Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
File: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft (raw, json)
Hash identifier: grN2bzZlQmNe3NrRyU9CxWmExNkWqZpye8kjd0jcJsI=
Subject key identifier: F7:B0:A9:3D:4B:1B:33:59:EC:4E:67:FF:D8:CD:F4:75:04:83:AF:FB
Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
Certificate issuer: /CN=e01d78927ab99c9e738afe9b016214a4880ad154
Certificate serial: 0194BBCDD61FAD79E96E803AE9B5E362BD22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
Manifest number: 0816
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl (hash: U3Kk0tefahUvNKl4xXq6ceH4qV5KjBWpQQkzsB61j1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d6:1f:ad:79:e9:6e:80:3a:e9:b5:e3:62:bd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=f7b0a93d4b1b3359ec4e67ffd8cdf4750483affb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:22:12:ca:f2:56:de:ca:41:e9:94:ed:64:
9a:a1:e3:06:3c:4b:14:b5:6d:b7:5a:7e:5b:21:ae:
91:98:72:e8:ab:4c:12:06:47:9d:f8:91:5b:2e:76:
b2:89:15:40:a7:8c:3e:32:ca:fa:d8:ec:ab:ce:e8:
0f:b8:d9:d3:36:59:30:44:4c:e4:17:d7:ee:79:89:
ed:2f:40:63:5c:17:e9:c4:c4:86:4e:0b:d4:08:73:
a0:f9:ca:70:4f:ca:00:fb:30:bb:2b:79:b6:34:e1:
c7:4b:96:97:7f:70:da:6a:25:2a:41:90:f2:c3:76:
22:34:35:f4:cd:77:61:08:23:6a:e6:b8:6a:db:b9:
c4:8f:12:b9:18:24:a4:b8:4f:ee:20:60:36:28:a2:
4d:d5:1b:5b:c5:54:5a:0d:f5:31:d3:ff:e6:e5:c3:
03:f1:12:fb:7b:ca:55:18:f6:b3:84:a7:31:37:7b:
8c:94:30:e2:2b:ac:cb:6f:6f:a4:ab:bf:3d:2a:8a:
32:13:fa:87:97:a1:f1:84:30:a8:b4:23:77:39:c8:
69:9e:88:e2:04:10:d0:40:be:d9:39:83:78:17:2f:
25:e7:55:8d:34:45:0b:02:fa:f9:18:11:10:c4:d2:
cc:44:93:db:5c:9b:a7:9d:f8:2a:7d:54:59:3b:5d:
4c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B0:A9:3D:4B:1B:33:59:EC:4E:67:FF:D8:CD:F4:75:04:83:AF:FB
X509v3 Authority Key Identifier:
keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1c:72:c9:80:48:61:51:f0:2c:54:a6:21:41:a3:68:f1:ac:
64:82:10:88:c2:d9:1f:2c:70:54:7e:54:bb:ad:2c:9a:17:20:
9a:de:10:cf:89:07:46:38:a8:f7:a3:3d:5d:f7:ab:a6:71:5f:
fc:59:bf:47:9a:c4:82:0a:37:37:5c:7a:0e:f5:32:8a:3b:5f:
2a:3b:ef:79:f9:36:ed:f0:5c:dd:6f:a5:41:9b:aa:1e:57:be:
02:59:dc:99:e5:5a:fb:fe:b8:17:64:19:a7:d9:fc:74:4b:25:
ff:cc:97:7d:0b:c2:2d:a2:90:e4:73:b3:25:68:c2:a4:05:ba:
f7:45:c2:f0:25:86:d2:aa:0c:36:7f:ca:80:31:b0:41:00:a0:
45:7e:03:0b:9a:8c:cd:e5:b4:ca:13:c9:da:57:89:02:94:00:
0b:04:0d:09:93:9d:89:ca:ec:73:bd:2c:fd:e8:80:92:bb:de:
50:65:1e:34:5b:7a:3c:eb:a0:3a:71:fc:c9:01:e5:60:28:f0:
24:66:38:07:07:e4:ca:0d:d1:8e:28:b7:d6:ad:0e:03:09:8d:
bd:22:4a:cb:34:0c:b3:1c:e6:d3:0b:9c:f5:4e:e8:c1:83:41:
fb:ea:61:b8:bf:3e:c4:74:b5:df:11:0e:04:60:a3:ed:24:c4:
da:e0:52:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdYfrXnpboA66bXjYr0iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMWQ3ODkyN2FiOTljOWU3MzhhZmU5YjAxNjIxNGE0ODgw
YWQxNTQwHhcNMjUwMTMxMTAwMDE2WhcNMjUwMjAxMTAwMDE2WjAzMTEwLwYDVQQD
EyhmN2IwYTkzZDRiMWIzMzU5ZWM0ZTY3ZmZkOGNkZjQ3NTA0ODNhZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqgiEsryVt7KQemU7WSaoeMGPEsU
tW23Wn5bIa6RmHLoq0wSBked+JFbLnayiRVAp4w+Msr62OyrzugPuNnTNlkwREzk
F9fueYntL0BjXBfpxMSGTgvUCHOg+cpwT8oA+zC7K3m2NOHHS5aXf3DaaiUqQZDy
w3YiNDX0zXdhCCNq5rhq27nEjxK5GCSkuE/uIGA2KKJN1RtbxVRaDfUx0//m5cMD
8RL7e8pVGPazhKcxN3uMlDDiK6zLb2+kq789KooyE/qHl6HxhDCotCN3Ochpnoji
BBDQQL7ZOYN4Fy8l51WNNEULAvr5GBEQxNLMRJPbXJunnfgqfVRZO11M6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPewqT1LGzNZ7E5n/9jN9HUEg6/7MB8GA1UdIwQY
MBaAFOAdeJJ6uZyec4r+mwFiFKSICtFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iOGZiYzUtNWE4Yi00YTJiLTk0MTQt
NzA4OTBlNTRkYThiLzEvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iOGZiYzUtNWE4Yi00YTJiLTk0MTQtNzA4OTBlNTRkYThi
LzEvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBxyyYBI
YVHwLFSmIUGjaPGsZIIQiMLZHyxwVH5Uu60smhcgmt4Qz4kHRjio96M9XferpnFf
/Fm/R5rEggo3N1x6DvUyijtfKjvvefk27fBc3W+lQZuqHle+AlncmeVa+/64F2QZ
p9n8dEsl/8yXfQvCLaKQ5HOzJWjCpAW690XC8CWG0qoMNn/KgDGwQQCgRX4DC5qM
zeW0yhPJ2leJApQACwQNCZOdicrsc70s/eiAkrveUGUeNFt6POugOnH8yQHlYCjw
JGY4Bwfkyg3Rjii31q0OAwmNvSJKyzQMsxzm0wuc9U7owYNB++phuL8+xHS13xEO
BGCj7STE2uBSlA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:12 2025 by rpki-client