Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/b74ffb-0f97-4a29-8072-8c7210b4bd8d/1/0CDh0pos-Lxy5pyxaKQE9iv71-Q.mft
File: 0CDh0pos-Lxy5pyxaKQE9iv71-Q.mft (raw, json)
Hash identifier: DUQBiA/cKbGMNKE/Zv6DyZlJEQ7hMlT7jgOsdv1ku1s=
Subject key identifier: D0:13:6E:9F:35:CB:F7:5C:1E:2E:BE:97:48:86:1A:DE:9F:9F:94:59
Authority key identifier: D0:20:E1:D2:9A:2C:F8:BC:72:E6:9C:B1:68:A4:04:F6:2B:FB:D7:E4
Certificate issuer: /CN=d020e1d29a2cf8bc72e69cb168a404f62bfbd7e4
Certificate serial: 0194CE18D6B8D18AF1B85D154AC52E1D8C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDh0pos-Lxy5pyxaKQE9iv71-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/b74ffb-0f97-4a29-8072-8c7210b4bd8d/1/0CDh0pos-Lxy5pyxaKQE9iv71-Q.mft
Manifest number: 01
Signing time: Mon 03 Feb 2025 23:15:21 +0000
Manifest this update: Mon 03 Feb 2025 23:15:21 +0000
Manifest next update: Tue 04 Feb 2025 23:15:21 +0000
Files and hashes: 1: 0CDh0pos-Lxy5pyxaKQE9iv71-Q.crl (hash: 58uF2lAFlXNS/puyigT86PcBWfS2jMpgbpGZbyc8yrk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ce:18:d6:b8:d1:8a:f1:b8:5d:15:4a:c5:2e:1d:8c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020e1d29a2cf8bc72e69cb168a404f62bfbd7e4
Validity
Not Before: Feb 3 23:15:21 2025 GMT
Not After : Feb 4 23:15:21 2025 GMT
Subject: CN=d0136e9f35cbf75c1e2ebe9748861ade9f9f9459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:07:52:fd:dd:0f:ae:cc:9e:97:02:2d:bb:56:
eb:4d:25:d0:cd:50:e7:c3:e6:18:6b:33:c5:3f:07:
01:b5:58:24:d9:cb:93:80:e3:08:0a:76:8f:43:f4:
b2:2d:1d:10:44:59:3b:c7:1a:bc:71:07:cc:ec:3e:
33:a8:25:3f:ef:ad:9c:6e:0d:b6:b7:81:0d:75:48:
9a:a7:b6:56:98:3a:b5:df:6c:e4:e8:d2:44:cd:6e:
39:c6:4a:73:df:a5:86:30:f1:b4:d0:b7:21:25:6d:
f5:f2:2a:a0:2d:47:ed:4a:08:56:00:fe:ba:83:3b:
0c:1b:71:ac:fd:5a:1e:cf:b9:9c:42:37:bb:1a:fc:
6a:14:f1:32:b8:91:d2:1e:6e:24:82:2c:3c:f4:2e:
c4:98:e6:a5:94:11:6c:f5:94:41:0d:b7:bf:72:5d:
c3:9e:d4:59:e5:95:f4:a6:94:16:fa:6b:fb:e3:c7:
73:39:d8:4b:ca:54:41:6c:ac:c2:06:a3:ed:bf:19:
6e:98:ed:b1:5f:0f:b7:9a:9c:5d:94:67:d6:ca:ee:
7f:de:c0:ae:85:0d:b8:63:a3:c4:a0:87:bc:fb:a5:
23:a8:19:81:5a:7c:8f:ea:cf:f9:3e:a5:62:05:3f:
6d:d0:21:dd:e3:e0:c2:e6:27:6d:08:25:ff:b1:78:
a0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:13:6E:9F:35:CB:F7:5C:1E:2E:BE:97:48:86:1A:DE:9F:9F:94:59
X509v3 Authority Key Identifier:
keyid:D0:20:E1:D2:9A:2C:F8:BC:72:E6:9C:B1:68:A4:04:F6:2B:FB:D7:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDh0pos-Lxy5pyxaKQE9iv71-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74ffb-0f97-4a29-8072-8c7210b4bd8d/1/0CDh0pos-Lxy5pyxaKQE9iv71-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74ffb-0f97-4a29-8072-8c7210b4bd8d/1/0CDh0pos-Lxy5pyxaKQE9iv71-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:cb:5c:4b:9f:52:bd:26:c9:e0:a8:c4:3a:95:c4:31:ea:62:
f7:b6:70:4a:52:9e:9c:03:25:03:31:9f:5c:75:7c:db:6b:e8:
4d:71:53:6f:3f:f8:ab:63:17:b2:b0:ec:e9:39:ca:8f:4b:87:
f7:67:90:7c:e1:e3:0c:6e:2a:27:01:15:93:25:a0:e3:c7:d2:
f3:b3:a3:6a:40:b0:5a:5f:52:ff:12:97:71:09:21:33:59:c0:
20:8a:67:f3:e5:4d:44:5c:84:7e:84:e7:c8:5e:4a:a8:8d:ec:
ed:39:ad:3c:7e:ee:d8:f7:3a:60:cb:68:4d:03:11:b9:8c:5a:
55:0b:8c:7d:f9:64:32:12:59:6f:5c:49:54:0e:5e:89:1f:00:
bd:7c:1e:86:b5:d5:45:20:ea:54:06:d2:7d:95:a5:d3:ec:03:
d7:c2:48:08:56:b5:d0:60:0d:0c:e8:7e:5d:52:b4:ac:84:54:
54:61:59:83:ba:e5:6f:fc:5d:1f:1e:28:b2:f9:fa:e1:19:a1:
6e:ea:d2:23:c3:ca:64:ba:ef:9c:25:55:ce:61:2e:78:67:22:
39:3f:b1:91:64:7e:5b:eb:b2:0d:73:68:b9:06:e6:ec:dd:67:
d6:78:91:4a:c8:c5:a1:91:fb:49:f2:c2:4a:86:8c:ae:8a:00:
15:a0:e1:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTOGNa40YrxuF0VSsUuHYyGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjBlMWQyOWEyY2Y4YmM3MmU2OWNiMTY4YTQwNGY2MmJm
YmQ3ZTQwHhcNMjUwMjAzMjMxNTIxWhcNMjUwMjA0MjMxNTIxWjAzMTEwLwYDVQQD
EyhkMDEzNmU5ZjM1Y2JmNzVjMWUyZWJlOTc0ODg2MWFkZTlmOWY5NDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wdS/d0PrsyelwItu1brTSXQzVDn
w+YYazPFPwcBtVgk2cuTgOMICnaPQ/SyLR0QRFk7xxq8cQfM7D4zqCU/762cbg22
t4ENdUiap7ZWmDq132zk6NJEzW45xkpz36WGMPG00LchJW318iqgLUftSghWAP66
gzsMG3Gs/Voez7mcQje7GvxqFPEyuJHSHm4kgiw89C7EmOallBFs9ZRBDbe/cl3D
ntRZ5ZX0ppQW+mv748dzOdhLylRBbKzCBqPtvxlumO2xXw+3mpxdlGfWyu5/3sCu
hQ24Y6PEoIe8+6UjqBmBWnyP6s/5PqViBT9t0CHd4+DC5idtCCX/sXigAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNATbp81y/dcHi6+l0iGGt6fn5RZMB8GA1UdIwQY
MBaAFNAg4dKaLPi8cuacsWikBPYr+9fkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENEaDBwb3MtTHh5NXB5eGFLUUU5aXY3MS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iNzRmZmItMGY5Ny00YTI5LTgwNzIt
OGM3MjEwYjRiZDhkLzEvMENEaDBwb3MtTHh5NXB5eGFLUUU5aXY3MS1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9iNzRmZmItMGY5Ny00YTI5LTgwNzItOGM3MjEwYjRiZDhk
LzEvMENEaDBwb3MtTHh5NXB5eGFLUUU5aXY3MS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAastcS59S
vSbJ4KjEOpXEMepi97ZwSlKenAMlAzGfXHV822voTXFTbz/4q2MXsrDs6TnKj0uH
92eQfOHjDG4qJwEVkyWg48fS87OjakCwWl9S/xKXcQkhM1nAIIpn8+VNRFyEfoTn
yF5KqI3s7TmtPH7u2Pc6YMtoTQMRuYxaVQuMfflkMhJZb1xJVA5eiR8AvXwehrXV
RSDqVAbSfZWl0+wD18JICFa10GANDOh+XVK0rIRUVGFZg7rlb/xdHx4osvn64Rmh
burSI8PKZLrvnCVVzmEueGciOT+xkWR+W+uyDXNouQbm7N1n1niRSsjFoZH7SfLC
SoaMrooAFaDhag==
-----END CERTIFICATE-----
Generated at Mon May 12 19:59:27 2025 by rpki-client