Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/Ib40C2oyCYkZeIM2_OHmiSA_xL4.mft
File: Ib40C2oyCYkZeIM2_OHmiSA_xL4.mft (raw, json)
Hash identifier: nTRO3c+xNTR3hDaTHmNI2BflxIG0vHDWCvh75tu5PlU=
Subject key identifier: 99:C6:C5:B9:00:CC:9F:4A:12:72:5F:8D:2E:F5:D6:0A:C3:2A:1F:8B
Authority key identifier: 21:BE:34:0B:6A:32:09:89:19:78:83:36:FC:E1:E6:89:20:3F:C4:BE
Certificate issuer: /CN=21be340b6a32098919788336fce1e689203fc4be
Certificate serial: 019589CCCE2F5AFE5EDEA3348B3535FB2512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib40C2oyCYkZeIM2_OHmiSA_xL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/Ib40C2oyCYkZeIM2_OHmiSA_xL4.mft
Manifest number: 099E
Signing time: Wed 12 Mar 2025 10:00:55 +0000
Manifest this update: Wed 12 Mar 2025 10:00:55 +0000
Manifest next update: Thu 13 Mar 2025 10:00:55 +0000
Files and hashes: 1: Ib40C2oyCYkZeIM2_OHmiSA_xL4.crl (hash: pvrgbFfGq3gJuxcCLOtcj27SJGV28j+1znPVxWMP43g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:cc:ce:2f:5a:fe:5e:de:a3:34:8b:35:35:fb:25:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21be340b6a32098919788336fce1e689203fc4be
Validity
Not Before: Mar 12 10:00:55 2025 GMT
Not After : Mar 13 10:00:55 2025 GMT
Subject: CN=99c6c5b900cc9f4a12725f8d2ef5d60ac32a1f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e9:9e:90:d7:77:ea:76:cd:9d:54:76:a1:c6:
07:26:82:34:98:38:44:de:9f:05:31:b5:fa:5b:a6:
a1:cd:b7:b2:d6:03:a5:17:59:74:68:e9:f1:52:ec:
e4:45:b9:b2:9c:51:d9:1e:59:cd:d6:f0:a5:3d:64:
87:04:8f:8d:0d:64:ce:10:84:b9:70:7b:51:fe:ec:
4b:47:e5:e5:4f:4c:92:1c:f9:b8:e0:a9:13:31:06:
bb:3e:19:99:5a:87:4b:bd:8b:8d:d7:fb:7f:89:23:
29:90:54:2a:0e:e4:65:a4:37:4a:fa:17:79:5c:be:
a2:79:38:8d:e7:6e:ac:02:bf:4a:1e:dd:a1:fa:08:
b7:d3:82:76:72:b9:59:28:c9:f4:e2:26:98:0b:80:
9a:cd:67:16:47:3b:3b:2a:c0:32:6a:56:22:06:d8:
73:80:cb:fb:0e:b3:3c:4f:65:0e:95:94:36:06:b0:
94:21:13:a4:1c:28:c7:01:a1:f3:0d:9a:1d:77:29:
97:e8:9b:72:ee:cf:51:51:98:eb:69:d3:4f:b4:ea:
29:74:7b:e2:b0:36:94:4e:d9:36:bc:8f:ab:81:a7:
a7:76:ee:60:cf:3f:cd:e4:e1:3c:ff:0f:fb:a2:5f:
5f:53:66:b3:0b:e7:42:73:07:f3:46:9c:82:f8:16:
c8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C6:C5:B9:00:CC:9F:4A:12:72:5F:8D:2E:F5:D6:0A:C3:2A:1F:8B
X509v3 Authority Key Identifier:
keyid:21:BE:34:0B:6A:32:09:89:19:78:83:36:FC:E1:E6:89:20:3F:C4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib40C2oyCYkZeIM2_OHmiSA_xL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/Ib40C2oyCYkZeIM2_OHmiSA_xL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/Ib40C2oyCYkZeIM2_OHmiSA_xL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7a:6c:31:7e:d3:f7:ca:ff:31:8e:9c:01:67:39:4b:86:dc:
