Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: gNTg1/8U+pZ1KRQWAFvB0vgY/4X0VV//Rw7YwnB35BA=
Subject key identifier: EA:B9:C8:FF:02:0F:11:F5:A1:83:80:5D:76:FD:30:70:86:29:6D:6A
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 0194BBCE3B57710EBBEAE5D5E089524AF430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 0DCC
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: G14qOFZBFjhkos3I5rY0AckCwAgNZYe9jRW6aIeU6Jw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3b:57:71:0e:bb:ea:e5:d5:e0:89:52:4a:f4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=eab9c8ff020f11f5a183805d76fd307086296d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ed:c2:a6:f8:d9:d6:b7:0b:b0:20:e4:83:df:
b4:2c:73:6d:82:67:1f:8c:f2:80:b3:96:d8:b7:2e:
b8:83:6e:5f:13:6d:26:e6:11:73:95:ea:b0:25:fe:
af:33:19:c4:c9:4e:5b:0b:96:99:e9:16:63:fe:43:
4b:72:3a:14:09:49:71:6c:7c:ca:4f:2d:6a:2f:4d:
e4:6a:00:66:35:2e:a2:f3:12:f9:2b:f7:ae:d3:64:
34:72:35:47:1c:b6:58:ad:ab:de:ce:11:bb:55:f7:
c4:ec:8d:40:bc:65:d2:c9:f7:26:71:d3:8a:33:49:
8a:bd:e9:6d:14:37:c3:8f:f4:53:e2:3d:ac:a3:d3:
90:8d:df:73:36:ec:78:c1:29:57:ba:a0:80:02:ae:
45:0c:0b:44:0c:61:8a:0d:6e:b9:5d:bd:04:07:96:
d9:c8:ba:4b:2e:96:d7:19:c8:32:8e:77:fe:65:e6:
76:c3:cb:a4:b7:f5:4b:f0:15:59:36:4d:db:4b:8a:
c2:3d:78:3a:78:ba:b9:7a:29:9a:6e:53:0c:f7:a1:
cf:a1:90:79:1b:9d:80:09:48:f0:91:d0:18:da:e8:
0a:70:8f:6f:e4:ec:f6:f7:a2:e4:1a:aa:1f:76:d3:
71:30:12:11:cb:51:dc:d7:31:28:70:65:02:db:0d:
c8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B9:C8:FF:02:0F:11:F5:A1:83:80:5D:76:FD:30:70:86:29:6D:6A
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c9:69:b1:8e:52:52:44:84:d2:39:e3:32:0e:d0:4f:21:a2:
c2:a8:6e:6a:c7:cb:f2:88:67:b7:59:a6:f1:51:7c:b9:44:5a:
e8:f6:60:17:bd:da:d7:cb:2e:c5:ae:05:af:bc:54:97:7b:04:
44:30:1f:de:ce:a6:7a:70:2a:10:86:ae:14:23:09:6a:9e:39:
9d:15:11:55:ed:c8:f8:d0:8c:69:70:b0:48:d9:32:76:5c:6e:
ec:77:b2:b2:0d:ec:eb:91:0c:8a:67:db:77:82:7a:11:d7:61:
a2:c7:6a:e2:79:83:c7:8d:26:be:a1:0c:56:07:8e:01:03:c8:
8c:21:87:9e:70:7d:d2:96:00:49:02:8e:72:f6:bd:0a:c4:bb:
06:e4:f3:24:a9:4a:4a:37:fb:f4:0a:a5:4a:7a:2b:db:1a:67:
80:2e:39:9b:6e:08:3e:6f:7a:a5:c3:07:74:cc:57:66:e3:88:
8f:bb:e7:c5:c8:02:2b:e6:d8:ac:c8:79:00:7c:70:90:ac:00:
f1:42:3b:70:66:b4:af:a4:64:55:0b:46:01:30:8e:dd:59:6c:
c5:c7:a8:31:1b:5d:51:c0:fd:aa:ab:20:c6:18:0e:08:4f:e3:
fa:bd:41:d7:74:f0:54:69:65:4b:e9:d4:24:1a:96:19:bb:11:
35:cd:77:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjtXcQ676uXV4IlSSvQwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYzg0NmYxOTE0MzMyMzBkOTczY2JjOGZkYTA2YjYwMmVi
ZmNiNWIwHhcNMjUwMTMxMTAwMDQyWhcNMjUwMjAxMTAwMDQyWjAzMTEwLwYDVQQD
EyhlYWI5YzhmZjAyMGYxMWY1YTE4MzgwNWQ3NmZkMzA3MDg2Mjk2ZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO3CpvjZ1rcLsCDkg9+0LHNtgmcf
jPKAs5bYty64g25fE20m5hFzleqwJf6vMxnEyU5bC5aZ6RZj/kNLcjoUCUlxbHzK
Ty1qL03kagBmNS6i8xL5K/eu02Q0cjVHHLZYravezhG7VffE7I1AvGXSyfcmcdOK
M0mKveltFDfDj/RT4j2so9OQjd9zNux4wSlXuqCAAq5FDAtEDGGKDW65Xb0EB5bZ
yLpLLpbXGcgyjnf+ZeZ2w8ukt/VL8BVZNk3bS4rCPXg6eLq5eimablMM96HPoZB5
G52ACUjwkdAY2ugKcI9v5Oz296LkGqofdtNxMBIRy1Hc1zEocGUC2w3IXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOq5yP8CDxH1oYOAXXb9MHCGKW1qMB8GA1UdIwQY
MBaAFDLIRvGRQzIw2XPLyP2ga2Auv8tbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDIt
YTIzNDFkM2JiMDUzLzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDItYTIzNDFkM2JiMDUz
LzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8lpsY5S
UkSE0jnjMg7QTyGiwqhuasfL8ohnt1mm8VF8uURa6PZgF73a18suxa4Fr7xUl3sE
RDAf3s6menAqEIauFCMJap45nRURVe3I+NCMaXCwSNkydlxu7Heysg3s65EMimfb
d4J6Eddhosdq4nmDx40mvqEMVgeOAQPIjCGHnnB90pYASQKOcva9CsS7BuTzJKlK
Sjf79AqlSnor2xpngC45m24IPm96pcMHdMxXZuOIj7vnxcgCK+bYrMh5AHxwkKwA
8UI7cGa0r6RkVQtGATCO3VlsxceoMRtdUcD9qqsgxhgOCE/j+r1B13TwVGllS+nU
JBqWGbsRNc13Fg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:12 2025 by rpki-client