
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
File: MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft (raw, json)
Hash identifier: sajLxZeEeqXZISZdhzTT0W70C9/kdiNHeSHwjk14G+E=
Subject key identifier: 99:24:57:C8:AD:D2:04:86:CA:A0:80:7A:7E:EE:34:2F:79:3C:5F:1D
Authority key identifier: 31:B1:62:1C:E2:8C:BB:FE:F0:38:AB:D7:54:9F:C6:CB:50:E7:11:6B
Certificate issuer: /CN=31b1621ce28cbbfef038abd7549fc6cb50e7116b
Certificate serial: 0194BC3C9BA895C2EBC734BEA561162E819C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
Manifest number: 071B
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.crl (hash: HXHoEBkk+7FNDKdrOt5A00tbsneBj3hqxLo7FdWL21w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9b:a8:95:c2:eb:c7:34:be:a5:61:16:2e:81:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b1621ce28cbbfef038abd7549fc6cb50e7116b
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=992457c8add20486caa0807a7eee342f793c5f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:15:a3:57:77:dc:e7:ad:8f:97:d7:85:b7:
84:34:83:1c:26:04:04:fb:65:4d:c3:ce:22:d6:71:
60:0d:f2:11:a1:58:0a:5b:43:c1:bd:09:bd:fe:fa:
55:42:33:d9:7e:fb:19:88:8e:f6:89:08:98:6b:74:
1a:cd:8b:90:6e:fc:74:48:da:5a:67:af:a7:e4:0c:
1e:0b:ef:62:20:8b:e0:65:75:6d:2e:be:95:4c:4a:
c9:19:1d:25:7a:2c:72:d0:52:22:f4:cd:04:d1:c1:
12:d4:59:d0:b8:09:1b:b8:1c:8e:a3:cf:70:7c:22:
ce:31:7d:57:7e:a5:6a:08:9b:ac:78:cd:ea:b2:a6:
80:72:54:59:fc:af:92:2c:65:18:eb:be:86:84:66:
50:97:bd:b6:27:33:ee:41:30:5b:32:7e:e9:ee:e1:
70:78:e8:f9:d2:58:e4:7a:ab:02:3e:3e:d3:e1:bc:
1f:3a:ae:2f:3c:ca:a0:39:35:8e:df:4f:2e:c7:fb:
55:b7:bb:34:98:c7:be:93:d4:cd:b4:e2:f7:77:e0:
15:45:b5:0c:c5:76:d3:d0:89:4a:bb:86:a3:7f:97:
44:0d:19:6f:c0:16:69:e9:22:ce:57:78:bb:4d:63:
03:f7:6b:6d:e1:45:e5:3f:40:9c:21:fd:a6:d8:72:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:24:57:C8:AD:D2:04:86:CA:A0:80:7A:7E:EE:34:2F:79:3C:5F:1D
X509v3 Authority Key Identifier:
keyid:31:B1:62:1C:E2:8C:BB:FE:F0:38:AB:D7:54:9F:C6:CB:50:E7:11:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d9:98:4a:ed:e1:99:c6:fb:b4:b5:46:a3:d9:89:3b:fd:3e:
a6:88:c9:31:bc:3a:66:97:6e:66:87:98:32:88:31:d5:12:9d:
bb:d5:2d:a6:c9:ea:3b:a2:ec:0e:73:59:2b:f9:72:93:29:22:
1c:b5:5b:2a:7b:96:44:26:2f:94:af:74:98:df:5c:67:fd:24:
cd:d7:f2:49:c3:18:4c:88:65:61:7a:b4:5d:fa:61:c3:e5:1c:
64:2d:4d:21:68:34:bf:41:53:cf:fb:54:6d:8e:a6:10:ac:79:
7e:16:70:90:6d:d5:87:65:cf:bc:c2:ff:4c:6f:8b:39:fa:26:
df:65:91:70:eb:ed:89:da:3b:7a:f5:1e:60:73:c8:9a:68:43:
fe:ed:f7:10:00:f1:2e:41:13:ec:cc:0b:df:2f:8c:b5:e0:84:
0f:85:ab:98:c8:cb:3e:10:02:9b:16:ed:5d:68:c6:fe:4a:43:
03:aa:41:f0:19:5b:1d:30:16:1e:c5:63:f4:d7:1f:d3:c9:8b:
e1:8f:ab:94:65:55:c0:dd:d5:47:f4:04:5e:f1:f8:0f:fe:ca:
df:88:6e:8f:0c:d7:1c:66:1b:f9:14:06:71:93:79:79:0b:47:
96:1c:6a:c0:a4:54:7a:ee:b8:34:e0:c9:f4:9e:df:a5:42:cc:
49:dd:43:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJuolcLrxzS+pWEWLoGcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYjE2MjFjZTI4Y2JiZmVmMDM4YWJkNzU0OWZjNmNiNTBl
NzExNmIwHhcNMjUwMTMxMTIwMTE2WhcNMjUwMjAxMTIwMTE2WjAzMTEwLwYDVQQD
Eyg5OTI0NTdjOGFkZDIwNDg2Y2FhMDgwN2E3ZWVlMzQyZjc5M2M1ZjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNUVo1d33Oetj5fXhbeENIMcJgQE
+2VNw84i1nFgDfIRoVgKW0PBvQm9/vpVQjPZfvsZiI72iQiYa3QazYuQbvx0SNpa
Z6+n5AweC+9iIIvgZXVtLr6VTErJGR0leixy0FIi9M0E0cES1FnQuAkbuByOo89w
fCLOMX1XfqVqCJuseM3qsqaAclRZ/K+SLGUY676GhGZQl722JzPuQTBbMn7p7uFw
eOj50ljkeqsCPj7T4bwfOq4vPMqgOTWO308ux/tVt7s0mMe+k9TNtOL3d+AVRbUM
xXbT0IlKu4ajf5dEDRlvwBZp6SLOV3i7TWMD92tt4UXlP0CcIf2m2HJKcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkkV8it0gSGyqCAen7uNC95PF8dMB8GA1UdIwQY
MBaAFDGxYhzijLv+8Dir11SfxstQ5xFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWJGaUhPS011Xzd3T0t2WFZKX0d5MURuRVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMDYwMmMtOGRlNC00ZGVjLThiMjQt
NjYxNDYzMjcyM2I5LzEvTWJGaUhPS011Xzd3T0t2WFZKX0d5MURuRVdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yMDYwMmMtOGRlNC00ZGVjLThiMjQtNjYxNDYzMjcyM2I5
LzEvTWJGaUhPS011Xzd3T0t2WFZKX0d5MURuRVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9mYSu3h
mcb7tLVGo9mJO/0+pojJMbw6ZpduZoeYMogx1RKdu9UtpsnqO6LsDnNZK/lykyki
HLVbKnuWRCYvlK90mN9cZ/0kzdfyScMYTIhlYXq0Xfphw+UcZC1NIWg0v0FTz/tU
bY6mEKx5fhZwkG3Vh2XPvML/TG+LOfom32WRcOvtido7evUeYHPImmhD/u33EADx
LkET7MwL3y+MteCED4WrmMjLPhACmxbtXWjG/kpDA6pB8BlbHTAWHsVj9Ncf08mL
4Y+rlGVVwN3VR/QEXvH4D/7K34hujwzXHGYb+RQGcZN5eQtHlhxqwKRUeu64NODJ
9J7fpULMSd1D1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:04 2025 by rpki-client