Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
File: MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json)
Hash identifier: tOpbPbeyGSKHRnbcJg1SE6Y68DwPmAmlFyTpqC4IBfk=
Subject key identifier: 88:87:EB:7F:9D:BE:40:F4:9B:9A:D7:D2:CB:C8:E0:CE:F7:57:95:4B
Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
Certificate issuer: /CN=31da920321c6c82cee6929e798fc9372baccb925
Certificate serial: 0194BBCECBC9F723589727AA58B9DC56C7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
Manifest number: 0625
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: DB1YhnGLr35tx0OuX8hCavixCjcqbzDfPVLbp+Nww0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cb:c9:f7:23:58:97:27:aa:58:b9:dc:56:c7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=8887eb7f9dbe40f49b9ad7d2cbc8e0cef757954b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3f:9f:3e:a7:81:fc:dd:3b:61:aa:8e:10:ab:
8a:2e:63:3a:14:cd:f8:9d:4e:2e:00:5a:9f:b8:7f:
35:64:62:3a:d7:b7:c4:f4:20:d5:f4:6c:77:c7:1e:
03:8a:de:0f:f4:32:ac:cf:7a:64:e1:c4:c0:26:c9:
ea:35:65:85:3e:09:51:78:8c:34:b7:63:bc:e0:8d:
76:9c:f2:0e:d9:c4:f8:41:a6:98:77:0e:3a:7f:f7:
e2:45:4a:82:6d:c4:6a:0b:f4:e9:64:38:d2:e9:b3:
b6:e7:9a:02:4d:de:49:ea:30:3e:bd:14:c4:68:99:
81:5a:b3:a7:58:6e:cc:b1:30:9d:0d:4c:03:db:bf:
c6:96:45:2f:31:7e:1a:9f:65:39:f1:28:ae:f9:81:
59:16:b0:4d:17:b1:ae:99:d7:aa:46:01:89:02:89:
83:26:de:cc:6a:4e:67:22:29:fd:d1:1c:3a:ee:ef:
6a:f7:0c:bb:de:ab:e2:47:3d:37:5c:a9:b1:cd:81:
bb:da:56:ee:c4:3d:b9:86:b5:4b:09:c9:1d:25:07:
fc:33:06:c9:d4:6a:75:90:5e:d0:59:8c:87:1a:31:
54:09:13:e0:96:7f:42:82:06:45:1f:60:7e:3e:d5:
a1:78:e7:c8:57:81:db:02:fd:d5:f3:6e:22:be:87:
6d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:87:EB:7F:9D:BE:40:F4:9B:9A:D7:D2:CB:C8:E0:CE:F7:57:95:4B
X509v3 Authority Key Identifier:
keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ed:59:3a:2b:41:4e:d6:9e:46:21:0e:2a:06:bb:8a:b4:67:
b3:d3:39:79:58:d6:b3:78:6e:96:be:c7:bf:4d:58:71:a5:6c:
57:08:b9:40:b0:15:c6:11:b5:8b:e5:d7:24:64:e0:d1:78:07:
ba:7d:a0:37:f5:7f:30:cf:de:45:58:1b:ca:39:30:7f:62:4c:
3c:30:59:ef:81:d2:62:ea:05:fa:07:9a:16:9e:f7:07:fa:4d:
d2:c2:7a:49:48:fd:8c:b0:33:8c:0f:f6:1a:94:1a:07:06:58:
88:ea:8e:d7:ed:c5:39:0c:9a:11:bc:6c:08:41:09:f8:77:24:
4b:7d:20:55:b5:ab:10:2f:a2:68:5c:92:fd:76:1b:dc:c9:bb:
78:cb:3e:19:64:ac:c6:44:7e:2e:26:05:bb:51:2e:f1:d0:09:
f0:e8:26:38:3e:c2:6c:1a:84:e6:0a:be:14:5d:bc:9c:3f:56:
a8:44:32:c3:ef:97:39:b8:36:2d:e8:f1:05:8f:94:a7:2d:5d:
a6:a2:d5:4b:bc:3a:ff:62:1a:aa:0d:20:57:13:fd:85:e3:66:
c6:da:41:13:d4:44:11:8a:e9:9c:ec:1f:43:14:98:f6:80:76:
da:09:32:0f:3e:f5:25:e1:74:c8:68:b8:f6:c1:c5:e3:4f:6d:
b9:38:15:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zsvJ9yNYlyeqWLncVsfCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZGE5MjAzMjFjNmM4MmNlZTY5MjllNzk4ZmM5MzcyYmFj
Y2I5MjUwHhcNMjUwMTMxMTAwMTE5WhcNMjUwMjAxMTAwMTE5WjAzMTEwLwYDVQQD
Eyg4ODg3ZWI3ZjlkYmU0MGY0OWI5YWQ3ZDJjYmM4ZTBjZWY3NTc5NTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3z+fPqeB/N07YaqOEKuKLmM6FM34
nU4uAFqfuH81ZGI617fE9CDV9Gx3xx4Dit4P9DKsz3pk4cTAJsnqNWWFPglReIw0
t2O84I12nPIO2cT4QaaYdw46f/fiRUqCbcRqC/TpZDjS6bO255oCTd5J6jA+vRTE
aJmBWrOnWG7MsTCdDUwD27/GlkUvMX4an2U58Siu+YFZFrBNF7GumdeqRgGJAomD
Jt7Mak5nIin90Rw67u9q9wy73qviRz03XKmxzYG72lbuxD25hrVLCckdJQf8MwbJ
1Gp1kF7QWYyHGjFUCRPgln9CggZFH2B+PtWheOfIV4HbAv3V824ivodtrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiH63+dvkD0m5rX0svI4M73V5VLMB8GA1UdIwQY
MBaAFDHakgMhxsgs7mkp55j8k3K6zLklMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80OTFjOTItODk2Ny00NzNlLTllYTct
YTU4OTc4N2JmZjkwLzEvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC80OTFjOTItODk2Ny00NzNlLTllYTctYTU4OTc4N2JmZjkw
LzEvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiO1ZOitB
TtaeRiEOKga7irRns9M5eVjWs3hulr7Hv01YcaVsVwi5QLAVxhG1i+XXJGTg0XgH
un2gN/V/MM/eRVgbyjkwf2JMPDBZ74HSYuoF+geaFp73B/pN0sJ6SUj9jLAzjA/2
GpQaBwZYiOqO1+3FOQyaEbxsCEEJ+HckS30gVbWrEC+iaFyS/XYb3Mm7eMs+GWSs
xkR+LiYFu1Eu8dAJ8OgmOD7CbBqE5gq+FF28nD9WqEQyw++XObg2LejxBY+Upy1d
pqLVS7w6/2Iaqg0gVxP9heNmxtpBE9REEYrpnOwfQxSY9oB22gkyDz71JeF0yGi4
9sHF409tuTgVvA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:29 2025 by rpki-client