Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a271fc-c34b-4366-a086-dd11a49cae2d/1/4XwlpvL7M1SdKfdNcDPvISEEXII.mft
File: 4XwlpvL7M1SdKfdNcDPvISEEXII.mft (raw, json)
Hash identifier: C6QD8gTyhtpRPX6TnDdzZ/BXJzptVc2/6xicfgC6fvg=
Subject key identifier: 82:F6:AA:7C:3E:07:B8:70:A8:F7:F0:67:BB:FA:90:4D:29:6D:38:9B
Authority key identifier: E1:7C:25:A6:F2:FB:33:54:9D:29:F7:4D:70:33:EF:21:21:04:5C:82
Certificate issuer: /CN=e17c25a6f2fb33549d29f74d7033ef2121045c82
Certificate serial: 019439C5B36DB4F10DA4F25F4A2AB9A0DB7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XwlpvL7M1SdKfdNcDPvISEEXII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a271fc-c34b-4366-a086-dd11a49cae2d/1/4XwlpvL7M1SdKfdNcDPvISEEXII.mft
Manifest number: 10D8
Signing time: Mon 06 Jan 2025 04:00:45 +0000
Manifest this update: Mon 06 Jan 2025 04:00:45 +0000
Manifest next update: Tue 07 Jan 2025 04:00:45 +0000
Files and hashes: 1: 4XwlpvL7M1SdKfdNcDPvISEEXII.crl (hash: yHipsV4nLBnFVNjDLdGNVbN52E7ocucIpz0MjGX/jHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:39:c5:b3:6d:b4:f1:0d:a4:f2:5f:4a:2a:b9:a0:db:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17c25a6f2fb33549d29f74d7033ef2121045c82
Validity
Not Before: Jan 6 04:00:45 2025 GMT
Not After : Jan 7 04:00:45 2025 GMT
Subject: CN=82f6aa7c3e07b870a8f7f067bbfa904d296d389b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:61:18:fb:ae:26:db:81:9d:a3:1c:42:85:
6f:5c:0e:a4:45:48:b3:fa:77:ae:47:ce:b4:e0:a8:
22:ff:90:1a:a6:d8:9f:68:dd:0d:31:41:9a:16:f0:
d1:e9:d5:a9:bb:7d:23:f8:1d:a2:2b:5d:b8:f4:f8:
b2:c5:7f:e7:27:aa:b5:19:88:6f:fe:03:c3:cd:b3:
eb:23:ca:f3:5a:c7:26:fa:9d:a2:7a:5d:08:a4:a0:
9d:5f:44:53:fc:77:cf:6e:0d:3c:3a:e7:d1:ac:20:
08:a3:87:cd:7f:72:a6:7b:f1:1e:38:14:5a:ea:f5:
88:72:7d:82:d3:d6:b5:7e:8a:04:41:c1:ae:8a:1f:
a3:56:23:1f:20:04:2a:50:09:21:1f:84:84:3c:ad:
9f:4e:83:ae:1c:14:79:9a:c7:40:0c:c5:de:90:65:
5f:b7:d2:81:57:4c:87:b4:ab:f1:31:ec:be:04:f9:
a0:92:d2:ea:49:7e:bd:51:cc:0d:1e:4e:58:d8:d7:
f8:57:54:0c:56:ce:a2:8d:e8:5a:94:8d:d4:ea:17:
fb:2b:93:d6:4c:2a:70:6b:2d:c2:00:81:ab:1c:04:
f5:8a:a2:0b:fa:0f:92:5d:00:4f:18:53:fe:35:9b:
a9:fc:66:c5:17:47:43:5e:96:8d:10:45:54:7f:94:
ff:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F6:AA:7C:3E:07:B8:70:A8:F7:F0:67:BB:FA:90:4D:29:6D:38:9B
X509v3 Authority Key Identifier:
keyid:E1:7C:25:A6:F2:FB:33:54:9D:29:F7:4D:70:33:EF:21:21:04:5C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XwlpvL7M1SdKfdNcDPvISEEXII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a271fc-c34b-4366-a086-dd11a49cae2d/1/4XwlpvL7M1SdKfdNcDPvISEEXII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a271fc-c34b-4366-a086-dd11a49cae2d/1/4XwlpvL7M1SdKfdNcDPvISEEXII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2d:63:12:bd:47:41:a9:b8:a5:da:01:89:44:f5:45:95:84:
a6:cf:89:cb:6d:9f:bf:a9:a1:00:b1:65:47:5e:48:d9:96:d7:
d1:5c:40:58:ed:f3:49:79:af:ba:d7:13:c9:a6:1a:25:6e:42:
00:0c:5c:bc:c5:82:98:26:75:4a:e5:8a:fe:5c:3b:aa:95:56:
ff:76:f0:c0:4f:25:0b:e2:68:76:2a:f1:c8:15:11:e3:12:f5:
e5:06:fe:6e:db:96:80:91:5d:c6:6c:ce:69:0b:9c:b2:6a:b3:
59:cf:44:d9:b3:8c:7f:c3:8e:93:a0:ed:84:28:3f:f3:ad:44:
95:ef:94:9e:d0:8a:50:74:eb:47:03:f1:ab:80:b7:b3:5e:fc:
8c:42:a4:f8:53:eb:07:2c:7e:b9:d2:d4:b9:a9:b2:a2:5a:49:
a6:0e:bf:32:e4:02:e4:c5:a2:1e:b5:13:b7:ce:ed:ae:38:f9:
3c:33:96:fc:e1:78:4f:60:94:55:19:dc:ce:5c:80:bb:37:9f:
14:f2:cd:2b:72:53:60:12:ac:89:87:3d:b5:4c:9d:83:cf:a6:
c3:94:f3:7b:bf:c8:56:2d:18:f3:b5:ad:37:b8:1d:c8:dc:04:
5d:bf:4e:6a:1f:4a:b1:30:4a:5c:fa:9c:af:9d:f6:35:10:4d:
3a:0e:11:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQ5xbNttPENpPJfSiq5oNt7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxN2MyNWE2ZjJmYjMzNTQ5ZDI5Zjc0ZDcwMzNlZjIxMjEw
NDVjODIwHhcNMjUwMTA2MDQwMDQ1WhcNMjUwMTA3MDQwMDQ1WjAzMTEwLwYDVQQD
Eyg4MmY2YWE3YzNlMDdiODcwYThmN2YwNjdiYmZhOTA0ZDI5NmQzODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLhhGPuuJtuBnaMcQoVvXA6kRUiz
+neuR8604Kgi/5AaptifaN0NMUGaFvDR6dWpu30j+B2iK1249PiyxX/nJ6q1GYhv
/gPDzbPrI8rzWscm+p2iel0IpKCdX0RT/HfPbg08OufRrCAIo4fNf3Kme/EeOBRa
6vWIcn2C09a1fooEQcGuih+jViMfIAQqUAkhH4SEPK2fToOuHBR5msdADMXekGVf
t9KBV0yHtKvxMey+BPmgktLqSX69UcwNHk5Y2Nf4V1QMVs6ijehalI3U6hf7K5PW
TCpway3CAIGrHAT1iqIL+g+SXQBPGFP+NZup/GbFF0dDXpaNEEVUf5T/IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIL2qnw+B7hwqPfwZ7v6kE0pbTibMB8GA1UdIwQY
MBaAFOF8Jaby+zNUnSn3TXAz7yEhBFyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFh3bHB2TDdNMVNkS2ZkTmNEUHZJU0VFWElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hMjcxZmMtYzM0Yi00MzY2LWEwODYt
ZGQxMWE0OWNhZTJkLzEvNFh3bHB2TDdNMVNkS2ZkTmNEUHZJU0VFWElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9hMjcxZmMtYzM0Yi00MzY2LWEwODYtZGQxMWE0OWNhZTJk
LzEvNFh3bHB2TDdNMVNkS2ZkTmNEUHZJU0VFWElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQS1jEr1H
Qam4pdoBiUT1RZWEps+Jy22fv6mhALFlR15I2ZbX0VxAWO3zSXmvutcTyaYaJW5C
AAxcvMWCmCZ1SuWK/lw7qpVW/3bwwE8lC+JodirxyBUR4xL15Qb+btuWgJFdxmzO
aQucsmqzWc9E2bOMf8OOk6DthCg/861Ele+UntCKUHTrRwPxq4C3s178jEKk+FPr
Byx+udLUuamyolpJpg6/MuQC5MWiHrUTt87trjj5PDOW/OF4T2CUVRnczlyAuzef
FPLNK3JTYBKsiYc9tUydg8+mw5Tze7/IVi0Y87WtN7gdyNwEXb9Oah9KsTBKXPqc
r532NRBNOg4R5Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:26 2025 by rpki-client