Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6c992b-bcdd-4203-b524-81a2fc0a0687/1/l8OiXUi_gek3G3sOuGjV2i2rkZU.mft
File: l8OiXUi_gek3G3sOuGjV2i2rkZU.mft (raw, json)
Hash identifier: tVZZJCFZh6tPBHX6ZGoZAqiwgxSX9OMmRTPXOpVw6Aw=
Subject key identifier: 4A:3E:86:97:D6:88:EC:9E:F4:E8:E9:B1:C0:98:53:27:D1:EC:A8:81
Authority key identifier: 97:C3:A2:5D:48:BF:81:E9:37:1B:7B:0E:B8:68:D5:DA:2D:AB:91:95
Certificate issuer: /CN=97c3a25d48bf81e9371b7b0eb868d5da2dab9195
Certificate serial: 0194BD178E118FA5E3BDB5DA58D161704BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8OiXUi_gek3G3sOuGjV2i2rkZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6c992b-bcdd-4203-b524-81a2fc0a0687/1/l8OiXUi_gek3G3sOuGjV2i2rkZU.mft
Manifest number: 0431
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: l8OiXUi_gek3G3sOuGjV2i2rkZU.crl (hash: Bi4OkZL8Pl1wGXkpPwqbX5wR691K7U3/TT7p56e/DJU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8e:11:8f:a5:e3:bd:b5:da:58:d1:61:70:4b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c3a25d48bf81e9371b7b0eb868d5da2dab9195
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=4a3e8697d688ec9ef4e8e9b1c0985327d1eca881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:e3:c8:9a:3a:99:49:bc:c7:45:bf:0b:88:
df:57:26:9a:73:d0:3e:70:e8:2a:7d:53:b0:4f:2c:
71:6b:5e:2c:55:e4:dd:81:7d:3a:5c:59:5d:f5:59:
e9:87:09:1f:eb:de:df:b4:40:ea:f2:b8:bc:fe:f2:
14:b8:bf:38:78:1c:ef:ad:e0:64:fa:51:1f:0b:8e:
a8:88:28:a3:7e:b4:0d:fa:02:52:4c:03:85:a9:92:
77:53:74:c8:3f:fc:ce:23:a5:94:1e:bb:ee:c0:13:
d1:8c:f4:2b:c7:7c:ad:e1:6b:4a:22:40:0d:f8:30:
3b:91:c1:a0:62:86:66:b4:82:14:77:69:56:3b:fd:
44:ae:c6:f3:e7:68:6c:02:cd:01:92:af:50:be:8d:
82:3e:08:9e:95:5a:1d:12:80:80:e2:c5:da:a4:58:
bd:8e:c4:d7:65:da:77:dc:04:9f:2e:cf:1c:35:ef:
a9:50:53:fc:6e:e4:f7:b7:3e:4e:8d:04:60:df:e9:
eb:88:a2:62:c9:9d:48:a5:ff:5e:50:1c:c9:94:4e:
bc:65:6c:6b:ac:fd:c8:2b:ec:a1:24:44:10:99:ef:
a5:14:04:a0:8c:ff:79:ea:8c:f5:67:88:d0:5b:e8:
d3:1d:08:56:57:2f:1f:ca:fa:4e:7b:61:ef:43:d4:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3E:86:97:D6:88:EC:9E:F4:E8:E9:B1:C0:98:53:27:D1:EC:A8:81
X509v3 Authority Key Identifier:
keyid:97:C3:A2:5D:48:BF:81:E9:37:1B:7B:0E:B8:68:D5:DA:2D:AB:91:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8OiXUi_gek3G3sOuGjV2i2rkZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6c992b-bcdd-4203-b524-81a2fc0a0687/1/l8OiXUi_gek3G3sOuGjV2i2rkZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6c992b-bcdd-4203-b524-81a2fc0a0687/1/l8OiXUi_gek3G3sOuGjV2i2rkZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6c:52:03:f9:66:dc:0e:fb:19:1b:85:64:c1:be:95:65:1e:
28:4d:f1:9b:9e:b4:54:76:2b:d6:85:5c:f2:ee:d1:98:93:c1:
d8:56:7b:fd:74:38:7f:48:de:95:72:91:68:1d:6d:81:c2:0e:
ab:fb:57:f2:11:9f:6c:af:d9:f5:24:22:b8:57:b4:2f:ef:df:
d5:4a:02:51:2a:f0:e0:68:9b:c4:20:f9:2c:d1:9d:75:07:66:
fc:09:af:73:cd:0b:59:54:94:7e:c3:fb:0c:29:dd:f8:f4:27:
38:89:f3:ce:29:d2:fb:ab:2d:3b:60:b4:4e:f5:6b:32:70:41:
24:c9:38:59:b0:2f:dc:5e:6c:82:0a:37:26:a1:94:f0:71:8e:
63:60:75:b2:39:09:75:9a:a7:1e:91:83:8e:db:f4:23:7a:b2:
04:1b:93:85:e0:6e:20:9f:6d:9d:ed:5d:30:da:6e:01:0f:6f:
f3:22:e6:7f:1c:f9:27:ea:5b:e4:b3:73:ca:72:ee:ff:c7:16:
c0:df:dd:57:57:05:ee:ad:d5:7c:8e:2d:39:47:4d:79:af:cd:
ab:7d:2b:0c:58:c0:c8:9e:2e:2d:a3:c7:c7:b2:8d:a5:ca:62:
29:a4:98:6f:cf:11:13:f5:28:41:a5:3b:33:a8:89:b1:af:70:
b4:90:d1:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F44Rj6XjvbXaWNFhcEu/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YzNhMjVkNDhiZjgxZTkzNzFiN2IwZWI4NjhkNWRhMmRh
YjkxOTUwHhcNMjUwMTMxMTYwMDI1WhcNMjUwMjAxMTYwMDI1WjAzMTEwLwYDVQQD
Eyg0YTNlODY5N2Q2ODhlYzllZjRlOGU5YjFjMDk4NTMyN2QxZWNhODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1bjyJo6mUm8x0W/C4jfVyaac9A+
cOgqfVOwTyxxa14sVeTdgX06XFld9Vnphwkf697ftEDq8ri8/vIUuL84eBzvreBk
+lEfC46oiCijfrQN+gJSTAOFqZJ3U3TIP/zOI6WUHrvuwBPRjPQrx3yt4WtKIkAN
+DA7kcGgYoZmtIIUd2lWO/1Ersbz52hsAs0Bkq9Qvo2CPgielVodEoCA4sXapFi9
jsTXZdp33ASfLs8cNe+pUFP8buT3tz5OjQRg3+nriKJiyZ1Ipf9eUBzJlE68ZWxr
rP3IK+yhJEQQme+lFASgjP956oz1Z4jQW+jTHQhWVy8fyvpOe2HvQ9SsuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEo+hpfWiOye9OjpscCYUyfR7KiBMB8GA1UdIwQY
MBaAFJfDol1Iv4HpNxt7Drho1dotq5GVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhPaVhVaV9nZWszRzNzT3VHalYyaTJya1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82Yzk5MmItYmNkZC00MjAzLWI1MjQt
ODFhMmZjMGEwNjg3LzEvbDhPaVhVaV9nZWszRzNzT3VHalYyaTJya1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82Yzk5MmItYmNkZC00MjAzLWI1MjQtODFhMmZjMGEwNjg3
LzEvbDhPaVhVaV9nZWszRzNzT3VHalYyaTJya1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGxSA/lm
3A77GRuFZMG+lWUeKE3xm560VHYr1oVc8u7RmJPB2FZ7/XQ4f0jelXKRaB1tgcIO
q/tX8hGfbK/Z9SQiuFe0L+/f1UoCUSrw4GibxCD5LNGddQdm/Amvc80LWVSUfsP7
DCnd+PQnOInzzinS+6stO2C0TvVrMnBBJMk4WbAv3F5sggo3JqGU8HGOY2B1sjkJ
dZqnHpGDjtv0I3qyBBuTheBuIJ9tne1dMNpuAQ9v8yLmfxz5J+pb5LNzynLu/8cW
wN/dV1cF7q3VfI4tOUdNea/Nq30rDFjAyJ4uLaPHx7KNpcpiKaSYb88RE/UoQaU7
M6iJsa9wtJDRLA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:29 2025 by rpki-client