Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb5ddb-db3d-4b57-9a6f-b53589a5f9aa/1/2DZCm5upPLpYJ3661wmzfnYDzdk.mft
File: 2DZCm5upPLpYJ3661wmzfnYDzdk.mft (raw, json)
Hash identifier: QCaobHK3Vq6geOjMEvkdkudLUs5zAF6UeDJgF2phJj8=
Subject key identifier: 04:3F:98:6B:1A:1F:A0:0D:A0:E8:CC:04:30:DD:CA:7D:62:12:9C:C6
Authority key identifier: D8:36:42:9B:9B:A9:3C:BA:58:27:7E:BA:D7:09:B3:7E:76:03:CD:D9
Certificate issuer: /CN=d836429b9ba93cba58277ebad709b37e7603cdd9
Certificate serial: 0194BBCEE92971F6E31E299E959978AE4FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DZCm5upPLpYJ3661wmzfnYDzdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb5ddb-db3d-4b57-9a6f-b53589a5f9aa/1/2DZCm5upPLpYJ3661wmzfnYDzdk.mft
Manifest number: 0D25
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: 2DZCm5upPLpYJ3661wmzfnYDzdk.crl (hash: 1cWMCN4HHXxqWwd32T3eaqoV2dCJWuidmByNPD/8gOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e9:29:71:f6:e3:1e:29:9e:95:99:78:ae:4f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d836429b9ba93cba58277ebad709b37e7603cdd9
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=043f986b1a1fa00da0e8cc0430ddca7d62129cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:53:59:50:f0:3b:8e:a8:25:4d:68:f4:c8:
2e:e1:f5:3b:03:4a:e8:64:8e:10:b3:cc:68:ea:e0:
02:ba:74:db:c1:27:e7:38:52:ef:8b:9c:79:eb:81:
09:73:53:67:85:77:5c:25:52:39:fe:81:d8:2c:ae:
b5:c0:9b:a6:2e:49:fc:4c:40:32:34:94:94:32:61:
a9:a5:ae:23:ad:97:b8:03:33:61:40:ba:52:04:c5:
7d:c7:93:8e:c2:42:47:16:fa:2e:fa:91:b1:ab:82:
41:ea:d2:19:97:b7:65:04:4b:df:de:91:7d:55:74:
a5:29:d2:70:98:10:71:80:b2:ce:2e:db:95:06:bf:
43:25:d4:52:9f:78:43:30:ef:6a:de:76:f6:42:c7:
cd:d0:02:fc:83:ba:6f:9d:54:ba:73:0f:8e:9b:c7:
68:21:7b:df:d3:0a:ae:6f:af:4a:be:ac:5c:c1:af:
91:3c:f0:2c:ad:96:cb:fd:b9:b2:1a:fe:65:66:43:
e9:bf:c5:a4:f5:ea:f2:1c:a9:24:07:20:83:71:58:
36:1b:af:a7:86:51:33:01:1b:f6:ed:6a:db:31:d2:
84:51:1d:a3:53:06:7d:3d:c6:0b:7c:fd:cc:2a:7e:
71:d5:0f:10:0e:31:22:5c:10:3e:c6:09:47:fa:dd:
65:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3F:98:6B:1A:1F:A0:0D:A0:E8:CC:04:30:DD:CA:7D:62:12:9C:C6
X509v3 Authority Key Identifier:
keyid:D8:36:42:9B:9B:A9:3C:BA:58:27:7E:BA:D7:09:B3:7E:76:03:CD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DZCm5upPLpYJ3661wmzfnYDzdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb5ddb-db3d-4b57-9a6f-b53589a5f9aa/1/2DZCm5upPLpYJ3661wmzfnYDzdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb5ddb-db3d-4b57-9a6f-b53589a5f9aa/1/2DZCm5upPLpYJ3661wmzfnYDzdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:dd:92:08:20:1a:7c:87:01:e7:5d:b8:96:a5:4f:f3:3e:e1:
8d:8d:62:99:0c:fd:b5:44:40:96:b5:bf:08:f3:f6:00:ba:ee:
08:d8:10:63:28:6f:10:0d:80:b9:23:bc:8e:a3:24:ab:fe:34:
2f:9d:b3:53:32:b8:50:c3:5a:cd:ae:a8:3a:0b:35:b0:b2:85:
3e:31:91:92:9d:62:f6:48:f3:65:c7:3f:11:2c:12:88:af:f0:
31:0e:21:d1:3b:63:64:6b:e7:66:13:32:46:a5:68:79:10:4b:
f8:6f:dc:10:10:7e:a2:4b:42:aa:af:f4:52:cc:0b:3b:9a:d8:
9a:71:e5:75:42:14:7f:bc:0f:88:96:8c:d1:07:11:26:2d:da:
2b:49:6c:a0:d7:05:30:72:8d:e8:04:25:77:67:49:fc:00:76:
41:49:5a:07:24:d9:66:e6:c3:f0:0a:97:27:b6:21:0e:12:17:
47:39:e7:f9:b1:d7:05:66:68:16:42:53:e9:82:24:51:52:f2:
69:57:03:81:78:c0:c1:28:6a:68:47:8d:b8:90:68:3e:8a:fe:
54:87:a2:b3:82:24:0f:e8:4e:a4:da:83:51:5b:fb:12:31:61:
bb:2b:b4:d8:94:21:bf:c9:44:8d:36:58:05:05:77:13:fa:df:
1b:cc:f6:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zukpcfbjHimelZl4rk+tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzY0MjliOWJhOTNjYmE1ODI3N2ViYWQ3MDliMzdlNzYw
M2NkZDkwHhcNMjUwMTMxMTAwMTI2WhcNMjUwMjAxMTAwMTI2WjAzMTEwLwYDVQQD
EygwNDNmOTg2YjFhMWZhMDBkYTBlOGNjMDQzMGRkY2E3ZDYyMTI5Y2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhhTWVDwO46oJU1o9Mgu4fU7A0ro
ZI4Qs8xo6uACunTbwSfnOFLvi5x564EJc1NnhXdcJVI5/oHYLK61wJumLkn8TEAy
NJSUMmGppa4jrZe4AzNhQLpSBMV9x5OOwkJHFvou+pGxq4JB6tIZl7dlBEvf3pF9
VXSlKdJwmBBxgLLOLtuVBr9DJdRSn3hDMO9q3nb2QsfN0AL8g7pvnVS6cw+Om8do
IXvf0wqub69Kvqxcwa+RPPAsrZbL/bmyGv5lZkPpv8Wk9eryHKkkByCDcVg2G6+n
hlEzARv27WrbMdKEUR2jUwZ9PcYLfP3MKn5x1Q8QDjEiXBA+xglH+t1lgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQ/mGsaH6ANoOjMBDDdyn1iEpzGMB8GA1UdIwQY
MBaAFNg2QpubqTy6WCd+utcJs352A83ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRaQ201dXBQTHBZSjM2NjF3bXpmbllEemRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mYjVkZGItZGIzZC00YjU3LTlhNmYt
YjUzNTg5YTVmOWFhLzEvMkRaQ201dXBQTHBZSjM2NjF3bXpmbllEemRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mYjVkZGItZGIzZC00YjU3LTlhNmYtYjUzNTg5YTVmOWFh
LzEvMkRaQ201dXBQTHBZSjM2NjF3bXpmbllEemRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH92SCCAa
fIcB5124lqVP8z7hjY1imQz9tURAlrW/CPP2ALruCNgQYyhvEA2AuSO8jqMkq/40
L52zUzK4UMNaza6oOgs1sLKFPjGRkp1i9kjzZcc/ESwSiK/wMQ4h0TtjZGvnZhMy
RqVoeRBL+G/cEBB+oktCqq/0UswLO5rYmnHldUIUf7wPiJaM0QcRJi3aK0lsoNcF
MHKN6AQld2dJ/AB2QUlaByTZZubD8AqXJ7YhDhIXRznn+bHXBWZoFkJT6YIkUVLy
aVcDgXjAwShqaEeNuJBoPor+VIeis4IkD+hOpNqDUVv7EjFhuyu02JQhv8lEjTZY
BQV3E/rfG8z2qA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:39 2025 by rpki-client