Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1054e1-dc73-408d-bff1-3fd0c2edafdb/1/1-WErnfLI5FutC5Dbr1C_Ivnpjfo.mft
File: 1-WErnfLI5FutC5Dbr1C_Ivnpjfo.mft (raw, json)
Hash identifier: uaUs6jO5A67SCRP+79rLbbcSM84XG67PJieWg5dfsCE=
Subject key identifier: D3:02:2D:C7:24:93:44:26:24:2C:E2:AC:C1:4D:8D:EF:4E:FC:4B:C4
Authority key identifier: F9:61:2B:9D:F2:C8:E4:5B:AD:0B:90:DB:AF:50:BF:22:F9:E9:8D:FA
Certificate issuer: /CN=f9612b9df2c8e45bad0b90dbaf50bf22f9e98dfa
Certificate serial: 0194BBCEE825E7B468B8FCDA10F3EEEAF1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WErnfLI5FutC5Dbr1C_Ivnpjfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1054e1-dc73-408d-bff1-3fd0c2edafdb/1/1-WErnfLI5FutC5Dbr1C_Ivnpjfo.mft
Manifest number: 0459
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: 1-WErnfLI5FutC5Dbr1C_Ivnpjfo.crl (hash: zjaRgXDe2rwharGw7XF3o4s8TF+EbCAnHG9Q70mfTXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e8:25:e7:b4:68:b8:fc:da:10:f3:ee:ea:f1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9612b9df2c8e45bad0b90dbaf50bf22f9e98dfa
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=d3022dc724934426242ce2acc14d8def4efc4bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:e9:a0:f0:16:01:ec:eb:81:fa:d5:3c:3c:
c7:bd:78:ec:38:12:71:98:ca:71:d4:fc:44:d9:98:
49:20:4e:9f:a2:e4:dc:e6:71:8c:24:d7:2a:70:d4:
f8:09:11:fb:0a:df:96:86:b1:f2:ec:87:d4:e8:d3:
51:5c:b1:10:28:30:26:4f:59:2d:b5:10:e4:94:ef:
76:55:53:00:5c:4a:ea:0c:c7:44:53:32:ce:e7:6c:
dc:87:0a:49:83:29:8d:03:bb:3c:43:e6:57:10:1e:
2f:6d:91:9b:dd:c1:43:ac:2d:39:d1:1b:0d:ae:d0:
8e:1b:86:88:3a:93:01:25:e9:f6:c0:56:79:ac:f9:
4d:ea:be:37:2d:e5:7d:2f:3a:54:4c:b6:97:7c:45:
c1:71:75:c6:c9:65:bf:8e:d9:eb:d1:9b:46:5f:94:
35:a6:34:2f:be:be:12:fa:a5:aa:83:8e:db:ef:99:
60:78:a5:fd:1a:6e:12:ce:94:e1:be:12:2f:cf:2f:
16:98:85:5d:dc:9a:1f:83:86:52:32:01:ef:27:41:
70:08:8a:cc:e5:0a:88:e6:db:c8:3c:51:c6:6b:d9:
ca:07:0a:1d:b6:46:fb:95:38:6b:9a:3e:31:5c:82:
2d:3d:a7:de:aa:ee:a0:16:ab:5c:dd:35:84:60:0c:
28:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:02:2D:C7:24:93:44:26:24:2C:E2:AC:C1:4D:8D:EF:4E:FC:4B:C4
X509v3 Authority Key Identifier:
keyid:F9:61:2B:9D:F2:C8:E4:5B:AD:0B:90:DB:AF:50:BF:22:F9:E9:8D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WErnfLI5FutC5Dbr1C_Ivnpjfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1054e1-dc73-408d-bff1-3fd0c2edafdb/1/1-WErnfLI5FutC5Dbr1C_Ivnpjfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1054e1-dc73-408d-bff1-3fd0c2edafdb/1/1-WErnfLI5FutC5Dbr1C_Ivnpjfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:95:e2:d1:52:c8:85:22:19:6c:10:2f:cf:6b:e0:21:34:64:
