Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/fc0d21-7f14-44ab-995c-e0bae8bae674/1/dCnR70knCBDhAgzqhhmGQjORMaA.mft
File: dCnR70knCBDhAgzqhhmGQjORMaA.mft (raw, json)
Hash identifier: EbGNf/9/limPll+iIgqdFsjzTvnPQ+YV02lpxxoLz7Q=
Subject key identifier: 52:1C:64:BC:35:33:EF:A5:66:45:B5:24:17:19:D7:A2:EF:13:19:18
Authority key identifier: 74:29:D1:EF:49:27:08:10:E1:02:0C:EA:86:19:86:42:33:91:31:A0
Certificate issuer: /CN=7429d1ef49270810e1020cea86198642339131a0
Certificate serial: 0194BBCDFE27F9C7D1CAF04847A2353F5222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCnR70knCBDhAgzqhhmGQjORMaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/fc0d21-7f14-44ab-995c-e0bae8bae674/1/dCnR70knCBDhAgzqhhmGQjORMaA.mft
Manifest number: 08F6
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: dCnR70knCBDhAgzqhhmGQjORMaA.crl (hash: xOE9kRi0e0ccsKza62n9ih7pwTd8a44h79oU6vpu2lU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fe:27:f9:c7:d1:ca:f0:48:47:a2:35:3f:52:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7429d1ef49270810e1020cea86198642339131a0
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=521c64bc3533efa56645b5241719d7a2ef131918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:d2:60:dd:0f:3a:26:da:8c:c4:2e:f1:4b:
31:18:5c:d3:4d:2d:04:e5:10:d1:78:e0:d8:f9:0b:
b3:a8:bf:21:54:59:1f:d2:c8:16:d0:0d:4d:4b:c6:
15:ac:79:3e:5b:bc:9e:61:fd:6b:66:7d:63:dc:b5:
5b:ea:f1:07:78:48:6c:1e:f7:90:86:ec:6e:0a:61:
6f:aa:41:f9:9b:28:a4:12:c2:14:9e:95:e6:78:df:
10:4d:6d:7d:7f:42:c5:77:af:4a:93:27:3d:c0:85:
d6:6c:e1:6e:e1:db:7f:b6:5c:2f:f7:f7:b6:7d:b8:
b1:6f:b6:b4:eb:0b:76:86:81:17:bf:28:77:22:a3:
9e:87:b6:dd:98:b2:cd:16:cb:be:d2:ff:d5:87:8a:
45:d6:c5:f8:af:37:45:20:b2:1f:ab:4c:a0:bd:13:
c3:3f:58:98:e1:f2:d6:38:6a:5b:5a:b5:04:69:39:
d3:97:50:8c:f7:8d:26:5d:b7:69:85:32:0a:94:bc:
69:28:ae:04:29:fe:50:45:97:1f:ec:97:18:7d:76:
fd:6e:d1:7c:bd:57:5b:f3:fb:36:fa:2e:18:9e:d5:
5b:32:95:6c:40:fd:86:02:15:62:68:18:33:0d:2e:
f6:15:cd:8b:11:82:20:0a:dd:bb:a6:71:26:72:50:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1C:64:BC:35:33:EF:A5:66:45:B5:24:17:19:D7:A2:EF:13:19:18
X509v3 Authority Key Identifier:
keyid:74:29:D1:EF:49:27:08:10:E1:02:0C:EA:86:19:86:42:33:91:31:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCnR70knCBDhAgzqhhmGQjORMaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fc0d21-7f14-44ab-995c-e0bae8bae674/1/dCnR70knCBDhAgzqhhmGQjORMaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fc0d21-7f14-44ab-995c-e0bae8bae674/1/dCnR70knCBDhAgzqhhmGQjORMaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c2:72:c9:2e:65:4b:c9:48:02:4a:ef:ac:10:2c:de:44:b9:
42:2d:c6:be:79:3f:2c:f9:cc:95:97:7b:eb:08:64:3e:de:d0:
8d:7e:f7:e3:a5:9d:36:43:d3:a2:0c:97:96:01:68:43:b8:0e:
64:7a:32:83:94:1a:91:b1:62:19:2d:bc:ea:0d:68:ad:b6:02:
a0:42:70:ca:a3:cd:5c:77:37:20:3e:79:fb:d1:28:df:10:4c:
3c:41:c0:15:12:e7:b2:b5:0f:fc:a3:0d:6d:69:35:1b:7e:b7:
3b:73:80:d5:80:5f:f7:e9:8a:ef:14:f7:bb:29:47:ff:08:79:
e7:4f:c2:23:a2:65:e0:fe:d8:2c:94:aa:bf:59:fd:d7:bd:ae:
76:c5:88:31:95:a0:58:4e:9c:08:d9:8e:3e:7c:35:eb:b4:6c:
66:45:4c:4c:55:d2:4e:f7:e0:00:78:a8:bf:02:c6:24:23:af:
fc:d5:e5:5f:7c:e1:58:5a:89:c4:be:61:bb:7e:16:d6:55:99:
c3:f4:bb:8d:c1:16:ca:eb:3b:e2:23:3a:1e:0e:36:ee:57:9e:
c1:7a:6d:0c:a6:44:37:ec:d9:e6:7f:33:c4:89:dc:6d:9a:4a:
2c:9b:1b:0a:40:e3:fb:ce:a1:a1:fc:57:66:65:4c:1a:22:76:
7f:73:d1:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zf4n+cfRyvBIR6I1P1IiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MjlkMWVmNDkyNzA4MTBlMTAyMGNlYTg2MTk4NjQyMzM5
MTMxYTAwHhcNMjUwMTMxMTAwMDI2WhcNMjUwMjAxMTAwMDI2WjAzMTEwLwYDVQQD
Eyg1MjFjNjRiYzM1MzNlZmE1NjY0NWI1MjQxNzE5ZDdhMmVmMTMxOTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp7SYN0POibajMQu8UsxGFzTTS0E
5RDReODY+QuzqL8hVFkf0sgW0A1NS8YVrHk+W7yeYf1rZn1j3LVb6vEHeEhsHveQ
huxuCmFvqkH5myikEsIUnpXmeN8QTW19f0LFd69Kkyc9wIXWbOFu4dt/tlwv9/e2
fbixb7a06wt2hoEXvyh3IqOeh7bdmLLNFsu+0v/Vh4pF1sX4rzdFILIfq0ygvRPD
P1iY4fLWOGpbWrUEaTnTl1CM940mXbdphTIKlLxpKK4EKf5QRZcf7JcYfXb9btF8
vVdb8/s2+i4YntVbMpVsQP2GAhViaBgzDS72Fc2LEYIgCt27pnEmclCSQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIcZLw1M++lZkW1JBcZ16LvExkYMB8GA1UdIwQY
MBaAFHQp0e9JJwgQ4QIM6oYZhkIzkTGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZENuUjcwa25DQkRoQWd6cWhobUdRak9STWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mYzBkMjEtN2YxNC00NGFiLTk5NWMt
ZTBiYWU4YmFlNjc0LzEvZENuUjcwa25DQkRoQWd6cWhobUdRak9STWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mYzBkMjEtN2YxNC00NGFiLTk5NWMtZTBiYWU4YmFlNjc0
LzEvZENuUjcwa25DQkRoQWd6cWhobUdRak9STWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMJyyS5l
S8lIAkrvrBAs3kS5Qi3Gvnk/LPnMlZd76whkPt7QjX7346WdNkPTogyXlgFoQ7gO
ZHoyg5QakbFiGS286g1orbYCoEJwyqPNXHc3ID55+9Eo3xBMPEHAFRLnsrUP/KMN
bWk1G363O3OA1YBf9+mK7xT3uylH/wh550/CI6Jl4P7YLJSqv1n9172udsWIMZWg
WE6cCNmOPnw167RsZkVMTFXSTvfgAHiovwLGJCOv/NXlX3zhWFqJxL5hu34W1lWZ
w/S7jcEWyus74iM6Hg427leewXptDKZEN+zZ5n8zxIncbZpKLJsbCkDj+86hofxX
ZmVMGiJ2f3PR3Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:27 2025 by rpki-client