Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
File: r_HNv5fWyiB-XciFq8_2ccwVyRA.mft (raw, json)
Hash identifier: /ASan71QPsiQuHA/6H8GzbH/u8udwFf/lPFW4jjsE7I=
Subject key identifier: 3C:A7:14:C7:40:3C:5A:A7:71:0A:1A:7F:03:D4:32:BE:70:20:9C:2A
Authority key identifier: AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
Certificate issuer: /CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Certificate serial: 0194BBCED67E60F59A6D98BBC6C84CFFFF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
Manifest number: 091F
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: r_HNv5fWyiB-XciFq8_2ccwVyRA.crl (hash: 74nqfDacM8+Q3vRbJ5+ZynuVwKCL94581Ha7MmWDrk0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d6:7e:60:f5:9a:6d:98:bb:c6:c8:4c:ff:ff:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=3ca714c7403c5aa7710a1a7f03d432be70209c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:08:42:d1:45:73:d6:05:16:84:29:1a:e5:
ed:09:29:25:5a:27:55:ee:ff:02:28:83:8b:9f:65:
b1:a5:36:b4:3d:ec:71:55:55:dd:b0:04:f9:5c:dd:
44:84:5d:da:d3:04:73:7f:1c:45:ae:da:63:e8:91:
e9:eb:84:e4:45:88:90:74:eb:cf:e3:c1:b2:58:62:
3a:8b:aa:12:dd:d3:17:3d:99:ca:c4:dc:16:a1:ca:
68:ab:b8:ef:2a:64:06:55:ba:76:a3:1a:d8:74:d4:
06:f4:6e:56:2b:c0:f4:60:4e:88:c9:87:59:54:5c:
8a:92:cc:a3:2b:97:9e:5e:cf:86:f4:48:17:b5:ba:
6e:55:78:90:96:e1:77:ba:6b:9a:ad:11:ea:ad:8e:
8b:aa:26:5c:ac:18:0c:8d:06:1d:57:69:db:51:bb:
78:86:b1:76:f8:cb:6e:c9:f6:e0:2b:81:96:b4:29:
59:18:ab:fe:dc:c0:eb:99:ca:2b:da:7a:9c:de:f6:
bf:b5:78:71:30:22:f2:fd:65:60:d0:77:a3:fd:3f:
53:69:41:6e:08:ea:bb:d1:58:b7:56:10:9e:97:cc:
a2:5e:cf:ce:ec:21:4a:eb:d8:97:82:e8:c2:e8:33:
0b:aa:c7:7f:18:e5:0f:a9:0a:49:78:63:c1:56:fc:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A7:14:C7:40:3C:5A:A7:71:0A:1A:7F:03:D4:32:BE:70:20:9C:2A
X509v3 Authority Key Identifier:
keyid:AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:72:4a:86:db:c4:b1:32:8b:12:88:e0:9e:2d:e4:ac:23:d8:
92:2e:bf:a4:55:f3:39:5a:45:10:cf:9b:06:16:01:5e:56:07:
0f:b5:7a:b1:d6:5d:3a:9b:a9:f4:e0:71:64:6e:f9:15:3c:8d:
8a:88:f5:b6:bc:2a:2b:75:4a:a3:b0:8e:47:f9:ba:6b:96:bb:
6b:4a:98:d4:a0:7f:66:21:2a:d4:2a:ae:14:01:35:e8:5d:a2:
02:bf:23:67:25:f6:15:cc:4f:83:de:9f:78:3b:39:9c:a1:16:
3b:d5:e7:d7:73:2a:0a:4c:9e:f6:5d:03:f7:cc:63:eb:ec:e7:
c0:1d:e8:a5:9d:14:df:36:28:4a:ef:18:71:9a:50:71:d3:dd:
2d:df:cb:9e:5c:7c:67:85:cc:bf:f0:00:18:e4:f6:01:1d:85:
f9:56:09:8b:d6:f4:4b:8a:07:a2:60:4d:c9:5f:7f:32:7c:a5:
3e:74:29:df:df:cc:b7:a1:5f:ef:ba:d9:6d:4d:11:ad:26:24:
ae:33:4c:80:6c:49:34:67:34:09:fb:9a:bb:0b:b8:14:fd:2f:
42:39:0c:c5:0c:fb:e6:5d:18:df:67:1a:5b:7f:4e:8d:fd:3b:
41:7d:3f:f7:d1:4d:08:a5:4e:6c:e9:bf:1c:ab:a5:6c:7b:c8:
fc:23:22:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztZ+YPWabZi7xshM//+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjFjZGJmOTdkNmNhMjA3ZTVkYzg4NWFiY2ZmNjcxY2Mx
NWM5MTAwHhcNMjUwMTMxMTAwMTIyWhcNMjUwMjAxMTAwMTIyWjAzMTEwLwYDVQQD
EygzY2E3MTRjNzQwM2M1YWE3NzEwYTFhN2YwM2Q0MzJiZTcwMjA5YzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM4IQtFFc9YFFoQpGuXtCSklWidV
7v8CKIOLn2WxpTa0PexxVVXdsAT5XN1EhF3a0wRzfxxFrtpj6JHp64TkRYiQdOvP
48GyWGI6i6oS3dMXPZnKxNwWocpoq7jvKmQGVbp2oxrYdNQG9G5WK8D0YE6IyYdZ
VFyKksyjK5eeXs+G9EgXtbpuVXiQluF3umuarRHqrY6LqiZcrBgMjQYdV2nbUbt4
hrF2+MtuyfbgK4GWtClZGKv+3MDrmcor2nqc3va/tXhxMCLy/WVg0Hej/T9TaUFu
COq70Vi3VhCel8yiXs/O7CFK69iXgujC6DMLqsd/GOUPqQpJeGPBVvyRxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDynFMdAPFqncQoafwPUMr5wIJwqMB8GA1UdIwQY
MBaAFK/xzb+X1sogfl3IhavP9nHMFckQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9ITnY1Zld5aUItWGNpRnE4XzJjY3dWeVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82Mjc5ODctMjM1ZC00MTk0LTk2YjEt
YWY4Yzc1YTkzY2QxLzEvcl9ITnY1Zld5aUItWGNpRnE4XzJjY3dWeVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82Mjc5ODctMjM1ZC00MTk0LTk2YjEtYWY4Yzc1YTkzY2Qx
LzEvcl9ITnY1Zld5aUItWGNpRnE4XzJjY3dWeVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXJKhtvE
sTKLEojgni3krCPYki6/pFXzOVpFEM+bBhYBXlYHD7V6sdZdOpup9OBxZG75FTyN
ioj1trwqK3VKo7COR/m6a5a7a0qY1KB/ZiEq1CquFAE16F2iAr8jZyX2FcxPg96f
eDs5nKEWO9Xn13MqCkye9l0D98xj6+znwB3opZ0U3zYoSu8YcZpQcdPdLd/Lnlx8
Z4XMv/AAGOT2AR2F+VYJi9b0S4oHomBNyV9/MnylPnQp39/Mt6Ff77rZbU0RrSYk
rjNMgGxJNGc0Cfuauwu4FP0vQjkMxQz75l0Y32caW39Ojf07QX0/99FNCKVObOm/
HKulbHvI/CMiiw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:24 2025 by rpki-client