Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/339cbe-b85e-486d-8f5e-1ee24d88b357/1/mk6XscuztWK0k7LTD4yaKW6fE8E.mft
File: mk6XscuztWK0k7LTD4yaKW6fE8E.mft (raw, json)
Hash identifier: msG29Y/+/c/i1WKbAmf+CO1IUUBBiras/h/uxxOpJn0=
Subject key identifier: 9A:8D:4F:8A:56:AF:70:AE:68:31:20:B0:70:82:12:88:DD:49:F7:94
Authority key identifier: 9A:4E:97:B1:CB:B3:B5:62:B4:93:B2:D3:0F:8C:9A:29:6E:9F:13:C1
Certificate issuer: /CN=9a4e97b1cbb3b562b493b2d30f8c9a296e9f13c1
Certificate serial: 0194BBCDC6135BB5EA5CC319BE6150AA92ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk6XscuztWK0k7LTD4yaKW6fE8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/339cbe-b85e-486d-8f5e-1ee24d88b357/1/mk6XscuztWK0k7LTD4yaKW6fE8E.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: mk6XscuztWK0k7LTD4yaKW6fE8E.crl (hash: ic6RgdhrkmB93qXgUx4qoEwFZ+bUxSUS7/Ue8iXUefY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c6:13:5b:b5:ea:5c:c3:19:be:61:50:aa:92:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4e97b1cbb3b562b493b2d30f8c9a296e9f13c1
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=9a8d4f8a56af70ae683120b070821288dd49f794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0f:c7:5a:2c:e1:90:f7:94:93:54:b6:ec:6d:
99:17:08:00:b6:06:6b:ee:8d:84:ee:a0:93:38:df:
ff:7a:93:12:6e:bc:93:bd:45:fc:e8:17:07:64:e5:
df:6e:e5:fe:4a:ff:f4:15:74:38:4e:9d:15:de:30:
d9:86:87:06:fc:2b:45:34:f6:9a:25:70:5a:10:8b:
0f:85:9a:6a:f5:57:4d:13:bb:b0:a9:31:8a:80:29:
d1:24:f6:c7:dc:f4:a7:ad:5a:fe:cf:a7:3c:d7:59:
95:50:35:9d:bf:2f:c2:bd:ff:28:29:83:06:ed:5a:
d6:43:ca:82:6b:e7:d8:19:bc:b6:fc:c9:41:8b:3a:
f6:23:79:af:9d:af:3f:5e:7e:bb:4a:78:24:85:c4:
f3:5e:d9:83:4e:51:48:32:1a:98:cc:0e:14:1a:bc:
53:27:a9:46:82:72:6b:0b:64:32:df:97:e3:d0:3c:
87:f4:bd:eb:ce:39:a9:cc:12:dc:65:24:b7:a8:59:
14:fb:32:8d:7c:c7:4d:72:3b:7f:c3:ba:39:3d:b0:
e5:c4:77:28:11:6f:88:4e:42:31:ce:64:0c:02:84:
fe:af:86:da:49:89:e1:7a:b0:a4:a1:67:61:d9:26:
a1:1d:c3:19:3c:c1:4b:9d:72:51:64:80:b3:f0:6f:
83:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8D:4F:8A:56:AF:70:AE:68:31:20:B0:70:82:12:88:DD:49:F7:94
X509v3 Authority Key Identifier:
keyid:9A:4E:97:B1:CB:B3:B5:62:B4:93:B2:D3:0F:8C:9A:29:6E:9F:13:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk6XscuztWK0k7LTD4yaKW6fE8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/339cbe-b85e-486d-8f5e-1ee24d88b357/1/mk6XscuztWK0k7LTD4yaKW6fE8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/339cbe-b85e-486d-8f5e-1ee24d88b357/1/mk6XscuztWK0k7LTD4yaKW6fE8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:90:dd:57:63:39:37:a3:4c:15:4f:75:53:93:bf:73:cc:9c:
33:f8:35:c5:14:47:8c:ea:7f:8e:90:a1:2e:b6:c1:cd:c0:65:
4b:92:bc:e2:01:9c:a7:e5:f7:e8:bc:42:48:25:d9:af:3d:48:
96:e4:dc:ae:3e:7c:fa:9e:da:ee:58:6c:d6:23:70:30:03:fa:
1e:b7:c4:20:99:26:e1:57:70:6a:aa:97:2a:57:6f:8d:73:dd:
87:df:0d:e2:cc:0d:68:d3:49:5d:12:20:0b:2c:2d:26:28:f5:
ff:58:18:00:b8:2e:d3:f9:8b:85:b4:e0:12:ac:38:e8:cf:35:
8d:a0:f2:53:a8:00:76:17:63:1a:fa:25:45:85:cc:cb:37:c5:
d0:65:92:a5:00:8e:9b:db:aa:17:b3:c1:99:52:04:82:f1:2e:
61:b5:0b:34:af:23:f2:66:51:56:cc:7f:d7:fa:fc:6c:06:ce:
b4:97:7b:c1:55:f8:5b:f9:7c:40:1b:02:80:df:f1:0f:b4:36:
3c:c9:f2:cd:73:7d:57:23:03:72:79:ec:28:fd:42:f5:58:cc:
11:70:4a:21:16:db:2e:e4:2a:7d:b7:4b:48:c2:7b:c7:0c:4a:
79:cf:c4:7f:86:5c:a0:9b:f9:05:38:18:aa:36:60:e6:72:fd:
9e:59:1a:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zcYTW7XqXMMZvmFQqpLtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNGU5N2IxY2JiM2I1NjJiNDkzYjJkMzBmOGM5YTI5NmU5
ZjEzYzEwHhcNMjUwMTMxMTAwMDEyWhcNMjUwMjAxMTAwMDEyWjAzMTEwLwYDVQQD
Eyg5YThkNGY4YTU2YWY3MGFlNjgzMTIwYjA3MDgyMTI4OGRkNDlmNzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig/HWizhkPeUk1S27G2ZFwgAtgZr
7o2E7qCTON//epMSbryTvUX86BcHZOXfbuX+Sv/0FXQ4Tp0V3jDZhocG/CtFNPaa
JXBaEIsPhZpq9VdNE7uwqTGKgCnRJPbH3PSnrVr+z6c811mVUDWdvy/Cvf8oKYMG
7VrWQ8qCa+fYGby2/MlBizr2I3mvna8/Xn67SngkhcTzXtmDTlFIMhqYzA4UGrxT
J6lGgnJrC2Qy35fj0DyH9L3rzjmpzBLcZSS3qFkU+zKNfMdNcjt/w7o5PbDlxHco
EW+ITkIxzmQMAoT+r4baSYnherCkoWdh2SahHcMZPMFLnXJRZICz8G+DNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqNT4pWr3CuaDEgsHCCEojdSfeUMB8GA1UdIwQY
MBaAFJpOl7HLs7VitJOy0w+MmilunxPBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWs2WHNjdXp0V0swazdMVEQ0eWFLVzZmRThFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zMzljYmUtYjg1ZS00ODZkLThmNWUt
MWVlMjRkODhiMzU3LzEvbWs2WHNjdXp0V0swazdMVEQ0eWFLVzZmRThFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zMzljYmUtYjg1ZS00ODZkLThmNWUtMWVlMjRkODhiMzU3
LzEvbWs2WHNjdXp0V0swazdMVEQ0eWFLVzZmRThFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpDdV2M5
N6NMFU91U5O/c8ycM/g1xRRHjOp/jpChLrbBzcBlS5K84gGcp+X36LxCSCXZrz1I
luTcrj58+p7a7lhs1iNwMAP6HrfEIJkm4VdwaqqXKldvjXPdh98N4swNaNNJXRIg
CywtJij1/1gYALgu0/mLhbTgEqw46M81jaDyU6gAdhdjGvolRYXMyzfF0GWSpQCO
m9uqF7PBmVIEgvEuYbULNK8j8mZRVsx/1/r8bAbOtJd7wVX4W/l8QBsCgN/xD7Q2
PMnyzXN9VyMDcnnsKP1C9VjMEXBKIRbbLuQqfbdLSMJ7xwxKec/Ef4ZcoJv5BTgY
qjZg5nL9nlkamA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:13 2025 by rpki-client