Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/881fd9-a33c-4db6-9e90-83aa51ef62a3/1/gI_LFkA0Rg9gI_c0g9ePzWINqrM.mft
File: gI_LFkA0Rg9gI_c0g9ePzWINqrM.mft (raw, json)
Hash identifier: fKLvc2RicmGw2BUhjyDVzcl2BSi7bFh0G3203FVbOrs=
Subject key identifier: BC:EE:53:C7:2F:D1:9F:56:CE:5E:46:28:D2:23:D9:DB:A9:54:40:DE
Authority key identifier: 80:8F:CB:16:40:34:46:0F:60:23:F7:34:83:D7:8F:CD:62:0D:AA:B3
Certificate issuer: /CN=808fcb164034460f6023f73483d78fcd620daab3
Certificate serial: 01909B72A989100C9234FF00DB12A39CC428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI_LFkA0Rg9gI_c0g9ePzWINqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/881fd9-a33c-4db6-9e90-83aa51ef62a3/1/gI_LFkA0Rg9gI_c0g9ePzWINqrM.mft
Manifest number: 03E7
Signing time: Wed 10 Jul 2024 07:01:41 +0000
Manifest this update: Wed 10 Jul 2024 07:01:41 +0000
Manifest next update: Thu 11 Jul 2024 07:01:41 +0000
Files and hashes: 1: gI_LFkA0Rg9gI_c0g9ePzWINqrM.crl (hash: sorWzYfodvbknY0Dw6RP0YXJykC8y2gwfdzspge8gTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9b:72:a9:89:10:0c:92:34:ff:00:db:12:a3:9c:c4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808fcb164034460f6023f73483d78fcd620daab3
Validity
Not Before: Jul 10 07:01:41 2024 GMT
Not After : Jul 11 07:01:41 2024 GMT
Subject: CN=bcee53c72fd19f56ce5e4628d223d9dba95440de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ac:ee:5a:f7:b6:fc:ab:ee:42:d3:f1:10:84:
4f:34:ec:14:67:f4:47:14:c3:1a:78:11:e5:6b:9f:
96:d8:e1:5b:d0:1d:e3:b2:b7:e6:24:02:ba:44:02:
76:96:1a:3c:1b:7a:43:f4:d7:cc:9e:e1:e2:15:1d:
9a:8c:43:bc:af:f2:20:a6:a4:d5:24:11:6c:2a:b6:
13:62:ef:45:08:7b:4f:4e:54:a5:62:60:89:a7:1d:
f8:95:1a:e9:5a:a6:cc:7c:04:af:47:4d:6c:94:33:
7f:74:ef:04:9f:db:7e:1e:d0:8b:9f:e7:34:59:5a:
40:64:6e:16:ed:0d:85:4e:f7:15:1f:9a:16:4b:5e:
65:e1:05:e9:35:9a:c5:e8:cc:e4:0d:cb:46:47:3f:
ba:e8:f7:07:70:eb:53:4d:23:9a:d6:77:b1:bd:75:
92:59:fc:73:23:79:7c:b3:b6:ab:77:9c:4d:2a:7d:
0c:de:a0:9c:6c:93:94:37:f5:30:72:b7:57:3c:f6:
07:1b:22:33:4f:04:11:04:31:32:52:45:1c:29:cf:
03:be:c6:17:c5:0c:90:49:3d:94:78:5a:2b:ea:21:
d5:c8:c8:68:53:89:7c:09:df:22:f1:df:cd:87:79:
b8:4b:d5:a2:08:a3:1a:12:d2:af:d3:42:36:f8:62:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EE:53:C7:2F:D1:9F:56:CE:5E:46:28:D2:23:D9:DB:A9:54:40:DE
X509v3 Authority Key Identifier:
keyid:80:8F:CB:16:40:34:46:0F:60:23:F7:34:83:D7:8F:CD:62:0D:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI_LFkA0Rg9gI_c0g9ePzWINqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/881fd9-a33c-4db6-9e90-83aa51ef62a3/1/gI_LFkA0Rg9gI_c0g9ePzWINqrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/881fd9-a33c-4db6-9e90-83aa51ef62a3/1/gI_LFkA0Rg9gI_c0g9ePzWINqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9e:ca:00:c3:ec:03:5f:16:46:bc:8b:07:6d:07:f1:99:99:
