Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/0b2694-4c0e-49f6-8da1-075b2e103d6c/1/beR9HeA6Mnht6x7Qc3ucIQGqGi0.mft
File: beR9HeA6Mnht6x7Qc3ucIQGqGi0.mft (raw, json)
Hash identifier: Jqm2Z6/L6KGLpPL800uViiy2nxkEqWxyFA+aI6l/EaQ=
Subject key identifier: 3A:17:2E:20:F9:CB:29:46:7D:30:90:B8:55:49:B2:C7:17:C8:EC:BD
Authority key identifier: 6D:E4:7D:1D:E0:3A:32:78:6D:EB:1E:D0:73:7B:9C:21:01:AA:1A:2D
Certificate issuer: /CN=6de47d1de03a32786deb1ed0737b9c2101aa1a2d
Certificate serial: 01926B5C49D87DED9FA0BDA79EEA5B1A0BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beR9HeA6Mnht6x7Qc3ucIQGqGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/0b2694-4c0e-49f6-8da1-075b2e103d6c/1/beR9HeA6Mnht6x7Qc3ucIQGqGi0.mft
Manifest number: 04
Signing time: Tue 08 Oct 2024 09:01:03 +0000
Manifest this update: Tue 08 Oct 2024 09:01:03 +0000
Manifest next update: Wed 09 Oct 2024 09:01:03 +0000
Files and hashes: 1: beR9HeA6Mnht6x7Qc3ucIQGqGi0.crl (hash: gxMSdwm+Xf33miXnX/bYV7ISU/QIBhm6xm6LrVp0GNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:5c:49:d8:7d:ed:9f:a0:bd:a7:9e:ea:5b:1a:0b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de47d1de03a32786deb1ed0737b9c2101aa1a2d
Validity
Not Before: Oct 8 09:01:03 2024 GMT
Not After : Oct 9 09:01:03 2024 GMT
Subject: CN=3a172e20f9cb29467d3090b85549b2c717c8ecbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:07:a4:0d:e9:e7:c4:a6:f5:5b:73:45:95:
35:31:33:7c:ed:c0:69:2a:63:8b:4b:e9:ff:05:b4:
0f:0d:a7:38:b7:ad:6b:16:0c:9a:eb:fb:49:b4:a6:
a2:00:8f:a7:42:eb:8f:31:da:5a:4d:71:d4:a5:cc:
8d:72:65:97:c3:7d:9a:29:e5:30:3e:5d:d5:51:67:
e9:35:7a:92:05:ea:16:dd:41:79:01:76:c6:14:cf:
a1:d2:10:f9:0c:4f:04:0e:de:01:56:f3:17:16:79:
fa:fc:d7:27:b6:3c:a3:4c:dd:4f:a1:38:d5:e8:36:
5f:68:91:f1:d0:6a:56:08:93:2c:ba:2e:a6:e8:ea:
b9:e9:cb:e6:e6:95:cd:93:5d:c5:d3:1d:8d:09:6f:
1e:db:dd:51:2b:cf:8a:e4:b0:29:63:03:fd:6a:c0:
36:a0:f3:08:5c:f8:d8:7b:02:fa:3d:cc:f7:1f:6a:
9b:d1:8c:95:47:e9:86:34:4b:f9:21:53:65:cd:1d:
c5:97:a3:73:7d:79:5d:e2:4a:9f:22:79:4e:3f:70:
47:c8:22:33:6b:24:83:8f:06:fd:f6:54:27:8a:03:
c6:37:28:be:84:26:de:e1:66:14:85:cb:ac:20:76:
34:e5:61:be:0f:da:a1:47:32:80:12:1b:9d:1b:ee:
29:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:17:2E:20:F9:CB:29:46:7D:30:90:B8:55:49:B2:C7:17:C8:EC:BD
X509v3 Authority Key Identifier:
keyid:6D:E4:7D:1D:E0:3A:32:78:6D:EB:1E:D0:73:7B:9C:21:01:AA:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beR9HeA6Mnht6x7Qc3ucIQGqGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0b2694-4c0e-49f6-8da1-075b2e103d6c/1/beR9HeA6Mnht6x7Qc3ucIQGqGi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0b2694-4c0e-49f6-8da1-075b2e103d6c/1/beR9HeA6Mnht6x7Qc3ucIQGqGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ff:ec:12:8f:f3:f6:15:38:3f:37:77:c9:af:f7:9e:e0:5a:
