ZLiMusw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:19 2025 by rpki-client