Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a0440d-11cf-4784-8653-da7bc77fd04e/1/g8nUIWdz620v5OSPOxocKDT-y9s.mft
File: g8nUIWdz620v5OSPOxocKDT-y9s.mft (raw, json)
Hash identifier: SRzHpeilREIVPTfnubPFBsOLAteAWtbhLn/CyRU1VrA=
Subject key identifier: 56:F6:0D:25:20:4A:F4:25:72:41:7D:79:FD:B2:14:E2:58:8F:12:71
Authority key identifier: 83:C9:D4:21:67:73:EB:6D:2F:E4:E4:8F:3B:1A:1C:28:34:FE:CB:DB
Certificate issuer: /CN=83c9d4216773eb6d2fe4e48f3b1a1c2834fecbdb
Certificate serial: 019487A9D9A07D50CEAE713BBF71DFDE114F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8nUIWdz620v5OSPOxocKDT-y9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a0440d-11cf-4784-8653-da7bc77fd04e/1/g8nUIWdz620v5OSPOxocKDT-y9s.mft
Manifest number: 095E
Signing time: Tue 21 Jan 2025 07:00:42 +0000
Manifest this update: Tue 21 Jan 2025 07:00:42 +0000
Manifest next update: Wed 22 Jan 2025 07:00:42 +0000
Files and hashes: 1: g8nUIWdz620v5OSPOxocKDT-y9s.crl (hash: u3IeaTla4LZ5Gh/gAcLdQzWHBgCX/cPl3AN65kcMnIw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:87:a9:d9:a0:7d:50:ce:ae:71:3b:bf:71:df:de:11:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c9d4216773eb6d2fe4e48f3b1a1c2834fecbdb
Validity
Not Before: Jan 21 07:00:42 2025 GMT
Not After : Jan 22 07:00:42 2025 GMT
Subject: CN=56f60d25204af42572417d79fdb214e2588f1271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:28:e4:1b:aa:0c:26:2a:b2:95:99:e6:22:
9a:70:c3:8b:d5:7c:ca:e4:e1:58:d1:47:96:e6:b2:
62:1c:df:70:b2:51:dc:0e:72:16:e9:d3:7d:35:6e:
60:de:21:99:f8:81:6b:3b:1f:7a:59:01:fb:84:f1:
ec:8b:42:40:f0:97:b7:4b:9d:19:1c:4e:6b:60:20:
46:5b:80:33:4f:3c:72:07:61:bc:a1:b5:83:64:93:
45:73:22:f1:ba:b2:a7:e1:6d:b2:e2:7b:b8:50:56:
0a:33:37:7d:ce:b5:00:dc:56:58:f7:9d:82:18:85:
ad:16:5e:e3:48:57:e6:fe:de:83:41:25:7d:1d:3e:
54:20:3a:1a:fe:12:31:3a:76:76:e7:2b:80:85:5c:
e9:c6:43:b3:d0:11:f1:9b:b4:41:25:4f:39:e1:8b:
32:2b:54:33:e8:14:b3:83:f5:a1:55:ed:4d:bf:b1:
4d:f0:f3:9a:96:5d:76:34:2b:57:b7:f4:f2:52:e4:
89:52:9b:2f:47:d3:e7:90:4f:d8:50:12:1e:82:8c:
86:a0:db:93:72:b6:57:65:77:f9:58:fd:64:14:ea:
b1:9d:2c:0a:9a:57:10:bd:b3:3f:0f:f8:c3:09:cd:
31:54:5e:c9:72:e0:73:0f:a5:ea:a1:91:da:d8:48:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F6:0D:25:20:4A:F4:25:72:41:7D:79:FD:B2:14:E2:58:8F:12:71
X509v3 Authority Key Identifier:
keyid:83:C9:D4:21:67:73:EB:6D:2F:E4:E4:8F:3B:1A:1C:28:34:FE:CB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8nUIWdz620v5OSPOxocKDT-y9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a0440d-11cf-4784-8653-da7bc77fd04e/1/g8nUIWdz620v5OSPOxocKDT-y9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a0440d-11cf-4784-8653-da7bc77fd04e/1/g8nUIWdz620v5OSPOxocKDT-y9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8d:16:4a:7d:4b:3b:ce:eb:8e:8e:ac:7b:50:55:1c:1c:c2:
cb:97:fe:de:3f:41:1c:e4:06:35:05:9e:b5:8a:35:eb:56:32:
cc:c5:7b:4f:77:9b:27:dd:f2:60:9b:db:de:c6:a1:fa:36:af:
71:a7:31:e1:79:b2:c0:90:bc:0c:82:f7:ba:90:dd:c0:08:c3:
6b:37:42:94:4a:45:03:47:9b:a9:f4:77:5a:ee:55:f1:5c:fb:
12:d5:7c:fe:37:4f:ed:4f:55:8d:13:16:bf:a6:0d:67:14:69:
dd:74:7d:69:2e:f2:93:45:44:5b:d7:f1:55:2e:43:66:5d:7c:
36:21:b2:ae:0c:6f:e5:2f:eb:af:e7:1b:0d:52:0e:cd:7b:f5:
5d:12:70:a0:f3:ab:31:94:5c:88:e8:62:da:6d:50:7d:48:5b:
15:cc:90:60:59:21:57:1b:6e:38:33:14:18:d4:38:cc:37:22:
f1:98:e9:e9:8c:b5:61:2d:30:24:15:c7:a7:7c:6c:15:4f:b6:
37:24:1e:dd:2d:b5:a9:1c:01:20:cb:10:a4:f2:1b:a6:8f:22:
91:e8:70:e0:fb:a7:56:3a:cc:2c:97:7a:09:04:48:43:ca:42:
6f:05:0f:c3:b4:c5:4c:81:76:94:ca:22:cd:72:b2:13:42:17:
92:77:d6:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSHqdmgfVDOrnE7v3Hf3hFPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYzlkNDIxNjc3M2ViNmQyZmU0ZTQ4ZjNiMWExYzI4MzRm
ZWNiZGIwHhcNMjUwMTIxMDcwMDQyWhcNMjUwMTIyMDcwMDQyWjAzMTEwLwYDVQQD
Eyg1NmY2MGQyNTIwNGFmNDI1NzI0MTdkNzlmZGIyMTRlMjU4OGYxMjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q8o5BuqDCYqspWZ5iKacMOL1XzK
5OFY0UeW5rJiHN9wslHcDnIW6dN9NW5g3iGZ+IFrOx96WQH7hPHsi0JA8Je3S50Z
HE5rYCBGW4AzTzxyB2G8obWDZJNFcyLxurKn4W2y4nu4UFYKMzd9zrUA3FZY952C
GIWtFl7jSFfm/t6DQSV9HT5UIDoa/hIxOnZ25yuAhVzpxkOz0BHxm7RBJU854Ysy
K1Qz6BSzg/WhVe1Nv7FN8POall12NCtXt/TyUuSJUpsvR9PnkE/YUBIegoyGoNuT
crZXZXf5WP1kFOqxnSwKmlcQvbM/D/jDCc0xVF7JcuBzD6XqoZHa2EhXzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFb2DSUgSvQlckF9ef2yFOJYjxJxMB8GA1UdIwQY
MBaAFIPJ1CFnc+ttL+TkjzsaHCg0/svbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhuVUlXZHo2MjB2NU9TUE94b2NLRFQteTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hMDQ0MGQtMTFjZi00Nzg0LTg2NTMt
ZGE3YmM3N2ZkMDRlLzEvZzhuVUlXZHo2MjB2NU9TUE94b2NLRFQteTlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9hMDQ0MGQtMTFjZi00Nzg0LTg2NTMtZGE3YmM3N2ZkMDRl
LzEvZzhuVUlXZHo2MjB2NU9TUE94b2NLRFQteTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXI0WSn1L
O87rjo6se1BVHBzCy5f+3j9BHOQGNQWetYo161YyzMV7T3ebJ93yYJvb3sah+jav
cacx4XmywJC8DIL3upDdwAjDazdClEpFA0ebqfR3Wu5V8Vz7EtV8/jdP7U9VjRMW
v6YNZxRp3XR9aS7yk0VEW9fxVS5DZl18NiGyrgxv5S/rr+cbDVIOzXv1XRJwoPOr
MZRciOhi2m1QfUhbFcyQYFkhVxtuODMUGNQ4zDci8Zjp6Yy1YS0wJBXHp3xsFU+2
NyQe3S21qRwBIMsQpPIbpo8ikehw4PunVjrMLJd6CQRIQ8pCbwUPw7TFTIF2lMoi
zXKyE0IXknfW0g==
-----END CERTIFICATE-----
Generated at Sat Apr 19 04:11:30 2025 by rpki-client