Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
File: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft (raw, json)
Hash identifier: gJFi9QdEpZKCtHUllzNXP/2lKTDNbvWJ9uPkh8gSYQ4=
Subject key identifier: 47:81:98:7A:24:4E:B8:DF:1F:B0:38:0E:B0:E6:66:23:82:E6:D5:75
Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
Certificate issuer: /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Certificate serial: 0194BC72DE2EAE63D20C95B4DC855D8D3C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl (hash: m0lt7md47V+sTdnY6ppdtIfU3gsgjxXbMcJ6FrXpPzo=)
2: qzYfqleKMXziWfjI2OhKWSLGXWI.roa (hash: TK9bijwIRNWSf6A7SMNJb8WGXN3cTGP9yogtHb8815I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:de:2e:ae:63:d2:0c:95:b4:dc:85:5d:8d:3c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=4781987a244eb8df1fb0380eb0e6662382e6d575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:79:15:1a:df:f9:e8:ab:6b:2e:19:23:da:
51:48:9d:3a:1f:5e:60:15:9a:19:d3:af:e7:bc:82:
dc:f1:83:5b:0f:f6:69:f3:33:be:8a:0c:69:ab:ef:
26:4b:08:82:83:9b:e8:98:dd:19:51:f3:4e:f5:c4:
4d:45:c6:fd:4f:8b:97:4f:f0:53:12:dc:15:b4:cf:
5e:0f:e1:ee:f9:2a:15:13:df:60:22:8f:aa:8b:4d:
d3:d7:fd:c9:7b:45:b6:c9:90:5b:1e:1b:40:63:5b:
e8:42:e8:52:83:30:17:2d:ee:96:2c:aa:f5:f2:fb:
25:d9:43:51:01:83:90:c7:cd:87:93:f6:e2:13:90:
9d:d6:df:68:9d:86:cd:0c:df:3e:bd:72:e8:80:c0:
0a:47:8a:52:56:2b:6d:1b:de:11:83:d0:05:55:e3:
fb:7b:91:b0:86:6b:1a:4b:34:68:bb:1a:ba:87:6f:
01:5f:79:9d:54:6d:3c:aa:8f:8f:b2:ef:7f:72:53:
27:99:c8:9c:8c:aa:79:cc:c5:2f:bc:e7:f1:f6:fb:
a5:4b:8e:1e:50:86:e0:8e:d7:58:45:1c:23:18:f5:
6a:88:81:4c:66:07:72:5d:09:0d:62:67:12:e5:66:
85:7d:ea:be:16:1f:62:4e:16:c0:1b:f4:03:67:3a:
90:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:81:98:7A:24:4E:B8:DF:1F:B0:38:0E:B0:E6:66:23:82:E6:D5:75
X509v3 Authority Key Identifier:
keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b2:33:b3:c5:e8:c2:0d:7a:2a:00:08:0d:9f:b5:04:73:b3:
09:e6:88:63:d3:92:3d:f0:93:39:48:ef:4d:98:58:e8:a7:cc:
95:28:59:68:13:25:8f:dd:80:c3:01:3d:63:0e:e3:04:3f:65:
9a:31:97:0d:7d:e9:e8:f3:bb:cf:13:5d:56:01:1a:21:c5:df:
e7:72:dc:64:db:04:13:34:2b:9e:ea:ad:1d:20:39:e3:af:19:
33:05:2a:03:59:98:9a:87:a7:56:e9:64:bb:d0:76:ab:50:f0:
d9:dd:6d:4e:5d:cd:33:8c:03:3e:c8:a4:3a:6d:38:52:38:dd:
17:b5:94:2c:f5:6a:cc:0a:46:30:a2:20:8a:9e:a5:97:73:c1:
3f:86:97:83:9a:fe:b0:a1:d4:1b:05:d4:3e:3e:44:fe:08:c3:
5b:87:15:17:1a:56:a9:5e:94:2f:9e:e3:44:56:eb:ea:96:78:
5a:2b:6c:9b:2a:b7:52:72:1a:df:9e:02:97:b1:1f:c9:ef:e9:
67:31:7a:ef:95:4a:d2:2f:21:03:59:2c:7a:31:0e:41:95:8b:
32:a8:7d:15:c6:75:47:38:4a:58:a2:46:87:8b:ce:c0:9c:b0:
42:20:a4:6f:03:65:32:17:03:b2:cb:6a:b2:38:98:f7:80:05:
fa:d1:4e:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ct4urmPSDJW03IVdjTyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMWU3Nzg0ZjYwYWM4ZDk2OWI4MWNmNTIzMWNkOWRjMDg3
Y2VkMzIwHhcNMjUwMTMxMTMwMDMxWhcNMjUwMjAxMTMwMDMxWjAzMTEwLwYDVQQD
Eyg0NzgxOTg3YTI0NGViOGRmMWZiMDM4MGViMGU2NjYyMzgyZTZkNTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrx5FRrf+eiray4ZI9pRSJ06H15g
FZoZ06/nvILc8YNbD/Zp8zO+igxpq+8mSwiCg5vomN0ZUfNO9cRNRcb9T4uXT/BT
EtwVtM9eD+Hu+SoVE99gIo+qi03T1/3Je0W2yZBbHhtAY1voQuhSgzAXLe6WLKr1
8vsl2UNRAYOQx82Hk/biE5Cd1t9onYbNDN8+vXLogMAKR4pSVittG94Rg9AFVeP7
e5GwhmsaSzRouxq6h28BX3mdVG08qo+Psu9/clMnmcicjKp5zMUvvOfx9vulS44e
UIbgjtdYRRwjGPVqiIFMZgdyXQkNYmcS5WaFfeq+Fh9iThbAG/QDZzqQLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeBmHokTrjfH7A4DrDmZiOC5tV1MB8GA1UdIwQY
MBaAFDMed4T2CsjZabgc9SMc2dwIfO0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXg1M2hQWUt5TmxwdUJ6MUl4elozQWg4N1RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lMDkyNWUtNDdiZi00OTA3LWJjYmMt
ZmQ5ZjM2YThiYTZlLzEvTXg1M2hQWUt5TmxwdUJ6MUl4elozQWg4N1RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lMDkyNWUtNDdiZi00OTA3LWJjYmMtZmQ5ZjM2YThiYTZl
LzEvTXg1M2hQWUt5TmxwdUJ6MUl4elozQWg4N1RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7Izs8Xo
wg16KgAIDZ+1BHOzCeaIY9OSPfCTOUjvTZhY6KfMlShZaBMlj92AwwE9Yw7jBD9l
mjGXDX3p6PO7zxNdVgEaIcXf53LcZNsEEzQrnuqtHSA5468ZMwUqA1mYmoenVulk
u9B2q1Dw2d1tTl3NM4wDPsikOm04UjjdF7WULPVqzApGMKIgip6ll3PBP4aXg5r+
sKHUGwXUPj5E/gjDW4cVFxpWqV6UL57jRFbr6pZ4Witsmyq3UnIa354Cl7Efye/p
ZzF675VK0i8hA1ksejEOQZWLMqh9FcZ1RzhKWKJGh4vOwJywQiCkbwNlMhcDsstq
sjiY94AF+tFOlA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 06:53:47 2025 by rpki-client