Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ffe8a0-9145-4217-b6d9-cae9a13d70ca/1/R4SxW2vT-4f1J58Ym584GvyRmXE.mft
File: R4SxW2vT-4f1J58Ym584GvyRmXE.mft (raw, json)
Hash identifier: bZljf78Fm7U6fszQ+w/xLOnZB5RtBDFdhe5lK7TJwKc=
Subject key identifier: 7D:32:D1:59:6F:56:E4:2C:09:BC:7A:32:58:14:1C:0E:10:CC:FB:17
Authority key identifier: 47:84:B1:5B:6B:D3:FB:87:F5:27:9F:18:9B:9F:38:1A:FC:91:99:71
Certificate issuer: /CN=4784b15b6bd3fb87f5279f189b9f381afc919971
Certificate serial: 0195A38D03ABD4E3AD18E03FA7D45209B01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4SxW2vT-4f1J58Ym584GvyRmXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ffe8a0-9145-4217-b6d9-cae9a13d70ca/1/R4SxW2vT-4f1J58Ym584GvyRmXE.mft
Manifest number: 0A5A
Signing time: Mon 17 Mar 2025 10:01:22 +0000
Manifest this update: Mon 17 Mar 2025 10:01:22 +0000
Manifest next update: Tue 18 Mar 2025 10:01:22 +0000
Files and hashes: 1: R4SxW2vT-4f1J58Ym584GvyRmXE.crl (hash: rDd+FS/gE8WczpmpE7wKJyCell+fsBPIijasI/R+Ggg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:8d:03:ab:d4:e3:ad:18:e0:3f:a7:d4:52:09:b0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4784b15b6bd3fb87f5279f189b9f381afc919971
Validity
Not Before: Mar 17 10:01:22 2025 GMT
Not After : Mar 18 10:01:22 2025 GMT
Subject: CN=7d32d1596f56e42c09bc7a3258141c0e10ccfb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:92:70:9d:82:96:45:35:48:92:ca:e9:46:
7d:06:07:4d:4e:4b:61:1b:07:7c:56:23:44:9a:d5:
dc:90:e2:3a:50:06:cc:fa:9b:69:45:d6:2e:11:4c:
67:5e:39:e8:a1:85:b8:c1:cc:b9:30:ed:19:34:af:
14:6c:5b:36:d8:3a:f2:fa:9c:27:45:70:ee:4f:6f:
45:d0:1c:33:03:41:dc:b4:e6:1b:34:da:92:44:62:
70:e4:18:f9:89:9a:4e:b7:65:b7:76:b8:e5:a1:1b:
72:43:70:26:f1:f0:30:5e:bd:e1:3e:d9:e8:e8:aa:
0a:a5:03:6e:77:67:85:a9:48:e4:53:6c:67:a6:68:
1b:8e:55:b5:ca:ad:d6:3f:9a:2d:62:eb:d8:58:e4:
01:1d:52:66:68:0b:10:cb:c3:63:37:bd:4b:33:56:
d2:3f:3e:86:21:4f:35:3b:8c:24:4d:c2:b9:16:0f:
71:3c:22:a1:e2:a5:09:8f:1e:5a:02:ec:66:00:b3:
a5:a1:42:a2:75:c0:ab:84:d4:6b:3a:15:f4:2c:9b:
06:a9:5c:d8:b1:65:fc:b6:96:37:d1:89:f5:5a:b8:
8f:ab:1a:7a:89:c0:90:85:43:09:30:4f:bb:9b:6b:
e9:cf:db:1e:b0:94:5c:a3:02:bb:a9:cb:db:ac:30:
53:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:32:D1:59:6F:56:E4:2C:09:BC:7A:32:58:14:1C:0E:10:CC:FB:17
X509v3 Authority Key Identifier:
keyid:47:84:B1:5B:6B:D3:FB:87:F5:27:9F:18:9B:9F:38:1A:FC:91:99:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4SxW2vT-4f1J58Ym584GvyRmXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ffe8a0-9145-4217-b6d9-cae9a13d70ca/1/R4SxW2vT-4f1J58Ym584GvyRmXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ffe8a0-9145-4217-b6d9-cae9a13d70ca/1/R4SxW2vT-4f1J58Ym584GvyRmXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d2:66:5e:95:1c:16:76:6b:bb:c3:74:81:6d:6d:6c:0d:2f:
75:d7:85:e9:fe:89:a6:5d:f4:d5:6e:e8:dd:e9:7b:2c:82:83:
6d:07:98:a6:bd:b8:fc:fc:99:f7:2e:f4:db:59:1e:25:bc:00:
32:b6:6c:45:fd:6f:4a:98:8c:17:6f:07:4a:28:ec:63:24:7b:
f0:1d:72:b1:3b:53:9b:ad:c1:ee:66:9e:e9:a6:d0:55:85:32:
51:35:dc:e8:70:12:30:d2:b1:34:bf:f7:ec:29:06:dc:f2:40:
3d:64:e2:e2:f2:e4:39:60:72:a3:5a:37:26:1d:0b:92:d5:00:
67:aa:ab:7f:d7:b8:05:93:28:50:46:28:fc:8a:8f:3d:12:f1:
6c:fb:17:bb:51:e3:e5:ee:eb:8e:8c:a7:27:cc:a8:7a:16:5c:
9f:a6:70:cd:09:3b:c7:e1:0a:b4:f0:07:72:3a:a8:b4:eb:b1:
bf:35:14:00:d5:e3:30:62:2a:0d:49:62:0e:d2:9c:7f:b3:9e:
cf:70:be:10:33:90:ce:5b:e3:65:e6:e1:cd:b0:c4:9e:e5:d8:
5b:85:cb:96:c5:eb:98:de:21:74:65:db:c4:95:4e:c5:bf:e0:
77:58:e3:45:04:8e:1f:35:22:bb:35:a8:18:16:a7:65:a5:32:
bf:81:7e:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWjjQOr1OOtGOA/p9RSCbAdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ODRiMTViNmJkM2ZiODdmNTI3OWYxODliOWYzODFhZmM5
MTk5NzEwHhcNMjUwMzE3MTAwMTIyWhcNMjUwMzE4MTAwMTIyWjAzMTEwLwYDVQQD
Eyg3ZDMyZDE1OTZmNTZlNDJjMDliYzdhMzI1ODE0MWMwZTEwY2NmYjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuGScJ2ClkU1SJLK6UZ9BgdNTkth
Gwd8ViNEmtXckOI6UAbM+ptpRdYuEUxnXjnooYW4wcy5MO0ZNK8UbFs22Dry+pwn
RXDuT29F0BwzA0HctOYbNNqSRGJw5Bj5iZpOt2W3drjloRtyQ3Am8fAwXr3hPtno
6KoKpQNud2eFqUjkU2xnpmgbjlW1yq3WP5otYuvYWOQBHVJmaAsQy8NjN71LM1bS
Pz6GIU81O4wkTcK5Fg9xPCKh4qUJjx5aAuxmALOloUKidcCrhNRrOhX0LJsGqVzY
sWX8tpY30Yn1WriPqxp6icCQhUMJME+7m2vpz9sesJRcowK7qcvbrDBTiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0y0VlvVuQsCbx6MlgUHA4QzPsXMB8GA1UdIwQY
MBaAFEeEsVtr0/uH9SefGJufOBr8kZlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjRTeFcydlQtNGYxSjU4WW01ODRHdnlSbVhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mZmU4YTAtOTE0NS00MjE3LWI2ZDkt
Y2FlOWExM2Q3MGNhLzEvUjRTeFcydlQtNGYxSjU4WW01ODRHdnlSbVhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9mZmU4YTAtOTE0NS00MjE3LWI2ZDktY2FlOWExM2Q3MGNh
LzEvUjRTeFcydlQtNGYxSjU4WW01ODRHdnlSbVhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtJmXpUc
FnZru8N0gW1tbA0vddeF6f6Jpl301W7o3el7LIKDbQeYpr24/PyZ9y7021keJbwA
MrZsRf1vSpiMF28HSijsYyR78B1ysTtTm63B7mae6abQVYUyUTXc6HASMNKxNL/3
7CkG3PJAPWTi4vLkOWByo1o3Jh0LktUAZ6qrf9e4BZMoUEYo/IqPPRLxbPsXu1Hj
5e7rjoynJ8yoehZcn6ZwzQk7x+EKtPAHcjqotOuxvzUUANXjMGIqDUliDtKcf7Oe
z3C+EDOQzlvjZebhzbDEnuXYW4XLlsXrmN4hdGXbxJVOxb/gd1jjRQSOHzUiuzWo
GBanZaUyv4F+/g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:54 2025 by rpki-client