Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
File: 4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft (raw, json)
Hash identifier: dJNuY7xJnAUIk3rltuKKX1Onc6FcgmJCR7vV9dTDS2o=
Subject key identifier: 91:5F:C0:BE:F8:1F:24:EA:78:D3:36:6F:4C:E4:E3:65:11:C8:AC:81
Authority key identifier: E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F
Certificate issuer: /CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
Certificate serial: 0195E12221908A9470B180215CE6A7181BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
Manifest number: 0223
Signing time: Sat 29 Mar 2025 09:01:05 +0000
Manifest this update: Sat 29 Mar 2025 09:01:05 +0000
Manifest next update: Sun 30 Mar 2025 09:01:05 +0000
Files and hashes: 1: 4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl (hash: dXdIki+0WZao3KUllzAEo95+Jo8FZbmEXhYcWOcBnWU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:21:90:8a:94:70:b1:80:21:5c:e6:a7:18:1b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
Validity
Not Before: Mar 29 09:01:05 2025 GMT
Not After : Mar 30 09:01:05 2025 GMT
Subject: CN=915fc0bef81f24ea78d3366f4ce4e36511c8ac81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:b3:54:14:17:b8:31:4e:9e:f0:a9:c3:af:
54:89:32:d6:0d:55:e1:63:6f:26:b0:67:eb:b6:e8:
06:17:a2:67:a5:6c:a7:39:0f:d9:00:29:01:ee:b8:
d1:72:54:f4:77:18:f7:c1:b5:43:45:2c:b8:3d:30:
58:06:78:30:e5:30:cd:d8:97:cc:32:14:58:a2:75:
c4:e3:29:04:f9:a5:78:4e:39:7b:71:7d:e1:0b:0e:
80:1e:c9:6e:0b:95:dc:07:8a:ba:81:68:08:cd:36:
c9:24:be:b1:3c:23:44:e3:28:94:fd:c8:fc:13:fd:
6f:97:51:54:8a:4b:89:d4:c7:c2:58:37:e6:6f:86:
9e:05:b2:61:f5:fa:3e:a6:8c:18:c5:3e:81:9d:12:
a9:a2:9e:9f:68:af:c0:7f:90:dc:b4:f2:76:03:f5:
32:52:53:19:2b:50:b7:f8:75:f8:96:8a:0b:52:02:
65:57:94:29:9c:82:3f:aa:36:5e:b8:94:23:09:80:
ab:3d:10:94:84:2e:97:70:b0:81:04:1f:3d:40:ef:
c7:e0:e2:1a:d2:75:0c:6f:13:a2:9b:d9:2b:ac:50:
09:9d:0c:5a:91:37:56:9b:9d:5f:f5:ac:0c:b1:bb:
65:1d:f6:a0:b1:1f:ef:2c:70:a3:ad:85:3c:bc:67:
75:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5F:C0:BE:F8:1F:24:EA:78:D3:36:6F:4C:E4:E3:65:11:C8:AC:81
X509v3 Authority Key Identifier:
keyid:E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a7:76:d1:9a:ae:b3:3b:18:87:b9:da:9a:2f:79:6e:5d:81:
f0:c0:75:b9:ba:1b:f3:d8:06:99:17:35:17:6b:3d:5a:5c:03:
d9:3b:8f:76:68:29:e4:26:68:dc:af:96:a9:5e:5a:da:de:90:
6c:36:5b:99:3d:3c:06:ea:3c:63:35:62:da:79:11:23:c8:f6:
5e:e7:19:e1:57:b7:d6:27:92:73:d0:b5:6e:2c:b3:35:a2:b4:
9e:e5:96:b1:cb:db:29:e9:7e:57:0a:da:32:53:f8:02:70:18:
70:a0:10:9c:d2:7a:46:ee:7f:a6:ee:4c:ea:c3:9b:c6:e4:4d:
4b:dc:cc:39:87:f9:41:4f:c6:3e:f7:1f:44:3a:70:ac:87:2c:
96:c6:ae:e0:7e:90:a3:b7:ef:61:af:38:e8:17:10:20:12:1e:
03:d9:74:c0:a4:d2:25:d2:7d:ed:60:01:6f:af:ed:8d:2c:c2:
9b:0e:03:99:96:01:51:1b:b6:6b:55:31:41:d6:18:e0:57:55:
72:c8:d1:96:8f:8f:2a:4b:45:d5:28:ab:7d:1e:c4:90:64:a8:
67:e5:65:53:28:74:9b:cb:cb:a7:44:6e:ba:cf:62:6c:ad:da:
e4:70:8c:52:5c:aa:48:76:f9:05:0c:27:06:0a:08:5b:10:8f:
17:76:5f:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhIiGQipRwsYAhXOanGBu1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMjY4MWNmZDk3YzE2NDRlZmY3NTFlMGYxZTBhYTA1M2Mw
NWMwMGYwHhcNMjUwMzI5MDkwMTA1WhcNMjUwMzMwMDkwMTA1WjAzMTEwLwYDVQQD
Eyg5MTVmYzBiZWY4MWYyNGVhNzhkMzM2NmY0Y2U0ZTM2NTExYzhhYzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniCzVBQXuDFOnvCpw69UiTLWDVXh
Y28msGfrtugGF6JnpWynOQ/ZACkB7rjRclT0dxj3wbVDRSy4PTBYBngw5TDN2JfM
MhRYonXE4ykE+aV4Tjl7cX3hCw6AHsluC5XcB4q6gWgIzTbJJL6xPCNE4yiU/cj8
E/1vl1FUikuJ1MfCWDfmb4aeBbJh9fo+powYxT6BnRKpop6faK/Af5DctPJ2A/Uy
UlMZK1C3+HX4looLUgJlV5QpnII/qjZeuJQjCYCrPRCUhC6XcLCBBB89QO/H4OIa
0nUMbxOim9krrFAJnQxakTdWm51f9awMsbtlHfagsR/vLHCjrYU8vGd15QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFfwL74HyTqeNM2b0zk42URyKyBMB8GA1UdIwQY
MBaAFOMmgc/ZfBZE7/dR4PHgqgU8BcAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHlhQno5bDhGa1R2OTFIZzhlQ3FCVHdGd0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jY2Y2M2YtZGU1Yi00OGNhLWFmMTUt
ZGMwZmU5ZDllMDk5LzEvNHlhQno5bDhGa1R2OTFIZzhlQ3FCVHdGd0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jY2Y2M2YtZGU1Yi00OGNhLWFmMTUtZGMwZmU5ZDllMDk5
LzEvNHlhQno5bDhGa1R2OTFIZzhlQ3FCVHdGd0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuKd20Zqu
szsYh7nami95bl2B8MB1ubob89gGmRc1F2s9WlwD2TuPdmgp5CZo3K+WqV5a2t6Q
bDZbmT08Buo8YzVi2nkRI8j2XucZ4Ve31ieSc9C1biyzNaK0nuWWscvbKel+Vwra
MlP4AnAYcKAQnNJ6Ru5/pu5M6sObxuRNS9zMOYf5QU/GPvcfRDpwrIcslsau4H6Q
o7fvYa846BcQIBIeA9l0wKTSJdJ97WABb6/tjSzCmw4DmZYBURu2a1UxQdYY4FdV
csjRlo+PKktF1SirfR7EkGSoZ+VlUyh0m8vLp0Ruus9ibK3a5HCMUlyqSHb5BQwn
BgoIWxCPF3ZfPQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:12 2025 by rpki-client