Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
File: itYGdkMvaHI2YskyV5qEk1IBS5U.mft (raw, json)
Hash identifier: 3UpoT1YULrFzb7/tAKpoQBgYu35Ywvq2wICWdzL5pgo=
Subject key identifier: 98:B2:F2:25:19:7B:99:71:DE:FD:90:DD:FD:2F:EF:14:7E:3B:BD:28
Authority key identifier: 8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95
Certificate issuer: /CN=8ad60676432f68723662c932579a849352014b95
Certificate serial: 0194BD17E91C6FF17C6C49E10579C109F561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
Manifest number: 05F1
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: itYGdkMvaHI2YskyV5qEk1IBS5U.crl (hash: GNyWCN1APnR9Fn6m0IQmcATmRJ2j4JzscFt6WPVdLo4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e9:1c:6f:f1:7c:6c:49:e1:05:79:c1:09:f5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad60676432f68723662c932579a849352014b95
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=98b2f225197b9971defd90ddfd2fef147e3bbd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:ce:f7:3d:a7:4c:7b:d4:42:63:a4:b2:99:
ed:f7:35:18:81:45:99:69:93:69:b9:32:5a:2c:8a:
7c:da:05:db:9c:5c:ae:ad:c9:b9:75:2e:88:11:59:
c3:d1:e7:e1:38:5b:be:ff:84:6b:4c:65:5c:d1:7d:
c0:76:b9:18:a1:19:40:d1:8f:07:f9:da:75:21:14:
fb:c8:2c:91:a4:13:e7:9b:c4:f3:6a:82:3a:4c:68:
a5:b1:03:0f:1e:db:03:55:db:06:31:bb:58:de:e7:
30:90:97:a3:74:88:dc:19:67:78:dd:91:2a:3e:14:
8c:3f:c4:a2:ea:58:30:81:82:13:79:1c:9a:f1:03:
5a:0a:1a:92:48:a3:b6:74:a2:ea:69:f7:5f:8e:70:
ba:3a:0c:0a:c0:22:2d:a8:04:54:f8:cd:ae:e8:72:
e0:bc:a3:5a:f5:f9:c4:3d:ea:41:29:b3:b3:7b:cc:
d7:7d:e1:78:54:fc:5b:45:13:37:61:4a:ad:56:9d:
b3:8b:10:e5:71:b1:f4:19:f9:6e:3d:37:ac:17:f7:
8d:df:b3:1e:09:6c:df:ce:dd:b4:97:2b:31:6b:91:
28:23:bd:5e:31:b9:6c:ed:a6:22:80:2a:5c:df:cc:
1b:18:80:0f:c3:c7:79:96:08:90:d4:d4:7c:44:19:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B2:F2:25:19:7B:99:71:DE:FD:90:DD:FD:2F:EF:14:7E:3B:BD:28
X509v3 Authority Key Identifier:
keyid:8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:24:75:d6:70:d6:f8:cb:df:a6:b4:0f:86:fe:3c:f3:38:54:
75:05:3c:06:ca:e5:fb:13:0d:28:dd:95:65:0b:c6:83:ae:10:
92:25:70:07:11:bc:03:b7:14:82:ff:62:ba:a7:8f:e5:97:85:
01:cf:ea:b0:a1:e1:e9:62:1f:01:51:ce:ac:6d:d1:02:16:25:
29:9f:d2:05:7a:60:51:e0:d8:cf:2a:34:56:6d:a6:b4:25:8d:
8e:b8:bb:08:3e:92:30:84:fe:9b:7e:cc:8c:7f:c8:78:92:e1:
2b:21:dc:a7:83:be:cb:8d:87:73:5b:9c:7e:e7:23:f6:07:fd:
24:8c:b4:8e:c8:af:b3:de:77:56:45:4e:f7:a0:4a:72:fa:b1:
c0:53:0d:f7:89:09:4b:6b:4b:28:67:bf:ab:cb:cc:06:44:cc:
ed:16:42:d5:cd:91:9b:98:07:ae:41:4a:b4:fa:29:d3:3c:b9:
06:98:bf:a6:df:60:a6:ac:89:ec:c8:67:d9:7d:37:cd:b7:74:
71:54:3c:06:60:68:50:6e:e7:e0:5d:d7:4e:1f:5e:23:2f:77:
72:9c:90:1c:73:d2:56:2e:13:b6:db:f3:93:b9:0c:c9:65:cb:
44:6d:e7:4a:b6:17:44:60:9c:b0:ed:12:c4:33:b8:94:32:00:
66:67:fa:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+kcb/F8bEnhBXnBCfVhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZDYwNjc2NDMyZjY4NzIzNjYyYzkzMjU3OWE4NDkzNTIw
MTRiOTUwHhcNMjUwMTMxMTYwMDQ4WhcNMjUwMjAxMTYwMDQ4WjAzMTEwLwYDVQQD
Eyg5OGIyZjIyNTE5N2I5OTcxZGVmZDkwZGRmZDJmZWYxNDdlM2JiZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+bO9z2nTHvUQmOkspnt9zUYgUWZ
aZNpuTJaLIp82gXbnFyurcm5dS6IEVnD0efhOFu+/4RrTGVc0X3AdrkYoRlA0Y8H
+dp1IRT7yCyRpBPnm8TzaoI6TGilsQMPHtsDVdsGMbtY3ucwkJejdIjcGWd43ZEq
PhSMP8Si6lgwgYITeRya8QNaChqSSKO2dKLqafdfjnC6OgwKwCItqARU+M2u6HLg
vKNa9fnEPepBKbOze8zXfeF4VPxbRRM3YUqtVp2zixDlcbH0GfluPTesF/eN37Me
CWzfzt20lysxa5EoI71eMbls7aYigCpc38wbGIAPw8d5lgiQ1NR8RBnN5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiy8iUZe5lx3v2Q3f0v7xR+O70oMB8GA1UdIwQY
MBaAFIrWBnZDL2hyNmLJMleahJNSAUuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRZR2RrTXZhSEkyWXNreVY1cUVrMUlCUzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jZGMxNDgtNTcwMy00ZTkxLTlhOGUt
Mjg0MDM2YTgxZDkwLzEvaXRZR2RrTXZhSEkyWXNreVY1cUVrMUlCUzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jZGMxNDgtNTcwMy00ZTkxLTlhOGUtMjg0MDM2YTgxZDkw
LzEvaXRZR2RrTXZhSEkyWXNreVY1cUVrMUlCUzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiR11nDW
+MvfprQPhv488zhUdQU8Bsrl+xMNKN2VZQvGg64QkiVwBxG8A7cUgv9iuqeP5ZeF
Ac/qsKHh6WIfAVHOrG3RAhYlKZ/SBXpgUeDYzyo0Vm2mtCWNjri7CD6SMIT+m37M
jH/IeJLhKyHcp4O+y42Hc1ucfucj9gf9JIy0jsivs953VkVO96BKcvqxwFMN94kJ
S2tLKGe/q8vMBkTM7RZC1c2Rm5gHrkFKtPop0zy5Bpi/pt9gpqyJ7Mhn2X03zbd0
cVQ8BmBoUG7n4F3XTh9eIy93cpyQHHPSVi4Tttvzk7kMyWXLRG3nSrYXRGCcsO0S
xDO4lDIAZmf6BQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:27 2025 by rpki-client