Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
File: xIzPWOSy4trdSoSDPAZ87iuXRek.mft (raw, json)
Hash identifier: AJGanEn7fZwIPupHIh8yjVLJJhBblSbLa4scFJJ9O78=
Subject key identifier: 36:A4:83:F6:59:AE:F4:7D:69:5A:B8:22:41:74:9D:BA:E7:AA:C7:14
Authority key identifier: C4:8C:CF:58:E4:B2:E2:DA:DD:4A:84:83:3C:06:7C:EE:2B:97:45:E9
Certificate issuer: /CN=c48ccf58e4b2e2dadd4a84833c067cee2b9745e9
Certificate serial: 0194BD1748D2FAAF6F0695C9788888E0EA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
Manifest number: 065A
Signing time: Fri 31 Jan 2025 16:00:07 +0000
Manifest this update: Fri 31 Jan 2025 16:00:07 +0000
Manifest next update: Sat 01 Feb 2025 16:00:07 +0000
Files and hashes: 1: xIzPWOSy4trdSoSDPAZ87iuXRek.crl (hash: 2s5tjF5mU8OnD3F5+J+REHRGpyFDx8J79jhX8RnobOg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:48:d2:fa:af:6f:06:95:c9:78:88:88:e0:ea:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48ccf58e4b2e2dadd4a84833c067cee2b9745e9
Validity
Not Before: Jan 31 16:00:07 2025 GMT
Not After : Feb 1 16:00:07 2025 GMT
Subject: CN=36a483f659aef47d695ab82241749dbae7aac714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:45:07:25:fe:83:68:85:18:2e:1c:62:0a:
1e:8d:6a:1a:eb:98:12:d8:cc:f3:ad:5c:14:dc:fe:
3d:48:e1:12:c7:3c:cc:81:03:50:8c:eb:aa:f8:09:
0e:2e:9c:06:fe:a6:ee:83:f7:2b:28:c9:8f:80:c0:
be:d0:1b:d9:54:f8:c0:74:07:87:25:56:ab:98:79:
e7:48:1f:2e:16:97:09:90:0a:9c:cd:5c:99:8e:ee:
7f:ac:31:c3:07:62:88:a5:01:68:eb:6c:9f:05:cb:
4f:a1:dc:2d:5b:54:13:74:b1:aa:32:d3:64:4e:eb:
1e:1e:2d:f5:09:f9:66:0d:e4:32:ca:e4:65:67:4b:
cd:bb:0b:28:ce:83:9d:24:d6:e6:1e:75:87:6b:99:
44:3d:aa:e2:5f:22:42:89:83:b2:9a:e7:f3:12:0b:
59:ba:d6:fa:f1:c4:79:d5:cc:5d:ef:ac:0b:5b:34:
38:fa:fb:f1:3e:37:88:46:64:fe:c8:7b:7a:70:3f:
d4:4f:bb:5f:96:80:53:b8:5e:f3:ec:58:50:58:9f:
5c:fd:10:49:53:57:69:a6:a5:4c:79:1b:9f:c7:83:
40:82:ee:52:d4:50:8b:6b:88:07:00:55:ba:78:0c:
1d:1d:8c:87:46:d1:51:96:6f:dc:55:de:83:ed:66:
a9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A4:83:F6:59:AE:F4:7D:69:5A:B8:22:41:74:9D:BA:E7:AA:C7:14
X509v3 Authority Key Identifier:
keyid:C4:8C:CF:58:E4:B2:E2:DA:DD:4A:84:83:3C:06:7C:EE:2B:97:45:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ff:30:f4:ef:92:62:29:a6:6a:01:08:14:ff:f8:92:95:34:
d7:22:1a:45:52:78:c5:b6:48:2d:df:2b:5c:13:cf:63:d5:35:
