Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
File: Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft (raw, json)
Hash identifier: 9DEjX2I47FLqe5G7O3tEVPC/hiJQtQd4299tGKWiYQ8=
Subject key identifier: 7D:7A:2C:35:DF:17:68:42:12:BD:3D:F7:09:DA:10:81:C3:90:39:48
Authority key identifier: 4A:1E:D4:BF:50:2C:0F:2D:8B:C8:70:26:C1:8A:C9:85:9B:0F:1D:EC
Certificate issuer: /CN=4a1ed4bf502c0f2d8bc87026c18ac9859b0f1dec
Certificate serial: 0195E00FCCDCB424820113D7418DB9FE2EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
Manifest number: 14C0
Signing time: Sat 29 Mar 2025 04:01:26 +0000
Manifest this update: Sat 29 Mar 2025 04:01:26 +0000
Manifest next update: Sun 30 Mar 2025 04:01:26 +0000
Files and hashes: 1: Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl (hash: 4HtgRX2t2Avrv9yw0ZeVyB3y2BRawxq/lEuPXOIt6vk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:cc:dc:b4:24:82:01:13:d7:41:8d:b9:fe:2e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a1ed4bf502c0f2d8bc87026c18ac9859b0f1dec
Validity
Not Before: Mar 29 04:01:26 2025 GMT
Not After : Mar 30 04:01:26 2025 GMT
Subject: CN=7d7a2c35df17684212bd3df709da1081c3903948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f6:c4:ed:a0:a2:59:9f:7f:08:ae:c6:d2:3c:
e5:8d:c8:be:3d:2f:e4:42:6e:a4:21:eb:54:a9:bd:
d1:bf:32:b1:d0:b4:9b:02:ef:50:c7:fe:1e:fd:23:
51:5d:25:6c:e2:f0:c8:33:e5:fd:8e:e6:13:cb:f2:
4b:7b:67:69:98:26:47:98:07:cf:42:03:32:ca:5d:
11:08:5a:d5:8c:30:6d:30:9f:05:85:e8:1f:ce:2e:
00:01:86:50:03:a9:8f:dc:84:cc:00:a7:81:8b:78:
32:b3:9e:1a:fc:3a:e8:c8:df:a3:ea:c6:0b:f1:45:
5a:a2:94:39:67:e0:8a:84:76:cd:ee:a5:24:6a:44:
10:be:13:df:9c:2a:de:3b:76:98:87:9d:21:a0:b0:
aa:c3:0c:72:b3:75:0d:73:a4:ea:c2:ec:39:88:8d:
e9:5d:d2:c4:68:7b:23:df:ba:de:95:30:3c:25:bf:
ff:1a:af:80:2c:62:6b:c7:70:ef:3a:84:fa:85:70:
90:08:a2:b2:b3:f8:c6:85:bc:08:17:7c:da:ec:dc:
b1:94:47:f9:b7:a6:f0:18:a1:f5:dd:61:e3:bd:fc:
a7:d4:8b:48:8c:8f:f3:93:94:ad:c5:5e:1f:96:22:
c4:65:68:35:47:1b:78:d6:7a:4d:38:c2:54:e8:81:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7A:2C:35:DF:17:68:42:12:BD:3D:F7:09:DA:10:81:C3:90:39:48
X509v3 Authority Key Identifier:
keyid:4A:1E:D4:BF:50:2C:0F:2D:8B:C8:70:26:C1:8A:C9:85:9B:0F:1D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:37:cc:c1:c0:af:80:10:83:ed:56:ae:16:1b:2f:58:5f:de:
6a:20:ff:ed:27:e1:f2:a6:9f:50:d4:84:55:8f:a0:bc:31:9c:
ac:c7:83:df:b7:90:c1:5d:51:d7:7d:b4:1d:1b:4a:3d:1a:e3:
7d:d2:fb:63:8a:f1:0f:c8:d0:69:3d:85:da:d6:0a:31:52:30:
50:17:96:53:7d:06:37:18:a1:24:1c:57:85:40:79:72:6c:3c:
02:01:e0:e0:86:41:91:ec:7c:6f:9a:ce:9f:b3:3f:00:a4:bb:
91:1f:8a:2f:9b:ef:e7:23:d9:88:ab:58:5e:65:38:3a:22:45:
74:cd:ac:4d:c9:39:03:df:78:d0:c8:e7:37:41:75:5e:5a:11:
3b:e5:b0:4d:1b:44:67:d6:d1:12:28:a0:c5:5c:4e:b2:84:bf:
96:01:70:a0:44:9b:4b:a3:48:ad:8d:ce:66:18:f2:60:3e:8a:
ac:1c:04:d4:d4:3b:5e:a7:b7:01:37:ae:06:b3:74:38:0b:e0:
8c:dd:75:45:17:2f:11:ec:48:2d:ed:74:7a:66:99:e8:a7:77:
50:d1:30:e8:04:c1:5a:e9:76:ae:2b:04:55:b8:99:7c:fe:c6:
2a:e8:ba:bf:75:fd:5a:56:ab:ca:7c:28:d6:57:7b:0e:e8:a1:
99:10:00:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD8zctCSCARPXQY25/i62MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMWVkNGJmNTAyYzBmMmQ4YmM4NzAyNmMxOGFjOTg1OWIw
ZjFkZWMwHhcNMjUwMzI5MDQwMTI2WhcNMjUwMzMwMDQwMTI2WjAzMTEwLwYDVQQD
Eyg3ZDdhMmMzNWRmMTc2ODQyMTJiZDNkZjcwOWRhMTA4MWMzOTAzOTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fbE7aCiWZ9/CK7G0jzljci+PS/k
Qm6kIetUqb3RvzKx0LSbAu9Qx/4e/SNRXSVs4vDIM+X9juYTy/JLe2dpmCZHmAfP
QgMyyl0RCFrVjDBtMJ8Fhegfzi4AAYZQA6mP3ITMAKeBi3gys54a/DroyN+j6sYL
8UVaopQ5Z+CKhHbN7qUkakQQvhPfnCreO3aYh50hoLCqwwxys3UNc6Tqwuw5iI3p
XdLEaHsj37relTA8Jb//Gq+ALGJrx3DvOoT6hXCQCKKys/jGhbwIF3za7NyxlEf5
t6bwGKH13WHjvfyn1ItIjI/zk5StxV4fliLEZWg1Rxt41npNOMJU6IGLhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH16LDXfF2hCEr099wnaEIHDkDlIMB8GA1UdIwQY
MBaAFEoe1L9QLA8ti8hwJsGKyYWbDx3sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2g3VXYxQXNEeTJMeUhBbXdZckpoWnNQSGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85N2M5MTYtODFiMS00YjNhLTlmZWUt
MzU2YTE5ZjU1NTA2LzEvU2g3VXYxQXNEeTJMeUhBbXdZckpoWnNQSGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85N2M5MTYtODFiMS00YjNhLTlmZWUtMzU2YTE5ZjU1NTA2
LzEvU2g3VXYxQXNEeTJMeUhBbXdZckpoWnNQSGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzfMwcCv
gBCD7VauFhsvWF/eaiD/7Sfh8qafUNSEVY+gvDGcrMeD37eQwV1R1320HRtKPRrj
fdL7Y4rxD8jQaT2F2tYKMVIwUBeWU30GNxihJBxXhUB5cmw8AgHg4IZBkex8b5rO
n7M/AKS7kR+KL5vv5yPZiKtYXmU4OiJFdM2sTck5A9940MjnN0F1XloRO+WwTRtE
Z9bREiigxVxOsoS/lgFwoESbS6NIrY3OZhjyYD6KrBwE1NQ7Xqe3ATeuBrN0OAvg
jN11RRcvEexILe10emaZ6Kd3UNEw6ATBWul2risEVbiZfP7GKui6v3X9Wlarynwo
1ld7DuihmRAAYQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:27 2025 by rpki-client