00:81:63:76:08:cb:92:6a:23:c4:2e:dd:2f:89:73:3d:45:96:
a2:25:c8:4c:3a:e7:43:58:c1:98:a4:e0:72:37:08:28:8d:76:
23:ac:5f:6b:37:5a:47:a1:37:63:54:34:76:18:e8:52:f3:a3:
9b:1f:45:7b:6f:94:40:a3:ca:85:58:47:df:5a:dc:c7:4a:c7:
41:f8:40:70:eb:ba:fa:cb:b1:0d:02:d3:61:43:be:4b:9b:fd:
fe:bf:cb:0c:b3:79:2c:17:24:ef:02:e4:5c:98:af:0c:9d:1f:
a8:61:a1:81:f4:9d:d5:8c:5e:79:38:a5:5e:65:93:dd:94:a4:
46:92:fd:95:9e:8b:9f:bf:b4:3c:14:0c:47:b5:b3:41:b7:88:
56:eb:91:f2:8c:a2:01:ab:4d:ab:b1:48:e6:80:d7:a0:34:a3:
c6:15:32:3d:e0:ba:1f:97:fd:dd:63:73:41:3f:2b:87:c9:ad:
f4:b4:e5:3f:c8:17:e3:ae:d2:05:69:60:5f:31:12:f9:6b:13:
98:6e:ec:94:91:a0:2c:56:31:21:83:fa:88:98:63:46:72:5b:
91:f7:29:7a:eb:9f:fc:d0:f2:23:0e:6c:42:f9:4b:fa:75:7a:
fa:5e:9a:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWJzM4vWv5e3qM0izU1+yUSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmUzNDBiNmEzMjA5ODkxOTc4ODMzNmZjZTFlNjg5MjAz
ZmM0YmUwHhcNMjUwMzEyMTAwMDU1WhcNMjUwMzEzMTAwMDU1WjAzMTEwLwYDVQQD
Eyg5OWM2YzViOTAwY2M5ZjRhMTI3MjVmOGQyZWY1ZDYwYWMzMmExZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiemekNd36nbNnVR2ocYHJoI0mDhE
3p8FMbX6W6ahzbey1gOlF1l0aOnxUuzkRbmynFHZHlnN1vClPWSHBI+NDWTOEIS5
cHtR/uxLR+XlT0ySHPm44KkTMQa7PhmZWodLvYuN1/t/iSMpkFQqDuRlpDdK+hd5
XL6ieTiN526sAr9KHt2h+gi304J2crlZKMn04iaYC4CazWcWRzs7KsAyalYiBthz
gMv7DrM8T2UOlZQ2BrCUIROkHCjHAaHzDZoddymX6Jty7s9RUZjradNPtOopdHvi
sDaUTtk2vI+rgaendu5gzz/N5OE8/w/7ol9fU2azC+dCcwfzRpyC+BbIuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnGxbkAzJ9KEnJfjS711grDKh+LMB8GA1UdIwQY
MBaAFCG+NAtqMgmJGXiDNvzh5okgP8S+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWI0MEMyb3lDWWtaZUlNMl9PSG1pU0FfeEw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zYWFiMDctMTA4NS00MGMzLWI2N2Ut
ODFmZWQzYTdlNWYxLzEvSWI0MEMyb3lDWWtaZUlNMl9PSG1pU0FfeEw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zYWFiMDctMTA4NS00MGMzLWI2N2UtODFmZWQzYTdlNWYx
LzEvSWI0MEMyb3lDWWtaZUlNMl9PSG1pU0FfeEw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHpsMX7T
98r/MY6cAWc5S4bcAIFjdgjLkmojxC7dL4lzPUWWoiXITDrnQ1jBmKTgcjcIKI12
I6xfazdaR6E3Y1Q0dhjoUvOjmx9Fe2+UQKPKhVhH31rcx0rHQfhAcOu6+suxDQLT
YUO+S5v9/r/LDLN5LBck7wLkXJivDJ0fqGGhgfSd1YxeeTilXmWT3ZSkRpL9lZ6L
n7+0PBQMR7WzQbeIVuuR8oyiAatNq7FI5oDXoDSjxhUyPeC6H5f93WNzQT8rh8mt
9LTlP8gX467SBWlgXzES+WsTmG7slJGgLFYxIYP6iJhjRnJbkfcpeuuf/NDyIw5s
QvlL+nV6+l6a0A==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:21:54 2025 by rpki-client