Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.mft
File: h1_IAkLS5p69DyK148xFdZSukKw.mft (raw, json)
Hash identifier: j8H2p3SlYCvxMxsmNx/lUnly9BfPrIvQFY2E8l9+Ta8=
Subject key identifier: C0:E5:C6:B4:91:E9:CC:79:51:17:22:E2:64:2C:F7:6E:0D:FB:65:26
Authority key identifier: 87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC
Certificate issuer: /CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
Certificate serial: 019371243D40B83F92AA482AA5471F9ED531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.mft
Manifest number: 08C7
Signing time: Thu 28 Nov 2024 05:00:20 +0000
Manifest this update: Thu 28 Nov 2024 05:00:20 +0000
Manifest next update: Fri 29 Nov 2024 05:00:20 +0000
Files and hashes: 1: h1_IAkLS5p69DyK148xFdZSukKw.crl (hash: UZMa+xTfePCZTIreJ5DvoVNYVH58KFW5BRbzF7H/nXA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:71:24:3d:40:b8:3f:92:aa:48:2a:a5:47:1f:9e:d5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
Validity
Not Before: Nov 28 05:00:20 2024 GMT
Not After : Nov 29 05:00:20 2024 GMT
Subject: CN=c0e5c6b491e9cc79511722e2642cf76e0dfb6526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:78:76:09:4c:42:3d:da:cd:75:59:56:21:44:
10:45:66:50:43:d8:f2:88:32:8d:c5:33:b5:fc:4a:
51:14:fe:b1:37:e6:b6:4a:2f:d4:58:d9:82:82:bd:
13:91:50:d2:ba:ec:48:3c:a4:f1:f2:06:9f:99:ac:
0a:1c:ab:77:0a:00:c1:f7:72:a9:98:46:47:d9:46:
2e:43:87:c8:c0:63:a8:ca:b0:39:da:ec:ff:ac:4e:
28:97:ad:49:50:4f:b2:a5:38:a1:1d:85:98:44:2c:
ea:3e:d6:14:2d:cb:2e:23:d8:4c:88:40:be:ba:46:
3d:cf:ab:b8:eb:86:c7:14:7a:fc:df:85:cc:83:83:
a6:76:de:10:6f:0f:cc:6f:80:dc:b9:af:77:94:db:
63:a7:26:51:76:2a:fa:fd:ba:0a:6a:2a:2c:37:1a:
67:9c:b1:65:36:a0:1f:c3:7f:8b:c0:84:77:62:77:
8d:c6:df:02:44:5a:ee:5f:85:84:aa:16:af:7b:46:
cf:2c:f8:b5:f9:dd:6b:50:ae:a9:46:b6:68:7b:2f:
13:32:c3:71:02:cc:db:48:9d:65:32:d8:d6:0e:e4:
de:3e:03:31:37:18:bd:28:7b:b8:b6:03:fc:8b:61:
a0:6d:a8:9e:12:7a:27:c5:b7:4e:69:a9:79:2f:99:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E5:C6:B4:91:E9:CC:79:51:17:22:E2:64:2C:F7:6E:0D:FB:65:26
X509v3 Authority Key Identifier:
keyid:87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0e:53:4d:1a:60:fd:ae:a0:fd:98:13:03:b2:25:3f:fe:51:
ad:53:8d:58:70:3b:96:98:15:8c:66:6d:5f:de:01:22:f1:78:
65:f3:b8:64:a0:da:7b:26:a3:29:ba:0e:5d:2f:c9:94:d6:88:
af:28:f2:83:46:51:b0:dd:f8:96:09:a0:fe:c8:fc:55:28:91:
4a:f0:d3:7a:8e:85:98:67:78:8a:70:05:56:24:49:1f:fe:44:
af:52:a7:61:7b:4d:f7:ee:4c:3f:0f:59:3c:f3:ac:db:cd:e7:
5e:08:52:3c:4c:5e:92:61:bd:22:95:ad:fc:1a:b6:c0:69:fb:
ef:c4:be:1e:f8:26:43:d7:8e:c6:2f:b3:5d:2a:10:d1:e9:b1:
5d:62:2c:da:3a:91:46:6e:6d:79:77:0f:cc:59:db:08:b1:2f:
4e:5c:2c:45:54:2e:aa:9b:90:14:4b:17:38:f6:d8:93:a4:a0:
51:32:87:88:b7:a0:86:bb:bb:82:2f:07:b4:e1:bd:a8:ea:7f:
02:13:45:f8:74:c5:e2:1e:19:fd:2a:7d:7b:b4:7f:21:bc:fa:
95:f3:8a:ce:5b:1f:df:85:e2:0d:10:7a:6a:7b:e8:c6:24:77:
37:79:9e:a2:80:a7:7a:b9:b6:78:f7:2d:85:31:23:16:29:db:
9d:f2:50:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNxJD1AuD+SqkgqpUcfntUxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NWZjODAyNDJkMmU2OWViZDBmMjJiNWUzY2M0NTc1OTRh
ZTkwYWMwHhcNMjQxMTI4MDUwMDIwWhcNMjQxMTI5MDUwMDIwWjAzMTEwLwYDVQQD
EyhjMGU1YzZiNDkxZTljYzc5NTExNzIyZTI2NDJjZjc2ZTBkZmI2NTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23h2CUxCPdrNdVlWIUQQRWZQQ9jy
iDKNxTO1/EpRFP6xN+a2Si/UWNmCgr0TkVDSuuxIPKTx8gafmawKHKt3CgDB93Kp
mEZH2UYuQ4fIwGOoyrA52uz/rE4ol61JUE+ypTihHYWYRCzqPtYULcsuI9hMiEC+
ukY9z6u464bHFHr834XMg4Omdt4Qbw/Mb4Dcua93lNtjpyZRdir6/boKaiosNxpn
nLFlNqAfw3+LwIR3YneNxt8CRFruX4WEqhave0bPLPi1+d1rUK6pRrZoey8TMsNx
AszbSJ1lMtjWDuTePgMxNxi9KHu4tgP8i2GgbaieEnonxbdOaal5L5nWVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDlxrSR6cx5URci4mQs924N+2UmMB8GA1UdIwQY
MBaAFIdfyAJC0uaevQ8itePMRXWUrpCsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDFfSUFrTFM1cDY5RHlLMTQ4eEZkWlN1a0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82MTAyNWYtNDNkYS00MzdkLWIwMTAt
Y2M0OWU1MzRkYjAwLzEvaDFfSUFrTFM1cDY5RHlLMTQ4eEZkWlN1a0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi82MTAyNWYtNDNkYS00MzdkLWIwMTAtY2M0OWU1MzRkYjAw
LzEvaDFfSUFrTFM1cDY5RHlLMTQ4eEZkWlN1a0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQ5TTRpg
/a6g/ZgTA7IlP/5RrVONWHA7lpgVjGZtX94BIvF4ZfO4ZKDaeyajKboOXS/JlNaI
ryjyg0ZRsN34lgmg/sj8VSiRSvDTeo6FmGd4inAFViRJH/5Er1KnYXtN9+5MPw9Z
PPOs283nXghSPExekmG9IpWt/Bq2wGn778S+HvgmQ9eOxi+zXSoQ0emxXWIs2jqR
Rm5teXcPzFnbCLEvTlwsRVQuqpuQFEsXOPbYk6SgUTKHiLeghru7gi8HtOG9qOp/
AhNF+HTF4h4Z/Sp9e7R/Ibz6lfOKzlsf34XiDRB6anvoxiR3N3meooCnerm2ePct
hTEjFinbnfJQPw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:38 2025 by rpki-client