Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/28dab2-b9a7-492e-8625-fd1188fc59bd/1/In2aKDPXQRs1_yA45zADD88vmBM.mft
File: In2aKDPXQRs1_yA45zADD88vmBM.mft (raw, json)
Hash identifier: rM94WUXGB/u4X4uFeManHOXSPFp/jTRq0aMzsgYB9a8=
Subject key identifier: FA:CE:F5:88:69:B8:4F:64:44:A0:FB:56:81:D2:70:AC:66:06:B6:A2
Authority key identifier: 22:7D:9A:28:33:D7:41:1B:35:FF:20:38:E7:30:03:0F:CF:2F:98:13
Certificate issuer: /CN=227d9a2833d7411b35ff2038e730030fcf2f9813
Certificate serial: 019510C72A0C6BA93B9ABBDD4CF3B143CCE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/In2aKDPXQRs1_yA45zADD88vmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/28dab2-b9a7-492e-8625-fd1188fc59bd/1/In2aKDPXQRs1_yA45zADD88vmBM.mft
Manifest number: 0A1E
Signing time: Sun 16 Feb 2025 22:00:42 +0000
Manifest this update: Sun 16 Feb 2025 22:00:42 +0000
Manifest next update: Mon 17 Feb 2025 22:00:42 +0000
Files and hashes: 1: In2aKDPXQRs1_yA45zADD88vmBM.crl (hash: pdFaOCyvu9+mf4TVkcKHH7SL90n6JL0HvbdTxeJJulA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:2a:0c:6b:a9:3b:9a:bb:dd:4c:f3:b1:43:cc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=227d9a2833d7411b35ff2038e730030fcf2f9813
Validity
Not Before: Feb 16 22:00:42 2025 GMT
Not After : Feb 17 22:00:42 2025 GMT
Subject: CN=facef58869b84f6444a0fb5681d270ac6606b6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:3e:8f:4e:7e:3c:ed:58:a6:23:bc:1e:4d:
ae:80:3c:aa:a0:94:b2:ae:95:56:50:35:8c:23:96:
a9:b4:97:19:ca:4a:54:c4:21:6b:66:ce:50:45:c3:
6a:d6:78:1a:9f:16:a0:93:7e:48:2a:f3:73:ce:90:
56:1d:81:64:a0:03:5e:8e:2e:7e:36:41:08:0a:f4:
ce:3f:ad:55:4b:c7:4c:ef:0d:51:43:af:9e:94:93:
ba:1e:e0:06:1a:d0:6f:cf:a9:1a:a9:f6:59:77:9b:
fd:b1:cb:89:85:4d:24:a0:66:2d:13:f9:ff:56:29:
11:ca:26:97:90:2a:d5:00:91:32:f4:9b:33:d9:ba:
4a:38:bb:a1:81:5c:dc:4a:20:11:eb:b9:a3:0d:a7:
a6:fa:3d:f8:4f:c6:0b:05:53:1f:18:52:55:d0:82:
cf:ec:a6:b2:6d:51:c6:f8:5c:c3:d0:ec:b2:c7:99:
a6:a3:cd:5c:b4:e6:01:70:64:5d:3e:6f:96:d0:68:
3e:ea:cc:1c:ca:bd:85:0f:af:52:6e:b7:2b:22:ef:
66:0b:f4:a3:77:0c:b2:53:0b:f8:2f:04:37:bf:d9:
1e:88:46:f5:9a:e2:22:c9:f7:14:47:ae:5b:12:2f:
e3:1d:f4:0a:a1:0a:fe:d9:84:15:ac:ae:d9:11:8a:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CE:F5:88:69:B8:4F:64:44:A0:FB:56:81:D2:70:AC:66:06:B6:A2
X509v3 Authority Key Identifier:
keyid:22:7D:9A:28:33:D7:41:1B:35:FF:20:38:E7:30:03:0F:CF:2F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/In2aKDPXQRs1_yA45zADD88vmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/28dab2-b9a7-492e-8625-fd1188fc59bd/1/In2aKDPXQRs1_yA45zADD88vmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/28dab2-b9a7-492e-8625-fd1188fc59bd/1/In2aKDPXQRs1_yA45zADD88vmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b1:04:bd:d2:4f:3d:45:9e:9d:4f:08:2e:0e:5d:34:9c:95:
ad:7e:e7:0f:07:06:fb:2a:7e:f9:86:1c:be:49:1b:54:36:17:
6b:8b:a4:fa:e3:81:a7:d8:2a:50:db:c1:68:72:ba:8f:01:81:
b6:35:52:7d:72:64:24:70:08:e6:9b:d8:1f:a0:be:a1:1d:e4:
e3:a3:17:f9:31:44:ef:ae:98:c0:fd:b0:93:bf:2f:76:63:d6:
63:57:f6:e5:6f:20:ed:9a:a9:a9:d6:c2:1a:73:6c:be:41:34:
06:3b:c7:1b:e4:fd:20:dd:6a:b6:d2:2f:27:d0:d8:43:ca:b2:
26:71:9b:c0:fb:57:59:db:03:44:cd:d7:70:44:80:05:82:ba:
78:8b:1c:20:27:60:7e:72:69:06:bf:7a:8d:94:c4:8f:9c:4a:
bd:16:4f:a1:b9:b2:2b:5d:17:80:90:17:dc:35:0c:78:95:7d:
e2:09:f5:4c:24:e1:1b:fe:c0:79:48:f5:e1:67:80:a2:9d:55:
60:2a:37:d8:31:92:fa:20:f0:dc:0c:44:63:f2:53:71:e1:37:
39:be:99:e3:48:0f:36:bf:be:d0:ff:45:c6:88:48:64:b8:c2:
c9:eb:1a:b2:21:fa:bf:06:96:73:88:71:cf:04:75:02:fa:93:
8b:29:2b:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxyoMa6k7mrvdTPOxQ8zkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyN2Q5YTI4MzNkNzQxMWIzNWZmMjAzOGU3MzAwMzBmY2Yy
Zjk4MTMwHhcNMjUwMjE2MjIwMDQyWhcNMjUwMjE3MjIwMDQyWjAzMTEwLwYDVQQD
EyhmYWNlZjU4ODY5Yjg0ZjY0NDRhMGZiNTY4MWQyNzBhYzY2MDZiNmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojw+j05+PO1YpiO8Hk2ugDyqoJSy
rpVWUDWMI5aptJcZykpUxCFrZs5QRcNq1nganxagk35IKvNzzpBWHYFkoANeji5+
NkEICvTOP61VS8dM7w1RQ6+elJO6HuAGGtBvz6kaqfZZd5v9scuJhU0koGYtE/n/
VikRyiaXkCrVAJEy9Jsz2bpKOLuhgVzcSiAR67mjDaem+j34T8YLBVMfGFJV0ILP
7KaybVHG+FzD0Oyyx5mmo81ctOYBcGRdPm+W0Gg+6swcyr2FD69SbrcrIu9mC/Sj
dwyyUwv4LwQ3v9keiEb1muIiyfcUR65bEi/jHfQKoQr+2YQVrK7ZEYo1OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrO9YhpuE9kRKD7VoHScKxmBraiMB8GA1UdIwQY
MBaAFCJ9migz10EbNf8gOOcwAw/PL5gTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW4yYUtEUFhRUnMxX3lBNDV6QUREODh2bUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yOGRhYjItYjlhNy00OTJlLTg2MjUt
ZmQxMTg4ZmM1OWJkLzEvSW4yYUtEUFhRUnMxX3lBNDV6QUREODh2bUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8yOGRhYjItYjlhNy00OTJlLTg2MjUtZmQxMTg4ZmM1OWJk
LzEvSW4yYUtEUFhRUnMxX3lBNDV6QUREODh2bUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbEEvdJP
PUWenU8ILg5dNJyVrX7nDwcG+yp++YYcvkkbVDYXa4uk+uOBp9gqUNvBaHK6jwGB
tjVSfXJkJHAI5pvYH6C+oR3k46MX+TFE766YwP2wk78vdmPWY1f25W8g7ZqpqdbC
GnNsvkE0BjvHG+T9IN1qttIvJ9DYQ8qyJnGbwPtXWdsDRM3XcESABYK6eIscICdg
fnJpBr96jZTEj5xKvRZPobmyK10XgJAX3DUMeJV94gn1TCThG/7AeUj14WeAop1V
YCo32DGS+iDw3AxEY/JTceE3Ob6Z40gPNr++0P9FxohIZLjCyesasiH6vwaWc4hx
zwR1AvqTiykrPQ==
-----END CERTIFICATE-----
Generated at Sun May 11 23:39:44 2025 by rpki-client