Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
File: S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft (raw, json)
Hash identifier: Z0xlZA61cxYT04NiRp21s5ieBLI6JAc9EX/sDxZ9vA4=
Subject key identifier: 17:2E:7D:8D:6F:E8:99:DE:A1:0C:40:D3:20:14:1C:1E:CF:DF:72:DB
Authority key identifier: 4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
Certificate issuer: /CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Certificate serial: 0194BD178C6B88F6AC44FC0845378B411568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
Manifest number: 063D
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl (hash: HkTVopj2TSnZ+syFobYz9nLQYtdAMYLcWU9RZ/J/mPk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8c:6b:88:f6:ac:44:fc:08:45:37:8b:41:15:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=172e7d8d6fe899dea10c40d320141c1ecfdf72db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fd:b4:07:85:56:3a:b1:fb:aa:7a:66:0e:10:
fe:76:ae:dd:04:3f:4c:39:3b:45:83:6e:bd:15:e8:
ca:bf:8c:2b:31:de:d0:8d:8e:42:f4:09:05:b1:d2:
2c:0e:0e:ca:b5:7a:a5:2b:b5:fb:bb:1f:eb:ef:f4:
ff:34:48:f4:90:04:d3:07:e4:49:17:75:9f:dd:b2:
57:de:fd:48:bc:02:af:2f:6b:e8:0f:c3:9a:36:38:
ad:de:42:31:01:61:c1:a0:05:c6:d2:3e:4d:4c:3e:
e6:e3:f8:6d:30:4e:27:a5:8b:38:a9:08:29:bd:7c:
e4:3f:85:8f:9f:87:66:09:83:d1:86:30:56:0b:0c:
33:86:30:47:c2:6a:27:59:71:6f:ec:51:8c:e2:67:
0a:9c:5e:7e:6b:3b:c1:b1:af:98:e7:3b:ad:75:2e:
c8:66:c2:e1:2e:d3:17:f7:53:21:44:27:89:cc:14:
9f:3c:b3:53:5c:31:83:05:9d:10:8b:8a:d5:da:af:
cf:16:e4:a0:b7:42:74:d1:5d:40:16:2e:d9:5e:f4:
a3:62:af:fe:55:01:84:35:de:ce:ea:93:95:99:e3:
55:fc:b6:2f:5b:7a:93:94:30:ae:bd:80:37:a0:50:
51:16:eb:f7:66:6b:c1:46:45:4d:62:7c:eb:02:b4:
3f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2E:7D:8D:6F:E8:99:DE:A1:0C:40:D3:20:14:1C:1E:CF:DF:72:DB
X509v3 Authority Key Identifier:
keyid:4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:71:a0:11:30:dc:c5:90:90:5f:b4:0f:b5:16:ab:55:57:4c:
f7:86:df:59:ff:f1:e4:68:da:90:da:38:6f:2e:97:b9:63:d2:
fb:fe:9e:0b:51:5b:c6:56:88:00:a5:9c:d4:93:94:1d:86:4c:
05:a0:ee:13:ef:35:34:ff:d8:63:54:8d:5c:01:02:a8:e0:dc:
a0:5e:78:41:a3:1c:dd:f0:15:60:67:2b:6e:7d:94:90:7b:e5:
64:f0:c5:2d:93:c1:78:5e:55:bf:5b:80:13:43:5e:15:35:ab:
ab:dd:eb:ff:32:13:97:08:f3:45:71:06:67:97:21:4d:b3:86:
bd:36:83:a3:dd:5b:55:58:8c:e2:c9:2e:b7:41:1d:e3:75:36:
a5:c4:92:c5:65:06:cc:9e:0c:17:c5:aa:a4:6f:48:04:64:91:
00:bc:9e:07:37:53:e0:0d:87:1a:b2:3b:d9:df:69:76:a2:97:
e1:8f:40:5e:60:2f:8e:ee:36:12:9a:64:68:d7:48:66:47:78:
9d:ab:59:f8:8f:5e:54:7d:49:95:e3:83:ed:00:98:2f:ba:12:
ff:e2:c9:e8:75:88:9a:5d:5e:1e:64:bf:22:a6:ad:e3:62:8a:
07:6e:ea:98:5b:ce:c2:65:f4:4f:84:27:8d:79:0e:86:c6:59:
34:31:e8:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F4xriPasRPwIRTeLQRVoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiY2NkMGRiNTJmMGVkNGY3M2E2ODFlM2QzNmFiNmMyMzAy
NzdkM2MwHhcNMjUwMTMxMTYwMDI0WhcNMjUwMjAxMTYwMDI0WjAzMTEwLwYDVQQD
EygxNzJlN2Q4ZDZmZTg5OWRlYTEwYzQwZDMyMDE0MWMxZWNmZGY3MmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf20B4VWOrH7qnpmDhD+dq7dBD9M
OTtFg269FejKv4wrMd7QjY5C9AkFsdIsDg7KtXqlK7X7ux/r7/T/NEj0kATTB+RJ
F3Wf3bJX3v1IvAKvL2voD8OaNjit3kIxAWHBoAXG0j5NTD7m4/htME4npYs4qQgp
vXzkP4WPn4dmCYPRhjBWCwwzhjBHwmonWXFv7FGM4mcKnF5+azvBsa+Y5zutdS7I
ZsLhLtMX91MhRCeJzBSfPLNTXDGDBZ0Qi4rV2q/PFuSgt0J00V1AFi7ZXvSjYq/+
VQGENd7O6pOVmeNV/LYvW3qTlDCuvYA3oFBRFuv3ZmvBRkVNYnzrArQ/xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcufY1v6JneoQxA0yAUHB7P33LbMB8GA1UdIwQY
MBaAFEvM0NtS8O1Pc6aB49NqtsIwJ308MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzh6UTIxTHc3VTl6cG9IajAycTJ3akFuZlR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80MWNjNTctMDZhNC00NzMyLThiZmMt
ZjNmMTViMTI2NWJiLzEvUzh6UTIxTHc3VTl6cG9IajAycTJ3akFuZlR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80MWNjNTctMDZhNC00NzMyLThiZmMtZjNmMTViMTI2NWJi
LzEvUzh6UTIxTHc3VTl6cG9IajAycTJ3akFuZlR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXGgETDc
xZCQX7QPtRarVVdM94bfWf/x5GjakNo4by6XuWPS+/6eC1FbxlaIAKWc1JOUHYZM
BaDuE+81NP/YY1SNXAECqODcoF54QaMc3fAVYGcrbn2UkHvlZPDFLZPBeF5Vv1uA
E0NeFTWrq93r/zITlwjzRXEGZ5chTbOGvTaDo91bVViM4skut0Ed43U2pcSSxWUG
zJ4MF8WqpG9IBGSRALyeBzdT4A2HGrI72d9pdqKX4Y9AXmAvju42EppkaNdIZkd4
natZ+I9eVH1JleOD7QCYL7oS/+LJ6HWIml1eHmS/Iqat42KKB27qmFvOwmX0T4Qn
jXkOhsZZNDHokA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:02:50 2025 by rpki-client