Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
File: DZHf1FaDQonB_QOg_vG1Kl79HZE.mft (raw, json)
Hash identifier: OM2MzFMQV9/aXwSyWNvi/Iw8vf1aTQzmpTg7EGOCz3M=
Subject key identifier: 56:1E:8E:34:19:02:7D:20:A0:56:A0:B8:2D:5A:FA:BA:6D:C9:C6:D0
Authority key identifier: 0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
Certificate issuer: /CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Certificate serial: 0194BCA9A3B62AA7E95D8CA77393F2794076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
Manifest number: 0C92
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: DZHf1FaDQonB_QOg_vG1Kl79HZE.crl (hash: vNvoaWre0bS4E159wMR+RMwaH8vA/hmEyV6uEA5SnFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a3:b6:2a:a7:e9:5d:8c:a7:73:93:f2:79:40:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=561e8e3419027d20a056a0b82d5afaba6dc9c6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:67:55:85:a9:b9:e7:b0:65:54:bf:23:9e:
26:b4:88:77:8c:72:e4:25:2a:05:cb:46:f8:e7:d5:
e2:4a:1f:46:a6:e0:1d:17:9b:06:df:70:54:13:a4:
f3:14:f4:34:48:80:0f:f5:23:fd:79:a9:9d:3f:31:
d1:48:3a:67:c9:22:91:b5:c2:05:62:cd:3f:96:b3:
16:5a:ea:e8:ee:d5:22:25:16:0c:70:b0:49:8e:8c:
a0:89:cc:6d:14:40:21:2c:e4:b6:76:5e:4c:85:51:
7b:28:d3:22:23:0c:15:64:12:f5:89:1a:97:27:ec:
1c:99:58:02:30:2e:b5:ff:e3:53:73:f0:cc:03:6f:
33:38:32:e4:e7:59:fa:fd:7c:06:c2:c7:d0:d8:63:
45:2e:c3:d1:06:f7:da:62:b6:68:68:45:50:5a:59:
fc:82:0f:03:6b:73:d6:77:7c:e3:dd:5d:2c:3a:84:
86:5a:a4:8e:42:3f:4c:9a:5a:a7:24:db:12:04:4a:
2f:98:33:a7:a2:f5:80:36:1c:56:6c:f1:44:31:cf:
9b:2d:ec:b0:5f:d8:83:2b:e6:bb:04:76:76:9c:45:
0f:a8:dc:70:2b:5f:74:f1:f4:c7:43:aa:8c:40:17:
40:fb:23:04:94:ae:5e:4b:d5:43:84:0b:ed:93:3e:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1E:8E:34:19:02:7D:20:A0:56:A0:B8:2D:5A:FA:BA:6D:C9:C6:D0
X509v3 Authority Key Identifier:
keyid:0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3b:93:96:7f:2b:4c:42:18:9a:4b:3b:e8:93:0c:34:73:bc:
c7:d9:71:10:db:5e:fb:0f:22:f7:e5:c6:51:32:5f:8c:77:be:
cd:45:94:e1:4d:b5:1e:f2:4d:9e:07:81:ac:80:4d:32:0d:28:
8a:a1:90:d8:f5:ae:95:de:f3:b4:55:17:71:37:c5:99:29:00:
ee:bf:da:02:2d:6a:08:72:33:0f:3e:3a:8a:53:c3:88:df:38:
6f:22:88:cc:94:6d:f6:8a:ca:b0:0a:48:13:c9:80:8b:ec:21:
5a:0d:35:b8:2c:74:36:82:40:26:75:12:08:5d:fe:cb:e8:c0:
2a:d9:b7:67:28:ac:b3:e5:1c:92:05:28:54:ab:43:4b:d3:f3:
a1:aa:9d:8b:01:c0:d5:1f:4a:f9:18:d9:a7:ab:5f:e7:95:c8:
85:a5:5a:d9:3e:04:07:dd:6e:59:d6:72:fd:80:f7:fc:3f:7f:
2c:10:c3:0c:1f:7b:cf:fa:11:ca:58:c6:d4:46:23:ac:c1:0a:
9e:ca:fa:d4:4c:29:20:24:14:47:03:49:d1:cd:9b:04:87:f3:
26:3b:bd:37:9d:81:fb:ef:bd:1c:c4:11:58:11:47:88:8b:60:
55:fb:f1:f7:8f:5a:35:b0:3b:76:99:27:0f:61:b0:21:20:90:
a1:e1:ca:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qaO2KqfpXYync5PyeUB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTFkZmQ0NTY4MzQyODljMWZkMDNhMGZlZjFiNTJhNWVm
ZDFkOTEwHhcNMjUwMTMxMTQwMDIxWhcNMjUwMjAxMTQwMDIxWjAzMTEwLwYDVQQD
Eyg1NjFlOGUzNDE5MDI3ZDIwYTA1NmEwYjgyZDVhZmFiYTZkYzljNmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4tnVYWpueewZVS/I54mtIh3jHLk
JSoFy0b459XiSh9GpuAdF5sG33BUE6TzFPQ0SIAP9SP9eamdPzHRSDpnySKRtcIF
Ys0/lrMWWuro7tUiJRYMcLBJjoygicxtFEAhLOS2dl5MhVF7KNMiIwwVZBL1iRqX
J+wcmVgCMC61/+NTc/DMA28zODLk51n6/XwGwsfQ2GNFLsPRBvfaYrZoaEVQWln8
gg8Da3PWd3zj3V0sOoSGWqSOQj9MmlqnJNsSBEovmDOnovWANhxWbPFEMc+bLeyw
X9iDK+a7BHZ2nEUPqNxwK1908fTHQ6qMQBdA+yMElK5eS9VDhAvtkz6OuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYejjQZAn0goFaguC1a+rptycbQMB8GA1UdIwQY
MBaAFA2R39RWg0KJwf0DoP7xtSpe/R2RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mYmJlNDEtMTViNy00ZjZlLTllMDct
OGJjY2UzMDNiOTE5LzEvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mYmJlNDEtMTViNy00ZjZlLTllMDctOGJjY2UzMDNiOTE5
LzEvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzuTln8r
TEIYmks76JMMNHO8x9lxENte+w8i9+XGUTJfjHe+zUWU4U21HvJNngeBrIBNMg0o
iqGQ2PWuld7ztFUXcTfFmSkA7r/aAi1qCHIzDz46ilPDiN84byKIzJRt9orKsApI
E8mAi+whWg01uCx0NoJAJnUSCF3+y+jAKtm3Zyiss+UckgUoVKtDS9PzoaqdiwHA
1R9K+RjZp6tf55XIhaVa2T4EB91uWdZy/YD3/D9/LBDDDB97z/oRyljG1EYjrMEK
nsr61EwpICQURwNJ0c2bBIfzJju9N52B+++9HMQRWBFHiItgVfvx949aNbA7dpkn
D2GwISCQoeHKzA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:46 2025 by rpki-client