Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
File: ztSbv4TJn76HrP4bvg2_esY7Q98.mft (raw, json)
Hash identifier: 3fU4eQ6SDWs2XFRVq0nNTHe47TVOJ2hEXbVrv2jgp+8=
Subject key identifier: DD:17:C1:DD:D5:95:E8:67:72:27:A2:8F:9B:46:ED:A7:59:24:8F:FC
Authority key identifier: CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
Certificate issuer: /CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Certificate serial: 0194BCAA44902A1C15326867BA138D2BBFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 14:01:02 +0000
Manifest this update: Fri 31 Jan 2025 14:01:02 +0000
Manifest next update: Sat 01 Feb 2025 14:01:02 +0000
Files and hashes: 1: ztSbv4TJn76HrP4bvg2_esY7Q98.crl (hash: ZznX91dM8sVF5IVXXg0uOzbF5jdm9pBuqstIbHG0J/c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:44:90:2a:1c:15:32:68:67:ba:13:8d:2b:bf:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Validity
Not Before: Jan 31 14:01:02 2025 GMT
Not After : Feb 1 14:01:02 2025 GMT
Subject: CN=dd17c1ddd595e8677227a28f9b46eda759248ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:e6:97:2d:35:5a:be:19:30:fb:ce:f9:b9:
e0:1c:90:2b:84:b2:ef:22:40:0f:f3:bb:a7:34:bc:
0e:ba:77:4c:d8:06:89:21:bc:3e:80:c3:f3:09:91:
f3:36:68:e3:c3:73:f3:8d:1a:28:a3:c4:76:53:0d:
f2:4b:4c:88:d2:76:ff:fb:b2:30:c6:ce:ad:10:01:
02:14:b2:38:da:f9:23:78:2b:7b:a8:fd:a2:b8:b1:
57:f4:01:92:4a:e4:2e:a4:b1:d3:4b:47:fd:b9:f6:
ab:da:39:b7:0c:4d:46:bf:d1:5f:54:0c:ab:09:c6:
03:a9:7f:87:e3:8a:94:a9:d0:f1:2a:7a:82:a1:4c:
f8:98:e8:b2:a8:2f:90:c5:e0:59:3d:f8:a5:37:9a:
04:8f:a0:1b:6b:20:a6:1f:f1:f3:1c:1d:05:80:2e:
6c:12:90:b3:6b:f7:72:ec:52:f4:12:1a:64:e6:f1:
53:05:70:ee:e4:d4:df:36:47:ab:97:5f:ee:7a:7c:
47:1f:fa:43:4c:05:28:bc:b0:3d:61:aa:83:8b:7d:
f0:b1:ec:75:21:b5:9d:28:5c:05:50:57:73:c5:39:
1f:e0:05:f3:00:d7:8a:a3:5e:2f:1b:1c:58:3b:0d:
7f:c7:61:c4:0a:b5:53:7b:8f:4e:20:3f:d6:f5:82:
53:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:17:C1:DD:D5:95:E8:67:72:27:A2:8F:9B:46:ED:A7:59:24:8F:FC
X509v3 Authority Key Identifier:
keyid:CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:36:cc:5f:94:28:80:1c:17:9b:10:65:bb:41:ed:a0:88:7b:
d1:a5:82:54:78:53:7b:3a:67:44:f2:e7:86:76:81:6f:ed:f7:
2c:b8:8c:8c:ba:83:d3:92:5b:e5:06:5e:df:eb:81:1b:17:8e:
78:0e:a0:34:16:c4:ca:a3:a7:79:bc:00:9e:a6:59:68:65:80:
d9:98:f1:4d:df:60:81:c5:92:bd:23:a5:b8:99:4d:61:3f:74:
1c:74:2b:08:ef:7c:49:0c:9f:33:0d:87:22:b5:17:94:71:17:
9b:b0:a5:ea:57:21:69:c2:02:0f:75:95:bf:2f:b3:91:ed:ec:
cd:4c:b8:b9:38:ae:e7:11:1f:d4:51:29:f5:e8:3f:80:d4:07:
e3:04:3b:3f:80:9b:9a:b8:08:2a:bf:dd:e0:aa:f2:d3:c7:b2:
c0:ea:5c:7e:03:9f:52:cf:d7:94:73:10:79:5a:e5:a3:20:5b:
28:ba:8b:1c:94:78:03:ba:08:dc:43:b6:19:a1:31:6f:3a:14:
48:d8:32:ec:82:c8:64:2e:65:71:49:84:1e:be:27:4c:9b:27:
82:9a:7f:48:8c:cc:eb:0e:79:3f:9a:4d:64:51:47:dc:3f:49:
d4:bd:cc:8a:f9:25:9b:de:7f:a7:5b:40:85:34:a7:61:90:51:
ee:11:8f:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qkSQKhwVMmhnuhONK7/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDQ5YmJmODRjOTlmYmU4N2FjZmUxYmJlMGRiZjdhYzYz
YjQzZGYwHhcNMjUwMTMxMTQwMTAyWhcNMjUwMjAxMTQwMTAyWjAzMTEwLwYDVQQD
EyhkZDE3YzFkZGQ1OTVlODY3NzIyN2EyOGY5YjQ2ZWRhNzU5MjQ4ZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p/mly01Wr4ZMPvO+bngHJArhLLv
IkAP87unNLwOundM2AaJIbw+gMPzCZHzNmjjw3PzjRooo8R2Uw3yS0yI0nb/+7Iw
xs6tEAECFLI42vkjeCt7qP2iuLFX9AGSSuQupLHTS0f9ufar2jm3DE1Gv9FfVAyr
CcYDqX+H44qUqdDxKnqCoUz4mOiyqC+QxeBZPfilN5oEj6AbayCmH/HzHB0FgC5s
EpCza/dy7FL0Ehpk5vFTBXDu5NTfNkerl1/uenxHH/pDTAUovLA9YaqDi33wsex1
IbWdKFwFUFdzxTkf4AXzANeKo14vGxxYOw1/x2HECrVTe49OID/W9YJTQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0Xwd3Vlehncieij5tG7adZJI/8MB8GA1UdIwQY
MBaAFM7Um7+EyZ++h6z+G74Nv3rGO0PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRTYnY0VEpuNzZIclA0YnZnMl9lc1k3UTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lMzg2NjctMmFjNC00NTc2LTk0ZjYt
OWVjOWI2N2RkYWY5LzEvenRTYnY0VEpuNzZIclA0YnZnMl9lc1k3UTk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lMzg2NjctMmFjNC00NTc2LTk0ZjYtOWVjOWI2N2RkYWY5
LzEvenRTYnY0VEpuNzZIclA0YnZnMl9lc1k3UTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjbMX5Qo
gBwXmxBlu0HtoIh70aWCVHhTezpnRPLnhnaBb+33LLiMjLqD05Jb5QZe3+uBGxeO
eA6gNBbEyqOnebwAnqZZaGWA2ZjxTd9ggcWSvSOluJlNYT90HHQrCO98SQyfMw2H
IrUXlHEXm7Cl6lchacICD3WVvy+zke3szUy4uTiu5xEf1FEp9eg/gNQH4wQ7P4Cb
mrgIKr/d4Kry08eywOpcfgOfUs/XlHMQeVrloyBbKLqLHJR4A7oI3EO2GaExbzoU
SNgy7ILIZC5lcUmEHr4nTJsngpp/SIzM6w55P5pNZFFH3D9J1L3Mivklm95/p1tA
hTSnYZBR7hGPRA==
-----END CERTIFICATE-----
Generated at Thu May 1 13:12:31 2025 by rpki-client