Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/bba89c-225f-4e61-bc57-45a5f56c86eb/1/CvSitEd1rBg3XNg00-khjSifY4Q.mft
File: CvSitEd1rBg3XNg00-khjSifY4Q.mft (raw, json)
Hash identifier: dWtacvbPKJljWuijgdwfZSYZSrPA49Ebkni7ZXVE3vI=
Subject key identifier: 8D:29:DB:3F:B2:6C:BC:82:D2:FC:44:3A:04:57:94:33:F6:95:8C:AE
Authority key identifier: 0A:F4:A2:B4:47:75:AC:18:37:5C:D8:34:D3:E9:21:8D:28:9F:63:84
Certificate issuer: /CN=0af4a2b44775ac18375cd834d3e9218d289f6384
Certificate serial: 01FB1935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvSitEd1rBg3XNg00-khjSifY4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/bba89c-225f-4e61-bc57-45a5f56c86eb/1/CvSitEd1rBg3XNg00-khjSifY4Q.mft
Manifest number: 028E
Signing time: Fri 10 Jun 2022 06:39:11 +0000
Manifest this update: Fri 10 Jun 2022 06:39:11 +0000
Manifest next update: Sat 11 Jun 2022 06:39:11 +0000
Files and hashes: 1: CvSitEd1rBg3XNg00-khjSifY4Q.crl (hash: h8UGEezsFuBDSpP/Jb9si1Z6gIu4uhfgqm7fa5lC4/0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33233205 (0x1fb1935)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af4a2b44775ac18375cd834d3e9218d289f6384
Validity
Not Before: Jun 10 06:39:11 2022 GMT
Not After : Jun 11 06:39:11 2022 GMT
Subject: CN=8d29db3fb26cbc82d2fc443a04579433f6958cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:05:d5:1a:cf:4e:96:4a:be:ae:8a:18:a1:c6:
d8:88:5f:d2:1c:a1:f1:fc:b6:58:90:97:74:d4:20:
25:4e:fe:15:90:b1:b6:3d:36:bb:40:32:81:29:3c:
73:d0:d0:e4:dd:57:c7:c6:62:e3:f9:13:5e:9e:5e:
90:18:74:ef:96:6d:51:c3:27:ce:07:b6:eb:19:c2:
62:ef:ff:a6:59:da:c6:a4:23:67:d9:e2:c8:0b:7c:
aa:fd:d3:ef:67:a8:e6:63:a8:bf:d3:b0:1f:1f:92:
f9:d3:4d:ab:16:55:65:3f:cb:69:22:d2:d8:e5:07:
c6:a3:73:45:02:2b:74:8d:c5:38:ee:8d:26:c9:ce:
e9:f5:3a:75:1d:95:18:2b:17:49:70:a0:68:8d:c4:
b0:3e:09:12:d8:8b:1c:b7:7e:c3:75:79:0a:f6:37:
45:da:00:ba:6b:92:fe:88:c9:f4:47:e6:3b:0e:9c:
10:b8:a0:34:99:ac:2c:25:24:15:08:f0:aa:8a:bb:
36:f9:55:30:35:c6:9c:94:1e:77:60:00:15:bb:07:
58:b6:8d:16:dc:9f:99:c3:c2:6f:26:79:86:4d:77:
c5:64:1b:6e:d4:dc:8b:e4:5a:80:f7:d6:5f:f9:03:
bd:15:cc:d7:a6:4d:17:bd:2b:93:11:05:12:13:31:
64:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:29:DB:3F:B2:6C:BC:82:D2:FC:44:3A:04:57:94:33:F6:95:8C:AE
X509v3 Authority Key Identifier:
keyid:0A:F4:A2:B4:47:75:AC:18:37:5C:D8:34:D3:E9:21:8D:28:9F:63:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvSitEd1rBg3XNg00-khjSifY4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/bba89c-225f-4e61-bc57-45a5f56c86eb/1/CvSitEd1rBg3XNg00-khjSifY4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/bba89c-225f-4e61-bc57-45a5f56c86eb/1/CvSitEd1rBg3XNg00-khjSifY4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c2:25:7f:e2:29:a4:7b:1b:25:0e:f8:1f:72:77:b1:c6:85:
