Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/84e1d9-9407-424a-a60d-63b0a6bc2cc6/1/8usr6H0DSgjaVyJZ3C303iqsySw.mft
File: 8usr6H0DSgjaVyJZ3C303iqsySw.mft (raw, json)
Hash identifier: 0WWDZSWiSL9UvV+fGDeLehkU7i6npeIKKmfbEa1XPdY=
Subject key identifier: 75:C4:9F:40:EB:01:A1:CF:91:24:6B:3B:0D:C3:80:0D:95:D5:42:5E
Authority key identifier: F2:EB:2B:E8:7D:03:4A:08:DA:57:22:59:DC:2D:F4:DE:2A:AC:C9:2C
Certificate issuer: /CN=f2eb2be87d034a08da572259dc2df4de2aacc92c
Certificate serial: 019512B61A8B3F1AA6BAEFC06EBB295867A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8usr6H0DSgjaVyJZ3C303iqsySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/84e1d9-9407-424a-a60d-63b0a6bc2cc6/1/8usr6H0DSgjaVyJZ3C303iqsySw.mft
Manifest number: 04A9
Signing time: Mon 17 Feb 2025 07:01:18 +0000
Manifest this update: Mon 17 Feb 2025 07:01:18 +0000
Manifest next update: Tue 18 Feb 2025 07:01:18 +0000
Files and hashes: 1: 8usr6H0DSgjaVyJZ3C303iqsySw.crl (hash: qd1q8nWZUSCm4VQtkuzwMjBewnmk5zBUJb6VkABX5r4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:b6:1a:8b:3f:1a:a6:ba:ef:c0:6e:bb:29:58:67:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2eb2be87d034a08da572259dc2df4de2aacc92c
Validity
Not Before: Feb 17 07:01:18 2025 GMT
Not After : Feb 18 07:01:18 2025 GMT
Subject: CN=75c49f40eb01a1cf91246b3b0dc3800d95d5425e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f1:f6:11:f4:6f:a2:a2:ff:e6:ce:d5:0e:4a:
b7:8d:81:49:86:13:e9:67:2d:a5:22:34:96:e3:33:
f8:aa:86:7a:74:07:72:0a:0a:54:fa:c8:01:ec:b2:
70:84:06:64:81:59:1a:8c:dd:92:fa:28:d7:e6:c0:
3c:0e:7a:c5:d4:ab:27:10:25:eb:de:d0:6e:e8:35:
5a:2c:39:2c:9f:a0:14:36:1f:a9:00:2a:ad:cf:f1:
e1:27:4b:9b:84:97:b3:90:58:17:1f:5e:f6:ad:2e:
d0:6e:41:17:47:24:23:03:78:b5:3e:80:16:04:ef:
e1:78:de:b5:f1:56:42:9f:f3:80:08:fc:69:0b:88:
d2:c7:1c:c7:0c:44:f5:bc:da:75:25:74:82:7f:4d:
4a:2a:f8:d0:30:f7:97:88:ef:4c:12:b8:69:47:9f:
08:06:c8:eb:68:fd:c7:33:72:db:70:43:38:aa:d8:
6b:c4:26:bf:82:df:8e:cf:be:71:6f:96:26:66:f3:
4e:ea:c0:c1:43:c0:53:63:96:0c:c9:e4:29:1b:b3:
57:77:c9:54:77:b0:9d:51:48:ff:5d:ff:24:8b:1f:
95:33:39:2a:bd:5e:12:3a:e3:ea:4a:97:84:e0:54:
76:e9:fe:19:08:1b:3c:eb:bf:6a:f8:5f:2f:68:e3:
d9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C4:9F:40:EB:01:A1:CF:91:24:6B:3B:0D:C3:80:0D:95:D5:42:5E
X509v3 Authority Key Identifier:
keyid:F2:EB:2B:E8:7D:03:4A:08:DA:57:22:59:DC:2D:F4:DE:2A:AC:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8usr6H0DSgjaVyJZ3C303iqsySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/84e1d9-9407-424a-a60d-63b0a6bc2cc6/1/8usr6H0DSgjaVyJZ3C303iqsySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/84e1d9-9407-424a-a60d-63b0a6bc2cc6/1/8usr6H0DSgjaVyJZ3C303iqsySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:92:d3:35:7b:6a:b5:ad:62:12:54:f8:1b:77:7d:e9:3f:3f:
