Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
File: MT3NGHEiZlBFhpdnM8ofkvYmH14.mft (raw, json)
Hash identifier: pE3eyEDlOofixY/5+yfAZhu49c979gnvL11jdiBiUUU=
Subject key identifier: 0F:31:53:3E:1A:35:F0:E6:EC:D1:D3:75:9E:98:DA:D6:9E:DA:30:E8
Authority key identifier: 31:3D:CD:18:71:22:66:50:45:86:97:67:33:CA:1F:92:F6:26:1F:5E
Certificate issuer: /CN=313dcd18712266504586976733ca1f92f6261f5e
Certificate serial: 0194BBCED359165D3DEC02B6BFE939059A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
Manifest number: 1255
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: MT3NGHEiZlBFhpdnM8ofkvYmH14.crl (hash: zI781DWjHG0Z7I4DYefJ6ANGUdTnP2DUdMcElzjFdIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d3:59:16:5d:3d:ec:02:b6:bf:e9:39:05:9a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313dcd18712266504586976733ca1f92f6261f5e
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=0f31533e1a35f0e6ecd1d3759e98dad69eda30e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:44:97:ae:c8:c2:27:9b:84:81:b7:1e:39:
dc:03:79:e6:0c:52:14:d2:52:ed:97:8c:ad:37:2a:
ea:53:64:f4:08:9a:f2:c6:c7:e2:72:12:8b:2c:0d:
0e:25:c0:f3:f5:16:4c:9d:2c:17:cb:9e:69:0f:52:
4b:01:d5:d1:70:3d:38:aa:73:17:fa:c1:aa:1f:41:
c1:f5:97:57:d7:83:fe:68:04:ea:a9:c8:00:c0:b6:
8d:6a:f4:29:ae:26:f4:8c:1f:80:60:ee:31:d2:0d:
49:be:f3:e9:0e:d5:f7:0d:97:d3:e8:cf:a8:47:0d:
e4:85:35:c0:f4:db:be:34:ec:d0:64:1b:e1:a6:ff:
4d:45:00:16:4b:31:21:d0:e5:0c:48:17:7b:0f:90:
24:0d:d7:e2:8b:71:72:f6:8e:88:05:0d:67:91:dd:
c5:51:b8:18:73:72:9b:b7:ca:4c:f1:d9:38:56:48:
4c:cd:54:7c:d0:2d:b8:8a:74:bc:e7:b5:f2:36:c6:
8c:b5:1a:5c:36:d8:72:23:73:99:ce:87:ae:9e:1f:
0a:aa:88:5f:43:61:38:3a:48:9a:b0:27:67:72:1d:
97:b6:fc:42:f4:ab:26:75:bf:b8:bc:69:71:10:d0:
fb:0f:8b:6c:a8:cf:63:70:62:f6:b4:8c:a2:1c:33:
3f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:31:53:3E:1A:35:F0:E6:EC:D1:D3:75:9E:98:DA:D6:9E:DA:30:E8
X509v3 Authority Key Identifier:
keyid:31:3D:CD:18:71:22:66:50:45:86:97:67:33:CA:1F:92:F6:26:1F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f9:3c:b8:39:80:db:e7:ef:1a:f0:68:85:ad:e3:a3:6f:9c:
aa:8e:cb:f5:f1:fd:77:c7:d7:04:74:69:e6:96:cb:cc:2f:96:
ae:35:59:5c:16:5f:ad:c4:96:80:ca:b9:d2:82:9a:eb:8c:cf:
87:0e:ef:0d:b3:1a:6f:a8:ea:a4:07:a9:92:d1:f0:30:3a:dc:
3d:70:94:10:9a:5b:75:ac:85:98:01:d1:76:c4:2d:c9:a7:84:
3f:2e:12:1b:88:5e:b2:d4:60:4d:bd:cf:a5:98:bd:4a:8d:9f:
a2:af:64:db:61:48:7b:36:43:a3:7b:01:ed:38:cd:20:51:b9:
df:6e:b3:1b:57:9f:6c:d7:b0:1e:e1:e1:b5:31:c6:42:e1:c1:
20:52:77:49:d8:66:c3:f9:4c:e9:ac:f7:e5:a9:38:e4:9d:37:
c1:d6:70:ae:aa:cf:db:e1:2f:0a:5b:66:78:ae:3b:36:39:0b:
5a:1b:ba:c2:37:40:fd:91:e9:63:36:58:05:c4:b2:2b:25:56:
6d:92:44:5c:83:2e:6d:9a:6c:3d:98:48:c3:12:c0:ce:8c:4c:
df:e2:f3:50:fd:40:91:81:22:8e:e7:d7:e3:c3:8b:43:2f:81:
02:63:43:a7:55:d8:3f:4f:21:38:ce:1b:6d:00:dd:ef:e6:55:
93:28:43:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztNZFl097AK2v+k5BZqHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxM2RjZDE4NzEyMjY2NTA0NTg2OTc2NzMzY2ExZjkyZjYy
NjFmNWUwHhcNMjUwMTMxMTAwMTIxWhcNMjUwMjAxMTAwMTIxWjAzMTEwLwYDVQQD
EygwZjMxNTMzZTFhMzVmMGU2ZWNkMWQzNzU5ZTk4ZGFkNjllZGEzMGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX1El67IwiebhIG3HjncA3nmDFIU
0lLtl4ytNyrqU2T0CJryxsfichKLLA0OJcDz9RZMnSwXy55pD1JLAdXRcD04qnMX
+sGqH0HB9ZdX14P+aATqqcgAwLaNavQprib0jB+AYO4x0g1JvvPpDtX3DZfT6M+o
Rw3khTXA9Nu+NOzQZBvhpv9NRQAWSzEh0OUMSBd7D5AkDdfii3Fy9o6IBQ1nkd3F
UbgYc3Kbt8pM8dk4VkhMzVR80C24inS857XyNsaMtRpcNthyI3OZzoeunh8Kqohf
Q2E4OkiasCdnch2XtvxC9Ksmdb+4vGlxEND7D4tsqM9jcGL2tIyiHDM/QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8xUz4aNfDm7NHTdZ6Y2tae2jDoMB8GA1UdIwQY
MBaAFDE9zRhxImZQRYaXZzPKH5L2Jh9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVQzTkdIRWlabEJGaHBkbk04b2ZrdlltSDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9iOWVjZjktM2JhOC00N2U0LTg5NTQt
YzQxNWE2OGFmMGRkLzEvTVQzTkdIRWlabEJGaHBkbk04b2ZrdlltSDE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9iOWVjZjktM2JhOC00N2U0LTg5NTQtYzQxNWE2OGFmMGRk
LzEvTVQzTkdIRWlabEJGaHBkbk04b2ZrdlltSDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPk8uDmA
2+fvGvBoha3jo2+cqo7L9fH9d8fXBHRp5pbLzC+WrjVZXBZfrcSWgMq50oKa64zP
hw7vDbMab6jqpAepktHwMDrcPXCUEJpbdayFmAHRdsQtyaeEPy4SG4hestRgTb3P
pZi9So2foq9k22FIezZDo3sB7TjNIFG5326zG1efbNewHuHhtTHGQuHBIFJ3Sdhm
w/lM6az35ak45J03wdZwrqrP2+EvCltmeK47NjkLWhu6wjdA/ZHpYzZYBcSyKyVW
bZJEXIMubZpsPZhIwxLAzoxM3+LzUP1AkYEijufX48OLQy+BAmNDp1XYP08hOM4b
bQDd7+ZVkyhD/w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:59 2025 by rpki-client