bb:94:e9:fe:fc:8b:5c:b9:7b:0e:da:91:00:b6:3f:77:6e:b4:
5f:47:fe:77:48:7b:71:50:60:4c:eb:0b:92:1a:ad:ba:89:c8:
07:f8:be:a1:47:30:9c:70:11:8c:4a:45:44:57:c0:54:9a:9d:
12:f0:11:b1:1d:b7:ab:7e:93:b5:36:7d:be:a4:9e:03:09:d0:
32:5c:87:b2:b6:8b:2c:01:ee:07:9b:0c:06:ac:ac:90:2b:12:
3c:19:16:dc:27:bb:bb:e9:61:91:48:d8:48:2c:3d:03:7d:63:
27:35:af:e0:47:73:a6:9c:d5:21:12:be:f5:50:c1:2b:75:c8:
90:48:6d:1c:1b:a1:86:44:f9:87:e6:38:b3:35:a5:c7:07:83:
22:43:7b:37:cb:6f:ea:13:03:83:a4:74:61:6e:dc:37:6f:c3:
8b:0e:05:60:2a:8d:28:a7:fb:34:5c:8f:86:96:13:9f:85:1a:
2a:f2:28:54:73:0b:f7:db:86:a3:f1:89:5e:6a:df:d0:89:3f:
05:49:80:19:ba:e3:7e:0e:21:73:8d:ad:16:fe:31:61:7d:c3:
d7:55:ad:73:6f:00:4a:e3:a5:c3:01:3f:36:32:be:9b:37:04:
92:be:92:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZCbcqmJEAySNP8A2xKjnMQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwOGZjYjE2NDAzNDQ2MGY2MDIzZjczNDgzZDc4ZmNkNjIw
ZGFhYjMwHhcNMjQwNzEwMDcwMTQxWhcNMjQwNzExMDcwMTQxWjAzMTEwLwYDVQQD
EyhiY2VlNTNjNzJmZDE5ZjU2Y2U1ZTQ2MjhkMjIzZDlkYmE5NTQ0MGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7azuWve2/KvuQtPxEIRPNOwUZ/RH
FMMaeBHla5+W2OFb0B3jsrfmJAK6RAJ2lho8G3pD9NfMnuHiFR2ajEO8r/IgpqTV
JBFsKrYTYu9FCHtPTlSlYmCJpx34lRrpWqbMfASvR01slDN/dO8En9t+HtCLn+c0
WVpAZG4W7Q2FTvcVH5oWS15l4QXpNZrF6MzkDctGRz+66PcHcOtTTSOa1nexvXWS
WfxzI3l8s7ard5xNKn0M3qCcbJOUN/UwcrdXPPYHGyIzTwQRBDEyUkUcKc8DvsYX
xQyQST2UeFor6iHVyMhoU4l8Cd8i8d/Nh3m4S9WiCKMaEtKv00I2+GKqFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzuU8cv0Z9Wzl5GKNIj2dupVEDeMB8GA1UdIwQY
MBaAFICPyxZANEYPYCP3NIPXj81iDaqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0lfTEZrQTBSZzlnSV9jMGc5ZVB6V0lOcXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84ODFmZDktYTMzYy00ZGI2LTllOTAt
ODNhYTUxZWY2MmEzLzEvZ0lfTEZrQTBSZzlnSV9jMGc5ZVB6V0lOcXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84ODFmZDktYTMzYy00ZGI2LTllOTAtODNhYTUxZWY2MmEz
LzEvZ0lfTEZrQTBSZzlnSV9jMGc5ZVB6V0lOcXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJ7KAMPs
A18WRryLB20H8ZmZu5Tp/vyLXLl7DtqRALY/d260X0f+d0h7cVBgTOsLkhqtuonI
B/i+oUcwnHARjEpFRFfAVJqdEvARsR23q36TtTZ9vqSeAwnQMlyHsraLLAHuB5sM
BqyskCsSPBkW3Ce7u+lhkUjYSCw9A31jJzWv4EdzppzVIRK+9VDBK3XIkEhtHBuh
hkT5h+Y4szWlxweDIkN7N8tv6hMDg6R0YW7cN2/Diw4FYCqNKKf7NFyPhpYTn4Ua
KvIoVHML99uGo/GJXmrf0Ik/BUmAGbrjfg4hc42tFv4xYX3D11Wtc28ASuOlwwE/
NjK+mzcEkr6Slg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:29 2025 by rpki-client