Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5d7efb-0c30-431b-a1b5-7e6b47bd5ead/1/CNM1g7JXIZUvaRDOokthWtdn5UE.mft
File: CNM1g7JXIZUvaRDOokthWtdn5UE.mft (raw, json)
Hash identifier: scpbJCfTa64EtcstMQRou+zGzEDhJrAquNe+yI41YIc=
Subject key identifier: D8:22:D1:2C:A3:BB:5D:EF:65:D4:A2:BC:FA:92:88:A9:48:C8:17:70
Authority key identifier: 08:D3:35:83:B2:57:21:95:2F:69:10:CE:A2:4B:61:5A:D7:67:E5:41
Certificate issuer: /CN=08d33583b25721952f6910cea24b615ad767e541
Certificate serial: 018D53CEE4C5405D14B6A8278F1C3D61FDFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNM1g7JXIZUvaRDOokthWtdn5UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5d7efb-0c30-431b-a1b5-7e6b47bd5ead/1/CNM1g7JXIZUvaRDOokthWtdn5UE.mft
Manifest number: 0E1B
Signing time: Mon 29 Jan 2024 06:01:24 +0000
Manifest this update: Mon 29 Jan 2024 06:01:24 +0000
Manifest next update: Tue 30 Jan 2024 06:01:24 +0000
Files and hashes: 1: CNM1g7JXIZUvaRDOokthWtdn5UE.crl (hash: ktQQE4/B0C282UC9RbO5mCV22JHku02znn0ThCUeqAE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:53:ce:e4:c5:40:5d:14:b6:a8:27:8f:1c:3d:61:fd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d33583b25721952f6910cea24b615ad767e541
Validity
Not Before: Jan 29 06:01:24 2024 GMT
Not After : Jan 30 06:01:24 2024 GMT
Subject: CN=d822d12ca3bb5def65d4a2bcfa9288a948c81770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c7:b6:ab:98:fe:2d:24:ce:00:a5:db:00:d3:
ed:cf:8a:b8:28:15:50:69:b4:3c:c4:9e:0d:6b:0e:
73:e3:20:e8:bf:5e:dc:45:b1:53:34:5d:f5:fb:ba:
9f:d4:d8:c8:ea:14:21:50:bb:b4:a0:2c:20:11:b4:
41:8f:a3:9b:dd:a1:60:71:18:d0:06:a1:ec:2c:7a:
98:71:b6:43:93:b0:74:3c:04:91:a6:e0:36:ec:fd:
49:c6:41:1c:de:d6:47:01:96:ce:c8:5a:b4:c4:02:
be:c4:44:6a:78:6c:12:15:49:d5:4d:08:0e:5e:a2:
d2:7b:73:90:25:c3:3f:1c:c0:22:5a:49:4f:ac:4e:
52:c3:f0:33:40:ea:12:f2:0d:6e:4e:ce:b5:71:8a:
44:0b:b2:94:d9:6a:68:2a:33:06:70:cf:b2:f4:e8:
5c:95:ea:f5:43:4d:e7:9b:54:ba:f7:cb:b1:b7:8b:
b6:de:44:67:f5:9b:6d:7d:5c:dd:22:42:d7:9c:69:
09:14:f5:8b:11:02:36:b9:87:6f:c8:bf:27:62:a7:
e7:1b:5c:70:73:43:b8:ce:c1:b9:da:1a:1d:9b:b6:
63:27:16:6b:58:46:4f:25:ea:d1:aa:0a:96:09:f7:
30:02:52:3e:50:a7:56:42:c4:46:55:48:bc:31:32:
d2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:22:D1:2C:A3:BB:5D:EF:65:D4:A2:BC:FA:92:88:A9:48:C8:17:70
X509v3 Authority Key Identifier:
keyid:08:D3:35:83:B2:57:21:95:2F:69:10:CE:A2:4B:61:5A:D7:67:E5:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNM1g7JXIZUvaRDOokthWtdn5UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5d7efb-0c30-431b-a1b5-7e6b47bd5ead/1/CNM1g7JXIZUvaRDOokthWtdn5UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5d7efb-0c30-431b-a1b5-7e6b47bd5ead/1/CNM1g7JXIZUvaRDOokthWtdn5UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b1:6e:cd:f2:2c:ba:05:81:78:a2:46:e4:87:de:62:0e:1c:
