Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
File: xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft (raw, json)
Hash identifier: gNeFY+8BkO9WmNH5tJ9rfRzS/WmKyOZKtPYeT4OKAz4=
Subject key identifier: FF:97:DA:AF:A9:C1:D8:F1:51:A8:25:95:7B:30:1A:93:99:88:C6:EA
Authority key identifier: C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
Certificate issuer: /CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Certificate serial: 0194BBCEFF44DB18C60B17998014F647A247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
Manifest number: 1182
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl (hash: qPn8n2aGigFgZ+ejR10bwLAgdHUvhY0Bitp+4m6VtYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ff:44:db:18:c6:0b:17:99:80:14:f6:47:a2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=ff97daafa9c1d8f151a825957b301a939988c6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:9b:bb:b1:69:49:5c:0d:05:f6:8d:e2:31:
44:ab:53:2a:a9:2a:3c:ce:39:f1:20:b0:10:5b:71:
88:29:ea:d2:03:ad:21:a8:ca:f8:bc:95:6a:c4:e3:
4c:e4:e4:40:8b:90:40:f4:48:1c:a3:8a:63:b7:de:
7a:13:2c:53:95:ea:74:47:cc:21:19:ac:f2:ca:92:
66:79:2a:65:cf:cb:8e:c9:bd:da:96:fa:59:f3:e9:
17:75:0b:ba:3f:a8:18:8c:f2:cc:5f:aa:2f:b8:a8:
94:be:be:5c:2e:39:de:0a:8f:2e:80:d2:60:30:3f:
71:aa:07:c4:9a:e6:5f:83:aa:24:a5:f6:f7:77:5d:
f7:c5:42:94:ff:8c:40:ce:61:4c:0a:bc:3d:ef:6d:
5e:1d:bb:df:b2:0c:32:bd:2d:59:22:70:4e:da:35:
0e:30:ec:4c:ea:bc:d1:14:b9:e9:fc:24:3a:23:80:
df:84:96:e9:44:0e:c6:26:5b:75:b4:4c:26:e1:44:
51:8f:56:d1:57:2e:f6:04:07:c0:57:6d:92:09:d8:
9c:79:33:b0:2b:e6:20:e5:b5:e8:c6:f2:13:0b:d8:
5b:85:14:87:14:78:df:50:fd:e2:d3:49:e5:0a:68:
53:93:14:c0:a8:86:cd:4a:3b:4b:0f:13:4e:03:7a:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:97:DA:AF:A9:C1:D8:F1:51:A8:25:95:7B:30:1A:93:99:88:C6:EA
X509v3 Authority Key Identifier:
keyid:C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8b:4b:0a:37:08:cf:d2:d7:df:0f:4d:32:6e:75:cc:7d:78:
cb:18:5a:7c:06:ec:eb:27:5c:5c:38:90:93:91:38:59:12:39:
19:29:f0:81:ed:38:ba:6b:a3:96:47:28:43:06:d3:f7:fd:67:
ab:ae:5c:d8:15:26:b2:27:d2:c9:07:20:20:91:5e:48:e8:54:
69:bd:cf:96:33:a6:cd:39:d0:85:38:11:bb:09:d4:39:4a:6c:
fe:f7:65:ed:8b:69:56:19:5a:7a:ff:f2:ca:34:f2:2b:ce:25:
10:cf:8c:bf:b1:ab:a2:85:a8:9b:77:bc:2d:42:1b:dd:41:1b:
9b:17:36:59:b5:48:46:2f:12:12:52:3c:d9:88:44:a1:cb:6a:
ec:4a:95:12:98:26:dd:2d:24:ae:99:b9:2f:5b:e1:79:1b:65:
3d:f4:26:ed:5f:9b:f7:3c:5c:11:7e:05:31:24:51:62:89:70:
73:0e:bb:5c:ab:ab:28:29:ef:90:d1:5d:05:a4:13:fd:42:c2:
5b:b5:75:a7:c0:b1:36:fa:bb:44:da:35:61:b7:9b:81:39:b2:
e0:29:28:98:db:c3:c2:1d:97:e2:bb:17:fa:4f:56:92:10:5e:
f5:9a:90:99:ee:d3:b2:0b:68:59:60:5e:c1:f5:74:5e:4f:b3:
e8:90:6f:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zv9E2xjGCxeZgBT2R6JHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MDBhYmYzZWNhYTBhMzM1MjBjNTZlNmFlZWNlNDRiZWFm
YTI3NTQwHhcNMjUwMTMxMTAwMTMyWhcNMjUwMjAxMTAwMTMyWjAzMTEwLwYDVQQD
EyhmZjk3ZGFhZmE5YzFkOGYxNTFhODI1OTU3YjMwMWE5Mzk5ODhjNmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwebu7FpSVwNBfaN4jFEq1MqqSo8
zjnxILAQW3GIKerSA60hqMr4vJVqxONM5ORAi5BA9Egco4pjt956EyxTlep0R8wh
GazyypJmeSplz8uOyb3alvpZ8+kXdQu6P6gYjPLMX6ovuKiUvr5cLjneCo8ugNJg
MD9xqgfEmuZfg6okpfb3d133xUKU/4xAzmFMCrw9721eHbvfsgwyvS1ZInBO2jUO
MOxM6rzRFLnp/CQ6I4DfhJbpRA7GJlt1tEwm4URRj1bRVy72BAfAV22SCdiceTOw
K+Yg5bXoxvITC9hbhRSHFHjfUP3i00nlCmhTkxTAqIbNSjtLDxNOA3qqkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+X2q+pwdjxUagllXswGpOZiMbqMB8GA1UdIwQY
MBaAFMUAq/PsqgozUgxW5q7s5Evq+idUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFFDcjgteXFDak5TREZibXJ1emtTLXI2SjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xMDAwYjYtZTIxNy00YjBjLTljYjEt
NmQ1Mjc5YzJmZTA3LzEveFFDcjgteXFDak5TREZibXJ1emtTLXI2SjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8xMDAwYjYtZTIxNy00YjBjLTljYjEtNmQ1Mjc5YzJmZTA3
LzEveFFDcjgteXFDak5TREZibXJ1emtTLXI2SjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOItLCjcI
z9LX3w9NMm51zH14yxhafAbs6ydcXDiQk5E4WRI5GSnwge04umujlkcoQwbT9/1n
q65c2BUmsifSyQcgIJFeSOhUab3PljOmzTnQhTgRuwnUOUps/vdl7YtpVhlaev/y
yjTyK84lEM+Mv7GrooWom3e8LUIb3UEbmxc2WbVIRi8SElI82YhEoctq7EqVEpgm
3S0krpm5L1vheRtlPfQm7V+b9zxcEX4FMSRRYolwcw67XKurKCnvkNFdBaQT/ULC
W7V1p8CxNvq7RNo1YbebgTmy4CkomNvDwh2X4rsX+k9WkhBe9ZqQme7TsgtoWWBe
wfV0Xk+z6JBvxw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:33:18 2025 by rpki-client