Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
File: rNbaLhYbceF0IP0x2l9D5VWNxH8.mft (raw, json)
Hash identifier: TH9KlLV3haSWyLDik9geskEXhD0k8ZeqR4MqXnEhONQ=
Subject key identifier: DE:9D:51:F2:7F:3A:54:C9:E5:B0:0A:B7:49:D9:35:A8:B9:BC:C7:C0
Authority key identifier: AC:D6:DA:2E:16:1B:71:E1:74:20:FD:31:DA:5F:43:E5:55:8D:C4:7F
Certificate issuer: /CN=acd6da2e161b71e17420fd31da5f43e5558dc47f
Certificate serial: 019544EBB4479F43D57A2E574F458846EABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNbaLhYbceF0IP0x2l9D5VWNxH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
Manifest number: 0507
Signing time: Thu 27 Feb 2025 01:00:52 +0000
Manifest this update: Thu 27 Feb 2025 01:00:52 +0000
Manifest next update: Fri 28 Feb 2025 01:00:52 +0000
Files and hashes: 1: rNbaLhYbceF0IP0x2l9D5VWNxH8.crl (hash: BavpOkLnJAOfGy09v8M2MSbV3u6mA60I8Az7JIhi99k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:44:eb:b4:47:9f:43:d5:7a:2e:57:4f:45:88:46:ea:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd6da2e161b71e17420fd31da5f43e5558dc47f
Validity
Not Before: Feb 27 01:00:52 2025 GMT
Not After : Feb 28 01:00:52 2025 GMT
Subject: CN=de9d51f27f3a54c9e5b00ab749d935a8b9bcc7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:46:3b:c6:85:56:c2:74:7c:dd:f3:0b:3b:
4c:59:d1:4a:54:82:e4:cb:cd:3f:cd:52:aa:da:ae:
97:53:6c:53:52:cd:b1:5f:48:34:5d:8d:52:44:61:
09:88:60:55:ca:03:52:1f:6a:9f:90:f5:c1:1c:8f:
67:1b:a3:78:b3:bf:f6:61:4f:9a:07:73:24:6e:ad:
eb:da:47:69:53:d7:2d:2e:79:fa:df:0d:81:73:c6:
9d:d7:09:10:76:f6:eb:73:6c:d7:06:b6:39:87:d5:
81:34:26:04:ac:c7:b5:31:57:b1:7a:61:7d:2d:0f:
e9:b6:06:16:9f:b6:95:08:0d:99:09:19:30:c2:c3:
77:c6:06:1e:5c:56:27:67:87:16:e3:aa:69:d6:5b:
18:aa:e6:4b:5d:54:65:92:e8:6f:a9:c2:d3:6a:32:
00:d8:0b:e6:cc:9e:52:8f:f2:4d:41:44:f1:5d:5b:
5e:46:7e:8d:a9:c0:c9:1b:3a:02:18:5f:7f:ab:fa:
6d:c8:fd:f8:14:75:7a:4c:c4:de:77:b6:5f:f6:a3:
c5:96:1e:de:1e:20:6e:7e:00:2c:35:5e:9f:69:53:
6b:e6:18:fd:de:78:e6:e9:bc:89:80:b7:91:0c:44:
6f:0f:1f:33:38:53:fa:69:07:ca:ad:23:66:df:fc:
50:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9D:51:F2:7F:3A:54:C9:E5:B0:0A:B7:49:D9:35:A8:B9:BC:C7:C0
X509v3 Authority Key Identifier:
keyid:AC:D6:DA:2E:16:1B:71:E1:74:20:FD:31:DA:5F:43:E5:55:8D:C4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNbaLhYbceF0IP0x2l9D5VWNxH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c7:fb:93:06:d5:dc:8d:9a:e0:7d:8e:e3:3e:95:a3:a6:32:
