Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier: ET8so72qxhfF5CWsMPRqxq6ifEy5j94zOo9lVqP/YT4=
Subject key identifier: E4:51:E3:7F:09:9F:8B:B0:14:97:C3:2B:F4:93:06:C8:99:BD:CB:7A
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 0194BBCDE09D20036587FBD15E229711FCB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: ApyGylUq9XnJnWFVsfj0zntPv2A.roa (hash: J/AU6L4U60tQsws5n8ktoibPaB7afggy7L2/aS0YmuI=)
2: GebDZHzgUSVpcN28Yg77a-VI06g.roa (hash: dm+f03y/iSx5h5jyotT9d+cvRSI3pxxJ+UatUa1LFiM=)
3: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: fNFc2kj8zCEAIrMGwDVUWE67gcJqH4o3kixjeEy9g7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e0:9d:20:03:65:87:fb:d1:5e:22:97:11:fc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=e451e37f099f8bb01497c32bf49306c899bdcb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:b1:81:c5:cd:0e:0a:f3:5f:1b:fd:91:6b:
73:92:18:8a:80:25:e9:72:10:01:97:0e:23:18:c2:
0d:b5:60:55:2f:cd:d8:d4:bf:34:a8:42:54:c7:09:
c7:90:9a:29:54:38:5e:e9:79:1a:8c:da:78:a0:11:
08:30:9c:5c:12:b2:2a:f9:a1:53:11:67:89:10:ac:
61:36:85:4a:6b:16:46:eb:13:48:4c:fc:15:f4:26:
d7:be:cf:ee:26:c1:2d:d7:8d:19:bb:9c:84:22:da:
b1:9c:6a:74:dc:12:02:94:50:a2:f2:26:77:3b:08:
8d:6a:4e:76:21:cb:90:90:af:22:b6:d3:7c:02:91:
98:11:25:e2:69:87:f4:cd:e4:c1:4d:20:3c:33:ba:
76:ca:c6:7f:04:04:f6:0c:42:21:73:04:f2:0b:11:
16:a4:95:b1:63:ae:4b:d0:0b:a0:91:e7:1f:8f:f9:
ea:70:76:4c:47:cd:ac:3c:59:08:8b:83:8e:4f:39:
d7:97:b7:05:7b:18:0a:b5:b4:1a:d6:15:0b:6f:6e:
8c:f9:0e:fe:bd:99:78:ee:a1:f1:e1:cf:56:f4:03:
ab:c3:64:04:eb:fb:7e:a8:3b:4f:1b:ec:0e:37:a1:
81:d5:7f:c5:1d:02:0d:6a:01:48:6f:78:b2:ef:91:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:51:E3:7F:09:9F:8B:B0:14:97:C3:2B:F4:93:06:C8:99:BD:CB:7A
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:94:b1:c0:ae:db:ba:e9:1d:50:6d:6d:57:d2:32:3b:33:41:
16:ce:d8:96:b8:67:3c:70:5d:04:4b:c3:34:84:42:13:07:0e:
eb:34:0d:4f:7e:94:30:dd:7a:8a:97:49:ad:de:f7:f8:96:11:
d6:25:99:1b:a4:df:84:b4:4c:74:a4:65:ee:f7:ef:ea:d7:f4:
36:a5:0e:44:9d:e5:72:16:53:09:1b:69:fa:48:2a:c3:2f:98:
4a:cc:94:47:bd:40:a3:a3:dc:22:13:4e:ca:65:4a:b4:24:76:
e5:0a:5c:f8:7c:ef:af:e0:02:4b:fd:bf:ef:44:31:de:43:fd:
2c:2b:26:d9:6e:36:af:ec:2e:c4:2a:35:e3:5d:c8:8a:59:8d:
ba:9d:6b:da:86:94:1c:2d:6b:69:0d:d3:e9:72:bb:6f:c2:54:
4f:9c:96:41:2a:f5:8b:97:e2:69:c7:d8:8e:0e:96:ec:2d:17:
7c:c4:2d:29:2f:d9:d3:d5:56:26:fa:9b:2e:8f:1b:c5:ee:ca:
05:04:da:60:61:9a:8a:e0:95:89:4e:17:28:86:0b:28:f4:f6:
58:17:de:74:ea:0e:a6:29:c0:ba:83:2f:5e:d3:b7:12:b2:b3:
27:a9:53:cb:dd:53:a3:1b:bc:22:ec:82:13:7d:63:7d:eb:e1:
ec:a0:ad:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zeCdIANlh/vRXiKXEfywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx
NGMzY2IwHhcNMjUwMTMxMTAwMDE5WhcNMjUwMjAxMTAwMDE5WjAzMTEwLwYDVQQD
EyhlNDUxZTM3ZjA5OWY4YmIwMTQ5N2MzMmJmNDkzMDZjODk5YmRjYjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc+xgcXNDgrzXxv9kWtzkhiKgCXp
chABlw4jGMINtWBVL83Y1L80qEJUxwnHkJopVDhe6XkajNp4oBEIMJxcErIq+aFT
EWeJEKxhNoVKaxZG6xNITPwV9CbXvs/uJsEt140Zu5yEItqxnGp03BIClFCi8iZ3
OwiNak52IcuQkK8ittN8ApGYESXiaYf0zeTBTSA8M7p2ysZ/BAT2DEIhcwTyCxEW
pJWxY65L0Augkecfj/nqcHZMR82sPFkIi4OOTznXl7cFexgKtbQa1hULb26M+Q7+
vZl47qHx4c9W9AOrw2QE6/t+qDtPG+wON6GB1X/FHQINagFIb3iy75Fc4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORR438Jn4uwFJfDK/STBsiZvct6MB8GA1UdIwQY
MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt
MWRkNmQyODFjODhhLzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh
LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5SxwK7b
uukdUG1tV9IyOzNBFs7YlrhnPHBdBEvDNIRCEwcO6zQNT36UMN16ipdJrd73+JYR
1iWZG6TfhLRMdKRl7vfv6tf0NqUORJ3lchZTCRtp+kgqwy+YSsyUR71Ao6PcIhNO
ymVKtCR25Qpc+Hzvr+ACS/2/70Qx3kP9LCsm2W42r+wuxCo1413IilmNup1r2oaU
HC1raQ3T6XK7b8JUT5yWQSr1i5fiacfYjg6W7C0XfMQtKS/Z09VWJvqbLo8bxe7K
BQTaYGGaiuCViU4XKIYLKPT2WBfedOoOpinAuoMvXtO3ErKzJ6lTy91Toxu8IuyC
E31jfevh7KCtCA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:29 2025 by rpki-client