Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/60d738-db58-4ecd-972b-e6cc0c4b6098/1/SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.mft
File: SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.mft (raw, json)
Hash identifier: RXU8QduP+ruyQyTrM3mYbjhrJPyN2qFJAXHAmYY2pxU=
Subject key identifier: 8D:25:7D:31:07:C1:26:06:3F:BB:4F:A4:40:EE:DA:34:D0:CE:D3:94
Authority key identifier: 48:70:9D:9A:59:A5:0C:98:3B:65:91:6D:3B:C6:CD:17:16:CF:12:84
Certificate issuer: /CN=48709d9a59a50c983b65916d3bc6cd1716cf1284
Certificate serial: 0185376D9355B52ABCF479B2770DAE27762B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/60d738-db58-4ecd-972b-e6cc0c4b6098/1/SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.mft
Manifest number: 0BDB
Signing time: Thu 22 Dec 2022 01:23:25 +0000
Manifest this update: Thu 22 Dec 2022 01:23:25 +0000
Manifest next update: Fri 23 Dec 2022 01:23:25 +0000
Files and hashes: 1: SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.crl (hash: SJ7bQjnc0SxliAg5CReTx5rtp67WjsOQE27tdCsf02E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:37:6d:93:55:b5:2a:bc:f4:79:b2:77:0d:ae:27:76:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48709d9a59a50c983b65916d3bc6cd1716cf1284
Validity
Not Before: Dec 22 01:23:25 2022 GMT
Not After : Dec 23 01:23:25 2022 GMT
Subject: CN=8d257d3107c126063fbb4fa440eeda34d0ced394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:75:7a:8a:f6:fd:11:36:f8:01:f9:8e:2c:2d:
67:e5:90:b6:c6:ab:b7:ac:8a:98:33:15:4a:90:b7:
dc:a7:f2:65:a1:28:e5:f0:c6:2f:5a:16:49:ca:eb:
67:b4:5f:49:cd:24:f5:a8:23:22:2f:21:2e:b9:90:
b9:82:24:81:53:3f:64:7c:5f:2b:ca:e0:d5:33:5e:
2e:8b:71:61:d9:1a:28:5f:6f:d3:d0:98:50:9c:9f:
8e:cd:10:3a:e3:21:0e:07:3c:0b:a0:f3:16:40:3e:
6c:bd:d9:cb:15:e5:4f:5d:27:f8:f8:dd:75:24:4e:
9c:62:1a:f5:26:42:42:9d:6e:cc:0f:ce:3c:a0:00:
af:1b:74:25:bd:dd:12:b7:c4:54:e1:d6:ff:67:90:
98:2a:5c:c9:24:b0:ed:4e:a2:5c:a1:f1:55:5d:52:
f6:0f:c3:4f:91:f7:d1:50:01:10:c6:3f:b0:0f:76:
fd:0d:2f:d7:0e:6a:49:5d:d9:00:c5:f3:4a:a2:a3:
09:ab:71:91:08:2c:c5:14:7d:d0:c6:b5:d2:8f:e8:
4c:fe:31:c8:d4:1b:d3:b8:f1:e2:12:32:b2:18:bd:
2c:28:5f:09:59:3c:2c:b9:83:a5:0b:c1:18:04:c5:
67:1d:10:dc:d3:7c:bb:49:b9:9a:e4:4d:ac:90:b5:
de:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:25:7D:31:07:C1:26:06:3F:BB:4F:A4:40:EE:DA:34:D0:CE:D3:94
X509v3 Authority Key Identifier:
keyid:48:70:9D:9A:59:A5:0C:98:3B:65:91:6D:3B:C6:CD:17:16:CF:12:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60d738-db58-4ecd-972b-e6cc0c4b6098/1/SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60d738-db58-4ecd-972b-e6cc0c4b6098/1/SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:50:72:08:17:bb:c5:49:f1:9d:99:89:a6:0a:bb:ba:f4:0b:
2c:bd:c7:f0:fc:84:17:0f:ed:36:10:12:b4:27:1c:84:d5:e3:
45:10:f1:d7:14:b8:62:90:0c:7a:26:d8:4b:38:77:c6:ce:ca:
71:61:85:ff:1e:8d:6b:82:a1:3d:59:a1:ef:d2:71:f1:ce:24:
32:12:6e:c0:f5:70:ed:54:42:51:29:94:d5:3b:0a:53:ad:d2:
20:c1:5b:e9:8d:8e:84:28:c4:97:f3:02:24:64:7a:42:2a:74:
52:8e:6a:03:44:b4:7e:9c:ff:82:26:be:a3:69:12:05:88:f6:
b1:58:25:52:49:93:dc:31:f8:2b:7e:ac:4e:a4:cb:8f:20:60:
0d:37:27:bb:f1:1d:2f:52:27:8e:26:cb:05:ff:6c:f0:a9:23:
9d:b5:72:38:04:30:2a:61:68:59:9a:cc:01:13:80:d9:ea:01:
ce:58:a9:ca:6a:94:93:d8:65:b4:0b:53:61:d7:d0:2a:88:95:
37:35:27:8e:23:ef:16:30:2f:df:95:b7:31:5d:5e:d7:e3:99:
f1:a9:9a:56:d5:07:5c:e3:8a:91:b2:51:2f:de:98:07:81:bc:
6e:13:fe:50:66:3e:c7:b0:a4:6c:22:f1:e4:cf:9b:7f:61:8f:
d3:71:53:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYU3bZNVtSq89Hmydw2uJ3YrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NzA5ZDlhNTlhNTBjOTgzYjY1OTE2ZDNiYzZjZDE3MTZj
ZjEyODQwHhcNMjIxMjIyMDEyMzI1WhcNMjIxMjIzMDEyMzI1WjAzMTEwLwYDVQQD
Eyg4ZDI1N2QzMTA3YzEyNjA2M2ZiYjRmYTQ0MGVlZGEzNGQwY2VkMzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnV6ivb9ETb4AfmOLC1n5ZC2xqu3
rIqYMxVKkLfcp/JloSjl8MYvWhZJyutntF9JzST1qCMiLyEuuZC5giSBUz9kfF8r
yuDVM14ui3Fh2RooX2/T0JhQnJ+OzRA64yEOBzwLoPMWQD5svdnLFeVPXSf4+N11
JE6cYhr1JkJCnW7MD848oACvG3Qlvd0St8RU4db/Z5CYKlzJJLDtTqJcofFVXVL2
D8NPkffRUAEQxj+wD3b9DS/XDmpJXdkAxfNKoqMJq3GRCCzFFH3QxrXSj+hM/jHI
1BvTuPHiEjKyGL0sKF8JWTwsuYOlC8EYBMVnHRDc03y7Sbma5E2skLXeOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0lfTEHwSYGP7tPpEDu2jTQztOUMB8GA1UdIwQY
MBaAFEhwnZpZpQyYO2WRbTvGzRcWzxKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0hDZG1sbWxESmc3WlpGdE84Yk5GeGJQRW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82MGQ3MzgtZGI1OC00ZWNkLTk3MmIt
ZTZjYzBjNGI2MDk4LzEvU0hDZG1sbWxESmc3WlpGdE84Yk5GeGJQRW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82MGQ3MzgtZGI1OC00ZWNkLTk3MmItZTZjYzBjNGI2MDk4
LzEvU0hDZG1sbWxESmc3WlpGdE84Yk5GeGJQRW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVByCBe7
xUnxnZmJpgq7uvQLLL3H8PyEFw/tNhAStCcchNXjRRDx1xS4YpAMeibYSzh3xs7K
cWGF/x6Na4KhPVmh79Jx8c4kMhJuwPVw7VRCUSmU1TsKU63SIMFb6Y2OhCjEl/MC
JGR6Qip0Uo5qA0S0fpz/gia+o2kSBYj2sVglUkmT3DH4K36sTqTLjyBgDTcnu/Ed
L1InjibLBf9s8KkjnbVyOAQwKmFoWZrMAROA2eoBzlipymqUk9hltAtTYdfQKoiV
NzUnjiPvFjAv35W3MV1e1+OZ8amaVtUHXOOKkbJRL96YB4G8bhP+UGY+x7CkbCLx
5M+bf2GP03FT2w==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:37 2025 by rpki-client