Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
File: mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft (raw, json)
Hash identifier: Ul617KQ+FejkQWYqGhIe3oSiAks9dSiIL+tZJANp504=
Subject key identifier: DB:F0:FA:95:50:83:C3:53:17:9A:3C:9F:77:55:B2:E7:6C:1B:9D:E8
Authority key identifier: 9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
Certificate issuer: /CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Certificate serial: 0194BC3C19EF927D49F0D9624F241E5C37CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
Manifest number: 0877
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl (hash: X0rsdU6mFD3WoJ6zwvMwLS5gq+LkdH4B6bGpE7QH170=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:19:ef:92:7d:49:f0:d9:62:4f:24:1e:5c:37:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=dbf0fa955083c353179a3c9f7755b2e76c1b9de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:93:93:55:89:b3:77:56:dd:1a:6f:ce:40:7f:
0a:5d:8f:8d:9b:de:89:b6:f5:8d:7b:fb:ef:1d:78:
6b:84:36:b7:98:0b:69:eb:86:a0:1f:55:44:a3:5c:
2f:9c:f6:a2:86:e5:0b:40:3b:a6:e0:ce:c9:79:c6:
3c:9c:2c:f5:a3:2b:12:4f:c1:05:2b:37:80:24:4b:
10:91:4e:8e:c0:8a:f1:c8:96:6c:77:41:7f:1a:a2:
e6:bf:95:90:1a:c8:ed:6c:f7:e4:0f:75:d3:96:42:
29:31:09:ea:f9:7c:72:28:34:3a:40:f9:b2:70:19:
46:b9:65:cd:c0:f1:da:28:c5:f6:66:5e:47:8a:da:
5b:a2:04:3c:d3:5a:cb:3a:cb:65:ed:4d:8c:bc:15:
51:c0:13:d6:f4:9a:ec:e8:9c:59:24:a3:4f:dc:3f:
0f:56:6f:c6:f0:fe:14:49:86:f2:3a:bd:98:24:5a:
c3:4c:ee:50:39:f3:70:41:98:f4:29:c1:a5:20:20:
87:0a:61:45:2a:84:38:50:5c:80:8f:c1:3f:c3:85:
ea:4f:61:3e:05:58:60:04:f3:19:9e:3c:33:0e:9f:
18:c8:d4:a6:d0:95:06:95:16:cb:3f:fe:51:7c:3d:
2b:b3:f6:1e:65:3f:2f:53:2b:87:11:10:68:ec:a3:
7c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F0:FA:95:50:83:C3:53:17:9A:3C:9F:77:55:B2:E7:6C:1B:9D:E8
X509v3 Authority Key Identifier:
keyid:9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f4:05:4b:59:38:d3:51:92:5a:de:c1:52:a2:79:7c:75:ad:
bc:3a:86:48:2f:5c:a2:51:0b:ef:90:ed:32:ea:bf:22:4a:36:
cc:71:00:c8:b2:ca:3e:3c:cd:e6:10:81:07:b3:60:9f:e5:a8:
d9:ef:2b:68:b4:f6:3d:a0:fc:a9:51:53:34:0c:7d:75:5c:0d:
db:64:fc:c7:18:0f:19:9d:14:e2:13:cd:70:05:51:22:43:48:
60:66:91:f5:d3:71:83:11:3d:7d:b8:35:ca:9b:61:0e:e2:3f:
14:7e:7c:6e:2c:43:a3:c1:d3:09:f9:6a:8e:d0:77:d1:6d:b6:
86:6d:e3:82:ac:0c:92:20:59:6c:88:dd:a6:b3:c0:3d:6b:be:
5d:1b:85:75:44:b2:4f:8e:f4:4b:cf:ab:0c:ee:d9:ab:04:61:
1c:7f:b6:99:66:15:88:a7:ec:ea:06:c5:87:ed:c9:6d:79:ba:
7f:79:45:95:39:b9:1e:a2:06:ca:a1:93:3c:c8:fe:17:c0:c8:
d3:0c:54:e1:a9:60:02:34:04:3b:3f:b8:38:24:52:ac:5e:9c:
42:5d:09:d8:28:c5:40:9b:4d:f2:62:66:a5:ed:22:a6:28:4e:
ca:2a:23:c3:3c:44:d4:1b:2e:19:d4:24:83:b6:d4:0a:fd:1e:
7e:b4:46:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PBnvkn1J8NliTyQeXDfKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNmNjNTRiMzNjZjFmMTJlNTQwNmYwNjUyOWM1NGRkYzZl
ZmNmYmIwHhcNMjUwMTMxMTIwMDQyWhcNMjUwMjAxMTIwMDQyWjAzMTEwLwYDVQQD
EyhkYmYwZmE5NTUwODNjMzUzMTc5YTNjOWY3NzU1YjJlNzZjMWI5ZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpOTVYmzd1bdGm/OQH8KXY+Nm96J
tvWNe/vvHXhrhDa3mAtp64agH1VEo1wvnPaihuULQDum4M7JecY8nCz1oysST8EF
KzeAJEsQkU6OwIrxyJZsd0F/GqLmv5WQGsjtbPfkD3XTlkIpMQnq+XxyKDQ6QPmy
cBlGuWXNwPHaKMX2Zl5HitpbogQ801rLOstl7U2MvBVRwBPW9Jrs6JxZJKNP3D8P
Vm/G8P4USYbyOr2YJFrDTO5QOfNwQZj0KcGlICCHCmFFKoQ4UFyAj8E/w4XqT2E+
BVhgBPMZnjwzDp8YyNSm0JUGlRbLP/5RfD0rs/YeZT8vUyuHERBo7KN8gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvw+pVQg8NTF5o8n3dVsudsG53oMB8GA1UdIwQY
MBaAFJpsxUszzx8S5UBvBlKcVN3G78+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW16RlN6UFBIeExsUUc4R1VweFUzY2J2ejdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MTJhZmYtYmY2Yy00MmJlLTgwODAt
ZjdkZjYyYTY4ZDkyLzEvbW16RlN6UFBIeExsUUc4R1VweFUzY2J2ejdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy83MTJhZmYtYmY2Yy00MmJlLTgwODAtZjdkZjYyYTY4ZDky
LzEvbW16RlN6UFBIeExsUUc4R1VweFUzY2J2ejdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPQFS1k4
01GSWt7BUqJ5fHWtvDqGSC9colEL75DtMuq/Iko2zHEAyLLKPjzN5hCBB7Ngn+Wo
2e8raLT2PaD8qVFTNAx9dVwN22T8xxgPGZ0U4hPNcAVRIkNIYGaR9dNxgxE9fbg1
ypthDuI/FH58bixDo8HTCflqjtB30W22hm3jgqwMkiBZbIjdprPAPWu+XRuFdUSy
T470S8+rDO7ZqwRhHH+2mWYViKfs6gbFh+3JbXm6f3lFlTm5HqIGyqGTPMj+F8DI
0wxU4algAjQEOz+4OCRSrF6cQl0J2CjFQJtN8mJmpe0ipihOyiojwzxE1BsuGdQk
g7bUCv0efrRG4w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:12 2025 by rpki-client