Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0bd2c5-03b9-492a-a65e-1b2baeb1c3de/1/p7izQ-LF0HFB14TrwcH510FgQBg.mft
File: p7izQ-LF0HFB14TrwcH510FgQBg.mft (raw, json)
Hash identifier: scEHhSMDk5YGmnrxuxv3ndnoFBAFbTtYP/N5I/rnT3I=
Subject key identifier: 4B:9F:FC:90:D1:B4:CA:31:2E:9E:31:54:2F:CF:FC:B3:74:44:55:5A
Authority key identifier: A7:B8:B3:43:E2:C5:D0:71:41:D7:84:EB:C1:C1:F9:D7:41:60:40:18
Certificate issuer: /CN=a7b8b343e2c5d07141d784ebc1c1f9d741604018
Certificate serial: 0194BC3C908B80E8FF95F479AC90D8F772B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7izQ-LF0HFB14TrwcH510FgQBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0bd2c5-03b9-492a-a65e-1b2baeb1c3de/1/p7izQ-LF0HFB14TrwcH510FgQBg.mft
Manifest number: 077E
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: p7izQ-LF0HFB14TrwcH510FgQBg.crl (hash: prAzJsXKoZi1v7XMzFepAXI6Nk33AXIN9dldQQ2uSas=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:90:8b:80:e8:ff:95:f4:79:ac:90:d8:f7:72:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b8b343e2c5d07141d784ebc1c1f9d741604018
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=4b9ffc90d1b4ca312e9e31542fcffcb37444555a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:65:4d:64:e9:95:bb:89:c2:43:f8:f0:aa:b9:
65:e8:e0:3d:47:84:4c:30:ea:fc:c7:dd:e2:25:77:
8e:7b:42:23:80:53:0c:d6:e3:6f:84:48:82:cb:29:
40:bc:ac:68:b0:d2:2f:c0:d3:94:b1:e1:8f:c9:39:
64:85:0d:3e:14:7a:0f:98:e7:c9:95:1f:3d:f7:13:
06:dd:33:5c:6e:19:59:41:72:c1:d3:f9:7d:9d:26:
fc:a2:bb:94:49:6b:bd:4a:87:7a:09:16:63:70:2d:
a6:e3:27:e8:f9:4d:fd:6a:71:8d:89:f7:64:0b:ac:
ff:db:fa:cd:2a:b9:3f:8e:1b:ac:d1:9c:0e:b8:ab:
cd:76:1d:18:1e:bb:d9:38:2a:13:a5:c5:6c:4d:39:
df:ec:eb:8a:47:c1:2a:33:2e:18:85:8f:fa:0b:10:
9e:d3:d7:10:38:33:e0:8f:51:5d:bb:5b:79:af:df:
7d:b6:48:3a:76:dd:82:06:b7:bc:d9:00:07:d6:f2:
17:3a:f2:7f:0d:76:91:b8:f3:cf:bc:c5:9f:17:e6:
21:22:ab:d7:01:75:a3:63:bd:a0:e4:a4:a0:60:b7:
e7:34:31:81:66:fb:1e:a6:cf:44:d2:00:94:c0:6f:
f3:27:60:5e:4f:03:4a:f0:bc:94:09:2c:67:07:d7:
85:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9F:FC:90:D1:B4:CA:31:2E:9E:31:54:2F:CF:FC:B3:74:44:55:5A
X509v3 Authority Key Identifier:
keyid:A7:B8:B3:43:E2:C5:D0:71:41:D7:84:EB:C1:C1:F9:D7:41:60:40:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7izQ-LF0HFB14TrwcH510FgQBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0bd2c5-03b9-492a-a65e-1b2baeb1c3de/1/p7izQ-LF0HFB14TrwcH510FgQBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0bd2c5-03b9-492a-a65e-1b2baeb1c3de/1/p7izQ-LF0HFB14TrwcH510FgQBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:71:79:4f:7b:8d:e1:f8:f9:ca:c4:f9:39:c2:06:60:da:81:
c5:87:f4:5f:01:2a:28:96:c0:6a:9b:cb:3e:db:b1:3e:43:d9:
3e:25:22:9c:87:ea:98:7d:2e:03:da:a9:6a:e9:a4:47:7e:f1:
b3:3e:bc:35:e8:76:92:a1:9d:be:e4:96:7c:e6:ff:d1:2b:d4:
51:fb:f0:b7:86:09:7b:d3:3d:e4:8e:5c:bc:e6:03:19:ae:22:
50:ed:27:aa:e3:e6:7f:d2:0d:69:07:64:7f:4f:47:60:14:cc:
1c:ab:61:3c:1c:0a:82:e6:f1:4e:72:de:0f:cd:ac:d0:44:31:
75:38:07:16:22:41:cc:58:6e:61:fa:e4:8c:e1:4f:8d:88:ec:
5a:f2:8c:bc:ea:90:22:e7:8f:cd:14:d3:cf:e7:d9:85:0b:41:
c9:b0:f6:c0:f4:e2:92:cf:1e:cc:e6:3f:c9:ff:bf:4b:21:09:
70:ae:2b:01:66:b2:08:6a:c9:73:4d:2a:07:fc:5b:16:23:ca:
68:bb:de:d8:7b:fc:63:8a:c5:8b:1e:57:16:8e:c7:b5:1f:c9:
ac:20:18:9f:29:c1:fd:cc:ca:5a:cd:67:92:64:38:f5:27:00:
39:c1:5a:e4:1f:88:d1:f1:a4:79:0a:7a:56:10:e8:1c:b9:03:
b5:ff:3a:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJCLgOj/lfR5rJDY93KyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YjhiMzQzZTJjNWQwNzE0MWQ3ODRlYmMxYzFmOWQ3NDE2
MDQwMTgwHhcNMjUwMTMxMTIwMTEzWhcNMjUwMjAxMTIwMTEzWjAzMTEwLwYDVQQD
Eyg0YjlmZmM5MGQxYjRjYTMxMmU5ZTMxNTQyZmNmZmNiMzc0NDQ1NTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mVNZOmVu4nCQ/jwqrll6OA9R4RM
MOr8x93iJXeOe0IjgFMM1uNvhEiCyylAvKxosNIvwNOUseGPyTlkhQ0+FHoPmOfJ
lR899xMG3TNcbhlZQXLB0/l9nSb8oruUSWu9Sod6CRZjcC2m4yfo+U39anGNifdk
C6z/2/rNKrk/jhus0ZwOuKvNdh0YHrvZOCoTpcVsTTnf7OuKR8EqMy4YhY/6CxCe
09cQODPgj1Fdu1t5r999tkg6dt2CBre82QAH1vIXOvJ/DXaRuPPPvMWfF+YhIqvX
AXWjY72g5KSgYLfnNDGBZvseps9E0gCUwG/zJ2BeTwNK8LyUCSxnB9eFZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuf/JDRtMoxLp4xVC/P/LN0RFVaMB8GA1UdIwQY
MBaAFKe4s0PixdBxQdeE68HB+ddBYEAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDdpelEtTEYwSEZCMTRUcndjSDUxMEZnUUJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wYmQyYzUtMDNiOS00OTJhLWE2NWUt
MWIyYmFlYjFjM2RlLzEvcDdpelEtTEYwSEZCMTRUcndjSDUxMEZnUUJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8wYmQyYzUtMDNiOS00OTJhLWE2NWUtMWIyYmFlYjFjM2Rl
LzEvcDdpelEtTEYwSEZCMTRUcndjSDUxMEZnUUJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzXF5T3uN
4fj5ysT5OcIGYNqBxYf0XwEqKJbAapvLPtuxPkPZPiUinIfqmH0uA9qpaumkR37x
sz68Neh2kqGdvuSWfOb/0SvUUfvwt4YJe9M95I5cvOYDGa4iUO0nquPmf9INaQdk
f09HYBTMHKthPBwKgubxTnLeD82s0EQxdTgHFiJBzFhuYfrkjOFPjYjsWvKMvOqQ
IuePzRTTz+fZhQtBybD2wPTiks8ezOY/yf+/SyEJcK4rAWayCGrJc00qB/xbFiPK
aLve2Hv8Y4rFix5XFo7HtR/JrCAYnynB/czKWs1nkmQ49ScAOcFa5B+I0fGkeQp6
VhDoHLkDtf86Tg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:46 2025 by rpki-client