Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
File: MMOt1700croWgExJC2ahCXZZvTE.mft (raw, json)
Hash identifier: jCmfN/+8Z9gS6t3AJGzbce3ulwbnO0yUh/d32SHkRck=
Subject key identifier: A9:69:59:B7:38:B9:F9:7E:62:A8:3E:6A:CD:28:9C:B0:85:28:53:EE
Authority key identifier: 30:C3:AD:D7:BD:34:72:BA:16:80:4C:49:0B:66:A1:09:76:59:BD:31
Certificate issuer: /CN=30c3add7bd3472ba16804c490b66a1097659bd31
Certificate serial: 0194BCAA1931CA50A7E5BD10779285FC75D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMOt1700croWgExJC2ahCXZZvTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
Manifest number: 09DD
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: MMOt1700croWgExJC2ahCXZZvTE.crl (hash: HnkI6UUx+NkVPXwYD3H6UzaKLUxmlKxzq6Xi6zOTpzo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:19:31:ca:50:a7:e5:bd:10:77:92:85:fc:75:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c3add7bd3472ba16804c490b66a1097659bd31
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=a96959b738b9f97e62a83e6acd289cb0852853ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9f:29:12:28:b3:25:cc:93:5c:55:d5:91:23:
18:04:4e:0d:1f:42:d0:40:83:d2:0c:32:99:89:d6:
5c:3d:b6:40:0e:f1:c1:9d:85:ba:b2:e7:46:91:6f:
28:22:d0:40:15:26:42:32:98:ce:ff:9a:ab:9e:e1:
79:05:53:c4:09:1c:6e:e4:70:4b:15:cd:fe:9f:0a:
53:fb:52:d7:5d:0e:96:fe:be:a0:cb:1a:14:8e:af:
35:a8:c6:3a:8b:80:86:72:42:51:e0:4d:5a:2d:2b:
f8:56:df:39:1b:2d:60:48:b8:22:85:0b:6d:58:ce:
4d:f9:b6:c5:b8:b7:d7:65:a8:55:0c:b5:b3:3b:c1:
4c:cc:3d:84:4e:a3:b4:39:b5:63:02:3d:da:bf:62:
b6:58:66:d9:b3:30:85:e4:0b:ce:0e:a6:cf:22:50:
60:a2:f5:ec:03:cb:06:08:c2:da:d0:54:fe:6d:0a:
e9:b3:6b:dc:7b:e1:69:82:ee:4c:60:55:a8:0a:0b:
75:f6:32:ab:dd:21:17:5f:90:8a:53:85:bd:38:db:
00:89:fc:11:0b:ed:97:52:0d:66:20:47:0d:0d:ab:
b2:47:d3:58:3a:c0:7e:16:70:79:ad:9a:9b:3a:df:
e0:80:e8:7c:5a:67:64:36:6c:f0:39:00:32:5b:b4:
b7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:69:59:B7:38:B9:F9:7E:62:A8:3E:6A:CD:28:9C:B0:85:28:53:EE
X509v3 Authority Key Identifier:
keyid:30:C3:AD:D7:BD:34:72:BA:16:80:4C:49:0B:66:A1:09:76:59:BD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMOt1700croWgExJC2ahCXZZvTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a8:64:4e:bb:2a:fb:bd:ca:a6:83:8e:0f:bd:14:9c:00:97:
40:6e:e4:84:bf:82:34:55:62:98:77:fa:a6:8f:8f:b6:7d:f5:
65:ce:fd:90:c4:68:da:0a:10:ce:33:86:b1:a4:e6:5f:c1:e6:
5b:78:69:fe:ca:ef:c8:04:b9:ac:b0:ab:25:0b:9d:9d:69:cf:
42:c7:ef:21:f6:be:c4:8b:5b:6a:9a:7f:11:fd:7b:df:fb:2f:
5e:90:f3:cc:2d:5b:59:82:9a:d9:55:34:45:84:c9:76:49:b7:
7d:38:e7:2e:fe:20:89:98:55:f8:a8:42:a3:12:d1:64:5b:ce:
ab:94:13:c3:74:a4:18:ad:a3:5a:1a:f7:45:a6:f7:8d:43:87:
88:79:94:6a:8e:25:68:47:8f:9e:72:8b:63:09:4d:7c:88:19:
90:93:65:5c:04:a5:1f:41:64:19:62:7e:22:02:21:01:86:8d:
e2:22:d4:fa:97:4d:e7:a0:76:af:e8:0a:ef:42:4f:69:cf:36:
52:f6:73:7e:5d:a2:f2:99:7e:dc:2e:56:51:59:02:1e:6d:8d:
98:3e:93:67:ed:eb:9c:cb:21:d3:6e:f5:06:d1:51:63:9b:cf:
d4:a0:a1:73:98:99:35:87:00:04:12:3c:15:46:96:ed:69:8e:
d2:cb:c4:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qhkxylCn5b0Qd5KF/HXZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzNhZGQ3YmQzNDcyYmExNjgwNGM0OTBiNjZhMTA5NzY1
OWJkMzEwHhcNMjUwMTMxMTQwMDUxWhcNMjUwMjAxMTQwMDUxWjAzMTEwLwYDVQQD
EyhhOTY5NTliNzM4YjlmOTdlNjJhODNlNmFjZDI4OWNiMDg1Mjg1M2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj58pEiizJcyTXFXVkSMYBE4NH0LQ
QIPSDDKZidZcPbZADvHBnYW6sudGkW8oItBAFSZCMpjO/5qrnuF5BVPECRxu5HBL
Fc3+nwpT+1LXXQ6W/r6gyxoUjq81qMY6i4CGckJR4E1aLSv4Vt85Gy1gSLgihQtt
WM5N+bbFuLfXZahVDLWzO8FMzD2ETqO0ObVjAj3av2K2WGbZszCF5AvODqbPIlBg
ovXsA8sGCMLa0FT+bQrps2vce+Fpgu5MYFWoCgt19jKr3SEXX5CKU4W9ONsAifwR
C+2XUg1mIEcNDauyR9NYOsB+FnB5rZqbOt/ggOh8WmdkNmzwOQAyW7S3kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlpWbc4ufl+Yqg+as0onLCFKFPuMB8GA1UdIwQY
MBaAFDDDrde9NHK6FoBMSQtmoQl2Wb0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1PdDE3MDBjcm9XZ0V4SkMyYWhDWFpadlRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yM2NjYzgtNDcxOC00NTNjLWJlM2Ut
OTVjZDY5MjRhYjRlLzEvTU1PdDE3MDBjcm9XZ0V4SkMyYWhDWFpadlRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8yM2NjYzgtNDcxOC00NTNjLWJlM2UtOTVjZDY5MjRhYjRl
LzEvTU1PdDE3MDBjcm9XZ0V4SkMyYWhDWFpadlRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6hkTrsq
+73KpoOOD70UnACXQG7khL+CNFVimHf6po+Ptn31Zc79kMRo2goQzjOGsaTmX8Hm
W3hp/srvyAS5rLCrJQudnWnPQsfvIfa+xItbapp/Ef173/svXpDzzC1bWYKa2VU0
RYTJdkm3fTjnLv4giZhV+KhCoxLRZFvOq5QTw3SkGK2jWhr3Rab3jUOHiHmUao4l
aEePnnKLYwlNfIgZkJNlXASlH0FkGWJ+IgIhAYaN4iLU+pdN56B2r+gK70JPac82
UvZzfl2i8pl+3C5WUVkCHm2NmD6TZ+3rnMsh0271BtFRY5vP1KChc5iZNYcABBI8
FUaW7WmO0svEHw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:40 2025 by rpki-client