Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6f67cc-7a9d-4199-a39f-056de8632546/1/t38nEi7goMZXW0HpduhOPqPSHu8.mft
File: t38nEi7goMZXW0HpduhOPqPSHu8.mft (raw, json)
Hash identifier: TooTJK++HDrxpcHNuw6jiSednZkSEn9DxRYU486C+to=
Subject key identifier: BE:BB:1A:1E:3B:8A:59:69:63:DE:7C:E0:BF:C8:56:08:F6:40:6C:97
Authority key identifier: B7:7F:27:12:2E:E0:A0:C6:57:5B:41:E9:76:E8:4E:3E:A3:D2:1E:EF
Certificate issuer: /CN=b77f27122ee0a0c6575b41e976e84e3ea3d21eef
Certificate serial: 0194756C20FCDD628666B854E6D823217361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t38nEi7goMZXW0HpduhOPqPSHu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6f67cc-7a9d-4199-a39f-056de8632546/1/t38nEi7goMZXW0HpduhOPqPSHu8.mft
Manifest number: 0354
Signing time: Fri 17 Jan 2025 18:00:08 +0000
Manifest this update: Fri 17 Jan 2025 18:00:08 +0000
Manifest next update: Sat 18 Jan 2025 18:00:08 +0000
Files and hashes: 1: t38nEi7goMZXW0HpduhOPqPSHu8.crl (hash: r6tcYPPC3UgXBmuLL8O/YuFmCBjI26KlBPuvR4jNMDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:75:6c:20:fc:dd:62:86:66:b8:54:e6:d8:23:21:73:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77f27122ee0a0c6575b41e976e84e3ea3d21eef
Validity
Not Before: Jan 17 18:00:08 2025 GMT
Not After : Jan 18 18:00:08 2025 GMT
Subject: CN=bebb1a1e3b8a596963de7ce0bfc85608f6406c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5f:52:83:32:ca:13:eb:89:ba:14:2e:8b:80:
74:bd:40:fe:fd:8b:fd:d2:43:b1:af:07:82:27:fe:
85:ff:20:6e:73:ec:c1:4d:21:81:a7:02:d5:79:e2:
2d:06:c9:46:b6:b3:c5:23:79:c8:e5:18:44:34:f7:
55:b4:cb:59:25:da:7b:e8:66:b5:09:e6:e4:fb:c8:
61:00:06:e2:e8:9b:79:77:3a:2e:16:ca:65:fa:47:
78:d4:8d:04:42:91:99:ba:5d:57:e9:15:c4:90:5d:
76:75:2f:05:71:d9:05:a9:93:2a:6a:f5:3e:36:36:
08:43:74:93:53:01:76:09:5a:79:40:73:ab:56:70:
a6:06:02:ea:e4:ac:14:c5:07:6e:56:67:80:7c:0d:
4b:77:3c:68:ed:52:86:d8:35:59:83:a5:5f:fe:67:
46:88:6f:4a:83:3a:19:c0:00:40:e4:6d:dd:43:22:
6e:e6:f5:7c:2c:29:65:01:47:ea:f6:f6:90:9a:d8:
11:a3:80:fe:92:10:00:f6:66:3f:83:be:e5:10:a4:
09:a4:85:ba:b6:96:15:97:54:e5:61:51:fe:06:ad:
e7:22:cc:36:ce:b4:09:55:48:38:f1:99:c4:46:02:
ee:1e:08:93:7c:b8:d0:91:8f:60:60:8b:78:1e:9c:
b9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BB:1A:1E:3B:8A:59:69:63:DE:7C:E0:BF:C8:56:08:F6:40:6C:97
X509v3 Authority Key Identifier:
keyid:B7:7F:27:12:2E:E0:A0:C6:57:5B:41:E9:76:E8:4E:3E:A3:D2:1E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t38nEi7goMZXW0HpduhOPqPSHu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6f67cc-7a9d-4199-a39f-056de8632546/1/t38nEi7goMZXW0HpduhOPqPSHu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6f67cc-7a9d-4199-a39f-056de8632546/1/t38nEi7goMZXW0HpduhOPqPSHu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2e:54:1c:8b:68:aa:30:e0:4d:9f:ca:a8:38:42:d3:b2:0f:
86:15:2f:76:e6:0b:af:9d:55:05:f8:fe:b1:7d:16:a8:79:6f:
56:42:54:ec:e4:e1:e4:62:c5:03:d2:63:28:4d:e9:7c:ec:7d:
96:21:9e:79:38:cf:3a:dd:3e:71:c5:b6:c6:92:ba:a1:d7:c3:
25:04:73:4f:33:96:17:e1:81:a7:ea:c6:a4:0d:c1:93:fe:ac:
62:3a:eb:19:0f:b7:59:cd:d0:94:8e:37:7c:05:40:ea:95:7d:
a5:8e:c9:65:c8:c3:54:f5:ff:43:63:66:81:36:8e:34:14:cd:
b9:43:6c:40:6d:fb:77:e5:82:74:3b:a0:fd:47:81:a9:37:fd:
0a:49:7a:f0:1a:40:78:0b:dd:16:8a:8c:bd:2c:d4:cc:f3:7e:
61:df:59:2f:0f:f2:e5:6c:0b:2c:c4:83:33:56:95:ab:a4:e8:
18:7d:78:6c:25:3f:9b:8a:41:93:c9:5f:cc:fe:f6:71:8b:06:
76:3d:f5:89:7b:8c:69:0c:8b:27:9c:ea:fd:89:e4:67:df:e3:
fc:18:3c:4b:7c:61:a4:4b:5b:57:ca:e2:25:c7:27:32:6a:65:
20:2c:93:e4:62:2b:64:7f:93:3d:56:55:1b:44:15:05:8a:d0:
e9:fe:87:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZR1bCD83WKGZrhU5tgjIXNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3N2YyNzEyMmVlMGEwYzY1NzViNDFlOTc2ZTg0ZTNlYTNk
MjFlZWYwHhcNMjUwMTE3MTgwMDA4WhcNMjUwMTE4MTgwMDA4WjAzMTEwLwYDVQQD
EyhiZWJiMWExZTNiOGE1OTY5NjNkZTdjZTBiZmM4NTYwOGY2NDA2Yzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm19SgzLKE+uJuhQui4B0vUD+/Yv9
0kOxrweCJ/6F/yBuc+zBTSGBpwLVeeItBslGtrPFI3nI5RhENPdVtMtZJdp76Ga1
Cebk+8hhAAbi6Jt5dzouFspl+kd41I0EQpGZul1X6RXEkF12dS8FcdkFqZMqavU+
NjYIQ3STUwF2CVp5QHOrVnCmBgLq5KwUxQduVmeAfA1Ldzxo7VKG2DVZg6Vf/mdG
iG9KgzoZwABA5G3dQyJu5vV8LCllAUfq9vaQmtgRo4D+khAA9mY/g77lEKQJpIW6
tpYVl1TlYVH+Bq3nIsw2zrQJVUg48ZnERgLuHgiTfLjQkY9gYIt4Hpy52QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL67Gh47illpY9584L/IVgj2QGyXMB8GA1UdIwQY
MBaAFLd/JxIu4KDGV1tB6XboTj6j0h7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDM4bkVpN2dvTVpYVzBIcGR1aE9QcVBTSHU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82ZjY3Y2MtN2E5ZC00MTk5LWEzOWYt
MDU2ZGU4NjMyNTQ2LzEvdDM4bkVpN2dvTVpYVzBIcGR1aE9QcVBTSHU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi82ZjY3Y2MtN2E5ZC00MTk5LWEzOWYtMDU2ZGU4NjMyNTQ2
LzEvdDM4bkVpN2dvTVpYVzBIcGR1aE9QcVBTSHU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASC5UHIto
qjDgTZ/KqDhC07IPhhUvduYLr51VBfj+sX0WqHlvVkJU7OTh5GLFA9JjKE3pfOx9
liGeeTjPOt0+ccW2xpK6odfDJQRzTzOWF+GBp+rGpA3Bk/6sYjrrGQ+3Wc3QlI43
fAVA6pV9pY7JZcjDVPX/Q2NmgTaONBTNuUNsQG37d+WCdDug/UeBqTf9Ckl68BpA
eAvdFoqMvSzUzPN+Yd9ZLw/y5WwLLMSDM1aVq6ToGH14bCU/m4pBk8lfzP72cYsG
dj31iXuMaQyLJ5zq/YnkZ9/j/Bg8S3xhpEtbV8riJccnMmplICyT5GIrZH+TPVZV
G0QVBYrQ6f6HKQ==
-----END CERTIFICATE-----
Generated at Wed Jun 11 11:49:44 2025 by rpki-client