Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: x2+gZb5zmu5P2V2D0I58gyzwJggK4ujUzhD5CDLxwWg=
Subject key identifier: 34:F2:8B:22:6D:96:CD:F9:A2:76:62:EF:7D:4A:D2:B0:CD:9A:F3:0E
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 0194BD17DCE949C2E90DE67EFF44545C47C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 0A58
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: bm8ink1EnYeZoE7eF0O4NwMqDE8.roa (hash: ybm88hkKSlN5zUNNYgkBe2I5P6bnL+MMj8/tMIJfo60=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: o6FClEI+ksRzqjmoLn/pTgoEM4rs6rtVGXmsfFMQT5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:dc:e9:49:c2:e9:0d:e6:7e:ff:44:54:5c:47:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=34f28b226d96cdf9a27662ef7d4ad2b0cd9af30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d4:0a:7e:71:05:9c:34:74:3d:a7:f8:9e:e9:
bd:03:52:84:27:3d:c0:92:99:26:3c:c4:d1:18:a2:
98:7f:96:5f:8c:38:ff:02:fc:91:e2:98:54:84:db:
d9:6d:24:27:11:8f:a2:54:a3:b9:39:51:db:09:ca:
96:71:bf:00:94:6f:92:07:60:a4:37:5e:7f:c8:52:
cf:0f:17:ea:90:99:97:2e:58:87:17:25:51:53:47:
69:7b:94:ff:42:b1:81:9a:04:ac:6b:0f:ae:dd:07:
f7:94:21:76:70:14:8f:39:cf:5e:ad:a1:e4:a5:8d:
b1:8e:fd:e7:ef:8c:f5:c2:00:74:35:fa:e2:4f:c5:
b0:a1:5b:48:4f:3b:8a:77:3d:6d:9c:23:f9:da:f5:
68:cd:1e:a4:52:31:79:b7:8f:d1:e1:a2:25:2f:69:
f9:fd:7e:b3:50:8e:f6:a0:1f:c1:70:94:44:6b:55:
96:bd:6a:e8:03:78:02:49:c4:eb:38:65:7d:65:43:
dc:c8:4b:71:b2:0f:9f:eb:12:f3:a1:14:c6:9a:7e:
31:a0:71:e3:dc:78:06:51:1e:52:a2:24:2f:60:57:
aa:de:2a:ac:ff:ce:8d:a1:5d:bd:e4:d7:77:a0:c8:
13:69:7d:0d:49:b8:b1:2a:c3:6f:fd:fc:42:ae:be:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F2:8B:22:6D:96:CD:F9:A2:76:62:EF:7D:4A:D2:B0:CD:9A:F3:0E
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:18:df:ca:e5:aa:34:0e:2a:b2:83:04:52:46:bd:6b:61:34:
cd:ff:79:ed:8d:74:5c:bb:0a:b7:10:08:a5:88:e5:0a:ad:bd:
26:99:90:88:88:9c:a1:30:4f:39:b0:f3:69:96:d4:cd:4d:47:
d1:20:81:a4:6b:a9:4b:0d:ed:e7:06:aa:28:7b:8b:39:82:04:
a3:c8:5a:78:c7:fa:32:74:52:e0:96:8f:55:fb:98:06:ac:2e:
17:a5:9d:88:de:66:4f:ed:12:05:08:54:a4:29:3e:63:64:e4:
c6:6a:81:f3:26:50:c9:d5:c0:55:ce:9a:56:20:a8:60:c5:0d:
e9:cd:e5:ae:f8:17:de:c9:7b:f8:ee:cc:36:ba:31:fd:41:63:
de:0e:07:09:cb:48:50:96:89:3a:14:2c:9b:a0:eb:a9:84:7f:
2c:da:7c:37:e4:1c:bf:e9:22:48:26:59:16:25:b1:4d:11:b9:
09:fe:bd:42:09:bd:f5:5b:ce:16:65:45:39:ab:34:81:31:1d:
9f:45:dd:09:72:ce:ca:fd:95:8a:d1:f7:6e:b8:2b:6f:a3:46:
db:af:6c:a9:8e:46:67:de:7f:bd:9c:c7:0e:db:cd:3c:53:80:
28:d4:98:d6:09:cf:07:e7:21:c4:ca:ea:9f:7a:d2:e9:48:e8:
8b:c1:ff:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F9zpScLpDeZ+/0RUXEfCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYjZlOWI5MzNiZDBjYzkwYzU5OTI0NDZmOGFjODQ3MjY5
MTZiMWEwHhcNMjUwMTMxMTYwMDQ1WhcNMjUwMjAxMTYwMDQ1WjAzMTEwLwYDVQQD
EygzNGYyOGIyMjZkOTZjZGY5YTI3NjYyZWY3ZDRhZDJiMGNkOWFmMzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9QKfnEFnDR0Paf4num9A1KEJz3A
kpkmPMTRGKKYf5ZfjDj/AvyR4phUhNvZbSQnEY+iVKO5OVHbCcqWcb8AlG+SB2Ck
N15/yFLPDxfqkJmXLliHFyVRU0dpe5T/QrGBmgSsaw+u3Qf3lCF2cBSPOc9eraHk
pY2xjv3n74z1wgB0NfriT8WwoVtITzuKdz1tnCP52vVozR6kUjF5t4/R4aIlL2n5
/X6zUI72oB/BcJREa1WWvWroA3gCScTrOGV9ZUPcyEtxsg+f6xLzoRTGmn4xoHHj
3HgGUR5SoiQvYFeq3iqs/86NoV295Nd3oMgTaX0NSbixKsNv/fxCrr4wOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTyiyJtls35onZi731K0rDNmvMOMB8GA1UdIwQY
MBaAFJq26bkzvQzJDFmSRG+KyEcmkWsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNDQ0N2MtNGNmMi00MWNhLTg4NTEt
NDFhY2UxOTU4MDNhLzEvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9hNDQ0N2MtNGNmMi00MWNhLTg4NTEtNDFhY2UxOTU4MDNh
LzEvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBjfyuWq
NA4qsoMEUka9a2E0zf957Y10XLsKtxAIpYjlCq29JpmQiIicoTBPObDzaZbUzU1H
0SCBpGupSw3t5waqKHuLOYIEo8haeMf6MnRS4JaPVfuYBqwuF6WdiN5mT+0SBQhU
pCk+Y2TkxmqB8yZQydXAVc6aViCoYMUN6c3lrvgX3sl7+O7MNrox/UFj3g4HCctI
UJaJOhQsm6DrqYR/LNp8N+Qcv+kiSCZZFiWxTRG5Cf69Qgm99VvOFmVFOas0gTEd
n0XdCXLOyv2VitH3brgrb6NG269sqY5GZ95/vZzHDtvNPFOAKNSY1gnPB+chxMrq
n3rS6Ujoi8H/Yg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:23 2025 by rpki-client