Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier: lgEG78LlY8hoihGn16lpN1Bw5z0umJdMooVmC6snw8M=
Subject key identifier: D3:FF:86:33:91:E8:74:5A:12:2A:C0:81:BC:46:83:1C:13:20:34:F8
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial: 0194BBCDE0F7204B0009C5B826C5EB7C3E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: xmzsnnh6LkyBt39uWl2+3E5sNcKMzM6Lsi/s/OfYyAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e0:f7:20:4b:00:09:c5:b8:26:c5:eb:7c:3e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=d3ff863391e8745a122ac081bc46831c132034f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4d:dd:31:3e:b0:e2:1a:9b:e9:c2:d2:35:c5:
9a:fc:44:9a:2b:42:16:8e:79:1e:17:d1:96:39:cb:
7c:1a:1d:f1:d6:d9:ac:0d:04:1c:90:b8:60:3d:53:
1a:6d:fb:a9:df:16:75:84:08:52:76:61:9c:bf:9b:
6e:ca:a6:0f:71:58:00:65:d6:f1:54:2a:e6:50:36:
7a:73:71:dc:54:21:00:c5:73:30:cb:45:b0:02:2c:
ef:54:26:9f:30:36:77:31:76:10:d4:88:59:b5:38:
9f:9b:3e:1e:d4:e1:3e:39:ce:bd:45:72:07:23:2f:
6a:fd:7c:a7:60:36:c0:aa:4a:61:3c:1f:9e:ad:09:
ab:b0:b0:41:de:71:40:7b:ff:1c:7d:f3:8f:de:25:
19:f3:b8:e6:db:89:09:bb:c5:b7:16:50:db:48:bd:
f8:8d:3b:c7:85:87:30:ed:51:2c:36:ed:86:f6:4d:
fb:ef:98:e1:b4:87:5b:37:8e:34:c9:0c:c9:bc:10:
a7:b1:c0:92:70:13:96:2e:57:c5:fd:79:7d:69:62:
77:b8:95:86:4c:cb:54:6f:f5:79:d9:ff:be:ff:78:
58:08:d1:31:1a:f8:99:2a:71:61:32:a2:cb:6c:e9:
69:06:8d:9e:49:5d:6f:b8:76:81:99:57:87:a9:04:
4b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FF:86:33:91:E8:74:5A:12:2A:C0:81:BC:46:83:1C:13:20:34:F8
X509v3 Authority Key Identifier:
keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:92:d3:98:b1:bf:cd:81:97:84:32:ba:a2:25:79:88:15:1f:
02:c5:26:6c:f4:1a:4f:9f:bd:bb:70:81:54:cc:12:70:65:20:
e5:38:f5:c5:e2:82:6e:47:85:aa:0e:ab:6a:f8:2f:37:3a:3a:
38:75:ad:58:40:2a:04:d6:42:2f:52:96:69:3e:46:1a:4f:e9:
6e:e6:33:2f:0d:59:63:97:da:a0:ea:4d:c1:f2:66:db:57:0a:
b1:60:0f:60:f2:7b:6d:8e:17:1f:a0:13:ee:1f:fe:cf:53:bd:
d1:fe:67:55:7b:5d:9a:a5:a6:7e:bc:be:49:4c:62:df:07:19:
28:76:5a:77:b0:18:d7:2e:23:16:d8:85:64:14:2d:ff:d5:8c:
9e:37:0e:5b:74:71:cb:be:6c:df:e3:f6:55:25:03:ca:b7:a5:
d0:82:36:f5:6c:33:0f:b3:43:ed:ea:51:5b:08:db:9e:fe:91:
8f:66:23:e0:bf:18:a7:c5:1d:71:70:a0:b4:64:55:c9:8c:c3:
cd:05:09:1a:2b:33:6c:d9:08:78:3b:a5:fd:1c:53:24:0f:97:
9d:56:3c:c9:ca:1a:d6:49:aa:30:97:f3:e4:8c:46:3c:15:4c:
79:67:9f:93:e9:7f:e4:b0:0d:87:ee:60:fa:10:42:07:a1:8f:
8d:7a:7e:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zeD3IEsACcW4JsXrfD42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjIyMGI2OTZlMmU3NjY1MTZjMDU3NDNkMTM3ZGJiYzE3
ZmQyNjEwHhcNMjUwMTMxMTAwMDE5WhcNMjUwMjAxMTAwMDE5WjAzMTEwLwYDVQQD
EyhkM2ZmODYzMzkxZTg3NDVhMTIyYWMwODFiYzQ2ODMxYzEzMjAzNGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA203dMT6w4hqb6cLSNcWa/ESaK0IW
jnkeF9GWOct8Gh3x1tmsDQQckLhgPVMabfup3xZ1hAhSdmGcv5tuyqYPcVgAZdbx
VCrmUDZ6c3HcVCEAxXMwy0WwAizvVCafMDZ3MXYQ1IhZtTifmz4e1OE+Oc69RXIH
Iy9q/XynYDbAqkphPB+erQmrsLBB3nFAe/8cffOP3iUZ87jm24kJu8W3FlDbSL34
jTvHhYcw7VEsNu2G9k3775jhtIdbN440yQzJvBCnscCScBOWLlfF/Xl9aWJ3uJWG
TMtUb/V52f++/3hYCNExGviZKnFhMqLLbOlpBo2eSV1vuHaBmVeHqQRLqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNP/hjOR6HRaEirAgbxGgxwTIDT4MB8GA1UdIwQY
MBaAFPMiILaW4udmUWwFdD0TfbvBf9JhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80OTNlMjAtN2UxNy00NzU5LWIzNDUt
MGViMGIyNDBiOWI3LzEvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80OTNlMjAtN2UxNy00NzU5LWIzNDUtMGViMGIyNDBiOWI3
LzEvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJLTmLG/
zYGXhDK6oiV5iBUfAsUmbPQaT5+9u3CBVMwScGUg5Tj1xeKCbkeFqg6ravgvNzo6
OHWtWEAqBNZCL1KWaT5GGk/pbuYzLw1ZY5faoOpNwfJm21cKsWAPYPJ7bY4XH6AT
7h/+z1O90f5nVXtdmqWmfry+SUxi3wcZKHZad7AY1y4jFtiFZBQt/9WMnjcOW3Rx
y75s3+P2VSUDyrel0II29WwzD7ND7epRWwjbnv6Rj2Yj4L8Yp8UdcXCgtGRVyYzD
zQUJGiszbNkIeDul/RxTJA+XnVY8ycoa1kmqMJfz5IxGPBVMeWefk+l/5LANh+5g
+hBCB6GPjXp+mg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:18 2025 by rpki-client