Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/625d8f-0395-488f-bbb0-ac523c6c3a7f/1/f2A1XiAXxX4FW_uNjP96pioqeZU.mft
File: f2A1XiAXxX4FW_uNjP96pioqeZU.mft (raw, json)
Hash identifier: hD2PXKt7aNxDAZ3cl4ROoayRxYoTAqF7I4FjpPDryXc=
Subject key identifier: AC:C7:42:12:F6:49:75:B1:31:A9:31:20:B3:FD:0D:C7:56:74:66:2D
Authority key identifier: 7F:60:35:5E:20:17:C5:7E:05:5B:FB:8D:8C:FF:7A:A6:2A:2A:79:95
Certificate issuer: /CN=7f60355e2017c57e055bfb8d8cff7aa62a2a7995
Certificate serial: 018ABDB6FA588576D99D4FB55DF2BF7D328A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2A1XiAXxX4FW_uNjP96pioqeZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/625d8f-0395-488f-bbb0-ac523c6c3a7f/1/f2A1XiAXxX4FW_uNjP96pioqeZU.mft
Manifest number: 01
Signing time: Fri 22 Sep 2023 16:26:39 +0000
Manifest this update: Fri 22 Sep 2023 16:26:39 +0000
Manifest next update: Sat 23 Sep 2023 16:26:39 +0000
Files and hashes: 1: f2A1XiAXxX4FW_uNjP96pioqeZU.crl (hash: sanC6O3MMkZGLSgFy0145l4dtr2vEOjx+epO31DMnt4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bd:b6:fa:58:85:76:d9:9d:4f:b5:5d:f2:bf:7d:32:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f60355e2017c57e055bfb8d8cff7aa62a2a7995
Validity
Not Before: Sep 22 16:26:39 2023 GMT
Not After : Sep 23 16:26:39 2023 GMT
Subject: CN=acc74212f64975b131a93120b3fd0dc75674662d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:36:9c:72:cd:31:2c:6b:fb:e4:70:24:96:78:
8b:bb:b6:12:9e:c1:0f:b1:aa:01:87:d3:26:9b:5d:
4c:a5:38:45:ef:33:e4:b8:ad:8a:02:95:fe:8c:ce:
dd:86:c2:38:d4:ad:be:89:09:e0:89:ab:65:70:83:
5c:41:33:84:5c:88:f4:97:21:29:86:20:4d:4c:96:
da:0d:d7:5c:6f:90:fb:a6:a6:3b:82:1b:98:25:28:
bf:b4:3e:18:f4:45:b6:86:d8:3a:eb:74:fc:2e:c9:
b6:8f:e8:ec:03:3b:5b:93:96:64:59:8f:aa:0e:59:
ca:c8:fb:72:40:b3:7d:fb:f8:0f:9d:00:80:49:49:
e9:47:16:45:63:e2:ae:7b:be:d4:89:2d:b4:39:04:
4b:03:7a:dd:40:8b:d3:ab:f0:8c:19:ef:77:18:c2:
07:a2:88:8d:c2:ee:77:38:a0:17:76:a3:d0:85:9d:
ac:2b:47:75:d2:14:d2:f2:7d:b5:51:04:d0:53:fe:
b3:e6:58:43:c2:58:16:4a:64:f4:28:42:b8:a9:49:
15:5c:5e:93:22:08:72:36:26:55:7a:62:b2:a7:be:
65:2f:b9:83:20:16:df:d3:c0:22:7c:d6:12:69:cf:
60:db:2c:d3:bc:06:30:b2:17:f1:a0:d0:52:f6:58:
1f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C7:42:12:F6:49:75:B1:31:A9:31:20:B3:FD:0D:C7:56:74:66:2D
X509v3 Authority Key Identifier:
keyid:7F:60:35:5E:20:17:C5:7E:05:5B:FB:8D:8C:FF:7A:A6:2A:2A:79:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2A1XiAXxX4FW_uNjP96pioqeZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/625d8f-0395-488f-bbb0-ac523c6c3a7f/1/f2A1XiAXxX4FW_uNjP96pioqeZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/625d8f-0395-488f-bbb0-ac523c6c3a7f/1/f2A1XiAXxX4FW_uNjP96pioqeZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:32:85:93:80:c0:cd:24:1f:2e:09:10:ee:46:64:95:6f:71:
92:d1:0a:35:25:94:ef:bc:b6:1b:2e:bb:e9:06:57:32:0b:bd:
59:53:f1:d7:e3:d8:d8:06:6a:1a:91:77:e9:41:98:b3:d8:1f:
13:1c:69:6a:ec:60:3a:12:a8:73:af:b3:dd:f9:59:42:f6:4f:
5b:00:7f:66:0a:bf:c5:6c:2d:c6:de:09:d9:c1:71:15:8a:7f:
11:a5:ed:26:39:2b:0f:23:dd:66:cb:da:3e:3a:33:0b:07:ba:
30:f6:01:be:f3:ab:83:e5:0c:61:e1:ba:fb:54:ce:75:d2:3c:
3b:7e:85:c0:58:56:90:d9:ca:c5:8b:a7:64:f3:42:d3:e6:90:
66:44:1a:84:79:56:fe:28:9a:e9:e4:81:d5:ac:9e:61:33:c2:
8b:06:b6:8b:be:93:8e:e1:1b:a2:32:49:34:6d:02:2e:e2:b2:
4c:67:b1:9a:b9:c8:1f:62:68:89:7d:66:3d:ba:92:a7:9f:52:
f5:c0:4c:22:0b:16:a9:0a:c7:04:ad:f8:c6:8e:87:96:0d:57:
23:c6:78:f1:c0:c3:21:52:5a:ec:05:09:29:ca:d2:3f:d2:92:
73:6a:c3:dd:92:4c:e3:6c:0c:04:09:49:ad:7f:ab:9f:48:aa:
30:e6:78:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYq9tvpYhXbZnU+1XfK/fTKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNjAzNTVlMjAxN2M1N2UwNTViZmI4ZDhjZmY3YWE2MmEy
YTc5OTUwHhcNMjMwOTIyMTYyNjM5WhcNMjMwOTIzMTYyNjM5WjAzMTEwLwYDVQQD
EyhhY2M3NDIxMmY2NDk3NWIxMzFhOTMxMjBiM2ZkMGRjNzU2NzQ2NjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzaccs0xLGv75HAklniLu7YSnsEP
saoBh9Mmm11MpThF7zPkuK2KApX+jM7dhsI41K2+iQngiatlcINcQTOEXIj0lyEp
hiBNTJbaDddcb5D7pqY7ghuYJSi/tD4Y9EW2htg663T8Lsm2j+jsAztbk5ZkWY+q
DlnKyPtyQLN9+/gPnQCASUnpRxZFY+Kue77UiS20OQRLA3rdQIvTq/CMGe93GMIH
ooiNwu53OKAXdqPQhZ2sK0d10hTS8n21UQTQU/6z5lhDwlgWSmT0KEK4qUkVXF6T
IghyNiZVemKyp75lL7mDIBbf08AifNYSac9g2yzTvAYwshfxoNBS9lgf8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzHQhL2SXWxMakxILP9DcdWdGYtMB8GA1UdIwQY
MBaAFH9gNV4gF8V+BVv7jYz/eqYqKnmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjJBMVhpQVh4WDRGV191TmpQOTZwaW9xZVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82MjVkOGYtMDM5NS00ODhmLWJiYjAt
YWM1MjNjNmMzYTdmLzEvZjJBMVhpQVh4WDRGV191TmpQOTZwaW9xZVpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82MjVkOGYtMDM5NS00ODhmLWJiYjAtYWM1MjNjNmMzYTdm
LzEvZjJBMVhpQVh4WDRGV191TmpQOTZwaW9xZVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTKFk4DA
zSQfLgkQ7kZklW9xktEKNSWU77y2Gy676QZXMgu9WVPx1+PY2AZqGpF36UGYs9gf
ExxpauxgOhKoc6+z3flZQvZPWwB/Zgq/xWwtxt4J2cFxFYp/EaXtJjkrDyPdZsva
PjozCwe6MPYBvvOrg+UMYeG6+1TOddI8O36FwFhWkNnKxYunZPNC0+aQZkQahHlW
/iia6eSB1ayeYTPCiwa2i76TjuEbojJJNG0CLuKyTGexmrnIH2JoiX1mPbqSp59S
9cBMIgsWqQrHBK34xo6Hlg1XI8Z48cDDIVJa7AUJKcrSP9KSc2rD3ZJM42wMBAlJ
rX+rn0iqMOZ4Pg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:12 2025 by rpki-client