a9:1a:39:40:be:5c:3f:ff:2d:68:0f:24:21:0f:cb:ab:e6:a3:
4e:b5:dd:3b:35:93:a6:f4:73:2a:84:2c:20:95:27:7b:97:c0:
44:e2:64:81:23:e8:b5:ef:af:18:d7:6b:e3:42:c0:a4:13:e7:
05:84:f0:30:63:df:6e:9d:3d:6a:50:05:13:c8:0a:98:37:4d:
60:01:8d:06:c1:21:58:86:2a:8d:9e:13:0f:53:a3:f7:e3:60:
a3:5e:d8:d7:c5:8d:f2:36:7c:eb:ed:5e:8e:8b:0b:58:98:ff:
20:e1:fc:31:08:c5:f3:94:a5:58:2b:1c:3d:e3:00:e4:9d:7e:
62:33:81:df:ad:1f:51:ff:c4:0d:e8:f3:09:31:07:99:38:ed:
17:c3:60:32:85:82:be:15:e9:3f:30:79:02:d3:56:93:91:1a:
72:e1:b4:10:9e:7f:f4:74:d4:41:c8:8c:e4:b9:48:6a:8f:3e:
22:03:f1:77:cf:0b:55:39:ca:2f:c6:3b:78:54:97:3f:3f:bc:
71:e6:25:16:b0:72:4f:f7:e7:1a:3c:5d:5a:7e:af:9d:09:a7:
ee:7d:f7:5f:b1:26:62:d8:53:05:d5:56:eb:ca:c3:47:c4:61:
be:0c:9e:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSthqLPxqmuu/AbrspWGepMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZWIyYmU4N2QwMzRhMDhkYTU3MjI1OWRjMmRmNGRlMmFh
Y2M5MmMwHhcNMjUwMjE3MDcwMTE4WhcNMjUwMjE4MDcwMTE4WjAzMTEwLwYDVQQD
Eyg3NWM0OWY0MGViMDFhMWNmOTEyNDZiM2IwZGMzODAwZDk1ZDU0MjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/H2EfRvoqL/5s7VDkq3jYFJhhPp
Zy2lIjSW4zP4qoZ6dAdyCgpU+sgB7LJwhAZkgVkajN2S+ijX5sA8DnrF1KsnECXr
3tBu6DVaLDksn6AUNh+pACqtz/HhJ0ubhJezkFgXH172rS7QbkEXRyQjA3i1PoAW
BO/heN618VZCn/OACPxpC4jSxxzHDET1vNp1JXSCf01KKvjQMPeXiO9MErhpR58I
BsjraP3HM3LbcEM4qthrxCa/gt+Oz75xb5YmZvNO6sDBQ8BTY5YMyeQpG7NXd8lU
d7CdUUj/Xf8kix+VMzkqvV4SOuPqSpeE4FR26f4ZCBs8679q+F8vaOPZiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXEn0DrAaHPkSRrOw3DgA2V1UJeMB8GA1UdIwQY
MBaAFPLrK+h9A0oI2lciWdwt9N4qrMksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHVzcjZIMERTZ2phVnlKWjNDMzAzaXFzeVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NGUxZDktOTQwNy00MjRhLWE2MGQt
NjNiMGE2YmMyY2M2LzEvOHVzcjZIMERTZ2phVnlKWjNDMzAzaXFzeVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84NGUxZDktOTQwNy00MjRhLWE2MGQtNjNiMGE2YmMyY2M2
LzEvOHVzcjZIMERTZ2phVnlKWjNDMzAzaXFzeVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZLTNXtq
ta1iElT4G3d96T8/qRo5QL5cP/8taA8kIQ/Lq+ajTrXdOzWTpvRzKoQsIJUne5fA
ROJkgSPote+vGNdr40LApBPnBYTwMGPfbp09alAFE8gKmDdNYAGNBsEhWIYqjZ4T
D1Oj9+Ngo17Y18WN8jZ86+1ejosLWJj/IOH8MQjF85SlWCscPeMA5J1+YjOB360f
Uf/EDejzCTEHmTjtF8NgMoWCvhXpPzB5AtNWk5EacuG0EJ5/9HTUQciM5LlIao8+
IgPxd88LVTnKL8Y7eFSXPz+8ceYlFrByT/fnGjxdWn6vnQmn7n33X7EmYthTBdVW
68rDR8RhvgyelQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:06 2025 by rpki-client