Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
File: D8lnTtVfCnZcpdocb6-k3SXioXg.mft (raw, json)
Hash identifier: QZdYAo6ymQqZaxN5kUN2r2U2SNfOZMQFoRNLJgL1wNQ=
Subject key identifier: B0:0A:93:EB:19:DB:30:AD:26:FD:E9:55:52:DB:89:F9:19:7B:F0:D9
Authority key identifier: 0F:C9:67:4E:D5:5F:0A:76:5C:A5:DA:1C:6F:AF:A4:DD:25:E2:A1:78
Certificate issuer: /CN=0fc9674ed55f0a765ca5da1c6fafa4dd25e2a178
Certificate serial: 0194BCAA2EA662BC3FC109615AD5CD327F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
Manifest number: 050F
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: D8lnTtVfCnZcpdocb6-k3SXioXg.crl (hash: uNn3/TWLFXs4GjWR37XhJhZiXOJEAVAc3iKXBM9YGJk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2e:a6:62:bc:3f:c1:09:61:5a:d5:cd:32:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fc9674ed55f0a765ca5da1c6fafa4dd25e2a178
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=b00a93eb19db30ad26fde95552db89f9197bf0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:b5:26:a7:67:30:a3:61:a0:bb:25:94:77:
cd:1c:d5:5f:8d:ed:8d:1e:05:8b:a3:95:30:c5:62:
f7:30:4b:84:35:d8:5b:c8:45:67:fc:89:0c:58:82:
30:57:d6:5b:a6:da:4b:cd:46:d5:7a:6e:c2:91:25:
94:80:3f:aa:99:c6:92:40:be:46:33:53:28:42:3d:
46:b1:c1:c5:7c:96:d9:0d:02:ce:6b:13:69:72:b4:
9a:3f:a8:68:d5:cf:88:cb:77:45:42:b0:bb:8d:50:
60:2f:92:66:77:0e:d3:e4:6f:b6:03:7f:29:1e:6d:
a4:c0:cb:3d:8e:b9:e6:7b:c8:cf:ba:3a:3d:dc:e0:
16:8d:a8:8b:ec:37:96:af:43:2a:83:c1:c5:80:cb:
61:04:56:45:d2:3d:da:65:01:d3:05:2c:66:d5:e7:
81:a5:a7:a0:52:be:a1:71:50:f6:5a:50:22:22:76:
bb:d9:4b:68:b5:1b:8d:7f:ec:72:a0:d1:0e:1a:1c:
5d:30:f4:14:39:81:d6:f9:99:94:6e:f8:70:c8:7f:
83:bb:71:68:59:11:3f:26:bd:09:1c:b8:99:f4:20:
0a:18:ff:b8:05:b6:46:c5:48:60:5e:6f:d8:3f:2f:
50:d5:bc:25:26:06:6f:09:e1:84:a8:88:d9:aa:8e:
4f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0A:93:EB:19:DB:30:AD:26:FD:E9:55:52:DB:89:F9:19:7B:F0:D9
X509v3 Authority Key Identifier:
keyid:0F:C9:67:4E:D5:5F:0A:76:5C:A5:DA:1C:6F:AF:A4:DD:25:E2:A1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:13:b1:2a:a9:92:f2:e8:b9:5f:4e:98:7a:f5:c6:9d:41:dd:
a0:33:db:bf:27:f7:57:0b:1b:56:7f:6f:04:88:e1:46:37:f6:
a9:93:77:0c:38:77:b2:6a:fd:b7:69:71:f8:3c:55:0d:9a:b8:
da:4c:d0:52:35:fc:26:99:fa:9a:3c:ac:58:5a:87:51:55:83:
fb:e1:e9:da:bd:2d:83:01:be:4e:d7:a1:d8:70:98:dd:33:c2:
af:7b:dd:93:1b:79:1a:ad:5d:97:d6:ad:c3:a6:0e:2a:e8:3d:
69:a4:23:1c:9c:d2:2c:76:aa:39:50:d2:71:6a:3a:21:c6:01:
2e:0b:99:38:44:67:3c:e0:05:20:a8:8a:fa:ad:ba:5d:02:a4:
9b:9c:cf:7f:2e:c7:0e:d9:85:7e:d7:64:0c:a4:a2:bc:41:e9:
bd:4d:c2:65:69:33:66:09:2f:37:93:a4:aa:c6:c6:6f:c9:0e:
d4:08:4f:52:f4:43:8b:ab:ca:ed:d4:ec:2e:d8:31:79:f7:76:
d8:1d:a6:5e:70:a2:63:7b:d1:1b:89:47:35:9d:58:69:9c:d3:
11:66:69:49:f3:70:0e:e5:2d:6c:5f:fe:52:78:a9:98:7b:6c:
dd:0d:1c:28:31:84:fa:af:ab:77:ad:71:0a:a6:7b:96:9f:1b:
f0:1f:d7:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qi6mYrw/wQlhWtXNMn8AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYzk2NzRlZDU1ZjBhNzY1Y2E1ZGExYzZmYWZhNGRkMjVl
MmExNzgwHhcNMjUwMTMxMTQwMDU3WhcNMjUwMjAxMTQwMDU3WjAzMTEwLwYDVQQD
EyhiMDBhOTNlYjE5ZGIzMGFkMjZmZGU5NTU1MmRiODlmOTE5N2JmMGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZe1JqdnMKNhoLsllHfNHNVfje2N
HgWLo5UwxWL3MEuENdhbyEVn/IkMWIIwV9ZbptpLzUbVem7CkSWUgD+qmcaSQL5G
M1MoQj1GscHFfJbZDQLOaxNpcrSaP6ho1c+Iy3dFQrC7jVBgL5Jmdw7T5G+2A38p
Hm2kwMs9jrnme8jPujo93OAWjaiL7DeWr0Mqg8HFgMthBFZF0j3aZQHTBSxm1eeB
paegUr6hcVD2WlAiIna72UtotRuNf+xyoNEOGhxdMPQUOYHW+ZmUbvhwyH+Du3Fo
WRE/Jr0JHLiZ9CAKGP+4BbZGxUhgXm/YPy9Q1bwlJgZvCeGEqIjZqo5P4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAKk+sZ2zCtJv3pVVLbifkZe/DZMB8GA1UdIwQY
MBaAFA/JZ07VXwp2XKXaHG+vpN0l4qF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDhsblR0VmZDblpjcGRvY2I2LWszU1hpb1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84YWIyYTMtMDg4ZS00ZTBjLWJlOWEt
NGE5NDZjNTJmYmMyLzEvRDhsblR0VmZDblpjcGRvY2I2LWszU1hpb1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84YWIyYTMtMDg4ZS00ZTBjLWJlOWEtNGE5NDZjNTJmYmMy
LzEvRDhsblR0VmZDblpjcGRvY2I2LWszU1hpb1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqROxKqmS
8ui5X06YevXGnUHdoDPbvyf3VwsbVn9vBIjhRjf2qZN3DDh3smr9t2lx+DxVDZq4
2kzQUjX8Jpn6mjysWFqHUVWD++Hp2r0tgwG+Tteh2HCY3TPCr3vdkxt5Gq1dl9at
w6YOKug9aaQjHJzSLHaqOVDScWo6IcYBLguZOERnPOAFIKiK+q26XQKkm5zPfy7H
DtmFftdkDKSivEHpvU3CZWkzZgkvN5OkqsbGb8kO1AhPUvRDi6vK7dTsLtgxefd2
2B2mXnCiY3vRG4lHNZ1YaZzTEWZpSfNwDuUtbF/+UnipmHts3Q0cKDGE+q+rd61x
CqZ7lp8b8B/Xlw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:27 2025 by rpki-client