Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft
File: Mm9RyiOYIQP_40-YkNC3To-nga8.mft (raw, json)
Hash identifier: cvnWtVnk590DuEfpgSva9ePFkXsDUsnfmxxmWC4F9ks=
Subject key identifier: 4E:B7:87:01:2F:C3:D2:CF:2B:5B:39:A7:DF:90:06:18:AD:E8:CB:A1
Authority key identifier: 32:6F:51:CA:23:98:21:03:FF:E3:4F:98:90:D0:B7:4E:8F:A7:81:AF
Certificate issuer: /CN=326f51ca23982103ffe34f9890d0b74e8fa781af
Certificate serial: 0194BD4EAAA7ED8C0C664CA11393D3C4B60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft
Manifest number: 048F
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: Mm9RyiOYIQP_40-YkNC3To-nga8.crl (hash: BYFEpZBS4MXeHE68glYS/0u4SfitDwQUoarTPLd9AXI=)
2: XS-Ybz0hvV9BojCYEUiidWOyx20.roa (hash: rQhYc9pPbBgv4YgNdF82ibLtydUp9AsYJJ57Y6MS2So=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:aa:a7:ed:8c:0c:66:4c:a1:13:93:d3:c4:b6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=326f51ca23982103ffe34f9890d0b74e8fa781af
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=4eb787012fc3d2cf2b5b39a7df900618ade8cba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5a:90:6d:9a:fb:66:b3:0e:63:be:0b:aa:16:
f3:80:06:5c:61:06:a2:9f:e1:6d:fb:8b:97:0d:2f:
55:c1:c2:50:28:3c:2b:d4:e6:29:eb:a9:25:69:ea:
52:ea:60:f8:7e:cd:88:fd:7b:c3:38:80:06:d1:03:
1b:8a:cf:34:f6:28:44:53:ad:43:c6:d4:01:c1:60:
82:c1:08:85:86:d8:7d:36:d4:e0:73:cc:c9:d0:5a:
f4:3a:dd:aa:d6:49:59:b5:84:7e:71:ae:53:b9:87:
3f:fa:94:6e:fd:20:1b:bb:78:9b:32:e0:ca:c0:2a:
6a:13:73:c8:5c:db:12:7d:c0:9b:3d:07:ea:36:9e:
af:70:14:c9:0b:fc:27:66:07:81:61:fd:97:db:1e:
ae:12:9a:1e:20:3e:61:e4:b4:54:7e:b2:18:9e:2d:
b2:39:3b:d0:a4:48:20:d6:a1:e2:68:f7:e8:f2:cd:
40:70:4b:46:9e:74:9a:b2:e1:32:ec:6e:fa:88:f1:
67:bd:5c:ff:72:02:38:6d:ca:39:8a:9e:aa:e0:2b:
f3:92:72:93:0c:8d:26:3f:60:9d:43:53:52:f6:f7:
71:55:c9:27:a3:39:fe:01:36:4c:75:6b:31:45:5d:
ce:a6:5d:69:bf:1b:d4:04:e2:f4:83:99:a5:4e:89:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B7:87:01:2F:C3:D2:CF:2B:5B:39:A7:DF:90:06:18:AD:E8:CB:A1
X509v3 Authority Key Identifier:
keyid:32:6F:51:CA:23:98:21:03:FF:E3:4F:98:90:D0:B7:4E:8F:A7:81:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:db:e9:0a:06:05:bd:c4:5d:7f:3b:d6:52:2e:ac:ca:82:01:
a6:12:db:8e:9b:22:de:3c:65:be:1d:fd:63:a9:20:40:21:b6:
40:05:53:aa:0c:7a:0d:22:da:45:a2:f6:3c:fd:c1:1e:00:a6:
4a:13:ff:ef:85:a9:f4:83:4b:ad:80:02:4c:d4:fc:91:53:34:
d3:d3:12:d1:84:13:07:05:cd:91:a3:61:3a:d6:51:0e:12:d9:
c4:08:96:df:30:f3:2f:53:dd:58:39:fc:4e:a3:c4:b7:2d:aa:
ab:4a:b1:24:d3:72:eb:38:3e:29:3c:c3:bf:a0:a1:e2:b5:b6:
b1:e5:c0:7c:d2:8a:e8:76:db:42:c3:d8:a2:60:52:3c:f6:17:
44:07:47:c1:02:23:7d:11:ca:97:27:92:25:5f:54:3c:bb:21:
a6:1f:59:b0:47:d9:03:5d:d8:08:d3:51:3e:41:28:45:54:2d:
8b:02:95:47:a5:0e:91:64:fd:97:de:72:66:3d:2d:cc:c5:b5:
10:4a:85:e3:11:82:d2:68:2e:fc:70:2f:69:18:b0:77:85:92:
c0:7b:1b:4d:04:51:ff:7e:03:85:4b:0e:9b:09:ca:80:a5:bf:
1c:62:b0:10:58:ed:6e:cf:81:ac:56:04:6e:05:0a:60:6f:fc:
4b:33:07:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tqqn7YwMZkyhE5PTxLYMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNmY1MWNhMjM5ODIxMDNmZmUzNGY5ODkwZDBiNzRlOGZh
NzgxYWYwHhcNMjUwMTMxMTcwMDM2WhcNMjUwMjAxMTcwMDM2WjAzMTEwLwYDVQQD
Eyg0ZWI3ODcwMTJmYzNkMmNmMmI1YjM5YTdkZjkwMDYxOGFkZThjYmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VqQbZr7ZrMOY74LqhbzgAZcYQai
n+Ft+4uXDS9VwcJQKDwr1OYp66klaepS6mD4fs2I/XvDOIAG0QMbis809ihEU61D
xtQBwWCCwQiFhth9NtTgc8zJ0Fr0Ot2q1klZtYR+ca5TuYc/+pRu/SAbu3ibMuDK
wCpqE3PIXNsSfcCbPQfqNp6vcBTJC/wnZgeBYf2X2x6uEpoeID5h5LRUfrIYni2y
OTvQpEgg1qHiaPfo8s1AcEtGnnSasuEy7G76iPFnvVz/cgI4bco5ip6q4CvzknKT
DI0mP2CdQ1NS9vdxVcknozn+ATZMdWsxRV3Opl1pvxvUBOL0g5mlTokn6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE63hwEvw9LPK1s5p9+QBhit6MuhMB8GA1UdIwQY
MBaAFDJvUcojmCED/+NPmJDQt06Pp4GvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW05UnlpT1lJUVBfNDAtWWtOQzNUby1uZ2E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS80MGE5YjUtZTg5OS00YThhLWFjNGYt
OTY2ZmE5NmJlZmYyLzEvTW05UnlpT1lJUVBfNDAtWWtOQzNUby1uZ2E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS80MGE5YjUtZTg5OS00YThhLWFjNGYtOTY2ZmE5NmJlZmYy
LzEvTW05UnlpT1lJUVBfNDAtWWtOQzNUby1uZ2E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdvpCgYF
vcRdfzvWUi6syoIBphLbjpsi3jxlvh39Y6kgQCG2QAVTqgx6DSLaRaL2PP3BHgCm
ShP/74Wp9INLrYACTNT8kVM009MS0YQTBwXNkaNhOtZRDhLZxAiW3zDzL1PdWDn8
TqPEty2qq0qxJNNy6zg+KTzDv6Ch4rW2seXAfNKK6HbbQsPYomBSPPYXRAdHwQIj
fRHKlyeSJV9UPLshph9ZsEfZA13YCNNRPkEoRVQtiwKVR6UOkWT9l95yZj0tzMW1
EEqF4xGC0mgu/HAvaRiwd4WSwHsbTQRR/34DhUsOmwnKgKW/HGKwEFjtbs+BrFYE
bgUKYG/8SzMH0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:02:41 2025 by rpki-client