Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/00f5b4-dfd9-4eb2-afdb-138ed591efaa/1/m65CjujNRgTB-8FBJ47w11N2KCo.mft
File: m65CjujNRgTB-8FBJ47w11N2KCo.mft (raw, json)
Hash identifier: sX0rh2QdNVajOtVjZnZMtCk45U7yAFRHGUlnpgU8oQI=
Subject key identifier: 94:8E:03:2C:7F:95:C9:F5:DC:37:8F:48:58:58:63:31:F0:16:E3:6E
Authority key identifier: 9B:AE:42:8E:E8:CD:46:04:C1:FB:C1:41:27:8E:F0:D7:53:76:28:2A
Certificate issuer: /CN=9bae428ee8cd4604c1fbc141278ef0d75376282a
Certificate serial: 0194BD4EB7E1E4FF3514BC270ECDF4E94EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m65CjujNRgTB-8FBJ47w11N2KCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/00f5b4-dfd9-4eb2-afdb-138ed591efaa/1/m65CjujNRgTB-8FBJ47w11N2KCo.mft
Manifest number: 1195
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: m65CjujNRgTB-8FBJ47w11N2KCo.crl (hash: AAv4N9bdaOMowoqIS2NnhoXQ+Q3JEPCP1Y9GPS95xhw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b7:e1:e4:ff:35:14:bc:27:0e:cd:f4:e9:4e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bae428ee8cd4604c1fbc141278ef0d75376282a
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=948e032c7f95c9f5dc378f4858586331f016e36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:1c:9b:09:cd:b6:90:d7:94:ca:ad:af:dd:
08:97:aa:87:ef:64:26:89:fd:bb:e1:eb:ad:db:0b:
30:30:44:d9:ec:4d:eb:9d:20:c5:de:9d:13:9f:eb:
e2:fa:11:e5:d0:7b:96:aa:ed:f9:19:f0:d7:97:15:
32:e0:c1:56:a0:ce:16:53:1b:45:81:a9:9a:3c:71:
fb:d8:ca:98:b2:ab:db:d8:d4:35:d3:7c:1d:4f:a0:
4f:db:f3:f1:4c:00:b5:36:f9:30:b2:5f:3e:42:39:
f1:a4:d8:72:b8:d3:86:52:70:83:f3:e6:c5:92:10:
5a:24:8f:8f:c7:38:4e:92:48:9c:e4:c7:36:67:fc:
1c:7b:d0:6c:a2:0e:3e:30:3d:33:f0:cb:0f:d3:3d:
82:10:c3:0a:df:67:31:46:ca:a5:32:0e:66:68:86:
9b:59:5c:95:6e:c4:90:62:94:fd:c1:d3:99:a9:56:
0d:5b:91:94:5b:a8:92:c5:89:e7:c3:94:0a:a1:ac:
06:33:da:b5:9f:70:a4:b4:ff:aa:25:95:02:10:16:
10:1d:26:9a:53:1c:64:4c:fa:8d:c9:b2:c5:df:d5:
cc:84:99:63:f6:e6:7b:8c:82:d2:a3:13:d4:8e:d3:
80:87:4c:b6:b8:a8:a8:3d:a8:0c:67:be:7b:8e:b9:
2e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8E:03:2C:7F:95:C9:F5:DC:37:8F:48:58:58:63:31:F0:16:E3:6E
X509v3 Authority Key Identifier:
keyid:9B:AE:42:8E:E8:CD:46:04:C1:FB:C1:41:27:8E:F0:D7:53:76:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m65CjujNRgTB-8FBJ47w11N2KCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/00f5b4-dfd9-4eb2-afdb-138ed591efaa/1/m65CjujNRgTB-8FBJ47w11N2KCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/00f5b4-dfd9-4eb2-afdb-138ed591efaa/1/m65CjujNRgTB-8FBJ47w11N2KCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b3:88:73:a7:45:49:64:61:93:87:dc:e1:f2:b1:32:21:3c:
