Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
File: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json)
Hash identifier: 2I0aK2E9yxhYz50WYZCHhfdfH0DR1MKg8pDOY5VWyFs=
Subject key identifier: ED:BE:DE:0D:D5:0B:EB:6F:31:F9:B7:1A:D5:BB:5C:BD:B4:56:A9:66
Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5
Certificate serial: 0194BD4EC3E0E49E0EF4D8971E700DCD3769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
Manifest number: 0109
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: yBGSZpCXwxIDCeAsRMtR2eIwF5Uot0xsmP7T1YJDBc8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c3:e0:e4:9e:0e:f4:d8:97:1e:70:0d:cd:37:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=edbede0dd50beb6f31f9b71ad5bb5cbdb456a966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:40:a6:4d:e1:87:fd:90:79:a6:58:6f:2c:
be:05:3b:da:ce:dd:58:ca:f0:b2:b6:72:f6:f9:cd:
9f:dc:fd:8e:48:33:0e:60:fd:4b:26:c8:4a:2f:cc:
25:4a:5f:6b:47:f3:77:21:66:31:1d:43:ac:3e:34:
89:ec:e7:98:f6:cf:51:a5:c1:13:89:89:25:c1:41:
0d:6d:b0:0a:9a:76:dc:cc:1a:18:64:e6:68:fa:35:
36:2f:e3:e2:1a:2b:e0:24:4c:e8:6e:c1:e7:e4:80:
a7:5b:42:c6:f4:2f:8a:30:aa:25:28:ed:d0:45:3b:
e5:27:12:0a:93:b3:dc:ad:bf:12:f3:00:52:57:77:
a1:76:d4:c6:df:07:11:ad:3d:58:70:bb:d2:5e:c3:
2e:42:e4:b2:d0:a6:22:77:b5:4d:3e:e6:03:c4:4e:
2d:8e:12:35:40:78:68:3d:72:70:f8:82:4b:c8:3c:
a6:0b:ad:77:0e:ef:ab:85:16:04:9f:75:2c:22:e6:
cb:d4:0d:98:1d:c5:9f:37:68:f7:1f:f7:2c:96:04:
83:4a:6d:0a:d3:e4:b2:fe:db:8d:16:ef:e1:17:b5:
e7:03:fa:9e:db:38:df:d2:15:71:a0:c9:2d:5c:33:
c8:90:26:84:02:4c:20:01:bc:e6:2e:4b:e1:1e:6c:
7a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BE:DE:0D:D5:0B:EB:6F:31:F9:B7:1A:D5:BB:5C:BD:B4:56:A9:66
X509v3 Authority Key Identifier:
keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fa:47:c2:ae:9c:6d:d7:25:9b:c1:b7:3a:df:bd:39:e4:58:
7f:79:2e:14:de:75:08:60:ad:22:18:06:7e:f1:3a:28:17:ae:
b2:26:be:a9:a4:03:92:28:7e:6e:03:8b:d6:85:48:8f:8c:21:
49:c4:f9:39:8b:a0:f9:14:3f:9c:53:84:a6:dc:d0:0d:9a:05:
2f:09:f6:f3:f2:7d:94:7b:bc:3b:7b:bf:d4:12:4c:3c:32:75:
32:b7:38:c0:a3:a1:d4:fb:7c:d4:fe:73:a6:52:89:8c:75:37:
30:05:1a:b7:82:b6:1e:97:90:be:5f:f6:b3:52:79:1c:e5:79:
33:ae:18:7b:4e:43:96:43:a0:be:e0:e9:3a:9b:a5:40:8e:30:
26:6a:e8:b5:f1:03:74:ca:f4:75:19:0a:08:4e:72:f8:1f:72:
49:5e:8d:40:f7:04:f9:c6:31:6f:cd:0f:87:52:c6:b2:70:38:
ec:62:2b:31:4a:b6:3b:e7:80:05:3c:52:f3:a0:38:45:78:b7:
8f:8b:48:ca:2f:b3:31:d4:74:85:46:17:44:80:77:e0:66:1f:
6b:db:44:18:20:2f:dc:fc:4a:ac:ad:45:ed:fb:db:c1:63:76:
f2:78:0c:0e:6a:29:a9:5f:70:e2:d7:c4:f0:dd:b3:af:07:46:
1e:ea:6a:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TsPg5J4O9NiXHnANzTdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMjYyZmFmNDM3NjQyMDAyNGFhZDcyOTgzYWMzZTg3OTQ0
ZWE3YTUwHhcNMjUwMTMxMTcwMDQzWhcNMjUwMjAxMTcwMDQzWjAzMTEwLwYDVQQD
EyhlZGJlZGUwZGQ1MGJlYjZmMzFmOWI3MWFkNWJiNWNiZGI0NTZhOTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhFApk3hh/2QeaZYbyy+BTvazt1Y
yvCytnL2+c2f3P2OSDMOYP1LJshKL8wlSl9rR/N3IWYxHUOsPjSJ7OeY9s9RpcET
iYklwUENbbAKmnbczBoYZOZo+jU2L+PiGivgJEzobsHn5ICnW0LG9C+KMKolKO3Q
RTvlJxIKk7Pcrb8S8wBSV3ehdtTG3wcRrT1YcLvSXsMuQuSy0KYid7VNPuYDxE4t
jhI1QHhoPXJw+IJLyDymC613Du+rhRYEn3UsIubL1A2YHcWfN2j3H/cslgSDSm0K
0+Sy/tuNFu/hF7XnA/qe2zjf0hVxoMktXDPIkCaEAkwgAbzmLkvhHmx6tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2+3g3VC+tvMfm3GtW7XL20VqlmMB8GA1UdIwQY
MBaAFPImL69DdkIAJKrXKYOsPoeUTqelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMt
YmFkYWZjYTM5NDRmLzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMtYmFkYWZjYTM5NDRm
LzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfpHwq6c
bdclm8G3Ot+9OeRYf3kuFN51CGCtIhgGfvE6KBeusia+qaQDkih+bgOL1oVIj4wh
ScT5OYug+RQ/nFOEptzQDZoFLwn28/J9lHu8O3u/1BJMPDJ1Mrc4wKOh1Pt81P5z
plKJjHU3MAUat4K2HpeQvl/2s1J5HOV5M64Ye05DlkOgvuDpOpulQI4wJmrotfED
dMr0dRkKCE5y+B9ySV6NQPcE+cYxb80Ph1LGsnA47GIrMUq2O+eABTxS86A4RXi3
j4tIyi+zMdR0hUYXRIB34GYfa9tEGCAv3PxKrK1F7fvbwWN28ngMDmopqV9w4tfE
8N2zrwdGHupqhw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:13 2025 by rpki-client