Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
File: r2sB3cUdknQsPMSisx3H_Bg75X8.mft (raw, json)
Hash identifier: Tg+gecCkvRnNgSaPniGX5yrrkzVOiiBQzT7tpLFmpaw=
Subject key identifier: 24:75:93:F1:86:AE:A8:DA:52:D5:33:8E:62:5B:81:D2:06:87:9A:5F
Authority key identifier: AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F
Certificate issuer: /CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
Certificate serial: 0194BD175666CA0644D7BF50578594E22172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
Manifest number: 0980
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: r2sB3cUdknQsPMSisx3H_Bg75X8.crl (hash: JcdMl28joEECwyyiLUbK5O8d7V3r4GsPrjROMiw8LMw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:56:66:ca:06:44:d7:bf:50:57:85:94:e2:21:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=247593f186aea8da52d5338e625b81d206879a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b7:a7:c5:5c:20:13:d4:ac:55:77:09:0e:f2:
c0:af:28:7d:4f:33:9b:e1:4f:ba:73:95:fa:e4:6b:
64:4e:19:4b:fd:6f:05:aa:80:8c:69:ee:55:c3:d4:
21:ad:b4:3f:03:be:96:ad:9d:e8:05:39:54:16:4f:
48:0f:5f:13:31:6f:79:64:8a:88:a9:5d:6c:7c:a6:
96:e4:81:53:79:46:05:a2:76:4f:3c:96:0e:c6:76:
f1:76:24:df:07:08:f9:f0:ae:33:58:d7:54:b5:83:
17:6b:6a:04:62:92:fa:1a:35:90:8d:87:76:4a:3e:
70:0a:af:b0:14:43:19:22:35:2a:a9:18:fe:4c:23:
2e:fe:d7:96:c9:f7:c9:a2:82:15:e3:1a:43:f0:aa:
ab:86:02:46:a5:44:a4:2e:bb:aa:f0:a4:74:f5:c7:
b3:e8:d9:b2:ba:21:30:70:4c:20:3f:0b:e9:01:ad:
42:75:0c:cd:07:d7:fd:35:a1:a9:d7:ac:44:37:f2:
3c:07:d1:05:8a:46:f5:95:d4:ba:58:ab:45:6e:18:
5e:68:91:44:e6:f5:4a:bf:00:8c:64:0e:21:68:36:
d3:34:a6:67:37:c0:1e:0a:0d:9c:69:81:1c:49:24:
43:e5:b1:46:11:d2:a8:be:1d:3c:b6:d2:a1:f4:ab:
da:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:75:93:F1:86:AE:A8:DA:52:D5:33:8E:62:5B:81:D2:06:87:9A:5F
X509v3 Authority Key Identifier:
keyid:AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cc:05:0b:b8:04:85:8b:fb:6d:4a:82:51:42:93:c0:f2:7d:
da:48:34:6b:4e:25:70:ed:ed:be:81:29:63:8b:08:e8:5a:f5:
f1:80:5c:20:82:eb:ce:42:d4:71:f0:76:f9:c1:6f:b0:40:fa:
ea:25:42:76:73:d7:5a:ad:42:c7:6d:91:29:3b:10:fe:ac:8f:
c5:ae:23:3b:b5:f9:58:e8:f6:f9:86:44:9c:11:15:9a:03:33:
9c:4c:76:be:9d:98:fe:81:68:ed:4a:97:92:f9:36:12:e9:fe:
0c:85:d6:62:4e:a9:01:27:98:ad:aa:98:d8:21:9d:14:6f:32:
43:6a:a8:f2:db:ba:82:6e:f3:19:b9:28:6d:62:53:e1:11:12:
a8:0b:cb:d9:42:51:a5:af:07:f0:0d:eb:4c:ef:93:a6:92:4e:
6c:be:57:36:8c:0d:96:67:70:3a:a4:53:cd:34:f2:8b:0c:2b:
1f:0d:f7:8b:94:06:12:02:ee:51:05:c0:6e:eb:df:e3:e8:ba:
d2:81:98:dc:ff:7c:5a:71:1a:14:e9:50:d7:4d:3d:35:f9:42:
a3:5d:d6:0d:c2:f6:a0:41:b7:36:7f:f9:06:93:64:7a:4f:c8:
95:ad:dd:3b:3e:6c:a5:e1:d5:be:c5:8e:dd:79:ea:ee:96:12:
f2:f8:de:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F1ZmygZE179QV4WU4iFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNmIwMWRkYzUxZDkyNzQyYzNjYzRhMmIzMWRjN2ZjMTgz
YmU1N2YwHhcNMjUwMTMxMTYwMDEwWhcNMjUwMjAxMTYwMDEwWjAzMTEwLwYDVQQD
EygyNDc1OTNmMTg2YWVhOGRhNTJkNTMzOGU2MjViODFkMjA2ODc5YTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LenxVwgE9SsVXcJDvLAryh9TzOb
4U+6c5X65GtkThlL/W8FqoCMae5Vw9QhrbQ/A76WrZ3oBTlUFk9ID18TMW95ZIqI
qV1sfKaW5IFTeUYFonZPPJYOxnbxdiTfBwj58K4zWNdUtYMXa2oEYpL6GjWQjYd2
Sj5wCq+wFEMZIjUqqRj+TCMu/teWyffJooIV4xpD8KqrhgJGpUSkLruq8KR09cez
6NmyuiEwcEwgPwvpAa1CdQzNB9f9NaGp16xEN/I8B9EFikb1ldS6WKtFbhheaJFE
5vVKvwCMZA4haDbTNKZnN8AeCg2caYEcSSRD5bFGEdKovh08ttKh9KvaSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCR1k/GGrqjaUtUzjmJbgdIGh5pfMB8GA1UdIwQY
MBaAFK9rAd3FHZJ0LDzEorMdx/wYO+V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjJzQjNjVWRrblFzUE1TaXN4M0hfQmc3NVg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8zN2EwMDItMjA3MS00NGVjLWJmNTAt
MjljYTE2NTc2ZWRlLzEvcjJzQjNjVWRrblFzUE1TaXN4M0hfQmc3NVg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8zN2EwMDItMjA3MS00NGVjLWJmNTAtMjljYTE2NTc2ZWRl
LzEvcjJzQjNjVWRrblFzUE1TaXN4M0hfQmc3NVg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfswFC7gE
hYv7bUqCUUKTwPJ92kg0a04lcO3tvoEpY4sI6Fr18YBcIILrzkLUcfB2+cFvsED6
6iVCdnPXWq1Cx22RKTsQ/qyPxa4jO7X5WOj2+YZEnBEVmgMznEx2vp2Y/oFo7UqX
kvk2Eun+DIXWYk6pASeYraqY2CGdFG8yQ2qo8tu6gm7zGbkobWJT4RESqAvL2UJR
pa8H8A3rTO+TppJObL5XNowNlmdwOqRTzTTyiwwrHw33i5QGEgLuUQXAbuvf4+i6
0oGY3P98WnEaFOlQ1009NflCo13WDcL2oEG3Nn/5BpNkek/Ila3dOz5speHVvsWO
3Xnq7pYS8vjeOw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:34 2025 by rpki-client