Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
File: cSsCxFx16_ctVtM8KAKXwq6H6y0.mft (raw, json)
Hash identifier: I2UNQHK6/M5sKbx2wRHbQmN860MdthIE2U9NSSgY+vA=
Subject key identifier: 73:08:1D:0C:A5:55:1A:2C:F5:19:DF:C2:0F:9F:E5:A5:1A:2F:D1:8D
Authority key identifier: 71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
Certificate issuer: /CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Certificate serial: 0194BCA9CBE1D34B3F9599F1B1605D95E8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
Manifest number: 79
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: cSsCxFx16_ctVtM8KAKXwq6H6y0.crl (hash: XdxjN9PZBhEb5GB9zNJsWk0gknuRXSdTtET9E27ESow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cb:e1:d3:4b:3f:95:99:f1:b1:60:5d:95:e8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=73081d0ca5551a2cf519dfc20f9fe5a51a2fd18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:43:4d:4b:ef:2b:e8:a7:18:54:25:ba:3b:
70:7f:f4:64:af:90:e8:29:9b:57:66:e4:fb:27:70:
5d:8d:42:54:87:eb:5a:c7:f6:0b:1a:d5:00:f0:5b:
46:74:12:6d:e7:d4:f0:db:75:52:82:75:c6:83:46:
27:0d:e6:c1:0e:14:62:2f:4c:d5:f3:ce:41:9a:6d:
57:f7:cf:2a:96:e7:c1:d2:bf:68:09:16:1a:df:f1:
49:a0:62:0c:3f:90:a8:e6:7b:57:9a:48:c7:3a:c9:
ba:06:f4:d9:bc:40:b0:a0:07:a7:42:48:b4:f2:5f:
0d:e2:c5:d8:19:e9:cb:85:f2:7c:61:3f:64:1f:7e:
29:4d:75:cf:f3:07:22:f8:fe:fd:9b:63:17:4b:c0:
4e:1e:0a:4d:d9:1d:42:b6:9b:e4:61:46:21:fa:e2:
95:50:5c:b9:f4:09:55:db:df:97:f5:23:31:80:c3:
a9:6c:30:24:02:8b:67:c7:d9:61:30:9f:ad:24:5e:
15:5d:f9:db:a7:57:3d:4a:ad:e5:f4:7c:6f:44:c3:
2e:36:ca:33:23:4b:14:40:dc:36:45:93:bb:1d:dd:
0c:88:4a:2d:3e:dc:05:41:2a:f9:02:c2:52:9c:3d:
b2:bf:c1:f8:79:b8:5f:81:05:01:5e:a8:e1:ea:43:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:08:1D:0C:A5:55:1A:2C:F5:19:DF:C2:0F:9F:E5:A5:1A:2F:D1:8D
X509v3 Authority Key Identifier:
keyid:71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3f:de:e0:82:da:91:93:e3:2c:78:90:f5:7f:74:86:39:c9:
0d:2f:f3:4b:14:d1:db:5b:b8:11:0a:36:8d:d4:aa:22:20:9c:
5b:28:f5:09:ff:cb:c1:fd:7f:a9:2b:29:f6:49:10:b0:3c:95:
ca:4d:6d:11:cc:2f:75:96:67:e4:b1:3d:07:bd:86:e9:c3:8f:
ed:78:cf:bf:bc:b0:23:87:05:7f:78:3e:00:d7:b4:f6:2a:d8:
f9:ac:22:ee:3c:e8:13:c0:c0:e4:aa:74:e5:e9:07:65:e3:ed:
51:2e:08:eb:fc:4a:bb:1e:00:d4:56:7c:31:2a:35:68:b7:20:
c8:f4:d6:98:b7:ba:eb:e8:70:81:9b:7c:6a:c7:3f:83:fa:68:
90:8c:65:0c:fe:32:fd:23:03:4b:6b:ac:f5:57:dc:62:7e:27:
f6:e0:8e:d5:f5:a8:d8:5d:f9:32:2c:ba:b1:7a:44:d5:89:4b:
e9:ca:70:04:46:0e:05:64:8c:bb:13:54:a8:c8:f2:d4:5c:1b:
bb:f5:3b:a9:60:51:0e:55:a2:fe:80:0f:f1:aa:e4:47:42:40:
67:7f:71:db:4b:19:8f:ee:c3:6b:02:4d:cb:d2:04:2c:b7:4d:
77:cd:01:3f:c8:7d:f8:80:57:3f:47:28:5a:89:21:fc:eb:2e:
e4:74:03:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qcvh00s/lZnxsWBdlei2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmIwMmM0NWM3NWViZjcyZDU2ZDMzYzI4MDI5N2MyYWU4
N2ViMmQwHhcNMjUwMTMxMTQwMDMxWhcNMjUwMjAxMTQwMDMxWjAzMTEwLwYDVQQD
Eyg3MzA4MWQwY2E1NTUxYTJjZjUxOWRmYzIwZjlmZTVhNTFhMmZkMThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1RDTUvvK+inGFQlujtwf/Rkr5Do
KZtXZuT7J3BdjUJUh+tax/YLGtUA8FtGdBJt59Tw23VSgnXGg0YnDebBDhRiL0zV
885Bmm1X988qlufB0r9oCRYa3/FJoGIMP5Co5ntXmkjHOsm6BvTZvECwoAenQki0
8l8N4sXYGenLhfJ8YT9kH34pTXXP8wci+P79m2MXS8BOHgpN2R1CtpvkYUYh+uKV
UFy59AlV29+X9SMxgMOpbDAkAotnx9lhMJ+tJF4VXfnbp1c9Sq3l9HxvRMMuNsoz
I0sUQNw2RZO7Hd0MiEotPtwFQSr5AsJSnD2yv8H4ebhfgQUBXqjh6kMeNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMIHQylVRos9Rnfwg+f5aUaL9GNMB8GA1UdIwQY
MBaAFHErAsRcdev3LVbTPCgCl8Kuh+stMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1NzQ3hGeDE2X2N0VnRNOEtBS1h3cTZINnkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83YzNjNGUtMjZkYi00MTA1LTk5MTgt
MzUyNDczZGQ1MTc5LzEvY1NzQ3hGeDE2X2N0VnRNOEtBS1h3cTZINnkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83YzNjNGUtMjZkYi00MTA1LTk5MTgtMzUyNDczZGQ1MTc5
LzEvY1NzQ3hGeDE2X2N0VnRNOEtBS1h3cTZINnkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATz/e4ILa
kZPjLHiQ9X90hjnJDS/zSxTR21u4EQo2jdSqIiCcWyj1Cf/Lwf1/qSsp9kkQsDyV
yk1tEcwvdZZn5LE9B72G6cOP7XjPv7ywI4cFf3g+ANe09irY+awi7jzoE8DA5Kp0
5ekHZePtUS4I6/xKux4A1FZ8MSo1aLcgyPTWmLe66+hwgZt8asc/g/pokIxlDP4y
/SMDS2us9VfcYn4n9uCO1fWo2F35Miy6sXpE1YlL6cpwBEYOBWSMuxNUqMjy1Fwb
u/U7qWBRDlWi/oAP8arkR0JAZ39x20sZj+7DawJNy9IELLdNd80BP8h9+IBXP0co
Wokh/Osu5HQDZg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:01 2025 by rpki-client