Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
File: n0XrWiiMaO1g29m4fk6CBsqckz8.mft (raw, json)
Hash identifier: MWfwfWv/eaOqBf98zpdJdcDDNqUlOB5yUk4TINTxnSY=
Subject key identifier: 36:91:E6:BB:63:C2:CB:09:2D:54:08:64:7F:D9:47:0E:84:2A:F3:A5
Authority key identifier: 9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F
Certificate issuer: /CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f
Certificate serial: 0194BBCDFE15AA07EAD850DE8C4B6E4263A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
Manifest number: 0E04
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: n0XrWiiMaO1g29m4fk6CBsqckz8.crl (hash: Re67X4GIMhSSAykBl4+FUaR+eZ9GjoC0fUp/yi+H7u4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fe:15:aa:07:ea:d8:50:de:8c:4b:6e:42:63:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=3691e6bb63c2cb092d5408647fd9470e842af3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6a:44:8a:7f:4d:22:94:f8:05:33:77:14:eb:
ef:e2:3b:25:f4:e2:92:ab:a3:d4:f9:f7:5a:08:14:
6e:79:d1:b6:2e:42:be:3c:c5:c2:bd:18:0d:5d:d3:
ac:52:94:d5:0f:06:88:04:a9:0a:e1:81:b6:82:c4:
9e:58:c0:35:15:a3:8a:7a:5c:1d:50:59:f8:d4:18:
cd:8f:c9:4d:fe:65:eb:9f:0b:2f:b3:42:eb:eb:8d:
b0:8f:ce:1f:a5:4e:ee:32:5f:d4:a1:d0:2b:ed:08:
a1:c1:65:89:8c:d0:1a:85:ec:d1:36:ce:07:64:40:
f2:48:a0:34:98:0d:22:10:b2:9a:97:a0:17:79:5a:
fa:15:d3:83:ef:7a:6c:9d:21:9a:82:03:0d:a8:87:
c5:bf:21:f2:b0:30:92:38:0f:89:15:3f:5c:f3:10:
7e:4c:cd:f5:c6:d4:2e:26:00:8e:f6:6d:18:ec:fa:
1d:13:83:71:55:21:40:45:ee:9b:60:b0:9b:02:8c:
c7:18:bd:88:c1:a2:68:9c:4a:a9:95:cd:52:2a:2d:
b1:5c:20:8a:93:fe:58:ba:b1:8d:72:3c:f2:fc:24:
96:bd:2a:83:ce:d3:55:16:33:1f:6b:c7:41:95:84:
52:56:d6:a3:67:db:29:0f:45:d7:35:a7:43:6a:00:
e2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:91:E6:BB:63:C2:CB:09:2D:54:08:64:7F:D9:47:0E:84:2A:F3:A5
X509v3 Authority Key Identifier:
keyid:9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a9:92:76:9f:d0:7a:ed:2b:4d:c8:8f:93:7c:e7:39:4c:a0:
7f:4a:32:61:36:21:bf:5a:9a:6f:05:96:7a:77:3b:01:ae:eb:
de:ef:ac:ea:bb:c9:d3:fb:63:ae:27:4e:96:b8:5e:01:4e:14:
e9:e2:06:ca:47:80:75:da:a4:c2:d5:9a:a7:0a:47:db:c6:1a:
0d:5c:72:a3:e7:6c:31:55:d6:e7:38:e9:88:0b:08:8e:05:d3:
e6:c4:9e:a4:73:3e:38:77:52:e6:5a:31:1f:ef:3f:3e:1e:e3:
ee:2e:38:a4:15:13:d3:d3:6f:73:55:20:a2:8e:2a:c1:19:c5:
c7:7a:27:cf:50:06:c7:6a:16:70:7d:0f:e0:9b:c7:60:d4:48:
6c:9f:29:74:39:7b:11:15:f5:d9:07:87:d6:5f:28:fe:cf:0d:
48:3f:2e:98:fb:1e:bb:cf:7e:b2:3b:49:c8:2f:e5:d7:9d:33:
82:2d:b0:98:4c:f6:6e:e3:c1:f9:09:1e:f2:07:9b:fa:73:6f:
2f:3b:ec:fe:44:81:b0:eb:b9:09:c6:22:cc:16:bf:97:e7:46:
60:bc:0b:ee:06:1a:d3:e2:1e:d7:2a:20:45:29:d8:17:8d:aa:
18:51:20:8b:23:53:fc:48:13:c3:89:b9:10:88:4a:c2:e7:3a:
30:5b:9e:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zf4Vqgfq2FDejEtuQmOnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNDVlYjVhMjg4YzY4ZWQ2MGRiZDliODdlNGU4MjA2Y2E5
YzkzM2YwHhcNMjUwMTMxMTAwMDI2WhcNMjUwMjAxMTAwMDI2WjAzMTEwLwYDVQQD
EygzNjkxZTZiYjYzYzJjYjA5MmQ1NDA4NjQ3ZmQ5NDcwZTg0MmFmM2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2pEin9NIpT4BTN3FOvv4jsl9OKS
q6PU+fdaCBRuedG2LkK+PMXCvRgNXdOsUpTVDwaIBKkK4YG2gsSeWMA1FaOKelwd
UFn41BjNj8lN/mXrnwsvs0Lr642wj84fpU7uMl/UodAr7QihwWWJjNAahezRNs4H
ZEDySKA0mA0iELKal6AXeVr6FdOD73psnSGaggMNqIfFvyHysDCSOA+JFT9c8xB+
TM31xtQuJgCO9m0Y7PodE4NxVSFARe6bYLCbAozHGL2IwaJonEqplc1SKi2xXCCK
k/5YurGNcjzy/CSWvSqDztNVFjMfa8dBlYRSVtajZ9spD0XXNadDagDifQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaR5rtjwssJLVQIZH/ZRw6EKvOlMB8GA1UdIwQY
MBaAFJ9F61oojGjtYNvZuH5OggbKnJM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjBYcldpaU1hTzFnMjltNGZrNkNCc3Fja3o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9lNDIzMzYtZWI3Ny00NTQwLWJlNDEt
NTVmZDZkYzFhMWQ4LzEvbjBYcldpaU1hTzFnMjltNGZrNkNCc3Fja3o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9lNDIzMzYtZWI3Ny00NTQwLWJlNDEtNTVmZDZkYzFhMWQ4
LzEvbjBYcldpaU1hTzFnMjltNGZrNkNCc3Fja3o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv6mSdp/Q
eu0rTciPk3znOUygf0oyYTYhv1qabwWWenc7Aa7r3u+s6rvJ0/tjridOlrheAU4U
6eIGykeAddqkwtWapwpH28YaDVxyo+dsMVXW5zjpiAsIjgXT5sSepHM+OHdS5lox
H+8/Ph7j7i44pBUT09Nvc1Ugoo4qwRnFx3onz1AGx2oWcH0P4JvHYNRIbJ8pdDl7
ERX12QeH1l8o/s8NSD8umPseu89+sjtJyC/l150zgi2wmEz2buPB+Qke8geb+nNv
Lzvs/kSBsOu5CcYizBa/l+dGYLwL7gYa0+Ie1yogRSnYF42qGFEgiyNT/EgTw4m5
EIhKwuc6MFueEg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:48 2025 by rpki-client