Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File: mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier: 1ljUPLlMlar5eqi+6tzHIMqNYxhd8DtdCPhqe6sRe8I=
Subject key identifier: BD:F6:32:B0:E8:92:1A:3D:A0:3A:C2:6B:35:DF:FE:81:37:42:75:41
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer: /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial: 0194BBCEE50F2DAC27FA2EEFF74FA82BB693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number: 0586
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: OZLyoJV90Ovv3Xu6BNMGJdTNHSXraWKMBMoKXsEGl1c=)
2: unTwGWUlLtukFpmGCiLRF4IFtNk.roa (hash: On4Gg7hoHCwp3N/KrNRWZ9f9vqel+RAsURIdANgDkbI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e5:0f:2d:ac:27:fa:2e:ef:f7:4f:a8:2b:b6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=bdf632b0e8921a3da03ac26b35dffe8137427541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:88:5a:1e:90:fd:d1:49:2a:43:57:03:b3:6b:
df:d8:bb:0c:db:d6:c4:4e:ed:75:1d:c2:e7:39:ba:
bb:1b:86:cb:77:51:00:1c:5f:5a:2d:00:94:a0:b2:
74:3b:1e:4d:6e:10:17:9e:3e:75:91:92:2f:d5:f9:
4d:3a:5b:cf:13:b9:09:30:d8:96:a2:cb:31:23:76:
9c:0c:5c:fc:2d:7e:95:10:98:6e:6e:a7:06:6c:09:
6b:c2:4e:81:89:4f:95:09:e0:ba:6c:cf:3f:94:fd:
df:3c:5f:ba:98:5c:24:b1:7a:e4:2f:5c:8c:06:f7:
f8:9b:4b:6c:6e:52:28:80:c2:56:17:34:eb:77:b9:
d9:4d:9c:b0:47:e7:ca:7a:1e:8b:b8:0d:51:e1:75:
bb:a8:ee:61:07:46:46:66:90:52:2e:e3:8e:72:c3:
79:a7:b4:ea:22:97:ae:36:d7:2b:c7:78:0c:aa:f8:
e7:fa:a7:67:ad:44:c6:9c:12:25:6d:cc:2d:76:c8:
8d:e0:7d:32:f1:59:37:f8:38:68:f2:b0:76:4b:fe:
52:f4:f0:12:a4:a8:6a:55:52:48:94:5e:9e:b0:e0:
3a:50:fa:8c:6a:b6:57:23:fe:df:48:90:25:da:03:
e9:9d:84:12:50:da:a6:ed:b1:0a:e9:37:b6:65:a6:
15:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F6:32:B0:E8:92:1A:3D:A0:3A:C2:6B:35:DF:FE:81:37:42:75:41
X509v3 Authority Key Identifier:
keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:a1:7c:fa:e0:29:b7:96:3e:9f:1d:44:2b:50:8b:6c:88:04:
5a:cd:84:b0:17:dd:e0:d1:d7:86:ee:ac:1e:eb:f9:62:1d:3e:
34:3e:84:7c:e3:e3:dd:0a:fe:d6:24:4f:b9:a6:35:3f:7b:95:
52:03:ed:60:33:4a:6a:d9:35:b1:83:75:e7:af:d1:c2:6d:10:
b0:c8:29:94:10:23:58:f6:49:a1:83:15:e6:22:5a:13:8c:eb:
de:14:4e:54:36:74:4d:c5:42:df:af:64:c8:e1:c7:7b:ee:9a:
60:d2:e6:44:73:b7:d7:88:13:3b:9a:99:0c:c6:1d:b1:dc:a4:
65:87:1a:7c:c1:2a:75:f3:fb:02:51:23:c7:1b:42:50:af:af:
58:ff:b5:e1:b2:22:ea:12:cc:ec:8d:64:ea:3f:d1:5a:88:79:
bf:7b:dd:10:3f:7a:7a:c6:ed:2e:0a:ef:40:3e:54:8f:d6:a9:
05:b4:ff:2a:aa:bb:21:44:93:12:47:a8:5a:47:04:81:48:05:
7d:5e:7b:80:7f:5f:b2:50:fc:e3:92:ea:d8:21:ad:fd:08:44:
be:4a:d8:9d:d7:80:09:95:a7:bb:2d:50:df:fa:9e:6b:3e:12:
78:0a:a9:c3:da:47:d3:38:a8:6d:8e:cf:7b:d5:7c:f4:a4:15:
89:36:c0:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zuUPLawn+i7v90+oK7aTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YmY3ZDVjNzBjNjMyNTRkMGNkZTM0YzJiYTQ5ZDk0MDdm
YzI0ZjMwHhcNMjUwMTMxMTAwMTI1WhcNMjUwMjAxMTAwMTI1WjAzMTEwLwYDVQQD
EyhiZGY2MzJiMGU4OTIxYTNkYTAzYWMyNmIzNWRmZmU4MTM3NDI3NTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44haHpD90UkqQ1cDs2vf2LsM29bE
Tu11HcLnObq7G4bLd1EAHF9aLQCUoLJ0Ox5NbhAXnj51kZIv1flNOlvPE7kJMNiW
ossxI3acDFz8LX6VEJhubqcGbAlrwk6BiU+VCeC6bM8/lP3fPF+6mFwksXrkL1yM
Bvf4m0tsblIogMJWFzTrd7nZTZywR+fKeh6LuA1R4XW7qO5hB0ZGZpBSLuOOcsN5
p7TqIpeuNtcrx3gMqvjn+qdnrUTGnBIlbcwtdsiN4H0y8Vk3+Dho8rB2S/5S9PAS
pKhqVVJIlF6esOA6UPqMarZXI/7fSJAl2gPpnYQSUNqm7bEK6Te2ZaYVTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL32MrDokho9oDrCazXf/oE3QnVBMB8GA1UdIwQY
MBaAFJm/fVxwxjJU0M3jTCuknZQH/CTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lNDgyNTYtYzZmYy00NjMxLThmNWYt
NThiY2RhMzU2ZTYyLzEvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lNDgyNTYtYzZmYy00NjMxLThmNWYtNThiY2RhMzU2ZTYy
LzEvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyqF8+uAp
t5Y+nx1EK1CLbIgEWs2EsBfd4NHXhu6sHuv5Yh0+ND6EfOPj3Qr+1iRPuaY1P3uV
UgPtYDNKatk1sYN156/Rwm0QsMgplBAjWPZJoYMV5iJaE4zr3hROVDZ0TcVC369k
yOHHe+6aYNLmRHO314gTO5qZDMYdsdykZYcafMEqdfP7AlEjxxtCUK+vWP+14bIi
6hLM7I1k6j/RWoh5v3vdED96esbtLgrvQD5Uj9apBbT/Kqq7IUSTEkeoWkcEgUgF
fV57gH9fslD845Lq2CGt/QhEvkrYndeACZWnuy1Q3/qeaz4SeAqpw9pH0ziobY7P
e9V89KQViTbAtg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:42 2025 by rpki-client