Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
File: 9PpnFz_1YpCIuXCWGuG-dGldxmE.mft (raw, json)
Hash identifier: E2sGEPl5kXfqTuK7Y7VsL/vqXkqzarTzGtzZ6tbeBt0=
Subject key identifier: 91:EF:65:19:AE:75:D9:D3:00:58:76:BA:B8:D7:12:97:01:85:2E:F4
Authority key identifier: F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
Certificate issuer: /CN=f4fa67173ff5629088b970961ae1be74695dc661
Certificate serial: 0194BBCE47BD4E531C2688E9866CDA4766D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: 9PpnFz_1YpCIuXCWGuG-dGldxmE.crl (hash: y1NsETOXhw8xy95eoczXE2+BjSiYGmawJgj0nHb0M44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:47:bd:4e:53:1c:26:88:e9:86:6c:da:47:66:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa67173ff5629088b970961ae1be74695dc661
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=91ef6519ae75d9d3005876bab8d7129701852ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:1c:37:f0:d5:a9:68:cb:22:ee:21:64:6b:
30:4a:4e:82:01:6a:1f:db:56:1b:7b:ff:bf:64:f3:
89:f9:b1:46:11:4a:14:72:5f:5c:1c:88:da:bf:c0:
55:cd:97:43:9a:5e:b8:07:6c:5f:79:3e:da:0c:3f:
68:32:d5:06:94:4c:bd:18:6c:9a:d0:77:20:7a:75:
f5:e1:c0:fb:2e:b4:54:3d:bb:ec:15:69:6c:0f:89:
04:c7:35:7a:5c:7f:ba:5f:a0:00:7f:b0:02:4e:55:
e4:26:6c:d2:f0:99:a9:12:c3:f8:1f:83:e7:17:fb:
90:f4:79:b0:d5:fa:8a:5c:78:4b:95:0a:53:45:39:
43:35:2e:40:e1:91:be:b8:5e:81:1a:c0:fc:89:86:
67:2a:26:9d:93:77:2c:ff:45:ac:35:93:7c:0f:a8:
7b:03:e3:66:0d:37:b1:f2:e8:20:70:04:01:75:8d:
a0:c3:90:fe:d5:9a:4f:51:58:5a:51:86:d2:f9:b3:
59:62:c8:30:82:7d:43:ac:eb:e5:b5:25:b9:e4:2c:
9b:04:8d:18:63:50:ed:48:87:aa:60:5a:f8:00:eb:
6c:c9:43:b5:b8:21:62:36:3e:dc:49:77:88:f3:2c:
14:09:a3:e6:40:d6:77:bf:2c:d8:46:bf:a7:45:52:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EF:65:19:AE:75:D9:D3:00:58:76:BA:B8:D7:12:97:01:85:2E:F4
X509v3 Authority Key Identifier:
keyid:F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:67:76:62:54:4f:00:a4:d8:cf:6c:96:7d:f1:56:6f:20:ae:
84:df:c3:9c:f6:3c:9e:71:ec:e0:11:53:89:74:4e:7c:83:f1:
d6:49:cf:bd:7b:bc:e3:6c:e3:54:b5:38:99:23:2f:3a:8a:be:
ed:d7:02:8c:7d:d8:63:b4:89:dc:2d:25:c6:bb:40:02:e8:63:
51:31:6e:51:9d:91:42:28:0f:22:55:54:90:27:a7:e3:65:b3:
5e:b9:26:92:58:d0:27:76:3d:e9:9f:96:8d:68:61:91:31:4d:
07:ee:d6:ad:c3:64:9f:7c:25:8a:be:1b:fe:46:61:77:c9:81:
16:1a:ee:e8:91:b6:cd:89:75:71:a5:a6:8b:f3:fc:19:5b:77:
61:97:d8:20:9b:8a:4c:bb:be:44:63:f4:06:73:ff:8f:f1:2b:
f8:b7:7e:df:88:d3:d8:26:c7:3b:bf:f6:13:df:5b:e1:14:c6:
aa:b1:c6:25:e8:d9:08:60:c3:23:ab:c9:bb:7f:4d:b0:4b:9f:
17:75:2c:46:52:45:41:d0:58:ca:c0:5c:ea:22:ae:20:ee:15:
33:3b:d0:6d:95:65:ea:8f:dc:de:4a:5c:b4:a3:5e:34:09:bc:
78:80:18:46:20:a3:c1:8e:b8:b4:0d:3a:6d:ea:93:bd:18:83:
38:1a:7a:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zke9TlMcJojphmzaR2bVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZmE2NzE3M2ZmNTYyOTA4OGI5NzA5NjFhZTFiZTc0Njk1
ZGM2NjEwHhcNMjUwMTMxMTAwMDQ1WhcNMjUwMjAxMTAwMDQ1WjAzMTEwLwYDVQQD
Eyg5MWVmNjUxOWFlNzVkOWQzMDA1ODc2YmFiOGQ3MTI5NzAxODUyZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx8cN/DVqWjLIu4hZGswSk6CAWof
21Ybe/+/ZPOJ+bFGEUoUcl9cHIjav8BVzZdDml64B2xfeT7aDD9oMtUGlEy9GGya
0HcgenX14cD7LrRUPbvsFWlsD4kExzV6XH+6X6AAf7ACTlXkJmzS8JmpEsP4H4Pn
F/uQ9Hmw1fqKXHhLlQpTRTlDNS5A4ZG+uF6BGsD8iYZnKiadk3cs/0WsNZN8D6h7
A+NmDTex8uggcAQBdY2gw5D+1ZpPUVhaUYbS+bNZYsgwgn1DrOvltSW55CybBI0Y
Y1DtSIeqYFr4AOtsyUO1uCFiNj7cSXeI8ywUCaPmQNZ3vyzYRr+nRVK0RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHvZRmuddnTAFh2urjXEpcBhS70MB8GA1UdIwQY
MBaAFPT6Zxc/9WKQiLlwlhrhvnRpXcZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBwbkZ6XzFZcENJdVhDV0d1Ry1kR2xkeG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi82ODRkZjQtNzI1Ny00Y2NhLTgyNGUt
ZDg1ZWJjNWVhOThkLzEvOVBwbkZ6XzFZcENJdVhDV0d1Ry1kR2xkeG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi82ODRkZjQtNzI1Ny00Y2NhLTgyNGUtZDg1ZWJjNWVhOThk
LzEvOVBwbkZ6XzFZcENJdVhDV0d1Ry1kR2xkeG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmd2YlRP
AKTYz2yWffFWbyCuhN/DnPY8nnHs4BFTiXROfIPx1knPvXu842zjVLU4mSMvOoq+
7dcCjH3YY7SJ3C0lxrtAAuhjUTFuUZ2RQigPIlVUkCen42WzXrkmkljQJ3Y96Z+W
jWhhkTFNB+7WrcNkn3wlir4b/kZhd8mBFhru6JG2zYl1caWmi/P8GVt3YZfYIJuK
TLu+RGP0BnP/j/Er+Ld+34jT2CbHO7/2E99b4RTGqrHGJejZCGDDI6vJu39NsEuf
F3UsRlJFQdBYysBc6iKuIO4VMzvQbZVl6o/c3kpctKNeNAm8eIAYRiCjwY64tA06
beqTvRiDOBp6Gg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:57 2025 by rpki-client