Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3fda5f-9421-4247-b4b0-2f167070165f/1/Rs7v_gLkrihxY8wopOb6Tg7Lbro.mft
File: Rs7v_gLkrihxY8wopOb6Tg7Lbro.mft (raw, json)
Hash identifier: Nsw6dDknmKki+C2VDW9aeaV+owHjh2KAcSD1XWdgu0g=
Subject key identifier: D4:D8:3D:2B:68:FC:B1:07:F9:B8:0C:93:C4:C2:41:E7:B2:60:5D:A4
Authority key identifier: 46:CE:EF:FE:02:E4:AE:28:71:63:CC:28:A4:E6:FA:4E:0E:CB:6E:BA
Certificate issuer: /CN=46ceeffe02e4ae287163cc28a4e6fa4e0ecb6eba
Certificate serial: 01955C4EFCFDF18E36739A8040F5FD7A2257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rs7v_gLkrihxY8wopOb6Tg7Lbro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3fda5f-9421-4247-b4b0-2f167070165f/1/Rs7v_gLkrihxY8wopOb6Tg7Lbro.mft
Manifest number: 32
Signing time: Mon 03 Mar 2025 14:00:34 +0000
Manifest this update: Mon 03 Mar 2025 14:00:34 +0000
Manifest next update: Tue 04 Mar 2025 14:00:34 +0000
Files and hashes: 1: Rs7v_gLkrihxY8wopOb6Tg7Lbro.crl (hash: bEcJDv0rsgDLavZQGtXqB9rb3Dgz8GyuzE46PsEfgOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:4e:fc:fd:f1:8e:36:73:9a:80:40:f5:fd:7a:22:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ceeffe02e4ae287163cc28a4e6fa4e0ecb6eba
Validity
Not Before: Mar 3 14:00:34 2025 GMT
Not After : Mar 4 14:00:34 2025 GMT
Subject: CN=d4d83d2b68fcb107f9b80c93c4c241e7b2605da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:23:33:61:01:ae:a4:b5:2b:94:31:90:59:
2a:59:04:2f:63:d8:92:37:99:0d:83:5c:ac:80:8e:
b5:91:83:2f:3f:d0:55:62:8e:38:d0:0f:82:eb:48:
59:8d:69:36:2b:a1:dc:3e:3c:d0:bc:8f:8f:e0:17:
9f:7b:93:aa:cc:85:21:5f:30:34:43:0f:97:ff:81:
dc:55:8b:2f:33:72:d2:ef:18:a5:4a:c1:2e:9d:ed:
f5:ba:a5:9a:d9:03:d5:67:7f:ac:9c:d2:6b:d5:1f:
d3:28:2d:b2:e4:9e:b7:7c:e7:ff:dc:3a:62:22:58:
61:40:06:27:2a:aa:12:32:92:e1:f3:cb:55:35:e7:
37:bf:9c:c7:9e:d4:01:2d:37:75:75:f1:84:1e:fa:
ce:98:69:cd:eb:c2:75:a1:a4:8a:25:42:d2:1d:8b:
a1:00:3a:a0:2e:9b:34:19:63:ac:12:bb:7b:65:e9:
27:76:1b:2b:c8:8f:1a:8c:44:24:99:60:c9:75:ba:
6d:8e:f9:b1:84:e4:67:1a:2f:41:e9:d2:b8:b4:bc:
b4:69:45:f4:5f:06:ba:b2:35:ab:42:e7:76:f4:de:
6e:ad:df:68:6b:c2:98:c1:5c:ef:1d:16:a7:98:11:
87:7a:58:21:76:e7:b3:b7:86:da:e2:e8:ce:20:60:
6e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D8:3D:2B:68:FC:B1:07:F9:B8:0C:93:C4:C2:41:E7:B2:60:5D:A4
X509v3 Authority Key Identifier:
keyid:46:CE:EF:FE:02:E4:AE:28:71:63:CC:28:A4:E6:FA:4E:0E:CB:6E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs7v_gLkrihxY8wopOb6Tg7Lbro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3fda5f-9421-4247-b4b0-2f167070165f/1/Rs7v_gLkrihxY8wopOb6Tg7Lbro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3fda5f-9421-4247-b4b0-2f167070165f/1/Rs7v_gLkrihxY8wopOb6Tg7Lbro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:bf:46:64:f1:72:44:96:4d:d9:d1:aa:14:8f:e0:e5:7c:ed:
31:51:19:d7:01:ec:f9:fc:9c:e3:d4:7c:ae:8d:1b:fc:cb:c3:
98:9e:0c:ca:c2:64:e6:bd:61:b7:b1:ee:33:6b:bc:ce:09:2e:
f4:1f:b2:c9:93:4d:36:98:e1:94:e2:fa:5f:12:0d:02:43:9a:
f3:1d:c8:8e:5a:dc:00:d5:f0:ae:d2:38:97:c8:68:77:73:86:
38:90:25:d3:3e:83:80:3f:d7:fa:c2:6d:94:e8:14:de:ea:0a:
97:fd:27:2f:f4:2a:02:0d:d9:a1:b9:cb:9c:5e:34:77:98:83:
3d:5d:be:87:7c:c8:5c:3a:a2:94:55:b9:69:ef:fe:39:3d:2b:
c8:cc:38:1f:d2:33:29:d5:5a:03:99:6e:26:7f:be:31:55:a5:
7f:1e:cc:8b:21:9d:93:88:e4:81:a3:09:72:d5:4a:ed:16:47:
ee:2f:5d:89:f8:1d:81:36:0e:94:a3:21:1f:63:1b:3a:43:8d:
ec:4f:e3:f5:4b:e5:b4:61:89:fe:01:1e:c6:2f:9d:25:73:8a:
a0:22:18:68:95:83:f0:92:26:bb:5d:2a:e7:15:31:d8:b5:c7:
ff:a2:09:61:10:71:1c:ee:95:86:4b:64:a3:60:6b:9e:c7:d4:
1b:a2:be:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVcTvz98Y42c5qAQPX9eiJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2Y2VlZmZlMDJlNGFlMjg3MTYzY2MyOGE0ZTZmYTRlMGVj
YjZlYmEwHhcNMjUwMzAzMTQwMDM0WhcNMjUwMzA0MTQwMDM0WjAzMTEwLwYDVQQD
EyhkNGQ4M2QyYjY4ZmNiMTA3ZjliODBjOTNjNGMyNDFlN2IyNjA1ZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaYjM2EBrqS1K5QxkFkqWQQvY9iS
N5kNg1ysgI61kYMvP9BVYo440A+C60hZjWk2K6HcPjzQvI+P4Befe5OqzIUhXzA0
Qw+X/4HcVYsvM3LS7xilSsEune31uqWa2QPVZ3+snNJr1R/TKC2y5J63fOf/3Dpi
IlhhQAYnKqoSMpLh88tVNec3v5zHntQBLTd1dfGEHvrOmGnN68J1oaSKJULSHYuh
ADqgLps0GWOsErt7ZekndhsryI8ajEQkmWDJdbptjvmxhORnGi9B6dK4tLy0aUX0
Xwa6sjWrQud29N5urd9oa8KYwVzvHRanmBGHelghduezt4ba4ujOIGBu7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTYPSto/LEH+bgMk8TCQeeyYF2kMB8GA1UdIwQY
MBaAFEbO7/4C5K4ocWPMKKTm+k4Oy266MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnM3dl9nTGtyaWh4WTh3b3BPYjZUZzdMYnJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZmRhNWYtOTQyMS00MjQ3LWI0YjAt
MmYxNjcwNzAxNjVmLzEvUnM3dl9nTGtyaWh4WTh3b3BPYjZUZzdMYnJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZmRhNWYtOTQyMS00MjQ3LWI0YjAtMmYxNjcwNzAxNjVm
LzEvUnM3dl9nTGtyaWh4WTh3b3BPYjZUZzdMYnJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoL9GZPFy
RJZN2dGqFI/g5XztMVEZ1wHs+fyc49R8ro0b/MvDmJ4MysJk5r1ht7HuM2u8zgku
9B+yyZNNNpjhlOL6XxINAkOa8x3IjlrcANXwrtI4l8hod3OGOJAl0z6DgD/X+sJt
lOgU3uoKl/0nL/QqAg3ZobnLnF40d5iDPV2+h3zIXDqilFW5ae/+OT0ryMw4H9Iz
KdVaA5luJn++MVWlfx7MiyGdk4jkgaMJctVK7RZH7i9difgdgTYOlKMhH2MbOkON
7E/j9UvltGGJ/gEexi+dJXOKoCIYaJWD8JImu10q5xUx2LXH/6IJYRBxHO6Vhktk
o2BrnsfUG6K+ug==
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:36:23 2025 by rpki-client