Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
File: mmzb9HURP5bKeKB6-9RFjIiIB3E.mft (raw, json)
Hash identifier: TYc3S7+ng3nJ89nvvXxTerk8fLecQY2r0dCiIMUlZ+Y=
Subject key identifier: 2B:02:8E:58:F4:73:13:78:02:F3:B9:A0:10:2D:23:67:91:2C:9E:52
Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
Certificate issuer: /CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Certificate serial: 0194BC72EB67E6C3D722C1810AFCBE8BA2D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
Manifest number: 02F1
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: j_X8tJ2h9OHGJHosgdoOoXcoQic.roa (hash: +g3waCGUvWC6G9wCV2Zz7i7n4x4ui8ded+3mDQgQ1Kc=)
2: mmzb9HURP5bKeKB6-9RFjIiIB3E.crl (hash: 5GBBh0r5i8ignH95jMDKKuIUqzY6PtbJIS4ouYMdUt4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:eb:67:e6:c3:d7:22:c1:81:0a:fc:be:8b:a2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=2b028e58f473137802f3b9a0102d2367912c9e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0a:18:b7:52:78:b7:88:b8:fd:5d:60:06:88:
0c:4f:5a:67:7f:4f:07:88:07:3d:c1:39:cd:11:67:
61:ad:1a:10:d7:02:18:67:d9:a3:d5:14:72:3f:31:
93:02:cc:d5:e1:2c:69:5f:b8:dd:22:d6:b8:64:9d:
21:82:e2:04:8b:22:8d:9c:63:bd:1c:5d:17:93:16:
12:d5:54:a3:cb:33:e1:ec:86:c9:ce:f2:6c:a0:fb:
69:7e:ba:b8:de:e6:9b:de:5c:d2:ea:3d:ae:3d:fa:
e4:c9:7e:77:ca:ea:ab:11:bf:ac:3e:3b:4c:3c:a3:
52:a7:89:2e:7a:d0:64:47:e4:e2:74:4c:b0:18:39:
05:a3:c5:5d:75:cd:51:f2:3e:19:d1:4b:2f:65:d6:
47:34:7e:51:fd:8b:39:97:59:90:7e:ff:1f:b9:0f:
5f:20:23:12:30:d3:56:4b:83:f1:c3:3b:a9:7c:83:
8a:27:ed:91:1d:6c:5c:2c:67:7b:c3:7d:b5:80:1e:
4f:46:d3:ea:58:b9:e1:3e:03:41:01:d6:db:b6:4f:
09:14:2a:4f:a2:1b:44:be:9b:ec:dc:92:65:2a:0b:
ea:fa:b1:ee:2e:ae:33:e3:fb:75:69:d5:95:93:41:
36:e9:fb:2c:e6:b0:4e:87:23:ff:c2:0c:bf:97:a5:
3e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:02:8E:58:F4:73:13:78:02:F3:B9:A0:10:2D:23:67:91:2C:9E:52
X509v3 Authority Key Identifier:
keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4d:0f:f2:6f:a2:e1:d6:d8:ac:23:08:9c:1b:28:8c:e8:18:
b2:7a:e0:89:66:2b:63:e6:eb:d7:60:56:c2:d5:e8:5a:0b:65:
ae:c1:d8:01:61:fd:a6:6a:98:2f:21:bf:61:d3:ac:69:a3:3e:
d1:5a:62:09:b7:b0:be:fd:0a:f3:6e:b0:91:8c:c0:d9:33:19:
67:6e:9c:8c:f6:02:de:6a:43:70:fe:75:ad:d7:d7:69:5f:86:
33:ef:ae:3e:ce:ce:b1:6f:3d:50:a8:f8:20:d6:b6:04:1d:3b:
95:59:37:83:ef:7d:ce:69:47:d6:54:c5:fa:c2:27:46:0a:e6:
75:ec:69:9a:4a:59:0d:47:2b:0b:1b:20:f3:10:49:7e:15:5b:
36:cb:f2:b4:9e:89:e6:ec:77:3b:42:90:67:6a:6c:2c:4a:7f:
f8:c1:39:41:15:b6:aa:3b:f9:ad:17:da:d9:be:57:4c:6e:50:
91:f7:32:3a:57:c4:15:6d:dc:8e:7a:72:22:fc:ec:11:bf:ab:
29:00:c9:4d:93:65:2f:ac:da:ca:be:80:17:4c:dd:43:7c:33:
fc:b8:ce:11:3d:d3:3b:6d:e8:69:4a:5e:b0:d0:bc:67:b4:90:
07:a9:77:f8:d9:41:69:0b:d1:9e:14:44:78:e6:26:a1:6b:83:
ac:0a:fc:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cutn5sPXIsGBCvy+i6LVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNmNkYmY0NzUxMTNmOTZjYTc4YTA3YWZiZDQ0NThjODg4
ODA3NzEwHhcNMjUwMTMxMTMwMDM1WhcNMjUwMjAxMTMwMDM1WjAzMTEwLwYDVQQD
EygyYjAyOGU1OGY0NzMxMzc4MDJmM2I5YTAxMDJkMjM2NzkxMmM5ZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwoYt1J4t4i4/V1gBogMT1pnf08H
iAc9wTnNEWdhrRoQ1wIYZ9mj1RRyPzGTAszV4SxpX7jdIta4ZJ0hguIEiyKNnGO9
HF0XkxYS1VSjyzPh7IbJzvJsoPtpfrq43uab3lzS6j2uPfrkyX53yuqrEb+sPjtM
PKNSp4kuetBkR+TidEywGDkFo8Vddc1R8j4Z0UsvZdZHNH5R/Ys5l1mQfv8fuQ9f
ICMSMNNWS4PxwzupfIOKJ+2RHWxcLGd7w321gB5PRtPqWLnhPgNBAdbbtk8JFCpP
ohtEvpvs3JJlKgvq+rHuLq4z4/t1adWVk0E26fss5rBOhyP/wgy/l6U+HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsCjlj0cxN4AvO5oBAtI2eRLJ5SMB8GA1UdIwQY
MBaAFJps2/R1ET+WynigevvURYyIiAdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUt
ZGMyZmVhYzM3ODI5LzEvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUtZGMyZmVhYzM3ODI5
LzEvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADU0P8m+i
4dbYrCMInBsojOgYsnrgiWYrY+br12BWwtXoWgtlrsHYAWH9pmqYLyG/YdOsaaM+
0VpiCbewvv0K826wkYzA2TMZZ26cjPYC3mpDcP51rdfXaV+GM++uPs7OsW89UKj4
INa2BB07lVk3g+99zmlH1lTF+sInRgrmdexpmkpZDUcrCxsg8xBJfhVbNsvytJ6J
5ux3O0KQZ2psLEp/+ME5QRW2qjv5rRfa2b5XTG5QkfcyOlfEFW3cjnpyIvzsEb+r
KQDJTZNlL6zayr6AF0zdQ3wz/LjOET3TO23oaUpesNC8Z7SQB6l3+NlBaQvRnhRE
eOYmoWuDrAr8ag==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:16 2025 by rpki-client