68:a4:10:17:0c:ea:15:a5:be:34:21:00:2e:c5:e7:9e:3b:14:
88:e0:2b:74:2f:78:f4:39:0d:6b:a1:c9:23:29:5a:fc:00:9c:
59:03:34:7f:b8:7d:ae:96:82:79:85:51:37:55:84:61:df:9a:
02:2c:fb:e9:89:73:3c:97:38:aa:1b:18:2d:49:01:24:24:02:
45:5c:4b:57:1d:54:86:77:e4:d4:e5:48:7f:64:5c:06:60:d8:
ad:5a:d2:3e:7a:86:fa:d1:60:35:ad:b1:83:58:f4:42:5c:04:
c0:26:8b:0a:af:51:1e:c3:a4:fe:1a:8e:62:4e:ad:fc:9f:35:
e2:d3:87:70:74:28:a8:cb:ab:9b:df:6d:8f:66:62:07:68:4f:
bc:09:ba:2d:30:31:bb:e4:be:b2:44:3e:8d:c3:83:fb:6d:4c:
8c:49:f3:bf:e3:1d:8d:b3:5f:69:a4:d1:fb:2d:36:75:b9:19:
8f:1d:ea:a1:fd:48:14:aa:82:fb:18:7c:4c:b6:b9:f0:52:34:
a6:98:80:18:a4:91:29:3a:d9:45:5e:56:38:27:df:7d:7d:6a:
94:5b:56:51:07:3e:3c:c8:2c:d4:a7:39:e2:bc:e3:53:bd:ad:
d8:a8:c2:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY1TzuTFQF0Utqgnjxw9Yf38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDMzNTgzYjI1NzIxOTUyZjY5MTBjZWEyNGI2MTVhZDc2
N2U1NDEwHhcNMjQwMTI5MDYwMTI0WhcNMjQwMTMwMDYwMTI0WjAzMTEwLwYDVQQD
EyhkODIyZDEyY2EzYmI1ZGVmNjVkNGEyYmNmYTkyODhhOTQ4YzgxNzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjce2q5j+LSTOAKXbANPtz4q4KBVQ
abQ8xJ4Naw5z4yDov17cRbFTNF31+7qf1NjI6hQhULu0oCwgEbRBj6Ob3aFgcRjQ
BqHsLHqYcbZDk7B0PASRpuA27P1JxkEc3tZHAZbOyFq0xAK+xERqeGwSFUnVTQgO
XqLSe3OQJcM/HMAiWklPrE5Sw/AzQOoS8g1uTs61cYpEC7KU2WpoKjMGcM+y9Ohc
ler1Q03nm1S698uxt4u23kRn9ZttfVzdIkLXnGkJFPWLEQI2uYdvyL8nYqfnG1xw
c0O4zsG52hodm7ZjJxZrWEZPJerRqgqWCfcwAlI+UKdWQsRGVUi8MTLSewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgi0Syju13vZdSivPqSiKlIyBdwMB8GA1UdIwQY
MBaAFAjTNYOyVyGVL2kQzqJLYVrXZ+VBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05NMWc3SlhJWlV2YVJET29rdGhXdGRuNVVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81ZDdlZmItMGMzMC00MzFiLWExYjUt
N2U2YjQ3YmQ1ZWFkLzEvQ05NMWc3SlhJWlV2YVJET29rdGhXdGRuNVVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81ZDdlZmItMGMzMC00MzFiLWExYjUtN2U2YjQ3YmQ1ZWFk
LzEvQ05NMWc3SlhJWlV2YVJET29rdGhXdGRuNVVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbFuzfIs
ugWBeKJG5IfeYg4caKQQFwzqFaW+NCEALsXnnjsUiOArdC949DkNa6HJIyla/ACc
WQM0f7h9rpaCeYVRN1WEYd+aAiz76YlzPJc4qhsYLUkBJCQCRVxLVx1Uhnfk1OVI
f2RcBmDYrVrSPnqG+tFgNa2xg1j0QlwEwCaLCq9RHsOk/hqOYk6t/J814tOHcHQo
qMurm99tj2ZiB2hPvAm6LTAxu+S+skQ+jcOD+21MjEnzv+MdjbNfaaTR+y02dbkZ
jx3qof1IFKqC+xh8TLa58FI0ppiAGKSRKTrZRV5WOCfffX1qlFtWUQc+PMgs1Kc5
4rzjU72t2KjCZg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:03 2025 by rpki-client