df:fe:8a:fa:c7:d3:f4:ea:8d:48:27:f3:2f:7c:ea:b7:82:ab:
0a:d8:c1:31:3e:82:ba:e8:1e:9e:88:f1:50:4e:2d:c7:17:74:
2e:f9:8b:e5:18:67:37:43:d4:bd:3a:53:1a:14:38:d0:00:1e:
99:16:d5:58:95:98:b0:ed:6f:f4:a0:8a:39:65:b4:47:48:13:
ea:27:66:6e:b2:54:9e:9f:01:0a:a4:86:29:97:31:6c:13:4b:
33:09:af:21:ba:c3:06:72:12:0a:f4:8e:67:7c:61:4c:93:39:
34:8e:5d:e8:43:f5:42:0d:f0:fa:cf:43:e8:d9:37:57:1f:2f:
cb:f6:a4:9b:d0:b6:c9:1c:93:42:f6:12:5f:e2:91:82:12:9c:
5a:79:8c:09:82:03:2a:12:81:a7:61:73:0b:2e:2e:9d:81:ce:
78:15:56:74:39:d0:4b:bd:7a:3f:f8:5b:3f:82:1c:aa:f8:a9:
d0:e3:4f:8c:db:78:ce:05:82:39:e5:d2:59:d3:5b:1d:3e:84:
ae:79:13:13:b3:c2:e5:3d:bd:ca:5b:f5:f4:9d:e2:4d:ac:32:
8a:95:47:31:f5:53:e9:2c:49:96:77:73:f9:80:8a:4f:c9:76:
9d:b5:b7:cc
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS7zugl57RouPzaEPPu6vG9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NjEyYjlkZjJjOGU0NWJhZDBiOTBkYmFmNTBiZjIyZjll
OThkZmEwHhcNMjUwMTMxMTAwMTI2WhcNMjUwMjAxMTAwMTI2WjAzMTEwLwYDVQQD
EyhkMzAyMmRjNzI0OTM0NDI2MjQyY2UyYWNjMTRkOGRlZjRlZmM0YmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcPpoPAWAezrgfrVPDzHvXjsOBJx
mMpx1PxE2ZhJIE6fouTc5nGMJNcqcNT4CRH7Ct+WhrHy7IfU6NNRXLEQKDAmT1kt
tRDklO92VVMAXErqDMdEUzLO52zchwpJgymNA7s8Q+ZXEB4vbZGb3cFDrC050RsN
rtCOG4aIOpMBJen2wFZ5rPlN6r43LeV9LzpUTLaXfEXBcXXGyWW/jtnr0ZtGX5Q1
pjQvvr4S+qWqg47b75lgeKX9Gm4SzpThvhIvzy8WmIVd3Jofg4ZSMgHvJ0FwCIrM
5QqI5tvIPFHGa9nKBwodtkb7lThrmj4xXIItPafequ6gFqtc3TWEYAwotQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNMCLcckk0QmJCzirMFNje9O/EvEMB8GA1UdIwQY
MBaAFPlhK53yyORbrQuQ269QvyL56Y36MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XRXJuZkxJNUZ1dEM1RGJyMUNfSXZucGpmby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvMTA1NGUxLWRjNzMtNDA4ZC1iZmYx
LTNmZDBjMmVkYWZkYi8xLzEtV0VybmZMSTVGdXRDNURicjFDX0l2bnBqZm8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RjLzEwNTRlMS1kYzczLTQwOGQtYmZmMS0zZmQwYzJlZGFm
ZGIvMS8xLVdFcm5mTEk1RnV0QzVEYnIxQ19Jdm5wamZvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5Xi
0VLIhSIZbBAvz2vgITRk3/6K+sfT9OqNSCfzL3zqt4KrCtjBMT6CuugenojxUE4t
xxd0LvmL5RhnN0PUvTpTGhQ40AAemRbVWJWYsO1v9KCKOWW0R0gT6idmbrJUnp8B
CqSGKZcxbBNLMwmvIbrDBnISCvSOZ3xhTJM5NI5d6EP1Qg3w+s9D6Nk3Vx8vy/ak
m9C2yRyTQvYSX+KRghKcWnmMCYIDKhKBp2FzCy4unYHOeBVWdDnQS716P/hbP4Ic
qvip0ONPjNt4zgWCOeXSWdNbHT6ErnkTE7PC5T29ylv19J3iTawyipVHMfVT6SxJ
lndz+YCKT8l2nbW3zA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:55 2025 by rpki-client