Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
File: 2_9h1cWObqbsXPfubPNTpmOxs6g.mft (raw, json)
Hash identifier: 0irR+Hzr/Qoxm1qMhjMYPYexh33+8W5uf1sx8ZZdN2Q=
Subject key identifier: 63:3B:07:2E:95:AE:C4:9F:3F:B0:45:2C:E9:28:7E:44:03:7B:1B:93
Authority key identifier: DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
Certificate issuer: /CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Certificate serial: 0194BCA9CDB59ADA883DEF1C09AB76D40FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
Manifest number: 50
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: 2_9h1cWObqbsXPfubPNTpmOxs6g.crl (hash: XXLwEiXI98oqJ8JmykqBhbCjkDI0LlsNpqc6QwRhlYI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cd:b5:9a:da:88:3d:ef:1c:09:ab:76:d4:0f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=633b072e95aec49f3fb0452ce9287e44037b1b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:fa:d2:9e:4d:30:89:ef:42:c3:8c:06:69:
db:17:11:be:4b:c0:f2:e9:f8:54:1c:a6:60:cb:b3:
da:8c:2c:83:0c:b7:06:0f:d3:88:eb:11:a0:8b:a6:
48:9e:9e:a2:7d:85:1c:f8:24:30:e8:18:f6:54:a1:
52:bf:cd:de:3c:f7:e5:70:5f:76:bd:86:13:1b:c3:
cb:9b:84:88:0f:76:56:79:ff:73:36:f0:32:6d:11:
d3:1d:8e:06:2c:96:66:f0:2d:91:4c:d3:2e:57:dd:
8a:a1:26:71:1e:48:83:68:78:c9:75:94:40:ae:44:
98:ee:20:18:af:d2:39:fb:21:d1:27:d2:11:0e:8f:
a9:63:26:fe:78:6e:a9:6a:17:5e:75:ae:f6:0b:c7:
bb:c6:cd:c1:61:fe:c5:d4:db:df:15:20:30:2c:a0:
8f:7f:ce:5d:0b:d8:a2:8b:81:ec:5a:d8:06:a0:d8:
d4:e7:09:ed:13:37:b6:1c:33:f7:70:1e:30:21:aa:
8f:0b:e9:fd:33:a9:9d:65:3d:39:fd:88:11:2c:00:
34:c9:76:44:d1:2e:5f:c9:d5:ad:b1:cd:20:9b:a6:
4a:d9:f0:50:21:fd:bf:1d:6b:7e:95:81:c6:61:be:
76:cc:ed:86:b2:18:03:f3:7e:25:d7:31:0b:03:4e:
8c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3B:07:2E:95:AE:C4:9F:3F:B0:45:2C:E9:28:7E:44:03:7B:1B:93
X509v3 Authority Key Identifier:
keyid:DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:20:f2:c0:0d:89:71:ca:b7:ec:27:7b:4c:69:77:06:43:e3:
f4:a6:42:dd:18:95:e1:77:02:fc:92:97:3a:81:c5:e8:4c:cf:
1e:da:cb:da:9e:63:9e:53:40:ba:a2:26:27:0a:43:ee:7b:9d:
01:11:df:4d:39:31:04:b0:72:45:83:d3:80:a3:24:f9:8d:2d:
fa:69:1a:d8:72:0c:d5:c6:d7:2a:49:1a:e3:ce:4c:fe:06:77:
04:6c:12:7f:a6:73:95:ce:f3:a5:94:9f:4a:ec:5f:23:fc:05:
f6:86:f6:7b:10:23:68:8a:d8:9d:cc:27:59:10:e2:9a:cb:b8:
6e:9b:ab:69:1b:d0:f1:5f:d2:55:5c:76:56:75:53:93:38:c6:
2d:f0:cd:b9:4c:58:da:15:97:35:22:a4:9c:2e:5c:aa:2a:23:
e0:1e:d9:ac:00:d2:e8:b5:e7:a0:92:dc:7b:c9:42:16:ad:2f:
e1:c7:7d:dd:16:bc:fb:7b:61:73:ae:8a:66:ec:6a:27:cd:c5:
53:f5:be:0d:b9:39:9a:89:21:8b:08:94:ff:94:e6:d0:60:82:
ac:c2:f8:92:dc:7c:56:2c:12:c2:7a:a3:d7:9e:e0:93:d3:b8:
a8:b0:10:d0:ca:74:b9:40:d2:f4:02:33:7c:bc:7f:ee:ac:90:
72:38:6f:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qc21mtqIPe8cCat21A++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZmY2MWQ1YzU4ZTZlYTZlYzVjZjdlZTZjZjM1M2E2NjNi
MWIzYTgwHhcNMjUwMTMxMTQwMDMyWhcNMjUwMjAxMTQwMDMyWjAzMTEwLwYDVQQD
Eyg2MzNiMDcyZTk1YWVjNDlmM2ZiMDQ1MmNlOTI4N2U0NDAzN2IxYjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAH60p5NMInvQsOMBmnbFxG+S8Dy
6fhUHKZgy7PajCyDDLcGD9OI6xGgi6ZInp6ifYUc+CQw6Bj2VKFSv83ePPflcF92
vYYTG8PLm4SID3ZWef9zNvAybRHTHY4GLJZm8C2RTNMuV92KoSZxHkiDaHjJdZRA
rkSY7iAYr9I5+yHRJ9IRDo+pYyb+eG6pahdeda72C8e7xs3BYf7F1NvfFSAwLKCP
f85dC9iii4HsWtgGoNjU5wntEze2HDP3cB4wIaqPC+n9M6mdZT05/YgRLAA0yXZE
0S5fydWtsc0gm6ZK2fBQIf2/HWt+lYHGYb52zO2GshgD834l1zELA06MkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGM7By6VrsSfP7BFLOkofkQDexuTMB8GA1UdIwQY
MBaAFNv/YdXFjm6m7Fz37mzzU6ZjsbOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMl85aDFjV09icWJzWFBmdWJQTlRwbU94czZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lZWQxZDYtNmE3Mi00ODI2LTgzOWMt
YjhiMzZmODk1NmI3LzEvMl85aDFjV09icWJzWFBmdWJQTlRwbU94czZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9lZWQxZDYtNmE3Mi00ODI2LTgzOWMtYjhiMzZmODk1NmI3
LzEvMl85aDFjV09icWJzWFBmdWJQTlRwbU94czZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECDywA2J
ccq37Cd7TGl3BkPj9KZC3RiV4XcC/JKXOoHF6EzPHtrL2p5jnlNAuqImJwpD7nud
ARHfTTkxBLByRYPTgKMk+Y0t+mka2HIM1cbXKkka485M/gZ3BGwSf6Zzlc7zpZSf
SuxfI/wF9ob2exAjaIrYncwnWRDimsu4bpuraRvQ8V/SVVx2VnVTkzjGLfDNuUxY
2hWXNSKknC5cqioj4B7ZrADS6LXnoJLce8lCFq0v4cd93Ra8+3thc66KZuxqJ83F
U/W+Dbk5mokhiwiU/5Tm0GCCrML4ktx8ViwSwnqj157gk9O4qLAQ0Mp0uUDS9AIz
fLx/7qyQcjhvwQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:19 2025 by rpki-client