17:86:e6:12:bd:e4:9a:f0:f8:eb:bd:d0:26:c9:ee:bf:6d:93:
6f:47:fd:dc:5e:2f:7f:4d:fe:f2:18:d4:16:43:79:b6:32:9b:
60:7d:c1:7d:1a:99:82:88:25:eb:39:d7:cd:28:14:72:42:ce:
c2:d2:0a:8b:b4:16:8a:21:c2:87:8b:d5:ba:8b:d4:d0:2b:3c:
5b:76:da:f5:87:ff:4d:92:1a:90:ad:e6:e0:22:b2:18:ab:b2:
38:cf:bf:6a:63:70:1c:1a:78:a0:6e:62:28:fd:81:a1:aa:03:
0e:ef:e1:34:2e:e3:b6:06:09:00:f6:ec:69:fc:8d:81:23:00:
43:fe:e6:e6:f1:53:31:c9:08:f9:c2:82:5f:26:ea:f6:08:cb:
f3:99:db:37:60:13:00:fa:13:1f:9c:19:f2:d9:6d:cb:e1:fc:
93:84:78:6c:ea:2c:30:67:9e:d9:cf:77:a7:c7:78:84:ff:94:
b7:b8:40:03:04:e0:61:e6:d2:79:a7:fa:f6:3a:ac:92:b4:80:
ba:e2:67:49:be:b2:ff:b9:a7:88:64:7f:0f:0f:6b:8d:99:44:
f6:99:08:0c:10:99:09:57:8e:29:9d:ad:d0:02:62:a0:a0:79:
61:bc:eb:f3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEAfsZNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YWY0YTJiNDQ3NzVhYzE4Mzc1Y2Q4MzRkM2U5MjE4ZDI4OWY2Mzg0MB4XDTIyMDYx
MDA2MzkxMVoXDTIyMDYxMTA2MzkxMVowMzExMC8GA1UEAxMoOGQyOWRiM2ZiMjZj
YmM4MmQyZmM0NDNhMDQ1Nzk0MzNmNjk1OGNhZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJIF1RrPTpZKvq6KGKHG2Ihf0hyh8fy2WJCXdNQgJU7+FZCx
tj02u0AygSk8c9DQ5N1Xx8Zi4/kTXp5ekBh075ZtUcMnzge26xnCYu//plnaxqQj
Z9niyAt8qv3T72eo5mOov9OwHx+S+dNNqxZVZT/LaSLS2OUHxqNzRQIrdI3FOO6N
JsnO6fU6dR2VGCsXSXCgaI3EsD4JEtiLHLd+w3V5CvY3RdoAumuS/ojJ9EfmOw6c
ELigNJmsLCUkFQjwqoq7NvlVMDXGnJQed2AAFbsHWLaNFtyfmcPCbyZ5hk13xWQb
btTci+RagPfWX/kDvRXM16ZNF70rkxEFEhMxZC8CAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBSNKds/smy8gtL8RDoEV5Qz9pWMrjAfBgNVHSMEGDAWgBQK9KK0R3WsGDdc
2DTT6SGNKJ9jhDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0N2U2l0RWQxckJnM1hOZzAwLWtoalNpZlk0US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTcvYmJhODljLTIyNWYtNGU2MS1iYzU3LTQ1YTVmNTZjODZlYi8x
L0N2U2l0RWQxckJnM1hOZzAwLWtoalNpZlk0US5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcv
YmJhODljLTIyNWYtNGU2MS1iYzU3LTQ1YTVmNTZjODZlYi8xL0N2U2l0RWQxckJn
M1hOZzAwLWtoalNpZlk0US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAELCJX/iKaR7GyUO+B9yd7HGhReG
5hK95Jrw+Ou90CbJ7r9tk29H/dxeL39N/vIY1BZDebYym2B9wX0amYKIJes5180o
FHJCzsLSCou0FoohwoeL1bqL1NArPFt22vWH/02SGpCt5uAishirsjjPv2pjcBwa
eKBuYij9gaGqAw7v4TQu47YGCQD27Gn8jYEjAEP+5ubxUzHJCPnCgl8m6vYIy/OZ
2zdgEwD6Ex+cGfLZbcvh/JOEeGzqLDBnntnPd6fHeIT/lLe4QAME4GHm0nmn+vY6
rJK0gLriZ0m+sv+5p4hkfw8Pa42ZRPaZCAwQmQlXjimdrdACYqCgeWG86/M=
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:05 2025 by rpki-client