Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/913c3e-1b69-4629-aed5-dc1e34e8da03/1/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.mft
File: 7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.mft (raw, json)
Hash identifier: xVbUJ8YFEAfaK4pFGNHrThLHmXEYmfjDJgpcYmLbM6s=
Subject key identifier: 9A:96:A7:3D:A7:2D:E4:3A:3F:6D:02:C9:CE:7B:4F:FC:21:AE:5F:0E
Authority key identifier: ED:FE:09:C9:CE:50:43:66:64:54:11:55:AC:FE:6D:5A:03:98:65:BA
Certificate issuer: /CN=edfe09c9ce50436664541155acfe6d5a039865ba
Certificate serial: 01957E365543769F07FC50C2AC3A3BF3C6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/913c3e-1b69-4629-aed5-dc1e34e8da03/1/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.mft
Manifest number: 08FF
Signing time: Mon 10 Mar 2025 04:00:44 +0000
Manifest this update: Mon 10 Mar 2025 04:00:44 +0000
Manifest next update: Tue 11 Mar 2025 04:00:44 +0000
Files and hashes: 1: 7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.crl (hash: 7LZh1keHjRtlg/RaQ+LYwnDC8/GLqPEObSPepKBMwho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7e:36:55:43:76:9f:07:fc:50:c2:ac:3a:3b:f3:c6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfe09c9ce50436664541155acfe6d5a039865ba
Validity
Not Before: Mar 10 04:00:44 2025 GMT
Not After : Mar 11 04:00:44 2025 GMT
Subject: CN=9a96a73da72de43a3f6d02c9ce7b4ffc21ae5f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:71:7f:ac:d1:9f:9a:ee:c4:a7:66:55:f9:
51:5e:f0:11:45:c9:15:b6:32:6f:21:11:dd:3a:4e:
9e:ad:1a:ce:ed:97:c1:81:08:a3:3b:3a:e7:ab:0e:
38:f1:da:9f:82:4b:7a:52:a6:26:0b:65:72:42:ae:
b3:e3:bb:3f:82:d1:40:56:2d:0c:79:9f:2c:bd:d3:
a0:47:f5:d6:38:b5:d1:05:3e:3a:79:f3:9d:b5:89:
8c:34:9b:2a:f9:cc:f4:b9:1e:04:ec:70:cc:7a:19:
a1:3f:a3:a7:37:5f:b1:4f:a2:48:cb:40:34:da:48:
00:48:1f:4f:13:82:93:ee:5e:30:aa:95:21:f3:5a:
e0:e2:df:8e:b5:8a:47:a7:de:d2:52:21:9a:9e:a9:
d1:34:38:81:8d:6e:32:92:37:c4:eb:ad:59:75:9a:
14:01:3c:a3:fb:11:58:08:cc:2b:5b:1d:e7:de:b9:
fd:60:7f:03:e2:56:2a:da:e7:13:3f:0a:82:fd:3c:
b0:50:d7:f8:0a:b6:3b:f4:85:10:7f:c5:99:38:f4:
70:3f:64:58:98:4c:45:12:9b:90:ae:6a:63:b7:9b:
4c:0c:93:f9:80:25:93:a5:18:62:c8:07:f4:ea:61:
3a:d7:0a:e8:a6:8a:51:ff:43:cd:58:ff:e5:af:b8:
03:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:96:A7:3D:A7:2D:E4:3A:3F:6D:02:C9:CE:7B:4F:FC:21:AE:5F:0E
X509v3 Authority Key Identifier:
keyid:ED:FE:09:C9:CE:50:43:66:64:54:11:55:AC:FE:6D:5A:03:98:65:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/913c3e-1b69-4629-aed5-dc1e34e8da03/1/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/913c3e-1b69-4629-aed5-dc1e34e8da03/1/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:87:c7:60:b3:11:78:a1:74:0e:18:88:88:61:ef:ee:31:d0:
53:bf:9f:2d:cd:4d:29:c6:ca:bd:6f:c1:68:24:e8:6f:21:94:
92:41:cf:7a:63:83:72:15:57:9a:1f:ea:a2:6e:f5:b2:37:08:
0d:51:14:82:57:10:9e:c3:62:80:83:c4:a4:44:12:e6:23:9e:
39:f8:cd:63:df:2b:21:41:74:d0:02:1f:ae:4e:bc:8f:34:27:
f1:9b:d3:3d:55:a4:0f:c1:a9:7f:e0:7f:ee:1c:23:7d:6c:3c:
a3:24:0a:37:14:93:3f:94:b6:75:4e:99:09:8c:d7:22:62:e4:
c6:44:8a:3b:27:94:01:a5:af:27:0e:a1:2c:58:e4:39:de:5b:
d6:ee:7b:19:06:14:24:7d:d3:03:4a:08:f1:7a:98:0c:52:3a:
f5:ac:4e:cb:3c:97:0c:86:92:af:b2:9b:4d:57:e9:19:42:3a:
84:42:b4:fc:68:79:37:90:c9:02:b9:aa:6e:5d:4f:0b:e4:ee:
44:2d:0a:dd:f0:df:c7:da:7b:d0:a0:9d:f7:23:2b:35:56:5a:
b7:d5:44:2a:f3:3e:43:3b:6a:07:e0:f3:4c:37:f5:3a:89:08:
cc:38:bc:68:43:2b:ef:de:bd:ee:08:f9:1c:ed:87:94:1c:f6:
c7:e2:1b:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV+NlVDdp8H/FDCrDo788bcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZmUwOWM5Y2U1MDQzNjY2NDU0MTE1NWFjZmU2ZDVhMDM5
ODY1YmEwHhcNMjUwMzEwMDQwMDQ0WhcNMjUwMzExMDQwMDQ0WjAzMTEwLwYDVQQD
Eyg5YTk2YTczZGE3MmRlNDNhM2Y2ZDAyYzljZTdiNGZmYzIxYWU1ZjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJdxf6zRn5ruxKdmVflRXvARRckV
tjJvIRHdOk6erRrO7ZfBgQijOzrnqw448dqfgkt6UqYmC2VyQq6z47s/gtFAVi0M
eZ8svdOgR/XWOLXRBT46efOdtYmMNJsq+cz0uR4E7HDMehmhP6OnN1+xT6JIy0A0
2kgASB9PE4KT7l4wqpUh81rg4t+OtYpHp97SUiGanqnRNDiBjW4ykjfE661ZdZoU
ATyj+xFYCMwrWx3n3rn9YH8D4lYq2ucTPwqC/TywUNf4CrY79IUQf8WZOPRwP2RY
mExFEpuQrmpjt5tMDJP5gCWTpRhiyAf06mE61wropopR/0PNWP/lr7gDvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqWpz2nLeQ6P20Cyc57T/whrl8OMB8GA1UdIwQY
MBaAFO3+CcnOUENmZFQRVaz+bVoDmGW6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2Y0SnljNVFRMlprVkJGVnJQNXRXZ09ZWmJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85MTNjM2UtMWI2OS00NjI5LWFlZDUt
ZGMxZTM0ZThkYTAzLzEvN2Y0SnljNVFRMlprVkJGVnJQNXRXZ09ZWmJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85MTNjM2UtMWI2OS00NjI5LWFlZDUtZGMxZTM0ZThkYTAz
LzEvN2Y0SnljNVFRMlprVkJGVnJQNXRXZ09ZWmJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYfHYLMR
eKF0DhiIiGHv7jHQU7+fLc1NKcbKvW/BaCTobyGUkkHPemODchVXmh/qom71sjcI
DVEUglcQnsNigIPEpEQS5iOeOfjNY98rIUF00AIfrk68jzQn8ZvTPVWkD8Gpf+B/
7hwjfWw8oyQKNxSTP5S2dU6ZCYzXImLkxkSKOyeUAaWvJw6hLFjkOd5b1u57GQYU
JH3TA0oI8XqYDFI69axOyzyXDIaSr7KbTVfpGUI6hEK0/Gh5N5DJArmqbl1PC+Tu
RC0K3fDfx9p70KCd9yMrNVZat9VEKvM+QztqB+DzTDf1OokIzDi8aEMr79697gj5
HO2HlBz2x+IbYQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:48 2025 by rpki-client