Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
File: sUgIa40dx_EOND_RZXGSOadVvTQ.mft (raw, json)
Hash identifier: w9QXjBi3PrJuljkjH9OFDqQcIqvTAagOKddO93Z0N4k=
Subject key identifier: 1B:16:2C:7A:8F:DA:D1:07:A3:51:AA:43:9D:FA:1E:6C:84:21:F2:08
Authority key identifier: B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34
Certificate issuer: /CN=b148086b8d1dc7f10e343fd165719239a755bd34
Certificate serial: 0194BC3C54BFF98B99BAC857A65C82294273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
Manifest number: 0DA6
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: sUgIa40dx_EOND_RZXGSOadVvTQ.crl (hash: cn5CZoi23dIVWmGohXT/1HRVwsYfOJL9eL/JtZ+Oi9g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:54:bf:f9:8b:99:ba:c8:57:a6:5c:82:29:42:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b148086b8d1dc7f10e343fd165719239a755bd34
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=1b162c7a8fdad107a351aa439dfa1e6c8421f208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:d8:f7:57:71:78:7a:e7:30:d7:d5:74:c2:
6e:d5:3b:b1:b0:38:da:33:5e:ab:c1:ea:87:a1:96:
45:ee:17:d1:f3:aa:80:eb:b9:d5:e6:3d:dd:7f:ac:
04:26:a1:2d:30:16:be:99:48:38:cd:ed:f7:f3:3c:
91:0f:99:24:bb:16:3d:27:41:19:67:42:e7:11:d6:
a9:09:68:9b:6a:8c:de:77:09:f6:1a:7d:69:a5:80:
e4:bc:56:4e:d1:1d:04:2d:1b:9a:a9:c7:f6:90:77:
29:26:bd:63:1e:dc:45:fa:05:f4:66:39:b7:6d:e3:
62:71:07:35:d0:96:ea:9b:47:8c:37:5c:cd:55:38:
f5:31:55:12:1f:1c:4a:2a:3b:92:f0:57:a9:22:16:
43:a1:ea:b6:c4:26:61:72:f2:ea:83:70:ca:da:dc:
6b:87:c2:a9:38:e0:60:80:70:f8:20:af:1b:77:2e:
b7:36:94:ab:6e:ee:b6:27:5d:fe:f5:09:b6:1f:2f:
f0:b1:1a:d1:e8:1c:bd:83:ab:f9:da:60:b8:66:7c:
40:9e:13:4e:c6:9f:aa:0d:d9:ab:9c:5b:a4:53:c6:
f3:64:c9:a6:b3:ab:75:a6:a4:ad:13:a5:42:29:02:
b2:54:04:38:3c:4c:3d:e0:bc:a0:9d:be:20:a0:cc:
15:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:16:2C:7A:8F:DA:D1:07:A3:51:AA:43:9D:FA:1E:6C:84:21:F2:08
X509v3 Authority Key Identifier:
keyid:B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:60:e7:c5:b9:70:5d:29:d7:01:79:26:21:55:fb:37:9a:3d:
ad:aa:a9:d5:ff:3d:8a:ac:d9:f9:ce:a7:8a:5a:96:89:38:28:
d6:0c:8f:07:c7:98:e4:1f:d4:a4:29:e9:f4:5b:34:eb:00:f0:
e8:73:71:71:4d:83:3f:ad:b8:ef:92:04:84:cb:7a:05:9b:ad:
d9:d8:3b:15:1e:41:45:27:67:84:2e:88:c1:3a:54:41:6a:f2:
68:3b:2a:95:fb:3f:eb:fc:d3:95:b1:ab:d4:94:f7:2b:52:ce:
68:ab:1e:6d:3e:8c:0d:6c:71:b0:51:c1:53:b5:76:cd:7d:90:
42:93:50:80:6a:53:f4:4f:d4:65:9a:a0:d4:aa:a0:43:9e:f4:
34:93:08:fe:0d:1e:f5:af:1e:14:c4:81:c5:e5:3a:f8:14:2f:
cd:f2:64:ec:35:43:09:b1:a6:f1:fe:bc:4d:f2:75:01:9f:61:
7c:3a:98:0f:78:16:05:f6:45:91:79:25:f0:37:ff:ff:df:33:
bd:48:c5:88:6d:f3:1d:2e:0e:ba:b8:8b:18:2c:ec:af:f9:07:
bc:9f:39:ac:4e:97:22:88:4a:4d:62:81:3e:c4:4d:0f:91:b6:
4d:c2:dc:28:e8:28:34:68:39:1b:d4:7a:b0:fe:7b:e6:b0:1d:
08:f5:af:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFS/+YuZushXplyCKUJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDgwODZiOGQxZGM3ZjEwZTM0M2ZkMTY1NzE5MjM5YTc1
NWJkMzQwHhcNMjUwMTMxMTIwMDU3WhcNMjUwMjAxMTIwMDU3WjAzMTEwLwYDVQQD
EygxYjE2MmM3YThmZGFkMTA3YTM1MWFhNDM5ZGZhMWU2Yzg0MjFmMjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBvY91dxeHrnMNfVdMJu1TuxsDja
M16rweqHoZZF7hfR86qA67nV5j3df6wEJqEtMBa+mUg4ze338zyRD5kkuxY9J0EZ
Z0LnEdapCWibaozedwn2Gn1ppYDkvFZO0R0ELRuaqcf2kHcpJr1jHtxF+gX0Zjm3
beNicQc10Jbqm0eMN1zNVTj1MVUSHxxKKjuS8FepIhZDoeq2xCZhcvLqg3DK2txr
h8KpOOBggHD4IK8bdy63NpSrbu62J13+9Qm2Hy/wsRrR6By9g6v52mC4ZnxAnhNO
xp+qDdmrnFukU8bzZMmms6t1pqStE6VCKQKyVAQ4PEw94Lygnb4goMwVNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsWLHqP2tEHo1GqQ536HmyEIfIIMB8GA1UdIwQY
MBaAFLFICGuNHcfxDjQ/0WVxkjmnVb00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VnSWE0MGR4X0VPTkRfUlpYR1NPYWRWdlRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYWRmMzQtMWYzZi00Y2VhLTgwMDEt
ZTNkNWQ3ZWY0MjMyLzEvc1VnSWE0MGR4X0VPTkRfUlpYR1NPYWRWdlRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9kYWRmMzQtMWYzZi00Y2VhLTgwMDEtZTNkNWQ3ZWY0MjMy
LzEvc1VnSWE0MGR4X0VPTkRfUlpYR1NPYWRWdlRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGDnxblw
XSnXAXkmIVX7N5o9raqp1f89iqzZ+c6nilqWiTgo1gyPB8eY5B/UpCnp9Fs06wDw
6HNxcU2DP62475IEhMt6BZut2dg7FR5BRSdnhC6IwTpUQWryaDsqlfs/6/zTlbGr
1JT3K1LOaKsebT6MDWxxsFHBU7V2zX2QQpNQgGpT9E/UZZqg1KqgQ570NJMI/g0e
9a8eFMSBxeU6+BQvzfJk7DVDCbGm8f68TfJ1AZ9hfDqYD3gWBfZFkXkl8Df//98z
vUjFiG3zHS4OuriLGCzsr/kHvJ85rE6XIohKTWKBPsRND5G2TcLcKOgoNGg5G9R6
sP575rAdCPWvsA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:27 2025 by rpki-client