Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
File: MX71WudtQiUE6uWyBnJNNkQzEcc.mft (raw, json)
Hash identifier: qlnrG6oVJuZ/WWlN3tIwkxFzKtxwAa6JbwhHW8SawE8=
Subject key identifier: 1B:B1:6B:62:FF:FB:4E:A7:1B:A5:B6:F7:00:FD:E7:A8:C6:70:EF:04
Authority key identifier: 31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
Certificate issuer: /CN=317ef55ae76d422504eae5b206724d36443311c7
Certificate serial: 0194BD4E99AF45DD50697A30C482BEBA5865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: 6KI42LA3k4Z423gzE8zSlIe9RA4.roa (hash: MywiSVripv33Y3DFEx1AfwLFpUpd5icicODvhSpR2Lc=)
2: MX71WudtQiUE6uWyBnJNNkQzEcc.crl (hash: sujasPlz7U4JIbltfzf4x0RjJ+b9k8lNPq1rNGzIzCs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:99:af:45:dd:50:69:7a:30:c4:82:be:ba:58:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317ef55ae76d422504eae5b206724d36443311c7
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=1bb16b62fffb4ea71ba5b6f700fde7a8c670ef04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:54:a0:f1:4d:5e:2c:9a:b4:ea:3e:19:85:
50:42:68:96:b5:09:67:25:df:2f:88:07:17:25:15:
a9:b6:0c:73:5f:21:fd:2b:5b:4d:9a:be:c0:98:b4:
b9:74:e2:6d:bc:34:2b:d0:c9:70:e4:83:d1:06:b0:
a2:85:78:0c:0e:01:4f:d2:11:a9:fc:29:42:c9:3a:
09:43:ce:75:ef:9b:34:f6:a1:48:00:6f:dd:92:63:
11:3a:31:cd:91:3b:5f:ea:b5:13:aa:ce:d4:fe:cb:
b8:f7:64:cc:71:22:89:02:90:48:16:29:c9:b9:85:
9b:65:d2:20:78:fb:1d:f5:f0:ec:8e:80:84:ab:65:
1b:97:f0:7c:2a:ed:86:da:a8:a7:da:49:59:f5:f8:
f3:77:29:50:e5:5b:06:f1:a1:0b:80:2b:ee:2d:ce:
79:19:19:08:52:f5:e4:7b:95:df:66:35:3d:fd:bc:
61:fe:12:03:f0:2f:b8:f3:79:21:cb:63:70:71:4b:
86:6c:59:67:8a:85:2b:92:2b:af:59:f0:81:ea:76:
c0:b8:56:37:34:82:7f:18:97:6c:6b:29:9a:50:5a:
fa:36:9e:ae:58:4f:19:23:10:68:a5:8b:c2:db:2b:
22:93:60:9f:d0:be:dd:34:78:59:89:a9:1f:80:6c:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B1:6B:62:FF:FB:4E:A7:1B:A5:B6:F7:00:FD:E7:A8:C6:70:EF:04
X509v3 Authority Key Identifier:
keyid:31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d8:3a:17:d4:b1:9b:39:2a:9a:a0:38:05:9f:b0:39:18:1e:
8d:71:fc:58:9c:83:da:7d:9a:0a:4a:40:a1:69:7f:9d:20:fd:
f1:14:5e:61:e0:0f:7b:27:4d:64:f7:84:da:1a:3c:3e:0b:99:
aa:43:66:42:5d:41:53:6f:f2:14:f0:70:88:18:f9:ba:a2:46:
54:2a:e6:18:b3:d2:7c:24:04:57:98:9f:83:c8:22:93:f3:ce:
2f:08:6e:9d:bd:a4:08:47:7d:a7:e0:30:94:25:71:eb:d9:b7:
0c:1f:46:e5:b3:74:b6:e1:31:08:7c:27:f1:78:5d:8a:f3:a0:
88:0d:32:36:48:89:0c:f6:4f:15:20:d6:56:93:e3:18:ec:30:
d9:d8:f3:0a:bd:81:b6:e8:73:a4:94:6a:db:1c:67:2a:13:61:
a1:62:f7:79:bd:20:09:dc:83:d9:48:1d:4a:bf:53:d2:7b:7d:
3c:26:65:3b:5c:fa:7a:40:ac:a6:7e:80:da:5b:0a:d6:6f:64:
63:bb:49:94:be:53:8b:e7:fc:07:f8:eb:0a:50:9e:16:a6:37:
d6:83:33:62:d8:10:31:d4:fc:34:85:65:14:af:a2:84:b4:87:
40:30:e7:11:db:6f:8e:f1:a7:06:0c:ca:a9:3f:74:c1:30:74:
2c:11:30:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TpmvRd1QaXowxIK+ulhlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxN2VmNTVhZTc2ZDQyMjUwNGVhZTViMjA2NzI0ZDM2NDQz
MzExYzcwHhcNMjUwMTMxMTcwMDMyWhcNMjUwMjAxMTcwMDMyWjAzMTEwLwYDVQQD
EygxYmIxNmI2MmZmZmI0ZWE3MWJhNWI2ZjcwMGZkZTdhOGM2NzBlZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcJUoPFNXiyatOo+GYVQQmiWtQln
Jd8viAcXJRWptgxzXyH9K1tNmr7AmLS5dOJtvDQr0Mlw5IPRBrCihXgMDgFP0hGp
/ClCyToJQ85175s09qFIAG/dkmMROjHNkTtf6rUTqs7U/su492TMcSKJApBIFinJ
uYWbZdIgePsd9fDsjoCEq2Ubl/B8Ku2G2qin2klZ9fjzdylQ5VsG8aELgCvuLc55
GRkIUvXke5XfZjU9/bxh/hID8C+483khy2NwcUuGbFlnioUrkiuvWfCB6nbAuFY3
NIJ/GJdsaymaUFr6Np6uWE8ZIxBopYvC2ysik2Cf0L7dNHhZiakfgGynVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuxa2L/+06nG6W29wD956jGcO8EMB8GA1UdIwQY
MBaAFDF+9VrnbUIlBOrlsgZyTTZEMxHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVg3MVd1ZHRRaVVFNnVXeUJuSk5Oa1F6RWNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NGY4NmUtNGVhNy00ZGIzLWFhMzAt
YzJjOWUyMzkzYTMyLzEvTVg3MVd1ZHRRaVVFNnVXeUJuSk5Oa1F6RWNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84NGY4NmUtNGVhNy00ZGIzLWFhMzAtYzJjOWUyMzkzYTMy
LzEvTVg3MVd1ZHRRaVVFNnVXeUJuSk5Oa1F6RWNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9g6F9Sx
mzkqmqA4BZ+wORgejXH8WJyD2n2aCkpAoWl/nSD98RReYeAPeydNZPeE2ho8PguZ
qkNmQl1BU2/yFPBwiBj5uqJGVCrmGLPSfCQEV5ifg8gik/POLwhunb2kCEd9p+Aw
lCVx69m3DB9G5bN0tuExCHwn8XhdivOgiA0yNkiJDPZPFSDWVpPjGOww2djzCr2B
tuhzpJRq2xxnKhNhoWL3eb0gCdyD2UgdSr9T0nt9PCZlO1z6ekCspn6A2lsK1m9k
Y7tJlL5Ti+f8B/jrClCeFqY31oMzYtgQMdT8NIVlFK+ihLSHQDDnEdtvjvGnBgzK
qT90wTB0LBEwuw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:18 2025 by rpki-client