Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
File: MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft (raw, json)
Hash identifier: YaWx4xEwv/sWxO1yA1yxf/f7kDxZkhFTrnqC/rnR4D8=
Subject key identifier: DF:99:B1:2B:F5:0D:72:CB:1C:2D:25:18:58:57:64:42:25:C9:82:6A
Authority key identifier: 32:4C:71:04:6C:54:9F:B3:C7:D4:EB:C4:CF:95:19:D0:02:E7:6D:F1
Certificate issuer: /CN=324c71046c549fb3c7d4ebc4cf9519d002e76df1
Certificate serial: 0194BD85268F67466F98460C0265E5B511D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
Manifest number: 08F3
Signing time: Fri 31 Jan 2025 18:00:07 +0000
Manifest this update: Fri 31 Jan 2025 18:00:07 +0000
Manifest next update: Sat 01 Feb 2025 18:00:07 +0000
Files and hashes: 1: 2W4Y0bQNlvS93LoW6fNHPM7BKLQ.roa (hash: I9C4k+xseXfObTJ4huNUkRHHI0jQTaqLFqDJffjcwOE=)
2: MkxxBGxUn7PH1OvEz5UZ0ALnbfE.crl (hash: po7cScU7BuiX+rwS98aA4mK4VeDnKPpwhFXNEfmXgok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:26:8f:67:46:6f:98:46:0c:02:65:e5:b5:11:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324c71046c549fb3c7d4ebc4cf9519d002e76df1
Validity
Not Before: Jan 31 18:00:07 2025 GMT
Not After : Feb 1 18:00:07 2025 GMT
Subject: CN=df99b12bf50d72cb1c2d25185857644225c9826a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:48:62:be:a0:43:8a:8a:9c:3f:f0:ea:65:e8:
8b:fa:a8:5b:23:47:e9:f7:63:d5:c1:e3:aa:e4:b9:
76:8b:ae:52:25:19:78:e7:7e:7c:d9:fd:4d:68:2a:
33:83:c8:83:0a:df:9d:eb:8b:d0:81:1f:5f:57:3c:
66:35:8c:44:23:63:01:05:25:8f:4e:f6:13:9a:30:
c9:7a:e2:77:93:db:4b:03:e7:db:3c:b9:40:51:c0:
96:2c:52:27:35:d5:56:f6:71:58:52:9a:99:6e:c8:
d9:5c:8c:a5:f0:c9:f3:3a:ee:5c:a7:c5:7d:93:58:
ea:85:32:6f:d9:39:de:5c:dc:89:f7:7b:f6:4b:ba:
5c:56:fc:ee:04:c5:56:a7:03:ad:b0:0c:d7:eb:57:
ad:96:62:e4:0e:34:bb:44:a3:f5:51:81:79:2d:f1:
b5:69:38:0e:48:f9:ca:ad:a4:d5:69:62:f9:9a:76:
d1:b3:84:ba:4f:63:af:81:92:4e:8f:99:cb:6c:da:
a4:da:96:49:58:92:5f:6f:14:74:7f:f7:67:b0:53:
51:c6:df:fe:6a:aa:20:60:b8:05:c4:f5:a2:f6:d5:
80:48:50:8c:e2:e4:19:dd:c5:5c:9a:f9:cc:3a:36:
ea:67:f2:8c:6e:14:c3:b4:42:20:78:fa:e5:dd:e4:
81:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:99:B1:2B:F5:0D:72:CB:1C:2D:25:18:58:57:64:42:25:C9:82:6A
X509v3 Authority Key Identifier:
keyid:32:4C:71:04:6C:54:9F:B3:C7:D4:EB:C4:CF:95:19:D0:02:E7:6D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:90:e9:e9:fa:fa:c1:fd:b1:db:e5:30:bd:e4:ef:38:9e:97:
26:6f:83:86:2e:4f:7f:a7:d4:c5:92:f7:2b:50:c7:2f:0c:78:
3b:98:ce:41:c6:86:ee:0b:f8:b3:92:f5:e1:88:16:fa:10:51:
47:08:95:fb:bf:e3:c5:a7:c9:ab:cf:30:77:d4:b4:a3:a5:ed:
bb:48:ed:bf:5f:5e:8b:b1:2b:47:01:39:72:74:14:4f:2b:df:
1a:f6:01:99:6b:cc:34:60:fe:f8:22:6e:32:70:c8:27:27:8e:
22:c6:02:2b:a9:50:be:c3:04:aa:5d:95:2c:09:d0:a9:bd:a2:
b2:19:48:90:89:6f:31:97:b7:91:bf:5a:26:5c:a3:67:2c:a6:
40:c6:00:2b:d0:85:87:f9:b9:1b:f7:2d:13:01:2f:17:dc:f6:
4e:4c:25:aa:b0:87:50:6b:d3:fc:38:f5:ca:cd:08:fb:4c:05:
db:ba:b4:50:30:b6:28:eb:9d:e0:d9:91:40:fe:3d:45:eb:54:
c0:a8:aa:69:47:d3:1a:69:b8:c2:28:0a:a2:0a:94:90:d8:96:
6a:cf:30:a0:e2:27:e9:67:06:55:9d:6b:bd:d4:cb:67:71:d9:
6a:d3:a6:54:51:8b:46:d2:43:29:fe:f2:4a:7c:21:68:40:19:
04:fb:1b:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hSaPZ0ZvmEYMAmXltRHUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNGM3MTA0NmM1NDlmYjNjN2Q0ZWJjNGNmOTUxOWQwMDJl
NzZkZjEwHhcNMjUwMTMxMTgwMDA3WhcNMjUwMjAxMTgwMDA3WjAzMTEwLwYDVQQD
EyhkZjk5YjEyYmY1MGQ3MmNiMWMyZDI1MTg1ODU3NjQ0MjI1Yzk4MjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8khivqBDioqcP/DqZeiL+qhbI0fp
92PVweOq5Ll2i65SJRl453582f1NaCozg8iDCt+d64vQgR9fVzxmNYxEI2MBBSWP
TvYTmjDJeuJ3k9tLA+fbPLlAUcCWLFInNdVW9nFYUpqZbsjZXIyl8MnzOu5cp8V9
k1jqhTJv2TneXNyJ93v2S7pcVvzuBMVWpwOtsAzX61etlmLkDjS7RKP1UYF5LfG1
aTgOSPnKraTVaWL5mnbRs4S6T2OvgZJOj5nLbNqk2pZJWJJfbxR0f/dnsFNRxt/+
aqogYLgFxPWi9tWASFCM4uQZ3cVcmvnMOjbqZ/KMbhTDtEIgePrl3eSBFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+ZsSv1DXLLHC0lGFhXZEIlyYJqMB8GA1UdIwQY
MBaAFDJMcQRsVJ+zx9TrxM+VGdAC523xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWt4eEJHeFVuN1BIMU92RXo1VVowQUxuYmZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xMjViOWQtMmExZi00NjNhLTk2NWUt
N2NmZWFmMDg2ZTE0LzEvTWt4eEJHeFVuN1BIMU92RXo1VVowQUxuYmZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8xMjViOWQtMmExZi00NjNhLTk2NWUtN2NmZWFmMDg2ZTE0
LzEvTWt4eEJHeFVuN1BIMU92RXo1VVowQUxuYmZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5Dp6fr6
wf2x2+UwveTvOJ6XJm+Dhi5Pf6fUxZL3K1DHLwx4O5jOQcaG7gv4s5L14YgW+hBR
RwiV+7/jxafJq88wd9S0o6Xtu0jtv19ei7ErRwE5cnQUTyvfGvYBmWvMNGD++CJu
MnDIJyeOIsYCK6lQvsMEql2VLAnQqb2ishlIkIlvMZe3kb9aJlyjZyymQMYAK9CF
h/m5G/ctEwEvF9z2TkwlqrCHUGvT/Dj1ys0I+0wF27q0UDC2KOud4NmRQP49RetU
wKiqaUfTGmm4wigKogqUkNiWas8woOIn6WcGVZ1rvdTLZ3HZatOmVFGLRtJDKf7y
SnwhaEAZBPsbzw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:20 2025 by rpki-client