Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.mft
File: _drec0yM3oXb9k0PdWr955y8gCM.mft (raw, json)
Hash identifier: 12zOi8HeVycGxznCFE/42LYFy69GSHZv9JKS5vSev+I=
Subject key identifier: 49:AE:1C:67:A2:DC:9F:2D:84:7E:72:D3:E7:2D:C4:89:06:BB:4E:1F
Authority key identifier: FD:DA:DE:73:4C:8C:DE:85:DB:F6:4D:0F:75:6A:FD:E7:9C:BC:80:23
Certificate issuer: /CN=fddade734c8cde85dbf64d0f756afde79cbc8023
Certificate serial: 019546DACBA430856AC3D6584C4899527E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_drec0yM3oXb9k0PdWr955y8gCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.mft
Manifest number: 0B41
Signing time: Thu 27 Feb 2025 10:01:38 +0000
Manifest this update: Thu 27 Feb 2025 10:01:38 +0000
Manifest next update: Fri 28 Feb 2025 10:01:38 +0000
Files and hashes: 1: _drec0yM3oXb9k0PdWr955y8gCM.crl (hash: vQZkmhrhYHrBrxQZ4h3b3uFel+fcTy+QM3VAbNP0X6Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:da:cb:a4:30:85:6a:c3:d6:58:4c:48:99:52:7e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fddade734c8cde85dbf64d0f756afde79cbc8023
Validity
Not Before: Feb 27 10:01:38 2025 GMT
Not After : Feb 28 10:01:38 2025 GMT
Subject: CN=49ae1c67a2dc9f2d847e72d3e72dc48906bb4e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:27:07:6f:6a:eb:c4:96:19:03:b7:6d:2f:
ab:32:a5:55:1b:ca:11:19:2d:76:f7:c3:57:e0:db:
76:30:96:70:d0:45:ab:f8:91:18:79:64:a9:7d:6b:
26:63:57:ac:8f:27:5c:30:8e:6b:f7:da:04:ac:8b:
8f:6d:e5:0a:fd:4f:db:cd:bf:62:99:16:05:30:90:
ec:dd:cb:a8:49:c8:19:cc:9c:26:9e:25:0a:72:ef:
42:1a:ea:e7:5a:d3:15:26:52:7b:21:f8:82:0f:f8:
54:bc:1c:46:41:a7:10:38:57:d0:d5:9f:ef:81:9a:
ec:2a:76:07:dc:a1:13:eb:69:a6:ca:26:63:0c:bd:
67:a9:4c:f9:65:58:cb:b1:25:c0:bf:07:5e:18:79:
df:1b:df:dd:fd:29:b3:ca:24:f5:18:47:ea:b5:98:
83:90:78:d8:cd:8f:aa:03:49:cd:67:99:f5:c4:22:
42:72:4a:ce:aa:f7:04:90:29:e7:61:b7:28:49:4e:
ac:5f:f3:fd:d6:b8:ce:6a:b5:c9:5a:16:d6:1b:a3:
24:62:db:37:e6:e7:11:06:b1:96:79:9f:f4:93:0a:
45:95:39:50:7d:5d:06:58:d0:83:53:c4:47:93:db:
b0:cb:42:17:ff:0c:e4:0d:72:79:57:4b:fa:40:3b:
f1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AE:1C:67:A2:DC:9F:2D:84:7E:72:D3:E7:2D:C4:89:06:BB:4E:1F
X509v3 Authority Key Identifier:
keyid:FD:DA:DE:73:4C:8C:DE:85:DB:F6:4D:0F:75:6A:FD:E7:9C:BC:80:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_drec0yM3oXb9k0PdWr955y8gCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:93:3a:a9:e6:84:e8:df:f7:44:8b:04:41:09:44:7e:f9:a6:
0a:31:ee:33:12:46:20:53:a3:0d:56:92:99:7a:03:83:14:95:
27:0d:30:21:92:9d:a9:a1:2f:fe:87:8a:73:1a:1e:ba:f4:e9:
52:aa:d6:07:da:6d:2a:c2:65:51:a4:66:cb:24:14:10:69:d4:
d3:e2:05:8d:87:60:83:81:be:90:80:aa:54:70:94:f6:1a:85:
14:36:e0:66:01:4c:ad:7c:11:f5:bd:28:b1:0c:e1:a2:64:3f:
29:c9:9f:a8:43:b1:98:8a:88:5a:51:ea:01:fe:15:08:0c:c2:
6d:4f:de:c7:f5:6e:ef:72:e8:5b:b3:80:20:df:6f:a9:c8:64:
2f:21:de:e5:9e:ef:81:79:f2:9a:1b:f8:5a:90:0b:03:72:34:
13:d8:9a:6c:2e:4d:9c:08:cf:43:c2:d5:db:1d:b7:23:eb:b7:
66:f4:fd:19:70:ec:f1:a9:13:22:a2:73:5e:3d:08:ef:a5:6b:
d8:47:54:49:4e:96:76:03:cd:bd:a0:c3:09:10:cf:33:2a:ca:
50:8c:ea:37:9f:43:2f:e3:98:b3:8d:77:43:16:a7:89:f9:70:
22:fa:28:d2:f2:d9:2c:2d:88:67:34:31:63:a0:9a:e0:6e:21:
63:7f:26:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVG2sukMIVqw9ZYTEiZUn6DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZGFkZTczNGM4Y2RlODVkYmY2NGQwZjc1NmFmZGU3OWNi
YzgwMjMwHhcNMjUwMjI3MTAwMTM4WhcNMjUwMjI4MTAwMTM4WjAzMTEwLwYDVQQD
Eyg0OWFlMWM2N2EyZGM5ZjJkODQ3ZTcyZDNlNzJkYzQ4OTA2YmI0ZTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMQnB29q68SWGQO3bS+rMqVVG8oR
GS1298NX4Nt2MJZw0EWr+JEYeWSpfWsmY1esjydcMI5r99oErIuPbeUK/U/bzb9i
mRYFMJDs3cuoScgZzJwmniUKcu9CGurnWtMVJlJ7IfiCD/hUvBxGQacQOFfQ1Z/v
gZrsKnYH3KET62mmyiZjDL1nqUz5ZVjLsSXAvwdeGHnfG9/d/SmzyiT1GEfqtZiD
kHjYzY+qA0nNZ5n1xCJCckrOqvcEkCnnYbcoSU6sX/P91rjOarXJWhbWG6MkYts3
5ucRBrGWeZ/0kwpFlTlQfV0GWNCDU8RHk9uwy0IX/wzkDXJ5V0v6QDvxxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmuHGei3J8thH5y0+ctxIkGu04fMB8GA1UdIwQY
MBaAFP3a3nNMjN6F2/ZND3Vq/eecvIAjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RyZWMweU0zb1hiOWswUGRXcjk1NXk4Z0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wZjVmZjktYmFlOC00MzQ1LTgwNWMt
Y2JjMzU5N2RjNTdjLzEvX2RyZWMweU0zb1hiOWswUGRXcjk1NXk4Z0NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wZjVmZjktYmFlOC00MzQ1LTgwNWMtY2JjMzU5N2RjNTdj
LzEvX2RyZWMweU0zb1hiOWswUGRXcjk1NXk4Z0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZM6qeaE
6N/3RIsEQQlEfvmmCjHuMxJGIFOjDVaSmXoDgxSVJw0wIZKdqaEv/oeKcxoeuvTp
UqrWB9ptKsJlUaRmyyQUEGnU0+IFjYdgg4G+kICqVHCU9hqFFDbgZgFMrXwR9b0o
sQzhomQ/KcmfqEOxmIqIWlHqAf4VCAzCbU/ex/Vu73LoW7OAIN9vqchkLyHe5Z7v
gXnymhv4WpALA3I0E9iabC5NnAjPQ8LV2x23I+u3ZvT9GXDs8akTIqJzXj0I76Vr
2EdUSU6WdgPNvaDDCRDPMyrKUIzqN59DL+OYs413QxaniflwIvoo0vLZLC2IZzQx
Y6Ca4G4hY38mPg==
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:53:42 2025 by rpki-client on console.sobornost.net