95:02:cc:ab:40:e3:08:b7:0e:5c:e7:ac:ac:4d:0c:d2:b3:64:
21:0b:2b:5c:ad:53:f2:49:8c:13:22:2d:78:e3:66:29:ad:30:
6f:2a:6c:e9:29:b4:6f:06:45:6b:5d:00:32:a8:8f:4c:62:31:
f0:1b:a3:a1:ea:8d:35:e1:13:0d:17:63:46:e5:80:74:08:32:
43:b4:65:0c:43:83:25:48:0d:29:d0:6e:02:ff:39:83:c2:49:
90:a6:94:30:1b:69:cc:f1:15:40:38:23:6e:67:db:6d:ee:fd:
8c:1c:53:44:35:18:9f:ac:34:d2:fc:de:d8:4d:3d:ea:e0:26:
2b:95:c4:45:d1:3a:51:f2:9a:be:3b:74:3d:69:fc:7e:33:69:
63:6d:63:c5:7e:de:cd:c9:20:d0:ce:bd:61:07:65:58:3a:56:
98:7c:35:0c:1d:d5:41:04:11:e6:f2:f0:76:60:8e:41:df:0e:
3f:53:39:c1:d2:fc:86:f1:f0:12:e7:e2:5a:a3:98:89:2e:c8:
02:28:2d:ca:ea:07:72:7d:ff:c7:c9:d4:80:17:91:8f:9c:7a:
d8:a6:6e:0c:57:83:93:30:17:93:5e:be:69:6e:74:fc:42:6c:
19:aa:e3:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVE67RHn0PVei5XT0WIRuq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZDZkYTJlMTYxYjcxZTE3NDIwZmQzMWRhNWY0M2U1NTU4
ZGM0N2YwHhcNMjUwMjI3MDEwMDUyWhcNMjUwMjI4MDEwMDUyWjAzMTEwLwYDVQQD
EyhkZTlkNTFmMjdmM2E1NGM5ZTViMDBhYjc0OWQ5MzVhOGI5YmNjN2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8BGO8aFVsJ0fN3zCztMWdFKVILk
y80/zVKq2q6XU2xTUs2xX0g0XY1SRGEJiGBVygNSH2qfkPXBHI9nG6N4s7/2YU+a
B3Mkbq3r2kdpU9ctLnn63w2Bc8ad1wkQdvbrc2zXBrY5h9WBNCYErMe1MVexemF9
LQ/ptgYWn7aVCA2ZCRkwwsN3xgYeXFYnZ4cW46pp1lsYquZLXVRlkuhvqcLTajIA
2AvmzJ5Sj/JNQUTxXVteRn6NqcDJGzoCGF9/q/ptyP34FHV6TMTed7Zf9qPFlh7e
HiBufgAsNV6faVNr5hj93njm6byJgLeRDERvDx8zOFP6aQfKrSNm3/xQcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6dUfJ/OlTJ5bAKt0nZNai5vMfAMB8GA1UdIwQY
MBaAFKzW2i4WG3HhdCD9MdpfQ+VVjcR/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck5iYUxoWWJjZUYwSVAweDJsOUQ1VldOeEg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hYmQ5ZWItZTA3MC00YTYxLWI0MDMt
NTNlYWMwYjBhY2I1LzEvck5iYUxoWWJjZUYwSVAweDJsOUQ1VldOeEg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hYmQ5ZWItZTA3MC00YTYxLWI0MDMtNTNlYWMwYjBhY2I1
LzEvck5iYUxoWWJjZUYwSVAweDJsOUQ1VldOeEg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMf7kwbV
3I2a4H2O4z6Vo6YylQLMq0DjCLcOXOesrE0M0rNkIQsrXK1T8kmMEyIteONmKa0w
byps6Sm0bwZFa10AMqiPTGIx8BujoeqNNeETDRdjRuWAdAgyQ7RlDEODJUgNKdBu
Av85g8JJkKaUMBtpzPEVQDgjbmfbbe79jBxTRDUYn6w00vze2E096uAmK5XERdE6
UfKavjt0PWn8fjNpY21jxX7ezckg0M69YQdlWDpWmHw1DB3VQQQR5vLwdmCOQd8O
P1M5wdL8hvHwEufiWqOYiS7IAigtyuoHcn3/x8nUgBeRj5x62KZuDFeDkzAXk16+
aW50/EJsGarjEA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:03:09 2025 by rpki-client