Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
File: 1-9F4zWAolpi3zZXd17FpF0kLRAc.mft (raw, json)
Hash identifier: Qa4GGM/MernHuk7QuHDzsPnDY82hwq68vTjtchz3bsM=
Subject key identifier: 47:30:73:8A:7C:5C:F4:2D:69:59:78:BA:E6:DB:70:B8:D0:6B:88:20
Authority key identifier: FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
Certificate issuer: /CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Certificate serial: 0194BBCDEAAF6D3940220F3D27B90CFBF249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
Manifest number: 08F8
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: 1-9F4zWAolpi3zZXd17FpF0kLRAc.crl (hash: MNFlMlUfCcOL+dhB8TOhr/HJyxYfYIrDBx8OZIlE21g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ea:af:6d:39:40:22:0f:3d:27:b9:0c:fb:f2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=4730738a7c5cf42d695978bae6db70b8d06b8820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:55:ed:32:f8:5d:c8:43:82:56:00:fc:d5:
f1:ba:bf:37:9e:4f:01:2b:43:ac:c8:a4:3c:ea:cb:
45:9c:48:13:a4:1f:d9:4a:f9:dc:32:62:c2:3e:fe:
bd:b7:f6:6b:01:db:d7:10:9e:25:7e:33:88:24:e9:
35:0e:40:3b:83:66:35:32:d6:b4:73:ab:39:27:bc:
01:a4:ef:43:e0:21:e8:48:6e:2c:18:67:5a:1f:59:
84:f8:ff:b0:f3:61:00:ec:7a:dc:17:6e:7d:a8:3b:
d4:2e:0e:66:24:15:57:61:4f:12:b8:54:ac:50:cd:
67:65:a7:06:46:43:d9:81:95:72:84:91:7c:07:20:
e5:05:b0:b0:58:02:40:5d:83:4e:d5:e7:d3:3b:c2:
09:58:94:63:5c:66:65:b2:16:72:3f:68:28:35:6f:
b8:6b:93:57:3a:4a:96:a5:ac:1a:4e:68:87:14:9c:
8e:11:cb:91:39:49:83:ff:17:2e:b4:4f:8e:46:08:
d7:b4:a1:da:d0:5b:d7:07:91:5f:4a:34:d5:40:08:
55:89:42:0a:5f:a6:f3:84:46:e5:2c:23:7f:d4:10:
1a:02:06:54:66:19:d1:7f:97:ca:55:0a:20:8d:13:
be:05:b4:32:cc:c3:ff:9f:9d:cb:50:c0:52:c1:da:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:30:73:8A:7C:5C:F4:2D:69:59:78:BA:E6:DB:70:B8:D0:6B:88:20
X509v3 Authority Key Identifier:
keyid:FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b8:9b:13:b2:3c:a8:69:35:a0:b3:62:6d:91:fc:72:c2:1d:
38:ba:dc:df:47:d2:bb:06:89:26:7d:98:aa:df:0e:8d:c6:15:
6e:15:bf:6f:90:84:d7:6c:8a:2d:b2:fd:f5:96:85:5c:4f:d6:
0e:c9:b4:19:ee:f6:2f:36:06:50:1e:82:1c:b1:88:24:33:44:
cc:60:66:4f:38:d3:c8:ab:44:67:0b:64:73:07:ed:17:91:1e:
44:a1:9a:ea:cb:b1:56:60:9c:64:9a:25:75:97:7d:a8:d6:db:
92:30:d8:fd:32:50:63:63:ab:2f:62:79:54:3e:f1:37:ed:40:
83:e7:5b:af:79:b6:19:9a:7d:d3:ba:62:20:7e:8a:3b:bc:5d:
41:d6:86:09:dd:6c:1e:a9:48:f8:b6:a3:cf:9a:2e:22:67:43:
98:10:47:bb:8a:64:05:e3:2a:17:53:f1:a1:06:e0:95:5e:37:
6f:5f:30:61:a7:a3:d9:e2:13:80:42:16:ec:cf:0f:ed:ba:ad:
27:64:26:ba:e4:e1:2d:e6:66:03:ed:27:30:e5:09:bf:2d:4c:
04:fa:bb:af:61:86:1a:9d:df:28:bd:e6:c4:53:80:04:7a:6d:
77:55:59:10:3d:cc:70:2e:eb:30:19:fe:fe:09:89:bb:0b:78:
b5:c4:6f:38
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS7zeqvbTlAIg89J7kM+/JJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDE3OGNkNjAyODk2OThiN2NkOTVkZGQ3YjE2OTE3NDkw
YjQ0MDcwHhcNMjUwMTMxMTAwMDIxWhcNMjUwMjAxMTAwMDIxWjAzMTEwLwYDVQQD
Eyg0NzMwNzM4YTdjNWNmNDJkNjk1OTc4YmFlNmRiNzBiOGQwNmI4ODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKFV7TL4XchDglYA/NXxur83nk8B
K0OsyKQ86stFnEgTpB/ZSvncMmLCPv69t/ZrAdvXEJ4lfjOIJOk1DkA7g2Y1Mta0
c6s5J7wBpO9D4CHoSG4sGGdaH1mE+P+w82EA7HrcF259qDvULg5mJBVXYU8SuFSs
UM1nZacGRkPZgZVyhJF8ByDlBbCwWAJAXYNO1efTO8IJWJRjXGZlshZyP2goNW+4
a5NXOkqWpawaTmiHFJyOEcuROUmD/xcutE+ORgjXtKHa0FvXB5FfSjTVQAhViUIK
X6bzhEblLCN/1BAaAgZUZhnRf5fKVQogjRO+BbQyzMP/n53LUMBSwdroHwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEcwc4p8XPQtaVl4uubbcLjQa4ggMB8GA1UdIwQY
MBaAFPvReM1gKJaYt82V3dexaRdJC0QHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05RjR6V0FvbHBpM3paWGQxN0ZwRjBrTFJBYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvMjdiZjJhLTgyYTQtNDhkOS1iNGUy
LTJiNzFmYzMzMzY2My8xLzEtOUY0eldBb2xwaTN6WlhkMTdGcEYwa0xSQWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2MzLzI3YmYyYS04MmE0LTQ4ZDktYjRlMi0yYjcxZmMzMzM2
NjMvMS8xLTlGNHpXQW9scGkzelpYZDE3RnBGMGtMUkFjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7ib
E7I8qGk1oLNibZH8csIdOLrc30fSuwaJJn2Yqt8OjcYVbhW/b5CE12yKLbL99ZaF
XE/WDsm0Ge72LzYGUB6CHLGIJDNEzGBmTzjTyKtEZwtkcwftF5EeRKGa6suxVmCc
ZJoldZd9qNbbkjDY/TJQY2OrL2J5VD7xN+1Ag+dbr3m2GZp907piIH6KO7xdQdaG
Cd1sHqlI+Lajz5ouImdDmBBHu4pkBeMqF1PxoQbglV43b18wYaej2eITgEIW7M8P
7bqtJ2QmuuThLeZmA+0nMOUJvy1MBPq7r2GGGp3fKL3mxFOABHptd1VZED3McC7r
MBn+/gmJuwt4tcRvOA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:24 2025 by rpki-client