Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/907c17-6b5c-49ab-b953-e439f9e3a19e/1/raTysa0VsYmSPu0s540K6JPPZxA.mft
File: raTysa0VsYmSPu0s540K6JPPZxA.mft (raw, json)
Hash identifier: f8rJZpac361jBKqB4yv10GE4x8uILJbEaOjvzO3ffPs=
Subject key identifier: 36:D8:0D:FB:48:E3:6F:21:C3:87:EB:08:9E:D2:E0:F8:99:95:9A:E2
Authority key identifier: AD:A4:F2:B1:AD:15:B1:89:92:3E:ED:2C:E7:8D:0A:E8:93:CF:67:10
Certificate issuer: /CN=ada4f2b1ad15b189923eed2ce78d0ae893cf6710
Certificate serial: 0193D7ECEE574E720D8CB76EAFE91945C3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raTysa0VsYmSPu0s540K6JPPZxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/907c17-6b5c-49ab-b953-e439f9e3a19e/1/raTysa0VsYmSPu0s540K6JPPZxA.mft
Manifest number: 11AA
Signing time: Wed 18 Dec 2024 04:00:49 +0000
Manifest this update: Wed 18 Dec 2024 04:00:49 +0000
Manifest next update: Thu 19 Dec 2024 04:00:49 +0000
Files and hashes: 1: raTysa0VsYmSPu0s540K6JPPZxA.crl (hash: S7loNLWVsaR1Ug3aQYCBvheZ/D4PNKhoKnuAI5db0gI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d7:ec:ee:57:4e:72:0d:8c:b7:6e:af:e9:19:45:c3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada4f2b1ad15b189923eed2ce78d0ae893cf6710
Validity
Not Before: Dec 18 04:00:49 2024 GMT
Not After : Dec 19 04:00:49 2024 GMT
Subject: CN=36d80dfb48e36f21c387eb089ed2e0f899959ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:2a:a8:4e:ff:4d:aa:6c:8f:ce:d6:51:27:
a9:e1:3e:5e:4f:82:f0:96:38:48:05:a0:e4:d4:fe:
29:ba:ce:4c:65:4e:77:ed:02:37:7e:07:57:20:52:
ba:22:69:fd:a1:27:ba:4f:0c:71:a2:fb:8b:49:d9:
5a:e5:80:1b:26:90:ce:68:5a:96:e9:c4:99:62:17:
b2:5a:90:93:ae:a9:13:2c:78:bf:f4:02:d0:17:7a:
74:a0:dc:5f:ab:85:41:aa:b2:94:c7:e8:47:2c:c7:
bf:dd:7c:06:7d:a1:c9:7f:f6:3d:d0:bb:6b:26:65:
e8:a4:dd:8a:43:83:56:9a:64:e1:a1:a7:08:d1:f0:
10:ac:a3:e0:29:14:ae:42:b4:c6:5b:6d:7b:19:8a:
78:25:e7:c7:26:50:9c:55:49:92:04:56:19:df:b6:
6a:5e:71:b0:04:7e:6b:a5:e9:80:b6:36:49:82:67:
e3:71:bf:f5:eb:83:92:7e:8e:d9:28:2b:44:8f:4e:
bd:1c:0b:9c:e6:15:56:b4:69:a6:36:5a:58:78:9e:
77:0b:83:16:34:1e:03:f6:32:74:dc:61:1f:d7:8b:
7e:05:9c:12:24:a4:05:78:9e:14:28:85:07:67:ac:
43:e8:44:be:36:05:ca:12:82:d3:f3:3d:17:c8:b5:
bb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D8:0D:FB:48:E3:6F:21:C3:87:EB:08:9E:D2:E0:F8:99:95:9A:E2
X509v3 Authority Key Identifier:
keyid:AD:A4:F2:B1:AD:15:B1:89:92:3E:ED:2C:E7:8D:0A:E8:93:CF:67:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raTysa0VsYmSPu0s540K6JPPZxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/907c17-6b5c-49ab-b953-e439f9e3a19e/1/raTysa0VsYmSPu0s540K6JPPZxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/907c17-6b5c-49ab-b953-e439f9e3a19e/1/raTysa0VsYmSPu0s540K6JPPZxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c6:88:b9:3d:bd:d7:86:01:fe:be:5d:cc:b5:2d:94:48:fa:
e8:0f:1e:34:92:cc:5f:26:0b:3d:1f:36:aa:ac:87:de:06:b1:
a7:dd:16:d1:1c:80:0d:83:a9:c9:5b:48:df:74:85:61:0c:83:
69:5b:d4:cd:55:cb:4e:09:96:d2:2b:f3:62:d5:a9:9e:35:95:
98:e8:89:3e:0f:02:1f:e5:d3:46:3a:ca:13:50:14:56:23:dc:
cb:e9:d7:71:71:56:d7:8d:de:2c:95:6d:91:0d:63:31:e4:06:
7a:5e:02:8c:4e:10:73:18:86:df:73:16:35:be:8d:58:6b:33:
90:81:67:9b:fc:d5:1e:21:66:cd:4f:a8:55:c1:4e:b0:b5:27:
0a:f5:a4:e0:c9:60:51:31:ab:e9:bd:22:52:26:c3:53:9d:8c:
15:5f:94:22:a9:3d:5e:85:7c:c0:0e:aa:f6:b7:9c:66:28:28:
1f:e7:6c:4f:4c:82:e3:49:07:87:38:6d:83:db:a0:2d:d2:92:
4f:40:9f:96:58:df:ee:9f:1a:7f:86:e3:96:39:a2:17:35:f9:
41:8b:13:20:48:4f:cf:23:7d:ed:06:5d:c8:d9:38:86:82:5b:
45:1b:cc:e9:ae:e3:1c:30:bc:e2:14:04:40:04:87:d1:24:c7:
05:7d:b1:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZPX7O5XTnINjLdur+kZRcPuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYTRmMmIxYWQxNWIxODk5MjNlZWQyY2U3OGQwYWU4OTNj
ZjY3MTAwHhcNMjQxMjE4MDQwMDQ5WhcNMjQxMjE5MDQwMDQ5WjAzMTEwLwYDVQQD
EygzNmQ4MGRmYjQ4ZTM2ZjIxYzM4N2ViMDg5ZWQyZTBmODk5OTU5YWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgoqqE7/Tapsj87WUSep4T5eT4Lw
ljhIBaDk1P4pus5MZU537QI3fgdXIFK6Imn9oSe6TwxxovuLSdla5YAbJpDOaFqW
6cSZYheyWpCTrqkTLHi/9ALQF3p0oNxfq4VBqrKUx+hHLMe/3XwGfaHJf/Y90Ltr
JmXopN2KQ4NWmmThoacI0fAQrKPgKRSuQrTGW217GYp4JefHJlCcVUmSBFYZ37Zq
XnGwBH5rpemAtjZJgmfjcb/164OSfo7ZKCtEj069HAuc5hVWtGmmNlpYeJ53C4MW
NB4D9jJ03GEf14t+BZwSJKQFeJ4UKIUHZ6xD6ES+NgXKEoLT8z0XyLW7KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbYDftI428hw4frCJ7S4PiZlZriMB8GA1UdIwQY
MBaAFK2k8rGtFbGJkj7tLOeNCuiTz2cQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmFUeXNhMFZzWW1TUHUwczU0MEs2SlBQWnhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi85MDdjMTctNmI1Yy00OWFiLWI5NTMt
ZTQzOWY5ZTNhMTllLzEvcmFUeXNhMFZzWW1TUHUwczU0MEs2SlBQWnhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi85MDdjMTctNmI1Yy00OWFiLWI5NTMtZTQzOWY5ZTNhMTll
LzEvcmFUeXNhMFZzWW1TUHUwczU0MEs2SlBQWnhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvcaIuT29
14YB/r5dzLUtlEj66A8eNJLMXyYLPR82qqyH3gaxp90W0RyADYOpyVtI33SFYQyD
aVvUzVXLTgmW0ivzYtWpnjWVmOiJPg8CH+XTRjrKE1AUViPcy+nXcXFW143eLJVt
kQ1jMeQGel4CjE4QcxiG33MWNb6NWGszkIFnm/zVHiFmzU+oVcFOsLUnCvWk4Mlg
UTGr6b0iUibDU52MFV+UIqk9XoV8wA6q9recZigoH+dsT0yC40kHhzhtg9ugLdKS
T0Cflljf7p8af4bjljmiFzX5QYsTIEhPzyN97QZdyNk4hoJbRRvM6a7jHDC84hQE
QASH0STHBX2xUQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:18 2025 by rpki-client