Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
File: itMkK15lo9DZHGsZ60CRlZskMUg.mft (raw, json)
Hash identifier: vTJvqRIqxRou6jxDzoRqmjHY7g8o4bPxbit2FFm+axE=
Subject key identifier: 79:7B:D3:F6:0D:93:A4:33:88:92:53:1C:57:0A:23:DA:41:73:7D:91
Authority key identifier: 8A:D3:24:2B:5E:65:A3:D0:D9:1C:6B:19:EB:40:91:95:9B:24:31:48
Certificate issuer: /CN=8ad3242b5e65a3d0d91c6b19eb4091959b243148
Certificate serial: 0194BBCEFD845E763E33447574F756712259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itMkK15lo9DZHGsZ60CRlZskMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
Manifest number: 0136
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: itMkK15lo9DZHGsZ60CRlZskMUg.crl (hash: V+Lj4WHjtGo6qP6r/qH5Fvecz5hUtJ/pK42yx7NPlPQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fd:84:5e:76:3e:33:44:75:74:f7:56:71:22:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad3242b5e65a3d0d91c6b19eb4091959b243148
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=797bd3f60d93a4338892531c570a23da41737d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:7f:58:f6:3d:0d:b8:54:72:93:74:b5:3c:
23:fb:c3:75:d7:b6:91:65:15:27:17:7e:83:61:99:
c8:ac:16:bc:0b:a5:8f:d1:bd:bc:4f:ea:24:95:01:
20:ef:a7:a7:73:d3:bb:34:7c:ae:3e:ea:4c:a2:cf:
fa:f1:03:8d:d9:68:f1:3f:5a:aa:0d:61:f7:0d:b3:
1b:ef:86:c4:05:db:fe:2e:2f:28:f1:d4:91:77:96:
98:95:18:15:5b:e5:51:fc:36:c6:02:a0:d7:27:1a:
e6:fa:a9:ee:18:3c:58:36:76:be:61:1c:44:41:ba:
0f:80:66:eb:95:9f:c5:a2:a7:be:66:b6:14:be:9e:
b6:5d:ae:90:ba:b4:69:dd:54:bc:e0:1e:c4:86:c6:
7c:4c:b8:05:d0:2a:8e:76:f5:92:82:4f:3e:fa:37:
0c:4c:ed:88:ad:b2:4b:b9:e6:2b:23:56:ce:cf:fc:
e7:4f:93:10:19:20:e8:34:48:39:d8:43:6c:07:f7:
7d:30:88:f7:80:52:f8:22:fe:2d:78:3a:8b:56:1e:
66:4b:03:26:43:29:a3:9c:70:3e:e3:17:04:f3:29:
c0:4f:2a:33:5d:60:37:1a:d8:ec:1b:e1:c4:1f:77:
cb:f8:65:e7:39:9d:44:48:34:ec:4f:56:eb:58:72:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7B:D3:F6:0D:93:A4:33:88:92:53:1C:57:0A:23:DA:41:73:7D:91
X509v3 Authority Key Identifier:
keyid:8A:D3:24:2B:5E:65:A3:D0:D9:1C:6B:19:EB:40:91:95:9B:24:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itMkK15lo9DZHGsZ60CRlZskMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d6:fc:07:dc:82:2a:b8:f5:8d:b7:a0:07:75:7d:6a:90:d4:
aa:0d:b1:a3:eb:7c:45:10:9b:57:bc:c9:fb:5e:6b:a5:05:74:
4d:df:8f:5e:72:52:83:6e:87:03:ac:e7:05:b1:8d:77:3a:78:
ce:1e:49:32:8e:2d:81:24:ce:df:26:04:b1:aa:dc:ef:7a:75:
26:11:f0:d0:9a:fa:d0:31:2b:23:ab:1e:71:ce:5d:9f:18:05:
41:53:d9:b2:75:ef:4e:8e:1c:ca:2e:f3:ce:70:d0:81:25:cd:
af:d2:75:fb:e7:a4:14:ca:cd:04:a6:8a:b3:59:d4:9e:9c:60:
fc:d7:22:a8:84:66:80:99:3d:0f:ba:8d:d2:02:a1:22:61:98:
24:a0:dc:b1:d3:a4:5a:80:01:f3:21:98:08:3f:25:0c:61:52:
25:75:e8:d9:de:0d:ff:bd:67:6a:b1:1b:6a:7d:84:24:ce:e5:
95:e1:8a:10:bf:58:ef:42:6f:13:55:d0:5a:bf:71:3d:19:26:
83:6d:a4:01:0e:e3:10:df:2b:9d:d3:a5:94:41:47:d7:ca:18:
88:a9:31:af:89:47:37:70:5f:be:f3:b7:93:e2:49:25:5a:31:
f0:33:bc:09:ad:4a:c3:d9:ab:a6:87:24:ae:31:b1:cf:41:51:
f0:40:e2:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zv2EXnY+M0R1dPdWcSJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZDMyNDJiNWU2NWEzZDBkOTFjNmIxOWViNDA5MTk1OWIy
NDMxNDgwHhcNMjUwMTMxMTAwMTMyWhcNMjUwMjAxMTAwMTMyWjAzMTEwLwYDVQQD
Eyg3OTdiZDNmNjBkOTNhNDMzODg5MjUzMWM1NzBhMjNkYTQxNzM3ZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9l/WPY9DbhUcpN0tTwj+8N117aR
ZRUnF36DYZnIrBa8C6WP0b28T+oklQEg76enc9O7NHyuPupMos/68QON2WjxP1qq
DWH3DbMb74bEBdv+Li8o8dSRd5aYlRgVW+VR/DbGAqDXJxrm+qnuGDxYNna+YRxE
QboPgGbrlZ/Foqe+ZrYUvp62Xa6QurRp3VS84B7EhsZ8TLgF0CqOdvWSgk8++jcM
TO2IrbJLueYrI1bOz/znT5MQGSDoNEg52ENsB/d9MIj3gFL4Iv4teDqLVh5mSwMm
QymjnHA+4xcE8ynATyozXWA3GtjsG+HEH3fL+GXnOZ1ESDTsT1brWHKpdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHl70/YNk6QziJJTHFcKI9pBc32RMB8GA1UdIwQY
MBaAFIrTJCteZaPQ2RxrGetAkZWbJDFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRNa0sxNWxvOURaSEdzWjYwQ1JsWnNrTVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kN2RlMTAtNWRjMC00ZDg5LTlhNjgt
ZjcwNGIxZjUzYWNlLzEvaXRNa0sxNWxvOURaSEdzWjYwQ1JsWnNrTVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9kN2RlMTAtNWRjMC00ZDg5LTlhNjgtZjcwNGIxZjUzYWNl
LzEvaXRNa0sxNWxvOURaSEdzWjYwQ1JsWnNrTVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetb8B9yC
Krj1jbegB3V9apDUqg2xo+t8RRCbV7zJ+15rpQV0Td+PXnJSg26HA6znBbGNdzp4
zh5JMo4tgSTO3yYEsarc73p1JhHw0Jr60DErI6secc5dnxgFQVPZsnXvTo4cyi7z
znDQgSXNr9J1++ekFMrNBKaKs1nUnpxg/NciqIRmgJk9D7qN0gKhImGYJKDcsdOk
WoAB8yGYCD8lDGFSJXXo2d4N/71narEban2EJM7lleGKEL9Y70JvE1XQWr9xPRkm
g22kAQ7jEN8rndOllEFH18oYiKkxr4lHN3BfvvO3k+JJJVox8DO8Ca1Kw9mrpock
rjGxz0FR8EDiqg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:57 2025 by rpki-client