Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
File: mxl1igh4doFtwZNh6vHpQS3nP4Y.mft (raw, json)
Hash identifier: NrjwvAGx2yOais6Y14s0WqMfZ8cANB+KMiHqCy8NCpw=
Subject key identifier: 16:C1:9C:D0:EF:8F:F5:33:F6:FF:4F:6C:69:2D:AF:17:84:DE:60:FA
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Certificate issuer: /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial: 0194BD859F04E219870226D7B8084126CA03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
Manifest number: 04DF
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: BDTH3ILUan6_zfYPTgmdo2aSIEs.roa (hash: vfoMCSza5cDas2vR4Ocwzq0jqksW2l8HAJ0wMflsMqE=)
2: E5IVKgbJt2zbKiLJbsrX3LIySFU.roa (hash: tGHo3B7TRCKpsC+++roBe0/3ivzBH+Ps/KgroLhmH0s=)
3: UaT5Q9bX82Bqe6jOA8JUwqN9Vlk.roa (hash: juEH9dDl19+Gh9JzennWIbN6WX5TGedOU3KMBiUkbg4=)
4: Y2-uFOvDKhB51qa1_AM5U2JOtUY.roa (hash: 4c9/YhL+TK23Lox9YjacyfqcSWeripXtyhdacCRYF0A=)
5: mxl1igh4doFtwZNh6vHpQS3nP4Y.crl (hash: jFcJ1Fg76ihh3zYJz84gH1aoP5QL5l1Y4ESCRMwyhOo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9f:04:e2:19:87:02:26:d7:b8:08:41:26:ca:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=16c19cd0ef8ff533f6ff4f6c692daf1784de60fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:45:47:42:a3:1a:46:de:6f:d8:84:51:c3:
21:83:d4:00:0c:60:e3:45:e6:2f:b5:53:2c:64:89:
9c:b1:a4:b8:e2:46:c6:75:74:06:89:6e:98:8b:85:
dd:e9:c6:02:14:1b:eb:11:05:e1:99:eb:0a:f3:b2:
fd:fa:13:3a:37:68:89:3d:74:3e:9f:fc:1e:60:60:
ec:0c:9a:29:ed:6c:b7:22:df:60:35:83:79:98:e2:
73:f3:14:c3:9b:d3:74:7a:d0:d4:ff:58:c0:4e:41:
5d:ce:9c:db:62:7e:e3:15:54:f7:c5:15:76:fa:8b:
ca:59:d3:af:c4:14:d1:17:7a:c5:d8:d6:6b:ca:a0:
7a:07:71:33:c0:d0:a4:d3:26:86:47:ab:74:84:f8:
06:bf:00:f6:fb:17:5e:4d:eb:2b:56:ec:05:1e:1c:
d6:08:6b:5e:24:1e:0d:22:5a:36:4e:87:98:a8:05:
bc:29:08:d4:f8:7a:b3:0c:87:05:f2:99:3a:3d:07:
06:55:17:a5:7a:7b:18:bc:5b:d6:77:5d:d1:0c:53:
3a:25:c8:ec:76:6f:49:f5:26:45:af:c5:3b:f3:68:
6f:df:95:94:4e:3f:5f:a8:ac:e4:39:ea:37:65:13:
97:3d:32:ea:3b:eb:cc:24:5e:dd:8f:54:bb:47:60:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C1:9C:D0:EF:8F:F5:33:F6:FF:4F:6C:69:2D:AF:17:84:DE:60:FA
X509v3 Authority Key Identifier:
keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2d:84:b4:2e:a3:76:0a:07:bc:9a:22:ee:88:9c:2b:b3:5b:
1d:4f:1e:02:96:7c:80:7d:37:4c:72:52:92:ac:03:a9:c6:65:
35:6c:65:b0:79:a5:f0:ac:01:2f:9e:f2:97:ca:df:73:ea:0c:
b6:c1:fb:89:5f:3e:72:e4:d1:70:a0:da:88:ea:01:37:f9:0c:
14:68:1e:22:aa:82:0d:d3:77:2f:53:42:63:0b:4d:aa:76:b1:
20:15:49:cc:7b:61:bd:ae:fa:a9:e2:3a:af:d8:91:11:87:ca:
fb:5b:05:d2:f3:95:94:cf:f2:84:7c:e7:ab:e1:15:73:07:36:
69:d3:1e:5c:e6:2c:e2:8c:2e:8c:02:99:74:c2:78:5d:db:e2:
69:b8:06:99:92:cd:a3:ce:d8:82:e3:57:e4:c3:99:1e:d9:88:
08:ea:76:0d:cc:7d:99:73:38:3c:74:2e:e4:0e:83:86:07:76:
a1:f9:2e:c3:88:b0:99:6e:c8:fd:a8:8c:28:ad:4c:28:8f:cc:
84:56:d4:4f:19:84:b1:e2:60:7d:f4:7f:e3:84:a9:4e:c6:a2:
ca:ee:4d:56:69:45:86:41:fe:a7:7a:81:47:7f:c6:a9:b0:4c:
5a:11:c3:8f:2d:c9:84:fe:e3:d6:42:0a:2f:1f:95:12:ee:1d:
ac:97:d9:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZ8E4hmHAibXuAhBJsoDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMTk3NThhMDg3ODc2ODE2ZGMxOTM2MWVhZjFlOTQxMmRl
NzNmODYwHhcNMjUwMTMxMTgwMDM4WhcNMjUwMjAxMTgwMDM4WjAzMTEwLwYDVQQD
EygxNmMxOWNkMGVmOGZmNTMzZjZmZjRmNmM2OTJkYWYxNzg0ZGU2MGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs1FR0KjGkbeb9iEUcMhg9QADGDj
ReYvtVMsZImcsaS44kbGdXQGiW6Yi4Xd6cYCFBvrEQXhmesK87L9+hM6N2iJPXQ+
n/weYGDsDJop7Wy3It9gNYN5mOJz8xTDm9N0etDU/1jATkFdzpzbYn7jFVT3xRV2
+ovKWdOvxBTRF3rF2NZryqB6B3EzwNCk0yaGR6t0hPgGvwD2+xdeTesrVuwFHhzW
CGteJB4NIlo2ToeYqAW8KQjU+HqzDIcF8pk6PQcGVRelensYvFvWd13RDFM6Jcjs
dm9J9SZFr8U782hv35WUTj9fqKzkOeo3ZROXPTLqO+vMJF7dj1S7R2AztQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbBnNDvj/Uz9v9PbGktrxeE3mD6MB8GA1UdIwQY
MBaAFJsZdYoIeHaBbcGTYerx6UEt5z+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXhsMWlnaDRkb0Z0d1pOaDZ2SHBRUzNuUDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iYTZmM2UtZTk1Yi00OGQyLTg0MTkt
NDEzZGE2NjdhOGJlLzEvbXhsMWlnaDRkb0Z0d1pOaDZ2SHBRUzNuUDRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9iYTZmM2UtZTk1Yi00OGQyLTg0MTktNDEzZGE2NjdhOGJl
LzEvbXhsMWlnaDRkb0Z0d1pOaDZ2SHBRUzNuUDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQi2EtC6j
dgoHvJoi7oicK7NbHU8eApZ8gH03THJSkqwDqcZlNWxlsHml8KwBL57yl8rfc+oM
tsH7iV8+cuTRcKDaiOoBN/kMFGgeIqqCDdN3L1NCYwtNqnaxIBVJzHthva76qeI6
r9iREYfK+1sF0vOVlM/yhHznq+EVcwc2adMeXOYs4owujAKZdMJ4XdviabgGmZLN
o87YguNX5MOZHtmICOp2Dcx9mXM4PHQu5A6Dhgd2ofkuw4iwmW7I/aiMKK1MKI/M
hFbUTxmEseJgffR/44SpTsaiyu5NVmlFhkH+p3qBR3/GqbBMWhHDjy3JhP7j1kIK
Lx+VEu4drJfZCA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:11:04 2025 by rpki-client