Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File: MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier: MRTz5YoTf4MLukVUYeZQu2NLnugf182gOpSyiBURMqU=
Subject key identifier: A4:A6:77:A4:FA:7B:85:3A:E9:22:4B:3A:3A:14:A4:B1:69:06:DC:C0
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial: 0194BBCEFBFB2E392A09D631051E2333AFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: qDM61QxPw9uaHgccVGxClC1/QqtFFoo85Awvyn5sy9c=)
2: hldVZlO6d8WWA7-GTHuwlp4u6fM.roa (hash: fXvwRBJ+hinYD3qF0h+tIsxkZ7408ikqGqdWmZh6YUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fb:fb:2e:39:2a:09:d6:31:05:1e:23:33:af:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=a4a677a4fa7b853ae9224b3a3a14a4b16906dcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b6:68:76:dc:1a:ba:0d:54:50:a0:ed:5e:04:
80:7f:a4:ea:5d:b1:d9:09:30:11:94:3a:95:74:c3:
14:e5:2a:4d:93:7e:0f:31:c4:6a:23:78:e8:a7:9e:
c2:12:a5:e1:0d:0e:10:39:86:bc:ea:f7:91:23:cb:
3a:f1:db:7a:f2:3a:16:82:1a:fc:58:1f:ca:d8:db:
eb:ac:85:78:d9:bd:8f:7b:c9:76:db:04:ff:2b:58:
97:b8:c3:94:fb:f8:ad:24:60:e2:34:16:23:15:76:
1d:f9:89:0a:c2:c3:4f:d9:c9:a1:d2:ca:71:18:b1:
01:44:30:2c:fe:50:6c:99:7a:94:8b:74:3a:89:f2:
72:9e:c4:71:7e:f3:a0:f3:26:a9:c1:aa:7a:e3:56:
eb:bd:d7:c9:bf:e0:1c:06:a9:08:ca:df:3e:2a:d9:
70:4b:aa:43:87:65:0d:10:c4:d2:1a:75:b8:46:87:
5b:a3:42:4c:27:a2:6a:14:ef:23:9e:91:02:07:e4:
6a:cb:05:8b:24:3a:12:ed:76:b0:cc:29:82:1f:eb:
b9:1a:2c:0e:d3:4e:8c:00:86:b5:3d:5d:0d:e8:5e:
fd:b5:e0:dd:97:53:fb:df:74:99:dd:1a:07:1f:c5:
ec:d4:17:5f:29:af:76:d1:45:ea:69:58:18:6a:38:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A6:77:A4:FA:7B:85:3A:E9:22:4B:3A:3A:14:A4:B1:69:06:DC:C0
X509v3 Authority Key Identifier:
keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7e:39:c8:77:87:61:9c:e0:04:d7:19:20:dc:fc:57:73:3b:
d4:65:74:1c:62:53:3c:50:ba:8e:98:3a:08:2d:5e:ab:7b:f9:
61:01:90:09:1a:a3:1d:14:81:45:c5:82:d0:e6:8c:2b:34:42:
a0:40:d4:cd:25:7d:63:09:39:51:f8:39:b9:2f:61:f2:a8:4e:
5b:2f:88:7a:25:39:e4:06:74:e2:0a:dc:45:9c:7a:d4:fd:81:
1d:53:e6:d4:db:c6:9d:3b:58:f4:96:fa:a9:ae:16:18:f9:5f:
94:be:4e:93:fc:d9:11:9b:9b:da:a6:ed:23:1a:5c:15:d3:a2:
94:d9:63:a7:5b:3f:2a:fb:02:70:0b:0e:aa:87:bf:11:dc:70:
c5:84:80:a8:24:a2:fd:2c:7a:27:98:56:29:e4:e4:ff:09:eb:
ee:ba:d4:d9:25:36:49:3c:50:77:85:f1:95:6b:7a:68:c4:f7:
5d:d9:9f:03:1d:e6:9a:bc:88:4c:1d:1c:26:13:07:b5:6c:cf:
af:96:db:5e:63:39:eb:40:83:fb:76:8e:04:0b:aa:3e:92:f0:
bd:1b:95:15:b1:37:17:92:c4:b2:29:d3:cb:7e:27:c5:59:f8:
3a:71:ac:8f:21:6b:06:83:cd:08:44:90:ef:fa:54:7c:cf:0b:
2f:14:35:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zvv7LjkqCdYxBR4jM6/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYWVlMTFiMjk0MzU3MmQxMWJlY2M0MjVjNjg0YjQ4YmJi
MmNiZDQwHhcNMjUwMTMxMTAwMTMxWhcNMjUwMjAxMTAwMTMxWjAzMTEwLwYDVQQD
EyhhNGE2NzdhNGZhN2I4NTNhZTkyMjRiM2EzYTE0YTRiMTY5MDZkY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7Zodtwaug1UUKDtXgSAf6TqXbHZ
CTARlDqVdMMU5SpNk34PMcRqI3jop57CEqXhDQ4QOYa86veRI8s68dt68joWghr8
WB/K2NvrrIV42b2Pe8l22wT/K1iXuMOU+/itJGDiNBYjFXYd+YkKwsNP2cmh0spx
GLEBRDAs/lBsmXqUi3Q6ifJynsRxfvOg8yapwap641brvdfJv+AcBqkIyt8+Ktlw
S6pDh2UNEMTSGnW4Rodbo0JMJ6JqFO8jnpECB+RqywWLJDoS7XawzCmCH+u5GiwO
006MAIa1PV0N6F79teDdl1P733SZ3RoHH8Xs1BdfKa920UXqaVgYajhoIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSmd6T6e4U66SJLOjoUpLFpBtzAMB8GA1UdIwQY
MBaAFDCu4RspQ1ctEb7MQlxoS0i7ssvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUs3aEd5bERWeTBSdnN4Q1hHaExTTHV5eTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82ZmFlMDItMGMzNy00ZjA1LTgxYmEt
MWI0NmQyZWI1NDEyLzEvTUs3aEd5bERWeTBSdnN4Q1hHaExTTHV5eTlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS82ZmFlMDItMGMzNy00ZjA1LTgxYmEtMWI0NmQyZWI1NDEy
LzEvTUs3aEd5bERWeTBSdnN4Q1hHaExTTHV5eTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgX45yHeH
YZzgBNcZINz8V3M71GV0HGJTPFC6jpg6CC1eq3v5YQGQCRqjHRSBRcWC0OaMKzRC
oEDUzSV9Ywk5Ufg5uS9h8qhOWy+IeiU55AZ04grcRZx61P2BHVPm1NvGnTtY9Jb6
qa4WGPlflL5Ok/zZEZub2qbtIxpcFdOilNljp1s/KvsCcAsOqoe/EdxwxYSAqCSi
/Sx6J5hWKeTk/wnr7rrU2SU2STxQd4XxlWt6aMT3XdmfAx3mmryITB0cJhMHtWzP
r5bbXmM560CD+3aOBAuqPpLwvRuVFbE3F5LEsinTy34nxVn4OnGsjyFrBoPNCESQ
7/pUfM8LLxQ1pg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:59 2025 by rpki-client