Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
File: dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft (raw, json)
Hash identifier: 79iKIYNvPXZcs5B7YTN2IB6Vf/Z6lvakpZtGE2I5QtQ=
Subject key identifier: 62:8A:45:82:C2:6F:75:2A:5B:AA:11:BE:C8:97:40:F6:66:AC:AB:B9
Authority key identifier: 74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
Certificate issuer: /CN=742e571d0006fe7f660b0308ccc61a1699e34917
Certificate serial: 0194BBCED2A742493CB2F7B2A2C9B71344DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl (hash: ASi/vfy65bNksMXhleokuITFEqnXM1wZUcwz2PxGuVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d2:a7:42:49:3c:b2:f7:b2:a2:c9:b7:13:44:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e571d0006fe7f660b0308ccc61a1699e34917
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=628a4582c26f752a5baa11bec89740f666acabb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:99:17:49:83:ab:62:40:98:8b:c9:40:ba:4b:
67:3c:5c:ab:99:90:c1:71:6f:0d:5b:59:34:fe:e3:
65:4b:50:78:b1:a5:0a:ac:6a:85:ca:42:01:2f:42:
f8:33:09:53:9f:13:99:49:64:10:8f:36:e2:93:b0:
5e:90:f8:b1:65:68:db:a0:80:4c:2b:cd:6b:de:d1:
ce:14:0c:35:1a:a0:f9:65:05:3c:63:8f:f5:71:9c:
5d:cc:b8:d0:46:f9:06:f6:1e:3e:a6:1d:4c:c5:92:
c8:71:d0:4a:2b:25:37:1e:ee:eb:79:cc:33:be:03:
5e:66:51:82:08:93:88:5a:ff:17:57:5b:a4:db:23:
a2:f7:1d:55:2f:30:6a:86:80:1e:3d:eb:70:7d:0e:
f9:30:0f:2f:87:ef:22:14:dc:5c:89:65:3e:60:08:
09:40:1b:97:8d:ed:2a:a4:e5:03:20:c6:39:93:1c:
5e:ba:7a:14:32:26:d5:bb:c2:9f:14:f5:78:b6:26:
b9:46:ae:28:c4:b1:a3:91:c8:71:a5:0a:2b:5e:cf:
da:50:fa:24:17:0d:41:14:e9:fd:68:aa:33:9c:f7:
4a:3f:b5:f8:85:80:52:2f:cd:cb:67:25:f3:68:65:
06:2a:8e:1c:ec:7d:63:3d:e8:77:ff:42:fd:62:72:
3e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8A:45:82:C2:6F:75:2A:5B:AA:11:BE:C8:97:40:F6:66:AC:AB:B9
X509v3 Authority Key Identifier:
keyid:74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b5:45:63:dc:cd:c6:13:69:a5:92:fa:cf:07:39:81:a4:23:
ad:00:6d:1e:c4:46:f6:35:03:4a:2a:a2:19:9a:60:1c:6b:e0:
cc:1d:95:e0:f5:df:e3:f0:30:8c:cf:3f:cc:7c:99:da:7d:68:
32:71:20:10:05:b5:9f:31:23:38:28:d1:d9:13:9a:59:fa:fc:
b2:c5:f2:77:38:76:37:0e:58:8d:ae:5a:9b:3b:79:72:c7:aa:
85:99:22:87:0d:21:21:7d:aa:36:08:ef:1e:cf:d1:85:e0:56:
86:22:cc:b6:8c:91:c3:04:47:24:3d:3d:b2:dd:7e:fe:ad:1b:
00:94:af:1d:5d:5c:bf:56:72:94:d2:f0:3f:80:3f:78:74:53:
98:c6:7b:44:75:56:08:36:0d:c4:a4:36:16:65:f5:bb:e7:65:
41:ee:b6:7e:73:b3:79:48:18:48:6f:11:45:d5:a5:d4:4d:73:
a5:33:82:b5:c4:75:d5:03:39:04:0c:83:9b:43:ca:97:5a:86:
d7:69:2b:19:29:42:30:81:65:b6:0c:6c:d6:5c:4c:8a:63:fe:
13:8a:9f:90:7d:4f:27:03:a9:51:8c:4d:98:fd:ee:f8:2c:1f:
97:88:3d:ee:9e:44:73:c3:81:a1:20:84:ee:52:37:ee:35:4d:
da:be:26:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztKnQkk8sveyosm3E0TdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MmU1NzFkMDAwNmZlN2Y2NjBiMDMwOGNjYzYxYTE2OTll
MzQ5MTcwHhcNMjUwMTMxMTAwMTIxWhcNMjUwMjAxMTAwMTIxWjAzMTEwLwYDVQQD
Eyg2MjhhNDU4MmMyNmY3NTJhNWJhYTExYmVjODk3NDBmNjY2YWNhYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JkXSYOrYkCYi8lAuktnPFyrmZDB
cW8NW1k0/uNlS1B4saUKrGqFykIBL0L4MwlTnxOZSWQQjzbik7BekPixZWjboIBM
K81r3tHOFAw1GqD5ZQU8Y4/1cZxdzLjQRvkG9h4+ph1MxZLIcdBKKyU3Hu7recwz
vgNeZlGCCJOIWv8XV1uk2yOi9x1VLzBqhoAePetwfQ75MA8vh+8iFNxciWU+YAgJ
QBuXje0qpOUDIMY5kxxeunoUMibVu8KfFPV4tia5Rq4oxLGjkchxpQorXs/aUPok
Fw1BFOn9aKoznPdKP7X4hYBSL83LZyXzaGUGKo4c7H1jPeh3/0L9YnI+MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKKRYLCb3UqW6oRvsiXQPZmrKu5MB8GA1UdIwQY
MBaAFHQuVx0ABv5/ZgsDCMzGGhaZ40kXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEM1WEhRQUdfbjltQ3dNSXpNWWFGcG5qU1JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yZTAzYWYtODNhNC00YzlmLTkxMWEt
ZDU4NDRiM2M1MTc3LzEvZEM1WEhRQUdfbjltQ3dNSXpNWWFGcG5qU1JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8yZTAzYWYtODNhNC00YzlmLTkxMWEtZDU4NDRiM2M1MTc3
LzEvZEM1WEhRQUdfbjltQ3dNSXpNWWFGcG5qU1JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrVFY9zN
xhNppZL6zwc5gaQjrQBtHsRG9jUDSiqiGZpgHGvgzB2V4PXf4/AwjM8/zHyZ2n1o
MnEgEAW1nzEjOCjR2ROaWfr8ssXydzh2Nw5Yja5amzt5cseqhZkihw0hIX2qNgjv
Hs/RheBWhiLMtoyRwwRHJD09st1+/q0bAJSvHV1cv1ZylNLwP4A/eHRTmMZ7RHVW
CDYNxKQ2FmX1u+dlQe62fnOzeUgYSG8RRdWl1E1zpTOCtcR11QM5BAyDm0PKl1qG
12krGSlCMIFltgxs1lxMimP+E4qfkH1PJwOpUYxNmP3u+Cwfl4g97p5Ec8OBoSCE
7lI37jVN2r4mDw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:10 2025 by rpki-client