Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
File: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft (raw, json)
Hash identifier: dN0+NTFdJ+9bJN+naSe4ZQ/ZT6RQ8ttkF0XEfBKOgjY=
Subject key identifier: 14:D4:D5:67:71:4C:37:84:08:64:43:EF:06:B7:75:4F:CF:04:C9:71
Authority key identifier: DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
Certificate issuer: /CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Certificate serial: 0194BC3C967AC1C75E3ED0DD349AA6C18415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl (hash: m7vD+WveXYB4RvSNQKUmgr+vaIS2rw8cRHYElBsKbBA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:96:7a:c1:c7:5e:3e:d0:dd:34:9a:a6:c1:84:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=14d4d567714c3784086443ef06b7754fcf04c971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:77:3a:67:a4:51:2b:ad:c3:bd:59:89:cf:
0f:4e:3d:fa:6f:cd:12:35:24:61:80:c0:87:48:8f:
ce:1f:58:10:b6:04:96:55:c9:0b:df:2d:3a:e3:91:
25:c2:1e:67:4c:ad:91:c9:75:fd:dd:e6:ec:62:58:
16:b5:cb:41:fe:5c:2f:d0:38:0e:07:c7:01:c4:a7:
3c:cd:7c:ec:09:27:2a:f7:54:09:2f:59:29:46:f3:
ae:c3:d4:f8:9d:3b:44:4a:5c:69:2e:ec:71:e9:14:
d9:a8:78:24:a1:34:1b:a5:75:9b:be:35:1e:90:35:
03:10:ef:8d:57:bd:55:e7:c0:62:e3:16:9d:05:19:
9d:77:3c:8e:12:d8:36:7c:53:34:80:f8:e9:1b:79:
9b:d3:e7:9d:28:aa:b3:ab:aa:40:f3:e8:36:58:ac:
ba:c5:eb:a2:21:54:f8:92:00:c7:ed:04:b6:cd:c3:
af:0c:ba:15:09:c6:37:88:de:4a:2f:b4:d4:d1:0a:
1f:6a:55:bf:8d:08:f9:73:de:88:ca:2d:5b:7c:55:
3b:14:25:a9:6d:6a:90:d9:f8:0b:26:4f:4c:d3:72:
85:3c:42:7e:ed:5b:3b:ba:bc:cd:eb:10:45:fd:68:
33:86:2f:f9:d7:ab:64:9a:04:2f:2e:fb:81:ea:1c:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D4:D5:67:71:4C:37:84:08:64:43:EF:06:B7:75:4F:CF:04:C9:71
X509v3 Authority Key Identifier:
keyid:DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:17:6e:4d:10:78:6e:63:15:09:04:10:68:05:cf:db:fd:7b:
c5:59:3e:c1:85:d3:99:5a:6a:dd:d5:ac:46:b3:ef:1d:4e:a2:
af:b7:cc:1b:5f:f1:45:f9:27:25:d9:32:5f:9d:1a:ed:bd:9e:
47:29:29:c2:ad:b5:b4:0b:eb:39:96:da:32:41:50:ab:46:be:
40:07:eb:49:31:3a:a3:0e:94:4e:1e:de:2e:86:04:2f:d5:36:
22:85:1e:3a:5f:a0:3a:16:de:81:12:e1:d2:80:bd:7e:d4:e5:
d9:3c:c9:43:23:f8:3e:16:6e:c9:43:a8:b1:13:00:79:0d:ed:
62:5a:f0:4b:c2:a2:97:25:e7:22:71:a5:ae:7d:c8:1f:0a:a9:
73:8e:f5:ac:22:fe:f1:b5:71:02:3f:1c:99:14:3e:69:4f:ba:
f3:31:0a:e8:ff:dd:ae:a2:1c:bb:79:54:c6:49:4f:b2:bf:be:
5a:2e:14:11:7f:3d:96:4b:9d:af:6f:bc:22:df:b3:44:24:9c:
76:b1:cc:b9:69:b5:53:f8:f9:52:03:5d:ca:6b:56:ff:16:b8:
e5:53:27:86:83:99:77:2e:d3:f2:6e:6c:8b:61:92:e8:9f:fa:
3f:fb:28:aa:15:2a:9f:81:91:30:57:6a:56:63:49:de:2f:0e:
26:22:58:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJZ6wcdePtDdNJqmwYQVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZTU3NjMxZjYwYWRiMTNmMGFlMzY4NjcxY2UwZjg3NDJm
NTk3N2YwHhcNMjUwMTMxMTIwMTE0WhcNMjUwMjAxMTIwMTE0WjAzMTEwLwYDVQQD
EygxNGQ0ZDU2NzcxNGMzNzg0MDg2NDQzZWYwNmI3NzU0ZmNmMDRjOTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/t3OmekUSutw71Zic8PTj36b80S
NSRhgMCHSI/OH1gQtgSWVckL3y0645Elwh5nTK2RyXX93ebsYlgWtctB/lwv0DgO
B8cBxKc8zXzsCScq91QJL1kpRvOuw9T4nTtESlxpLuxx6RTZqHgkoTQbpXWbvjUe
kDUDEO+NV71V58Bi4xadBRmddzyOEtg2fFM0gPjpG3mb0+edKKqzq6pA8+g2WKy6
xeuiIVT4kgDH7QS2zcOvDLoVCcY3iN5KL7TU0QofalW/jQj5c96Iyi1bfFU7FCWp
bWqQ2fgLJk9M03KFPEJ+7Vs7urzN6xBF/Wgzhi/516tkmgQvLvuB6hwgHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTU1WdxTDeECGRD7wa3dU/PBMlxMB8GA1UdIwQY
MBaAFNrldjH2CtsT8K42hnHOD4dC9Zd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnVWMk1mWUsyeFB3cmphR2NjNFBoMEwxbDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wZTgyNWEtNWJiNi00MzI3LTlhMGEt
NDM5ZjM2ZTE2NTNhLzEvMnVWMk1mWUsyeFB3cmphR2NjNFBoMEwxbDM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8wZTgyNWEtNWJiNi00MzI3LTlhMGEtNDM5ZjM2ZTE2NTNh
LzEvMnVWMk1mWUsyeFB3cmphR2NjNFBoMEwxbDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxduTRB4
bmMVCQQQaAXP2/17xVk+wYXTmVpq3dWsRrPvHU6ir7fMG1/xRfknJdkyX50a7b2e
Rykpwq21tAvrOZbaMkFQq0a+QAfrSTE6ow6UTh7eLoYEL9U2IoUeOl+gOhbegRLh
0oC9ftTl2TzJQyP4PhZuyUOosRMAeQ3tYlrwS8KilyXnInGlrn3IHwqpc471rCL+
8bVxAj8cmRQ+aU+68zEK6P/drqIcu3lUxklPsr++Wi4UEX89lkudr2+8It+zRCSc
drHMuWm1U/j5UgNdymtW/xa45VMnhoOZdy7T8m5si2GS6J/6P/soqhUqn4GRMFdq
VmNJ3i8OJiJYuw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:32 2025 by rpki-client