Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
File: MptRPmVwb8qlQ6EaDkLSixCd87Y.mft (raw, json)
Hash identifier: N120duAOtc/et+KQdzsQHPi6mX25w7xHfAlRRy2r8mg=
Subject key identifier: 28:B1:13:66:0E:29:41:73:02:57:50:03:E6:EB:81:AA:91:FC:74:85
Authority key identifier: 32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6
Certificate issuer: /CN=329b513e65706fcaa543a11a0e42d28b109df3b6
Certificate serial: 0194BC04AEB2CD8C42830F1829BDD9D6B574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
Manifest number: 1138
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: MptRPmVwb8qlQ6EaDkLSixCd87Y.crl (hash: bip7ojK6syC8sAKWQ6QUaOG5ameHdVkurn//vSx2LIQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ae:b2:cd:8c:42:83:0f:18:29:bd:d9:d6:b5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=329b513e65706fcaa543a11a0e42d28b109df3b6
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=28b113660e29417302575003e6eb81aa91fc7485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:9e:d6:15:3f:e6:3e:25:55:2a:aa:e3:c7:
f6:06:36:15:c9:87:09:63:79:20:30:b9:e1:ce:00:
fb:96:2c:64:be:22:59:d2:a4:19:f2:2e:de:cf:66:
6d:97:60:1c:3b:8d:99:31:42:55:ff:d7:bc:7c:bd:
47:fb:73:b7:64:84:29:a5:03:37:81:50:f4:90:0d:
60:d9:25:81:c6:1c:1f:c4:4d:2f:fe:51:5a:75:69:
28:5a:7b:8f:c3:58:83:e2:e7:3b:e0:3d:5e:ee:e5:
54:13:25:87:fd:33:48:18:84:b4:c0:32:69:1a:72:
70:41:ba:74:37:66:b7:5c:5b:37:89:d5:d5:1c:2d:
49:2a:89:3c:eb:94:67:d3:44:37:96:1f:d9:99:2d:
51:7b:d1:df:b7:4b:65:4d:b1:8c:6c:66:2c:6b:8b:
44:06:5d:83:ef:ae:58:8a:e1:f4:2f:60:a4:09:67:
fb:a4:cf:15:39:40:cc:a7:f9:0d:0a:e0:a8:63:6b:
b5:0e:b4:42:34:47:3e:64:a1:7f:ab:7c:c9:4e:5b:
17:c9:fc:43:50:98:c9:ff:d5:64:ee:64:9d:7f:ba:
7f:39:6d:08:c6:5f:29:b7:29:a4:66:09:a1:8f:df:
b5:b6:fe:8b:f6:b0:6a:09:27:9e:2d:4c:13:5b:fc:
5a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B1:13:66:0E:29:41:73:02:57:50:03:E6:EB:81:AA:91:FC:74:85
X509v3 Authority Key Identifier:
keyid:32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1b:1c:6a:09:41:9b:f2:51:b2:65:dc:41:89:08:70:9d:89:
43:12:f2:f2:8c:55:76:75:72:a7:a7:b7:51:69:b3:86:f4:0e:
2d:49:86:75:dd:ff:17:21:09:5b:bd:46:d6:dd:a8:fe:cb:ec:
3c:69:74:8c:07:13:83:0a:72:b6:bf:64:5f:c7:04:28:7d:44:
f2:78:c8:4b:1b:9f:f2:1e:a1:47:af:be:75:a0:70:f1:60:61:
b6:2f:2b:d1:63:4c:0d:2f:c7:28:6a:af:4f:5b:c3:af:eb:c6:
a1:dc:ec:5f:b5:d5:6c:dc:ff:5b:c5:bc:1b:e1:e1:17:52:9e:
cc:40:37:b8:a6:37:95:41:79:8b:8f:c7:8b:11:8e:54:d8:88:
25:3d:1b:0d:f4:6c:8d:c7:72:93:15:d0:7e:18:e8:f4:fe:0b:
f8:4e:fc:f0:e3:9a:ca:31:f7:fb:9b:1f:92:05:c9:e0:9d:78:
ef:02:8a:e1:3e:12:c7:2a:4c:46:e3:74:35:b1:88:49:e1:e3:
73:b8:66:c0:3d:3b:6d:43:7e:d5:7f:38:e2:a2:cc:77:27:50:
26:68:a0:70:38:53:c2:50:af:39:de:93:40:c8:20:a7:d9:b0:
a1:fb:4b:b1:dd:9d:02:76:05:45:e9:94:35:61:3f:cd:4a:30:
4b:26:d3:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BK6yzYxCgw8YKb3Z1rV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyOWI1MTNlNjU3MDZmY2FhNTQzYTExYTBlNDJkMjhiMTA5
ZGYzYjYwHhcNMjUwMTMxMTEwMDEwWhcNMjUwMjAxMTEwMDEwWjAzMTEwLwYDVQQD
EygyOGIxMTM2NjBlMjk0MTczMDI1NzUwMDNlNmViODFhYTkxZmM3NDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhue1hU/5j4lVSqq48f2BjYVyYcJ
Y3kgMLnhzgD7lixkviJZ0qQZ8i7ez2Ztl2AcO42ZMUJV/9e8fL1H+3O3ZIQppQM3
gVD0kA1g2SWBxhwfxE0v/lFadWkoWnuPw1iD4uc74D1e7uVUEyWH/TNIGIS0wDJp
GnJwQbp0N2a3XFs3idXVHC1JKok865Rn00Q3lh/ZmS1Re9Hft0tlTbGMbGYsa4tE
Bl2D765YiuH0L2CkCWf7pM8VOUDMp/kNCuCoY2u1DrRCNEc+ZKF/q3zJTlsXyfxD
UJjJ/9Vk7mSdf7p/OW0Ixl8ptymkZgmhj9+1tv6L9rBqCSeeLUwTW/xaLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCixE2YOKUFzAldQA+brgaqR/HSFMB8GA1UdIwQY
MBaAFDKbUT5lcG/KpUOhGg5C0osQnfO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXB0UlBtVndiOHFsUTZFYURrTFNpeENkODdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wYWRjZDgtOGE0Yi00OTIzLWJmMzYt
ODE0YTYxMWVjYTYwLzEvTXB0UlBtVndiOHFsUTZFYURrTFNpeENkODdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8wYWRjZDgtOGE0Yi00OTIzLWJmMzYtODE0YTYxMWVjYTYw
LzEvTXB0UlBtVndiOHFsUTZFYURrTFNpeENkODdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRscaglB
m/JRsmXcQYkIcJ2JQxLy8oxVdnVyp6e3UWmzhvQOLUmGdd3/FyEJW71G1t2o/svs
PGl0jAcTgwpytr9kX8cEKH1E8njISxuf8h6hR6++daBw8WBhti8r0WNMDS/HKGqv
T1vDr+vGodzsX7XVbNz/W8W8G+HhF1KezEA3uKY3lUF5i4/HixGOVNiIJT0bDfRs
jcdykxXQfhjo9P4L+E788OOayjH3+5sfkgXJ4J147wKK4T4SxypMRuN0NbGISeHj
c7hmwD07bUN+1X844qLMdydQJmigcDhTwlCvOd6TQMggp9mwoftLsd2dAnYFRemU
NWE/zUowSybTQg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:49:44 2025 by rpki-client