Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.mft
File: PbZurh7_N8XOflhyiwFuSR2sJqo.mft (raw, json)
Hash identifier: W/qv4M1UXxtFd461veiyXRXEETXhtceA/zWjX70OHZI=
Subject key identifier: 74:5A:FF:1A:44:F6:F5:FE:EF:33:07:81:DE:C2:27:71:B1:CF:40:9C
Authority key identifier: 3D:B6:6E:AE:1E:FF:37:C5:CE:7E:58:72:8B:01:6E:49:1D:AC:26:AA
Certificate issuer: /CN=3db66eae1eff37c5ce7e58728b016e491dac26aa
Certificate serial: 0194BBCED80FB160314C93353A4AF41CB656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbZurh7_N8XOflhyiwFuSR2sJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.mft
Manifest number: 086D
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: PbZurh7_N8XOflhyiwFuSR2sJqo.crl (hash: DASvQu0VKY1BMf98mJdgAZgtKw5mC2KwULySrFnPTUM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d8:0f:b1:60:31:4c:93:35:3a:4a:f4:1c:b6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db66eae1eff37c5ce7e58728b016e491dac26aa
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=745aff1a44f6f5feef330781dec22771b1cf409c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:50:71:2f:4c:b5:25:f2:b7:9f:d0:9e:6c:
18:34:d8:0a:50:aa:e1:71:e1:d1:32:f1:76:9d:0c:
9b:04:d9:2c:f5:8a:62:70:d2:54:12:1f:f7:d8:8d:
2a:77:b7:d7:0a:ff:05:52:54:33:d4:35:21:d7:9a:
69:27:16:e5:b6:f9:bf:f6:17:9d:44:bb:da:88:40:
e9:ed:5b:42:a6:5a:78:b7:2e:38:0f:94:9a:56:a9:
f1:c4:4a:30:d0:37:87:a3:d9:a7:b0:f3:26:0c:87:
94:80:c2:f0:e9:76:e6:0c:8e:56:21:41:ee:eb:6c:
fb:96:2a:b1:ca:9b:89:c1:58:62:f6:ac:d7:99:3c:
e4:ee:59:76:10:d5:1c:ab:43:97:b6:9d:42:c7:5e:
16:50:15:50:b5:7d:c5:11:13:ce:61:1d:5f:a8:39:
90:43:65:90:e9:29:2c:4e:ee:26:60:a4:38:25:fd:
26:a8:1b:ff:77:0b:d7:0e:e7:35:44:88:4d:31:91:
d0:cb:e7:47:ad:3b:67:17:42:68:89:ba:9e:ae:64:
0b:12:23:c6:95:82:5b:48:22:c8:01:62:91:fe:d4:
85:5f:f1:c4:a1:fa:4f:c8:37:7e:68:37:31:a7:b4:
be:42:c9:2a:67:49:27:11:b1:91:75:67:9c:d8:c1:
da:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5A:FF:1A:44:F6:F5:FE:EF:33:07:81:DE:C2:27:71:B1:CF:40:9C
X509v3 Authority Key Identifier:
keyid:3D:B6:6E:AE:1E:FF:37:C5:CE:7E:58:72:8B:01:6E:49:1D:AC:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbZurh7_N8XOflhyiwFuSR2sJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:63:eb:6d:be:21:7d:e8:c9:6a:b4:c4:19:d1:bd:df:3f:3f:
d5:1a:1b:18:70:5d:0b:9d:1b:6c:8e:94:c3:91:36:fa:08:2e:
39:a6:75:7d:84:30:01:99:78:8f:d5:ec:94:2b:5d:27:79:78:
a0:5a:ca:84:d7:59:78:bf:df:2b:83:64:3c:7b:73:b2:0a:62:
66:fc:f1:aa:0f:d3:37:46:29:64:d9:db:f3:fd:7f:6c:ae:ba:
ca:91:e2:5e:20:9d:63:f6:29:7e:8c:2f:e9:7d:d6:dc:bb:62:
ce:cb:c9:25:82:fa:75:f7:0d:85:00:95:90:6e:ac:26:19:fc:
6e:f2:8d:d0:35:12:45:46:45:cd:aa:eb:17:51:7b:db:56:81:
fa:a6:6b:93:ee:6e:87:9e:ef:ca:a2:53:ec:63:fd:7d:d9:ef:
bd:f9:8f:c3:b3:6e:4d:95:71:38:01:39:18:43:8b:65:a6:44:
6a:83:0c:01:f4:f7:2d:26:ac:bd:ea:ce:ef:96:4b:78:98:68:
61:fc:9e:d8:71:56:07:66:bb:30:6e:ce:f5:05:e1:09:93:a8:
09:02:eb:b9:b8:a7:e3:b9:17:9a:b2:d8:b8:33:fa:4b:39:ab:
4d:81:c5:69:08:0f:f2:30:b3:60:bf:45:08:5c:cc:0e:55:9c:
34:01:6d:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztgPsWAxTJM1Okr0HLZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjY2ZWFlMWVmZjM3YzVjZTdlNTg3MjhiMDE2ZTQ5MWRh
YzI2YWEwHhcNMjUwMTMxMTAwMTIyWhcNMjUwMjAxMTAwMTIyWjAzMTEwLwYDVQQD
Eyg3NDVhZmYxYTQ0ZjZmNWZlZWYzMzA3ODFkZWMyMjc3MWIxY2Y0MDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24xQcS9MtSXyt5/QnmwYNNgKUKrh
ceHRMvF2nQybBNks9YpicNJUEh/32I0qd7fXCv8FUlQz1DUh15ppJxbltvm/9hed
RLvaiEDp7VtCplp4ty44D5SaVqnxxEow0DeHo9mnsPMmDIeUgMLw6XbmDI5WIUHu
62z7liqxypuJwVhi9qzXmTzk7ll2ENUcq0OXtp1Cx14WUBVQtX3FERPOYR1fqDmQ
Q2WQ6SksTu4mYKQ4Jf0mqBv/dwvXDuc1RIhNMZHQy+dHrTtnF0JoibqermQLEiPG
lYJbSCLIAWKR/tSFX/HEofpPyDd+aDcxp7S+QskqZ0knEbGRdWec2MHa/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRa/xpE9vX+7zMHgd7CJ3Gxz0CcMB8GA1UdIwQY
MBaAFD22bq4e/zfFzn5YcosBbkkdrCaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJadXJoN19OOFhPZmxoeWl3RnVTUjJzSnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85YzUwZTUtYjFkMC00Yzc4LThkZTYt
ZTcxNmM5OGNhNWY3LzEvUGJadXJoN19OOFhPZmxoeWl3RnVTUjJzSnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85YzUwZTUtYjFkMC00Yzc4LThkZTYtZTcxNmM5OGNhNWY3
LzEvUGJadXJoN19OOFhPZmxoeWl3RnVTUjJzSnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWPrbb4h
fejJarTEGdG93z8/1RobGHBdC50bbI6Uw5E2+gguOaZ1fYQwAZl4j9XslCtdJ3l4
oFrKhNdZeL/fK4NkPHtzsgpiZvzxqg/TN0YpZNnb8/1/bK66ypHiXiCdY/Ypfowv
6X3W3LtizsvJJYL6dfcNhQCVkG6sJhn8bvKN0DUSRUZFzarrF1F721aB+qZrk+5u
h57vyqJT7GP9fdnvvfmPw7NuTZVxOAE5GEOLZaZEaoMMAfT3LSasverO75ZLeJho
Yfye2HFWB2a7MG7O9QXhCZOoCQLrubin47kXmrLYuDP6SzmrTYHFaQgP8jCzYL9F
CFzMDlWcNAFtmA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:50 2025 by rpki-client