Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
File: IlVxaqH0w8EChxihwzHiKzOerXw.mft (raw, json)
Hash identifier: 567wS1/4dUR634WiAWWtd6Jocmhl3EE0x8TLszBIzIg=
Subject key identifier: A6:9A:32:B1:3E:80:69:6B:4B:8F:A8:A6:26:15:FF:AE:20:50:E6:47
Authority key identifier: 22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
Certificate issuer: /CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Certificate serial: 0194BCA9736F2DCC31B592D5A8D3B58FB856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
Manifest number: 10AB
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: IlVxaqH0w8EChxihwzHiKzOerXw.crl (hash: Yqvv9dsZgwWtuHBJD+M3nYK0hXuDcL/U1WNZf7LxCWo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:73:6f:2d:cc:31:b5:92:d5:a8:d3:b5:8f:b8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=a69a32b13e80696b4b8fa8a62615ffae2050e647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:74:a3:a4:5d:96:61:3f:32:63:6f:22:4b:
b8:14:fa:63:95:58:31:46:73:99:c7:f2:3a:aa:6f:
1a:cb:c2:a2:4f:c7:c7:2f:2c:f3:77:18:b7:1a:c5:
bd:4b:a1:c1:ee:21:8e:39:ce:73:7a:68:36:0d:72:
95:f4:0d:49:cb:cd:ce:ee:d6:6b:21:1c:93:33:78:
c5:f0:01:56:61:45:ad:7c:38:5a:3c:29:7b:1a:53:
9e:5a:76:10:c5:a8:e7:83:fc:52:6e:46:9d:0f:8e:
fd:1b:52:42:bc:ef:06:2f:2e:55:0c:e5:61:10:e5:
41:c9:dc:d8:8a:49:16:29:65:85:d7:dc:c2:98:d3:
37:d8:d9:c1:16:c9:b8:53:5e:73:1f:b5:61:41:89:
45:ca:a0:85:ca:59:fe:0d:67:08:0e:94:34:3b:c2:
6d:c3:b3:dc:6c:c2:df:0a:f3:4b:7b:95:e4:11:3a:
cf:17:dc:2d:47:50:4f:f4:84:6d:b6:25:df:0e:1f:
ff:1e:70:81:0e:64:31:d8:a2:06:b7:1f:d8:5d:62:
b5:1c:ea:9d:ef:55:92:c7:4a:d3:4b:b4:8e:9d:75:
8e:81:e4:6c:46:d9:3f:ac:12:d0:98:b9:5a:c6:71:
19:59:bf:c6:b0:b9:64:cd:50:47:c1:40:c5:fc:0e:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9A:32:B1:3E:80:69:6B:4B:8F:A8:A6:26:15:FF:AE:20:50:E6:47
X509v3 Authority Key Identifier:
keyid:22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:46:3c:98:49:24:49:5b:d3:3e:97:3a:ad:90:17:36:a9:cb:
c9:28:60:50:d7:9f:9e:71:a2:4b:9f:fb:b1:a3:c5:bb:48:0d:
9a:da:ea:5c:16:32:f2:1c:54:13:47:3b:eb:a2:5b:ad:95:6a:
4a:13:1e:29:62:8c:7e:29:26:30:9b:b2:28:be:25:3d:af:c8:
5e:94:2c:b5:6b:d2:31:41:43:6d:57:79:bd:c7:57:c2:6d:af:
9a:bf:d4:17:f1:95:9e:85:d7:45:e4:f8:cb:04:3e:f0:73:4c:
1d:f2:0e:69:80:7d:a0:83:82:0a:3c:55:5a:90:f4:89:fd:bd:
fc:ef:2c:04:09:77:f2:51:ba:e8:43:9d:9d:c8:f9:09:ae:17:
cb:ce:93:5d:22:b0:b1:37:1c:90:ca:ff:42:64:11:ec:95:1a:
6f:29:db:df:de:56:bf:15:79:b5:64:e1:3a:e4:09:6a:3a:27:
2e:ad:37:9e:89:7d:85:fb:9a:b6:0b:2d:0c:49:77:39:c5:95:
28:e8:ba:9a:93:57:a8:04:88:4f:56:45:3c:7a:d1:2d:8d:76:
4c:b6:5d:15:98:0b:70:07:da:ae:1c:f3:cf:2d:dd:ee:2e:81:
c3:6b:fb:ee:f4:ed:8e:13:ff:69:77:b2:9a:e0:b6:66:3f:b1:
1b:d6:e6:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qXNvLcwxtZLVqNO1j7hWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNTU3MTZhYTFmNGMzYzEwMjg3MThhMWMzMzFlMjJiMzM5
ZWFkN2MwHhcNMjUwMTMxMTQwMDA5WhcNMjUwMjAxMTQwMDA5WjAzMTEwLwYDVQQD
EyhhNjlhMzJiMTNlODA2OTZiNGI4ZmE4YTYyNjE1ZmZhZTIwNTBlNjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfp0o6RdlmE/MmNvIku4FPpjlVgx
RnOZx/I6qm8ay8KiT8fHLyzzdxi3GsW9S6HB7iGOOc5zemg2DXKV9A1Jy83O7tZr
IRyTM3jF8AFWYUWtfDhaPCl7GlOeWnYQxajng/xSbkadD479G1JCvO8GLy5VDOVh
EOVBydzYikkWKWWF19zCmNM32NnBFsm4U15zH7VhQYlFyqCFyln+DWcIDpQ0O8Jt
w7PcbMLfCvNLe5XkETrPF9wtR1BP9IRttiXfDh//HnCBDmQx2KIGtx/YXWK1HOqd
71WSx0rTS7SOnXWOgeRsRtk/rBLQmLlaxnEZWb/GsLlkzVBHwUDF/A70GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaaMrE+gGlrS4+opiYV/64gUOZHMB8GA1UdIwQY
MBaAFCJVcWqh9MPBAocYocMx4isznq18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWxWeGFxSDB3OEVDaHhpaHd6SGlLek9lclh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYmY2N2ItYTY1YS00MmEzLTg5MDgt
MDczNjllMTRjYWRlLzEvSWxWeGFxSDB3OEVDaHhpaHd6SGlLek9lclh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jYmY2N2ItYTY1YS00MmEzLTg5MDgtMDczNjllMTRjYWRl
LzEvSWxWeGFxSDB3OEVDaHhpaHd6SGlLek9lclh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUY8mEkk
SVvTPpc6rZAXNqnLyShgUNefnnGiS5/7saPFu0gNmtrqXBYy8hxUE0c766JbrZVq
ShMeKWKMfikmMJuyKL4lPa/IXpQstWvSMUFDbVd5vcdXwm2vmr/UF/GVnoXXReT4
ywQ+8HNMHfIOaYB9oIOCCjxVWpD0if29/O8sBAl38lG66EOdncj5Ca4Xy86TXSKw
sTcckMr/QmQR7JUabynb395WvxV5tWThOuQJajonLq03nol9hfuatgstDEl3OcWV
KOi6mpNXqASIT1ZFPHrRLY12TLZdFZgLcAfarhzzzy3d7i6Bw2v77vTtjhP/aXey
muC2Zj+xG9bmBw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:13:08 2025 by rpki-client