ab:94:30:99:e4:a5:44:28:1b:72:a0:db:14:c4:dd:d3:51:78:
ee:36:1d:e5:13:64:b2:c2:d9:af:47:fb:86:0a:a0:6a:ef:dd:
d5:8d:e0:24:74:0a:f1:c5:d0:e2:40:2a:83:d4:3d:b7:af:78:
ee:cc:02:9c:f6:25:30:86:8a:71:ff:fc:c5:c3:cf:90:5a:7a:
91:98:ca:0a:44:b0:1d:8b:c6:df:87:6e:e3:c3:35:1f:cd:5e:
ee:34:fa:94:63:24:ec:bb:61:15:0b:ba:d6:95:af:72:8a:f2:
30:85:d0:e1:68:4d:05:fc:c3:76:52:ba:10:b5:79:cb:eb:90:
51:a1:f1:08:6d:c0:9c:38:c4:89:bc:90:84:07:fd:b2:a4:1b:
88:b3:19:f2:59:f9:85:48:8d:94:29:7d:33:c7:3d:b6:86:80:
c4:88:f4:ec:d6:a0:0c:19:fc:ea:10:4e:45:c7:41:00:01:7b:
f8:37:7a:98:80:4d:e1:94:ae:08:7b:5c:24:e8:23:21:3d:25:
ad:b6:1f:0d:37:4f:11:65:ee:34:86:8f:b2:29:be:93:59:e9:
7f:55:5e:29:c7:4c:34:bb:93:26:0c:35:df:c3:e2:0e:bc:51:
9f:59:ca:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Trfh5P81FLwnDs306U7iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYWU0MjhlZThjZDQ2MDRjMWZiYzE0MTI3OGVmMGQ3NTM3
NjI4MmEwHhcNMjUwMTMxMTcwMDQwWhcNMjUwMjAxMTcwMDQwWjAzMTEwLwYDVQQD
Eyg5NDhlMDMyYzdmOTVjOWY1ZGMzNzhmNDg1ODU4NjMzMWYwMTZlMzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyAcmwnNtpDXlMqtr90Il6qH72Qm
if274eut2wswMETZ7E3rnSDF3p0Tn+vi+hHl0HuWqu35GfDXlxUy4MFWoM4WUxtF
gamaPHH72MqYsqvb2NQ103wdT6BP2/PxTAC1Nvkwsl8+QjnxpNhyuNOGUnCD8+bF
khBaJI+PxzhOkkic5Mc2Z/wce9Bsog4+MD0z8MsP0z2CEMMK32cxRsqlMg5maIab
WVyVbsSQYpT9wdOZqVYNW5GUW6iSxYnnw5QKoawGM9q1n3CktP+qJZUCEBYQHSaa
UxxkTPqNybLF39XMhJlj9uZ7jILSoxPUjtOAh0y2uKioPagMZ757jrkubQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSOAyx/lcn13DePSFhYYzHwFuNuMB8GA1UdIwQY
MBaAFJuuQo7ozUYEwfvBQSeO8NdTdigqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTY1Q2p1ak5SZ1RCLThGQko0N3cxMU4yS0NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wMGY1YjQtZGZkOS00ZWIyLWFmZGIt
MTM4ZWQ1OTFlZmFhLzEvbTY1Q2p1ak5SZ1RCLThGQko0N3cxMU4yS0NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wMGY1YjQtZGZkOS00ZWIyLWFmZGItMTM4ZWQ1OTFlZmFh
LzEvbTY1Q2p1ak5SZ1RCLThGQko0N3cxMU4yS0NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbOIc6dF
SWRhk4fc4fKxMiE8q5QwmeSlRCgbcqDbFMTd01F47jYd5RNkssLZr0f7hgqgau/d
1Y3gJHQK8cXQ4kAqg9Q9t6947swCnPYlMIaKcf/8xcPPkFp6kZjKCkSwHYvG34du
48M1H81e7jT6lGMk7LthFQu61pWvcoryMIXQ4WhNBfzDdlK6ELV5y+uQUaHxCG3A
nDjEibyQhAf9sqQbiLMZ8ln5hUiNlCl9M8c9toaAxIj07NagDBn86hBORcdBAAF7
+Dd6mIBN4ZSuCHtcJOgjIT0lrbYfDTdPEWXuNIaPsim+k1npf1VeKcdMNLuTJgw1
38PiDrxRn1nK9g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:52 2025 by rpki-client