Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
File: t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft (raw, json)
Hash identifier: xNK3/d45HWzBoQQR1dSqq1Eb8OFmGEtA3ptmEE5KTB0=
Subject key identifier: 1D:3C:20:A8:3B:8E:5D:FD:B7:6B:39:92:11:8D:79:15:40:DD:33:3C
Authority key identifier: B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0
Certificate issuer: /CN=b76cbf5927c476905feda34e1140148bf805d9b0
Certificate serial: 0194BBCDD97776B36E7F7C784493739B4EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl (hash: uoJUhAzeJm9s7r4UU1ATCQD4xT2xZSZom7O+041pnkQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d9:77:76:b3:6e:7f:7c:78:44:93:73:9b:4e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76cbf5927c476905feda34e1140148bf805d9b0
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=1d3c20a83b8e5dfdb76b3992118d791540dd333c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7a:a4:d4:a6:a6:a8:fe:e5:bc:cb:12:20:5d:
83:de:c0:10:7e:5c:dc:a5:c4:7a:85:14:f9:9c:dc:
44:7e:90:70:98:df:ac:05:d0:59:d3:9f:d2:05:3e:
09:c2:fb:1e:03:2d:7d:18:2b:8e:94:c0:2c:ea:c4:
cd:4b:a5:78:38:eb:94:7a:e5:ed:05:a1:4e:84:e3:
a7:e6:04:5e:7f:0d:e6:64:0f:cf:87:ef:e6:04:ed:
80:00:1c:4a:9e:d7:c2:da:83:8c:59:33:c2:48:f6:
f7:cf:e0:10:a8:4c:ff:56:69:01:aa:0e:0b:8a:30:
5c:23:29:00:cb:ff:c8:e2:d6:f6:4d:38:95:25:b3:
73:b9:b9:f0:6c:a3:42:cf:8c:83:3a:2a:79:63:5c:
61:c1:5c:c0:87:01:a3:ca:b2:f2:67:e5:da:5f:04:
1d:28:e6:95:7a:1f:54:f9:b5:71:f3:6e:28:ff:45:
2f:91:48:7f:8a:d8:d9:8b:26:66:f0:7d:d3:0a:6a:
4f:b3:fe:b2:4a:cd:cf:99:1b:1b:7b:9f:af:18:2a:
5c:de:d8:8a:3c:43:f9:7c:13:a9:70:fa:e3:bf:4f:
3a:d0:fb:d2:a3:70:9c:60:cb:00:9d:69:aa:54:26:
ba:fc:3e:94:0e:22:98:c1:c0:6c:4f:ba:d7:d3:a6:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3C:20:A8:3B:8E:5D:FD:B7:6B:39:92:11:8D:79:15:40:DD:33:3C
X509v3 Authority Key Identifier:
keyid:B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f6:78:ce:0d:6d:6e:1b:e6:51:00:ab:d0:3c:85:f7:75:bf:
38:e5:00:91:91:8b:76:01:3c:29:f5:2f:81:c5:dd:6b:10:52:
ce:a6:65:c3:be:53:21:cb:86:34:e7:52:b9:4f:28:3e:f9:37:
cf:a3:b1:a5:b3:29:f0:c2:aa:96:53:26:91:d4:39:8f:60:8b:
90:c0:52:64:38:08:93:17:19:db:05:80:04:61:7a:7c:55:ce:
89:db:66:f3:da:ea:3c:30:70:1d:ab:8a:3f:03:a6:18:5d:88:
85:d4:05:ac:ed:65:53:5f:9e:16:66:3b:95:1f:1c:8b:52:20:
66:c8:cf:2e:3a:6c:a6:71:54:af:c8:1a:3b:5c:e2:3e:e2:ab:
07:0c:c2:33:30:e0:00:78:bd:6a:e3:c5:93:b7:bc:4e:83:0e:
d0:16:6a:c9:01:66:c9:14:85:8f:38:c6:2a:df:28:7d:19:80:
1b:e1:35:2e:81:50:c5:4b:d6:38:be:6b:e7:69:f5:68:0f:ac:
4e:22:09:df:17:72:86:90:c2:17:55:15:a9:d3:10:b5:b6:72:
99:04:68:ef:4e:f3:0c:a4:c3:7c:90:a7:f5:35:7d:6b:a2:bc:
58:77:0f:7c:c0:21:0e:f6:32:4e:bd:34:66:eb:4e:ae:00:34:
43:e6:ec:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdl3drNuf3x4RJNzm073MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NmNiZjU5MjdjNDc2OTA1ZmVkYTM0ZTExNDAxNDhiZjgw
NWQ5YjAwHhcNMjUwMTMxMTAwMDE3WhcNMjUwMjAxMTAwMDE3WjAzMTEwLwYDVQQD
EygxZDNjMjBhODNiOGU1ZGZkYjc2YjM5OTIxMThkNzkxNTQwZGQzMzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Hqk1KamqP7lvMsSIF2D3sAQflzc
pcR6hRT5nNxEfpBwmN+sBdBZ05/SBT4JwvseAy19GCuOlMAs6sTNS6V4OOuUeuXt
BaFOhOOn5gRefw3mZA/Ph+/mBO2AABxKntfC2oOMWTPCSPb3z+AQqEz/VmkBqg4L
ijBcIykAy//I4tb2TTiVJbNzubnwbKNCz4yDOip5Y1xhwVzAhwGjyrLyZ+XaXwQd
KOaVeh9U+bVx824o/0UvkUh/itjZiyZm8H3TCmpPs/6ySs3PmRsbe5+vGCpc3tiK
PEP5fBOpcPrjv0860PvSo3CcYMsAnWmqVCa6/D6UDiKYwcBsT7rX06b36QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB08IKg7jl39t2s5khGNeRVA3TM8MB8GA1UdIwQY
MBaAFLdsv1knxHaQX+2jThFAFIv4BdmwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJ5X1dTZkVkcEJmN2FOT0VVQVVpX2dGMmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81NDdlOGUtNDFiYS00MjcyLWEyOTQt
MGFlMmI5ZDlkNDQ3LzEvdDJ5X1dTZkVkcEJmN2FOT0VVQVVpX2dGMmJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81NDdlOGUtNDFiYS00MjcyLWEyOTQtMGFlMmI5ZDlkNDQ3
LzEvdDJ5X1dTZkVkcEJmN2FOT0VVQVVpX2dGMmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvZ4zg1t
bhvmUQCr0DyF93W/OOUAkZGLdgE8KfUvgcXdaxBSzqZlw75TIcuGNOdSuU8oPvk3
z6OxpbMp8MKqllMmkdQ5j2CLkMBSZDgIkxcZ2wWABGF6fFXOidtm89rqPDBwHauK
PwOmGF2IhdQFrO1lU1+eFmY7lR8ci1IgZsjPLjpspnFUr8gaO1ziPuKrBwzCMzDg
AHi9auPFk7e8ToMO0BZqyQFmyRSFjzjGKt8ofRmAG+E1LoFQxUvWOL5r52n1aA+s
TiIJ3xdyhpDCF1UVqdMQtbZymQRo707zDKTDfJCn9TV9a6K8WHcPfMAhDvYyTr00
ZutOrgA0Q+bskA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:41 2025 by rpki-client