Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
File: 12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json)
Hash identifier: 1Pyz+RkWZ7LhWSQm01w+7s8KrWe7Rxs1kkt33blVw4U=
Subject key identifier: E7:11:8F:61:BB:AE:5C:6D:96:35:50:C3:BC:2C:20:9E:97:0A:C3:39
Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
Certificate issuer: /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Certificate serial: 0194BD17F841D73426D1911FAA5CEC5CD94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: ql2NLr8Fd486HZ/p6DNMv04aVBnuyq/LL1JVXdh1SNE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f8:41:d7:34:26:d1:91:1f:aa:5c:ec:5c:d9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=e7118f61bbae5c6d963550c3bc2c209e970ac339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:0e:39:62:1f:b6:bc:87:f5:42:2e:4c:75:
38:18:47:ac:5c:45:ee:2b:82:c0:9e:b7:8f:08:ad:
a3:f8:9f:3a:81:a4:51:e3:9c:fc:2b:ca:c0:88:90:
12:07:e6:45:4f:bc:8b:15:37:f1:aa:f1:90:39:1f:
c5:aa:d8:c6:a1:1d:32:fd:31:e6:7d:e6:01:34:b3:
44:93:8b:ca:5d:d3:e2:36:99:4c:d8:ee:48:08:ae:
a2:91:c1:71:ac:d6:55:21:55:f9:c1:38:b4:82:4e:
22:93:ff:6f:28:e9:c7:fb:9a:ba:7b:4c:4d:57:0c:
2c:2c:ea:01:5c:9e:16:4b:e1:44:88:b5:d0:a2:8a:
05:10:73:13:58:39:00:72:67:d4:20:ae:05:9d:8d:
cf:47:4a:9f:5a:86:1d:dc:6d:e9:50:b1:55:03:47:
1a:c6:1b:3a:03:84:ce:c7:97:ba:cc:e0:05:fe:35:
d6:89:7e:1c:d0:6a:b2:e9:ba:3f:13:78:6a:09:32:
4d:ca:9b:ce:cb:83:d9:d9:ae:7f:ac:f6:1a:38:0e:
a7:68:bb:5d:c8:7b:c0:28:8f:72:ac:7d:d4:12:7d:
91:ba:ac:fc:58:5a:86:00:19:7c:05:fd:3f:30:03:
17:3c:80:14:27:0f:a8:30:0e:65:4d:27:84:5d:40:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:11:8F:61:BB:AE:5C:6D:96:35:50:C3:BC:2C:20:9E:97:0A:C3:39
X509v3 Authority Key Identifier:
keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:49:eb:16:68:67:93:08:de:cc:64:2e:03:8c:7d:2f:77:e3:
78:96:56:92:86:e8:18:ff:c8:53:5a:6e:4c:1f:da:ec:7d:28:
11:37:fc:ba:f7:4c:a2:6a:bd:4e:d3:01:a9:d2:ed:10:b9:aa:
32:15:45:a3:c2:a6:56:52:1e:56:8e:9a:64:f5:15:7b:f9:79:
bc:6a:ab:bd:d0:e1:63:1c:cf:7b:72:b9:66:63:7a:f0:40:6f:
20:7b:5e:9c:ab:5c:7f:75:2c:39:0d:8a:dc:7b:52:5f:df:c4:
79:0c:aa:25:fe:3d:0d:32:06:2b:e7:6a:ec:65:6e:e8:c0:41:
05:d0:cc:af:61:a8:f8:0d:6f:57:48:8a:fc:6b:e7:03:42:21:
a1:6b:b0:f7:a0:2a:d3:6e:b2:aa:0c:f2:84:cd:73:46:56:96:
34:c2:d8:16:1a:76:bd:5e:0c:5b:bb:8c:2a:24:dc:28:38:8e:
91:9f:77:5f:9e:d0:be:55:92:ee:96:7e:db:03:c3:af:57:76:
83:8d:8b:25:1c:56:ef:3e:86:7e:89:99:e1:d0:79:82:92:9e:
9a:d0:99:6b:ac:22:95:a3:8e:e1:cb:0b:15:d2:d8:9a:62:f2:
ab:10:da:8b:37:fd:56:d3:47:a1:c7:5f:1f:4a:d0:54:b8:10:
cd:ba:4e:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/hB1zQm0ZEfqlzsXNlLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjUyYmFlNDdiMzAzYmJhYjEwM2ZmN2JhNDVhMGE5MDYw
YzNkY2MwHhcNMjUwMTMxMTYwMDUyWhcNMjUwMjAxMTYwMDUyWjAzMTEwLwYDVQQD
EyhlNzExOGY2MWJiYWU1YzZkOTYzNTUwYzNiYzJjMjA5ZTk3MGFjMzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpgOOWIftryH9UIuTHU4GEesXEXu
K4LAnrePCK2j+J86gaRR45z8K8rAiJASB+ZFT7yLFTfxqvGQOR/FqtjGoR0y/THm
feYBNLNEk4vKXdPiNplM2O5ICK6ikcFxrNZVIVX5wTi0gk4ik/9vKOnH+5q6e0xN
VwwsLOoBXJ4WS+FEiLXQoooFEHMTWDkAcmfUIK4FnY3PR0qfWoYd3G3pULFVA0ca
xhs6A4TOx5e6zOAF/jXWiX4c0Gqy6bo/E3hqCTJNypvOy4PZ2a5/rPYaOA6naLtd
yHvAKI9yrH3UEn2Ruqz8WFqGABl8Bf0/MAMXPIAUJw+oMA5lTSeEXUDbDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcRj2G7rlxtljVQw7wsIJ6XCsM5MB8GA1UdIwQY
MBaAFNdlK65HswO7qxA/97pFoKkGDD3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lZTAxMTMtODE2Mi00ZDBhLTg1ZWIt
YWI3NmEwOThhZWJiLzEvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9lZTAxMTMtODE2Mi00ZDBhLTg1ZWItYWI3NmEwOThhZWJi
LzEvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtUnrFmhn
kwjezGQuA4x9L3fjeJZWkoboGP/IU1puTB/a7H0oETf8uvdMomq9TtMBqdLtELmq
MhVFo8KmVlIeVo6aZPUVe/l5vGqrvdDhYxzPe3K5ZmN68EBvIHtenKtcf3UsOQ2K
3HtSX9/EeQyqJf49DTIGK+dq7GVu6MBBBdDMr2Go+A1vV0iK/GvnA0IhoWuw96Aq
026yqgzyhM1zRlaWNMLYFhp2vV4MW7uMKiTcKDiOkZ93X57QvlWS7pZ+2wPDr1d2
g42LJRxW7z6GfomZ4dB5gpKemtCZa6wilaOO4csLFdLYmmLyqxDaizf9VtNHocdf
H0rQVLgQzbpOyA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:53 2025 by rpki-client