Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier: J3xIrazc0fmW1+e0jdA6a3TlKd5VmR1c/1fYiL9xmy0=
Subject key identifier: D7:26:CF:2E:AA:F3:A3:7F:6C:D0:AC:34:6A:F6:55:7C:E0:2D:5E:28
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial: 0194BD17A22BCD5BC8C72C47F874A502A4F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number: 031F
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: NFBjlu0XqH4tJ9jJ0qioH54lAZORQQdjPH9/LvA3KoU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a2:2b:cd:5b:c8:c7:2c:47:f8:74:a5:02:a4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=d726cf2eaaf3a37f6cd0ac346af6557ce02d5e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:75:fa:80:ec:9b:f9:de:5d:c4:8d:ca:bf:13:
c8:b5:45:7c:6f:3f:ea:7c:67:4f:a2:12:b5:ee:bd:
aa:c3:71:93:a0:8a:7e:83:e3:a5:c5:48:c9:90:6c:
31:68:ce:29:a2:7b:82:02:01:13:af:a4:6b:42:9b:
6d:db:ef:59:f8:db:49:78:2b:fc:92:3d:c5:71:23:
30:25:78:42:b1:cb:4a:6f:2c:b2:0b:4c:15:c4:00:
6d:39:93:7f:b5:74:98:61:6d:13:6b:aa:32:c8:47:
99:55:0e:f0:3d:ed:b5:f2:0c:c6:e6:b4:56:8c:86:
07:2c:d1:95:f3:a5:51:60:cb:52:9b:c8:3c:86:d2:
e5:c3:29:2f:14:3f:86:9a:dd:c7:96:e2:53:cc:ee:
d2:f9:00:bd:a2:fc:22:c1:3a:e6:36:2e:ce:8a:6c:
57:fc:48:75:81:6d:2c:fc:19:43:8d:fb:29:a3:0b:
8b:b3:45:6a:9b:4f:14:07:89:94:b9:a7:df:70:52:
9b:0c:10:57:26:ea:f0:05:5e:31:b6:88:fe:5b:22:
bd:37:e5:31:d8:ef:51:5d:b5:32:67:c5:0f:cf:fe:
01:52:f1:1e:de:a0:ee:e6:a7:c1:97:10:c5:74:8e:
49:5e:72:cc:58:f8:a7:3d:40:1d:a8:01:9b:a8:8a:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:26:CF:2E:AA:F3:A3:7F:6C:D0:AC:34:6A:F6:55:7C:E0:2D:5E:28
X509v3 Authority Key Identifier:
keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b2:7e:f2:42:12:82:6a:df:b5:5a:73:a4:bc:c6:35:ac:5f:
43:9d:69:4a:e0:21:00:a2:30:7b:4b:24:31:34:97:81:7f:72:
b2:68:38:64:7d:92:62:4b:d5:56:c1:11:b8:85:5a:85:1c:83:
e3:27:d5:c1:29:1a:91:b7:0c:38:2a:52:9f:dc:97:8b:ec:54:
d6:70:1d:3b:09:d3:99:db:55:1b:79:ea:15:12:a7:1b:20:7d:
48:6c:30:49:da:aa:6b:ac:04:df:66:79:39:39:5f:7e:94:bc:
1c:66:ac:ae:f9:14:7e:a7:47:56:1f:72:55:5a:1b:a5:99:9e:
7c:ca:46:e7:01:eb:16:f2:e9:e7:f2:a7:f5:75:d5:60:65:ac:
1b:35:10:ec:2e:14:cb:aa:dd:3f:aa:40:df:56:9e:a7:7d:96:
27:53:a0:30:13:d4:6d:73:57:26:bb:97:4d:64:3b:53:d5:57:
af:af:e7:c1:0d:e4:7e:ed:4e:03:f3:e2:40:64:12:df:63:c2:
e4:68:35:57:a0:97:81:e0:a3:16:28:97:7c:fe:45:c2:43:2e:
38:85:ee:db:09:6b:f6:88:b5:e3:23:ef:93:50:c7:0b:36:64:
49:55:99:4d:ab:72:2a:52:8d:3e:1f:7a:07:b3:1f:ac:d7:b5:
50:c3:85:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6IrzVvIxyxH+HSlAqT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzY2Q2NTdhMTIwNTMyZGYzM2RlNTBmZTFhYzJiMzYyMGFj
NGFlNGYwHhcNMjUwMTMxMTYwMDMwWhcNMjUwMjAxMTYwMDMwWjAzMTEwLwYDVQQD
EyhkNzI2Y2YyZWFhZjNhMzdmNmNkMGFjMzQ2YWY2NTU3Y2UwMmQ1ZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXX6gOyb+d5dxI3KvxPItUV8bz/q
fGdPohK17r2qw3GToIp+g+OlxUjJkGwxaM4ponuCAgETr6RrQptt2+9Z+NtJeCv8
kj3FcSMwJXhCsctKbyyyC0wVxABtOZN/tXSYYW0Ta6oyyEeZVQ7wPe218gzG5rRW
jIYHLNGV86VRYMtSm8g8htLlwykvFD+Gmt3HluJTzO7S+QC9ovwiwTrmNi7OimxX
/Eh1gW0s/BlDjfspowuLs0Vqm08UB4mUuaffcFKbDBBXJurwBV4xtoj+WyK9N+Ux
2O9RXbUyZ8UPz/4BUvEe3qDu5qfBlxDFdI5JXnLMWPinPUAdqAGbqIqJewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcmzy6q86N/bNCsNGr2VXzgLV4oMB8GA1UdIwQY
MBaAFOPNZXoSBTLfM95Q/hrCs2IKxK5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83NzI0NzYtYTI4My00NjU2LWE2MTQt
MGY5NTZjYWY4MDNjLzEvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83NzI0NzYtYTI4My00NjU2LWE2MTQtMGY5NTZjYWY4MDNj
LzEvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrJ+8kIS
gmrftVpzpLzGNaxfQ51pSuAhAKIwe0skMTSXgX9ysmg4ZH2SYkvVVsERuIVahRyD
4yfVwSkakbcMOCpSn9yXi+xU1nAdOwnTmdtVG3nqFRKnGyB9SGwwSdqqa6wE32Z5
OTlffpS8HGasrvkUfqdHVh9yVVobpZmefMpG5wHrFvLp5/Kn9XXVYGWsGzUQ7C4U
y6rdP6pA31aep32WJ1OgMBPUbXNXJruXTWQ7U9VXr6/nwQ3kfu1OA/PiQGQS32PC
5Gg1V6CXgeCjFiiXfP5FwkMuOIXu2wlr9oi14yPvk1DHCzZkSVWZTatyKlKNPh96
B7MfrNe1UMOFjA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:05 2025 by rpki-client