46:a5:d3:10:e5:cf:e9:6f:d7:46:48:75:83:13:f2:c9:e9:81:
d8:83:a5:ff:ee:9d:6d:96:5d:3f:81:8e:ed:af:c9:d8:39:05:
20:3d:22:f1:5a:84:da:d3:6b:32:2e:49:1d:27:f9:1f:63:3c:
5e:b3:b9:83:84:6a:a7:f5:7e:54:d9:42:d9:98:1a:de:a5:f6:
86:d4:f3:e3:50:86:06:04:4c:4c:49:79:46:ab:70:8a:27:b6:
ba:9f:48:60:b1:97:01:cf:1b:d4:47:ea:aa:83:18:28:03:59:
54:26:91:ca:f1:5e:0a:bc:80:79:82:d6:42:6b:d0:5c:a6:0b:
57:e3:7d:bd:7b:a7:ea:7e:50:40:fe:95:a4:5f:c4:eb:7c:cd:
e4:c2:b1:0b:44:84:20:22:1e:31:eb:63:0e:75:93:73:7d:a0:
19:1c:71:d8:8d:ba:59:f1:47:12:61:94:62:7d:35:d6:e2:ba:
1c:65:9f:c5:d7:cc:df:c5:80:db:51:b6:0e:ad:3f:75:32:07:
64:1b:43:b8:f3:51:bb:c8:ef:ac:59:5a:62:e4:0e:dd:69:f0:
65:66:b5:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F0jS+q9vBpXJeIiI4OoRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OGNjZjU4ZTRiMmUyZGFkZDRhODQ4MzNjMDY3Y2VlMmI5
NzQ1ZTkwHhcNMjUwMTMxMTYwMDA3WhcNMjUwMjAxMTYwMDA3WjAzMTEwLwYDVQQD
EygzNmE0ODNmNjU5YWVmNDdkNjk1YWI4MjI0MTc0OWRiYWU3YWFjNzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GdFByX+g2iFGC4cYgoejWoa65gS
2MzzrVwU3P49SOESxzzMgQNQjOuq+AkOLpwG/qbug/crKMmPgMC+0BvZVPjAdAeH
JVarmHnnSB8uFpcJkAqczVyZju5/rDHDB2KIpQFo62yfBctPodwtW1QTdLGqMtNk
TuseHi31CflmDeQyyuRlZ0vNuwsozoOdJNbmHnWHa5lEPariXyJCiYOymufzEgtZ
utb68cR51cxd76wLWzQ4+vvxPjeIRmT+yHt6cD/UT7tfloBTuF7z7FhQWJ9c/RBJ
U1dppqVMeRufx4NAgu5S1FCLa4gHAFW6eAwdHYyHRtFRlm/cVd6D7Wap4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDakg/ZZrvR9aVq4IkF0nbrnqscUMB8GA1UdIwQY
MBaAFMSMz1jksuLa3UqEgzwGfO4rl0XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEl6UFdPU3k0dHJkU29TRFBBWjg3aXVYUmVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9jYmUwMDUtMjY4OS00Mzc5LTlhN2Ut
YTUwZTMyZGUwODIzLzEveEl6UFdPU3k0dHJkU29TRFBBWjg3aXVYUmVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9jYmUwMDUtMjY4OS00Mzc5LTlhN2UtYTUwZTMyZGUwODIz
LzEveEl6UFdPU3k0dHJkU29TRFBBWjg3aXVYUmVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuf8w9O+S
YimmagEIFP/4kpU01yIaRVJ4xbZILd8rXBPPY9U1RqXTEOXP6W/XRkh1gxPyyemB
2IOl/+6dbZZdP4GO7a/J2DkFID0i8VqE2tNrMi5JHSf5H2M8XrO5g4Rqp/V+VNlC
2Zga3qX2htTz41CGBgRMTEl5Rqtwiie2up9IYLGXAc8b1EfqqoMYKANZVCaRyvFe
CryAeYLWQmvQXKYLV+N9vXun6n5QQP6VpF/E63zN5MKxC0SEICIeMetjDnWTc32g
GRxx2I26WfFHEmGUYn011uK6HGWfxdfM38WA21G2Dq0/dTIHZBtDuPNRu8jvrFla
YuQO3WnwZWa1+Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:31 2025 by rpki-client