8e:49:23:6c:fd:db:61:03:40:87:e7:0c:5e:3e:4a:28:e6:ea:
67:9d:4e:0a:35:6e:34:2d:43:21:e6:62:4d:68:31:d4:48:02:
28:a5:a3:81:1e:3b:59:44:5c:a4:12:cf:45:80:2f:3b:30:dc:
23:69:03:86:ea:5b:94:02:7f:61:4c:90:6d:86:d2:55:fe:85:
3f:a4:aa:42:d2:4c:7d:e3:f3:8c:f1:e6:8f:bf:14:ed:10:d4:
ba:29:a1:57:e0:62:e4:90:79:27:ed:df:8a:99:5a:cf:88:fa:
7b:6c:a6:4a:1b:16:5d:36:e0:c9:13:7a:fa:16:7d:c6:65:da:
61:94:66:81:ac:3f:22:71:0c:31:5c:aa:62:1d:02:21:93:99:
ed:d4:5a:de:db:69:bc:19:21:d7:6f:eb:a6:bc:df:a9:a2:1e:
ec:fc:2e:a7:c1:4e:bd:fa:21:89:aa:83:9e:57:3c:e0:bb:f4:
4c:6e:6c:db:fb:70:30:cc:08:83:31:22:e0:ba:37:86:60:5a:
a3:ac:f0:00:1f:88:7b:d7:98:7f:46:0c:e2:d3:e0:f1:eb:42:
53:f6:5b:1e:55:16:34:e8:59:06:c1:1b:d9:23:3b:eb:7d:97:
1b:03:a8:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZJrXEnYfe2foL2nnupbGgu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZTQ3ZDFkZTAzYTMyNzg2ZGViMWVkMDczN2I5YzIxMDFh
YTFhMmQwHhcNMjQxMDA4MDkwMTAzWhcNMjQxMDA5MDkwMTAzWjAzMTEwLwYDVQQD
EygzYTE3MmUyMGY5Y2IyOTQ2N2QzMDkwYjg1NTQ5YjJjNzE3YzhlY2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr8HpA3p58Sm9VtzRZU1MTN87cBp
KmOLS+n/BbQPDac4t61rFgya6/tJtKaiAI+nQuuPMdpaTXHUpcyNcmWXw32aKeUw
Pl3VUWfpNXqSBeoW3UF5AXbGFM+h0hD5DE8EDt4BVvMXFnn6/NcntjyjTN1PoTjV
6DZfaJHx0GpWCJMsui6m6Oq56cvm5pXNk13F0x2NCW8e291RK8+K5LApYwP9asA2
oPMIXPjYewL6Pcz3H2qb0YyVR+mGNEv5IVNlzR3Fl6NzfXld4kqfInlOP3BHyCIz
aySDjwb99lQnigPGNyi+hCbe4WYUhcusIHY05WG+D9qhRzKAEhudG+4pIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoXLiD5yylGfTCQuFVJsscXyOy9MB8GA1UdIwQY
MBaAFG3kfR3gOjJ4bese0HN7nCEBqhotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmVSOUhlQTZNbmh0Nng3UWMzdWNJUUdxR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8wYjI2OTQtNGMwZS00OWY2LThkYTEt
MDc1YjJlMTAzZDZjLzEvYmVSOUhlQTZNbmh0Nng3UWMzdWNJUUdxR2kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8wYjI2OTQtNGMwZS00OWY2LThkYTEtMDc1YjJlMTAzZDZj
LzEvYmVSOUhlQTZNbmh0Nng3UWMzdWNJUUdxR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASP/sEo/z
9hU4Pzd3ya/3nuBajkkjbP3bYQNAh+cMXj5KKObqZ51OCjVuNC1DIeZiTWgx1EgC
KKWjgR47WURcpBLPRYAvOzDcI2kDhupblAJ/YUyQbYbSVf6FP6SqQtJMfePzjPHm
j78U7RDUuimhV+Bi5JB5J+3fiplaz4j6e2ymShsWXTbgyRN6+hZ9xmXaYZRmgaw/
InEMMVyqYh0CIZOZ7dRa3ttpvBkh12/rprzfqaIe7Pwup8FOvfohiaqDnlc84Lv0
TG5s2/twMMwIgzEi4Lo3hmBao6zwAB+Ie9eYf0YM4tPg8etCU/ZbHlUWNOhZBsEb
2SM7632XGwOobw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:37:22 2025 by rpki-client