Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier: O0fuu/G752RZz9cG7ZksqGvEwDxtwQOCsxKHvQR2hNo=
Subject key identifier: A8:B3:2B:87:03:FC:03:12:D3:BD:F6:0D:2A:0E:52:84:F4:68:C2:26
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer: /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial: 0194BD17CAA91FF8F02926E739BD1E779670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: eA1DHKut2zrWZU00cviz2z+/fXaO3dQfwPryRX+4K18=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ca:a9:1f:f8:f0:29:26:e7:39:bd:1e:77:96:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=a8b32b8703fc0312d3bdf60d2a0e5284f468c226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:45:d4:d6:df:0c:74:4c:0d:28:77:ec:f8:25:
f1:a4:85:f5:f1:42:35:20:bd:6e:3b:1e:49:fb:fb:
cb:3f:fd:de:97:a9:c3:5b:77:4f:77:a9:56:0d:56:
41:3c:37:5b:ba:95:49:b4:64:fc:9d:94:9d:de:6d:
3e:44:c9:92:de:c5:56:13:b2:de:0f:ba:73:76:ca:
21:4d:8f:ef:6f:74:d6:16:d6:80:b3:c0:99:59:65:
01:67:cd:47:5a:31:f2:10:ce:a7:a0:cc:11:0a:05:
12:46:38:e9:5b:1c:f5:32:9b:e8:e1:2f:56:fa:ef:
4b:32:bb:8e:07:64:62:71:54:8a:02:63:9c:01:98:
0c:59:3f:43:68:c5:b3:81:c3:eb:4a:29:f7:7a:64:
24:73:2c:36:99:e5:22:19:57:64:9a:a9:39:97:5b:
9b:19:71:e9:89:bf:93:10:19:24:b5:c9:6e:b8:61:
8f:a3:b2:b4:cc:54:c2:25:d6:32:96:cf:ab:61:8c:
84:ba:98:d7:ab:20:9a:6b:2e:b9:d4:8b:c0:5e:4b:
7c:ae:bd:6c:16:38:fc:85:66:ee:83:37:bd:fe:11:
ce:78:1f:ab:4c:71:0b:8d:8f:80:b8:1d:c3:c9:c6:
41:e7:c2:f8:7b:48:85:9a:95:43:61:9a:b5:7c:ac:
97:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B3:2B:87:03:FC:03:12:D3:BD:F6:0D:2A:0E:52:84:F4:68:C2:26
X509v3 Authority Key Identifier:
keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:65:5d:16:b9:8c:93:a8:df:b3:95:f1:f1:e2:84:f2:c6:16:
06:36:39:5f:91:cf:f2:09:1f:83:c6:e3:c5:11:ef:98:de:81:
f5:78:d1:52:d1:bf:06:18:4d:d2:d4:69:17:43:68:cf:f0:a1:
b0:37:5e:1b:f0:a7:e8:0d:e4:7e:fd:92:e3:25:4f:e2:af:5c:
59:13:39:ec:9f:03:c9:40:32:dc:e9:7c:68:d1:72:cc:95:83:
a3:d4:70:07:9e:a9:bf:bf:81:5f:b4:e5:32:81:06:a9:3d:65:
21:4b:ae:58:5e:24:92:64:89:f8:2a:28:76:85:07:9f:f7:72:
72:73:83:37:a4:27:83:0e:9e:ef:f6:d3:97:5c:04:c5:b4:25:
3c:56:1c:03:bf:ac:d8:9f:13:a6:91:e1:a1:11:e1:86:14:02:
ec:d6:70:b2:ed:58:9c:4a:67:c0:9d:ec:30:68:11:27:42:99:
54:dc:17:72:bd:de:7c:96:6c:27:22:c1:be:55:46:da:bc:d2:
db:45:33:70:51:e7:89:40:cc:2a:d0:41:2e:ea:c8:cc:b2:bd:
eb:47:60:c9:14:51:9b:11:fa:a6:84:74:34:85:a9:a9:40:7c:
4c:77:76:b6:b6:27:f5:45:8f:2c:b4:92:ef:03:8a:65:d0:7b:
ca:87:8d:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8qpH/jwKSbnOb0ed5ZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NWM2ZGNkOWZkYmQyNGMxNmU1MGFlMTU1MWVlOGY0M2Fj
OGJmZDQwHhcNMjUwMTMxMTYwMDQwWhcNMjUwMjAxMTYwMDQwWjAzMTEwLwYDVQQD
EyhhOGIzMmI4NzAzZmMwMzEyZDNiZGY2MGQyYTBlNTI4NGY0NjhjMjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkXU1t8MdEwNKHfs+CXxpIX18UI1
IL1uOx5J+/vLP/3el6nDW3dPd6lWDVZBPDdbupVJtGT8nZSd3m0+RMmS3sVWE7Le
D7pzdsohTY/vb3TWFtaAs8CZWWUBZ81HWjHyEM6noMwRCgUSRjjpWxz1Mpvo4S9W
+u9LMruOB2RicVSKAmOcAZgMWT9DaMWzgcPrSin3emQkcyw2meUiGVdkmqk5l1ub
GXHpib+TEBkktcluuGGPo7K0zFTCJdYyls+rYYyEupjXqyCaay651IvAXkt8rr1s
Fjj8hWbugze9/hHOeB+rTHELjY+AuB3DycZB58L4e0iFmpVDYZq1fKyXHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKizK4cD/AMS0732DSoOUoT0aMImMB8GA1UdIwQY
MBaAFPZcbc2f29JMFuUK4VUe6PQ6yL/UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWx4dHpaX2Iwa3dXNVFyaFZSN285RHJJdjlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NWE5M2UtMzNlZi00NzYwLWJkNGUt
MTk3MzYzNTE2N2IyLzEvOWx4dHpaX2Iwa3dXNVFyaFZSN285RHJJdjlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NWE5M2UtMzNlZi00NzYwLWJkNGUtMTk3MzYzNTE2N2Iy
LzEvOWx4dHpaX2Iwa3dXNVFyaFZSN285RHJJdjlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2VdFrmM
k6jfs5Xx8eKE8sYWBjY5X5HP8gkfg8bjxRHvmN6B9XjRUtG/BhhN0tRpF0Noz/Ch
sDdeG/Cn6A3kfv2S4yVP4q9cWRM57J8DyUAy3Ol8aNFyzJWDo9RwB56pv7+BX7Tl
MoEGqT1lIUuuWF4kkmSJ+CoodoUHn/dycnODN6Qngw6e7/bTl1wExbQlPFYcA7+s
2J8TppHhoRHhhhQC7NZwsu1YnEpnwJ3sMGgRJ0KZVNwXcr3efJZsJyLBvlVG2rzS
20UzcFHniUDMKtBBLurIzLK960dgyRRRmxH6poR0NIWpqUB8THd2trYn9UWPLLSS
7wOKZdB7yoeNqQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:46 2025 by rpki-client