Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
File: 27s70rCfy7vfiVsOOpxaAGRW_aY.mft (raw, json)
Hash identifier: tZ6FZ/o2kTSkACM9/kfCB+LSK0o/UO27bkfR0u9brS4=
Subject key identifier: 9A:9F:9C:C3:42:A3:AF:9A:C3:7A:88:9F:DF:91:99:37:17:AC:BD:21
Authority key identifier: DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
Certificate issuer: /CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Certificate serial: 0194BD177699D92D6A4A7632A3008836171F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
Manifest number: 0595
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: 27s70rCfy7vfiVsOOpxaAGRW_aY.crl (hash: 6/iDga56NW9QWMIlo0sJA9G83Jmsop8HSRq+Ent/L64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:76:99:d9:2d:6a:4a:76:32:a3:00:88:36:17:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=9a9f9cc342a3af9ac37a889fdf91993717acbd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:c3:c5:20:b4:88:8c:98:be:c4:dc:b1:49:
c0:4d:da:c5:6a:4c:5a:85:70:f0:2c:26:1c:ca:0b:
39:14:f2:7f:18:79:a4:42:6d:f7:64:3d:ab:04:dd:
34:d0:a0:df:6a:21:84:07:83:8f:c9:9d:b3:64:2d:
a6:12:8e:ef:1d:97:f6:40:07:6e:f4:26:5b:2d:50:
5c:9a:b1:06:ed:24:4e:10:92:40:65:55:b2:d5:76:
a6:51:69:ee:88:54:6d:40:fb:bd:2c:dd:bf:a7:e4:
92:df:d9:28:e1:b5:26:15:79:bd:1b:51:82:47:0f:
4c:9d:90:e9:e8:65:8b:52:72:a1:9d:17:ee:c5:18:
17:0a:86:85:eb:a8:f8:60:e3:ec:d2:75:25:da:a0:
63:b8:2f:37:86:d2:00:86:67:b7:91:63:33:8a:d5:
38:4f:3c:7d:72:d3:b3:90:ae:0c:a8:d0:f5:f1:5a:
b9:55:16:df:02:58:1a:6a:ca:c3:62:f9:47:d0:03:
c6:8f:1c:8a:d8:dd:eb:0f:17:56:99:a7:c0:63:05:
21:30:36:58:22:2b:31:bf:bc:44:45:0e:32:ab:d1:
cc:a0:51:1c:36:a2:53:ba:29:9c:3d:be:f2:24:1b:
ef:9f:20:ba:ec:04:a1:f5:38:7c:a3:8d:50:30:06:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9F:9C:C3:42:A3:AF:9A:C3:7A:88:9F:DF:91:99:37:17:AC:BD:21
X509v3 Authority Key Identifier:
keyid:DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:78:5e:9c:d6:b3:d1:e1:f8:c9:4b:49:16:2d:c8:60:28:bd:
a8:78:c2:2d:98:91:03:bd:ce:c4:fe:e5:cd:28:91:f6:a4:e1:
d9:4b:24:f3:d4:f5:ba:4c:6c:76:88:7f:b3:0d:e3:5f:87:3a:
92:bd:20:88:ad:28:68:f6:09:2c:98:a3:79:64:6a:45:2d:fc:
7e:4d:88:2d:db:17:b1:cd:e1:ad:5c:a8:64:d4:05:1d:2b:83:
62:5b:d2:89:64:8a:23:12:e6:51:ac:09:33:79:68:cf:be:bf:
e0:08:e7:9a:dc:ab:69:b3:ae:4c:d6:6e:c3:22:60:76:41:a4:
b9:00:e5:45:8e:2e:ba:60:dc:c5:33:ee:11:1c:ff:cb:d9:8e:
aa:64:ab:1c:f6:bc:34:90:45:c7:05:27:41:31:ee:79:e0:5b:
8a:e6:7f:ea:45:24:22:64:fd:37:5f:58:1f:85:b2:ea:b4:4d:
09:29:2f:5b:64:a8:7f:a5:99:4d:c9:14:59:f7:51:50:bb:15:
b8:a2:f7:a2:4d:d8:70:ce:03:91:f9:a7:58:f9:e3:e8:be:2b:
7d:ea:21:37:dd:d5:50:c7:75:d8:81:e5:eb:31:96:f5:b7:da:
21:74:ef:1b:1d:ac:ac:85:2d:44:be:bf:12:54:f1:ec:9f:b9:
f1:67:6a:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3aZ2S1qSnYyowCINhcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYmIzYmQyYjA5ZmNiYmJkZjg5NWIwZTNhOWM1YTAwNjQ1
NmZkYTYwHhcNMjUwMTMxMTYwMDE4WhcNMjUwMjAxMTYwMDE4WjAzMTEwLwYDVQQD
Eyg5YTlmOWNjMzQyYTNhZjlhYzM3YTg4OWZkZjkxOTkzNzE3YWNiZDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQHDxSC0iIyYvsTcsUnATdrFakxa
hXDwLCYcygs5FPJ/GHmkQm33ZD2rBN000KDfaiGEB4OPyZ2zZC2mEo7vHZf2QAdu
9CZbLVBcmrEG7SROEJJAZVWy1XamUWnuiFRtQPu9LN2/p+SS39ko4bUmFXm9G1GC
Rw9MnZDp6GWLUnKhnRfuxRgXCoaF66j4YOPs0nUl2qBjuC83htIAhme3kWMzitU4
Tzx9ctOzkK4MqND18Vq5VRbfAlgaasrDYvlH0APGjxyK2N3rDxdWmafAYwUhMDZY
Iisxv7xERQ4yq9HMoFEcNqJTuimcPb7yJBvvnyC67ASh9Th8o41QMAYdZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqfnMNCo6+aw3qIn9+RmTcXrL0hMB8GA1UdIwQY
MBaAFNu7O9Kwn8u734lbDjqcWgBkVv2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzI1MjktYjA4Yi00MjM1LWI5Yjkt
ZTg2OWIzNGQyYzZhLzEvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9jMzI1MjktYjA4Yi00MjM1LWI5YjktZTg2OWIzNGQyYzZh
LzEvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHhenNaz
0eH4yUtJFi3IYCi9qHjCLZiRA73OxP7lzSiR9qTh2Usk89T1ukxsdoh/sw3jX4c6
kr0giK0oaPYJLJijeWRqRS38fk2ILdsXsc3hrVyoZNQFHSuDYlvSiWSKIxLmUawJ
M3loz76/4AjnmtyrabOuTNZuwyJgdkGkuQDlRY4uumDcxTPuERz/y9mOqmSrHPa8
NJBFxwUnQTHueeBbiuZ/6kUkImT9N19YH4Wy6rRNCSkvW2Sof6WZTckUWfdRULsV
uKL3ok3YcM4DkfmnWPnj6L4rfeohN93VUMd12IHl6zGW9bfaIXTvGx2srIUtRL6/
ElTx7J+58WdqZg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:18 2025 by rpki-client