Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/MCbiQi-nIkVOYIMX0hhitmqjfTM.mft
File: MCbiQi-nIkVOYIMX0hhitmqjfTM.mft (raw, json)
Hash identifier: w5hEXg18YTFIV3F4Mev/COQmxdYOWtOJuy4gxE/0xpU=
Subject key identifier: 69:C0:7D:D8:77:A7:69:0D:BA:42:46:C3:B9:B6:A5:88:51:BA:95:59
Authority key identifier: 30:26:E2:42:2F:A7:22:45:4E:60:83:17:D2:18:62:B6:6A:A3:7D:33
Certificate issuer: /CN=3026e2422fa722454e608317d21862b66aa37d33
Certificate serial: 0194BBCE50B638846E53433384430ADEC219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCbiQi-nIkVOYIMX0hhitmqjfTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/MCbiQi-nIkVOYIMX0hhitmqjfTM.mft
Manifest number: 137A
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: MCbiQi-nIkVOYIMX0hhitmqjfTM.crl (hash: 4U4NESsdF/8mu/dbKnBwoP7m/dwfJrUcbS+jhnfyMmQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:50:b6:38:84:6e:53:43:33:84:43:0a:de:c2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026e2422fa722454e608317d21862b66aa37d33
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=69c07dd877a7690dba4246c3b9b6a58851ba9559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:bc:4c:cd:84:3e:e1:75:aa:96:ec:ab:0e:
7d:19:ad:0b:b8:c4:c8:5c:f3:c9:06:1f:60:8e:ad:
96:fd:9f:64:0a:e0:29:b0:3d:91:2f:e5:84:e2:42:
d2:dc:a8:8f:48:c6:4b:84:dd:c4:ef:f7:1e:eb:f3:
0a:dc:67:41:07:62:d4:55:77:48:ba:88:e2:8a:c1:
1d:53:17:fe:a6:69:53:15:90:a1:7c:75:a4:5f:4f:
58:de:bf:db:af:c5:1f:e6:16:93:b0:27:7f:fd:79:
40:fe:ff:e2:6e:8c:3f:da:f1:7d:31:4e:ae:f0:c2:
75:42:44:9e:b4:49:76:04:99:f1:43:09:93:2b:a7:
08:83:ca:73:71:f5:0c:0f:67:4d:88:77:d8:ce:e8:
4c:7f:02:25:6a:84:15:57:70:1b:78:28:09:bf:76:
6d:2e:9f:bb:01:4b:84:2f:ad:0e:25:f1:46:dd:8c:
a5:e4:45:f8:e2:11:99:ea:19:3f:8d:21:0c:9b:a7:
1f:ae:d2:78:e2:ac:a0:50:75:cc:8d:4f:e8:40:48:
65:77:41:e6:b2:ae:94:bf:9e:82:41:a5:c8:d5:6d:
a9:8b:9f:31:dd:96:d3:8d:79:0f:24:59:03:24:50:
15:65:1a:e9:00:84:73:69:10:91:5e:90:98:b9:3b:
e8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C0:7D:D8:77:A7:69:0D:BA:42:46:C3:B9:B6:A5:88:51:BA:95:59
X509v3 Authority Key Identifier:
keyid:30:26:E2:42:2F:A7:22:45:4E:60:83:17:D2:18:62:B6:6A:A3:7D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCbiQi-nIkVOYIMX0hhitmqjfTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/MCbiQi-nIkVOYIMX0hhitmqjfTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/MCbiQi-nIkVOYIMX0hhitmqjfTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cf:dc:af:a1:3b:68:99:c4:55:7e:50:97:fb:06:b7:53:64:
48:ff:4b:86:a3:aa:aa:b0:b0:86:a9:05:f3:74:b7:6b:7b:c3:
39:0f:03:38:42:53:ff:20:9d:52:f0:ff:6f:53:fb:07:5a:32:
e7:2a:8a:51:1e:39:84:e0:77:f3:e0:48:3c:3c:ae:d4:de:4d:
f9:76:a3:ac:1c:8f:24:d6:e1:e8:f8:9d:cc:5b:57:68:53:c1:
a6:fd:c4:b2:34:c5:a1:99:76:40:14:76:9f:2a:2a:53:76:5d:
97:67:d6:82:da:9f:8c:58:2e:c2:6c:93:3e:20:ae:3b:37:49:
92:f5:b3:4e:0c:d6:5f:91:de:85:41:41:93:2e:6f:3c:3b:a9:
b2:10:f9:b2:5a:90:f4:5f:ec:95:1d:e4:dc:9d:17:01:d1:ea:
70:8f:bf:a9:b7:e8:8f:4b:0c:4b:98:28:da:80:a5:f2:3c:aa:
f3:3a:7e:12:f0:16:bb:8d:99:5d:dd:19:05:f0:b4:90:d3:51:
c1:11:16:5d:06:a7:81:c6:f1:14:31:ad:96:4a:bc:cb:24:03:
04:42:a5:c4:6d:f6:5f:4a:ed:a1:78:11:2d:31:c7:46:a8:88:
0c:44:19:b9:b6:53:62:2a:fc:23:1d:06:8b:1d:72:08:db:6f:
e6:fa:0e:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlC2OIRuU0MzhEMK3sIZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMjZlMjQyMmZhNzIyNDU0ZTYwODMxN2QyMTg2MmI2NmFh
MzdkMzMwHhcNMjUwMTMxMTAwMDQ3WhcNMjUwMjAxMTAwMDQ3WjAzMTEwLwYDVQQD
Eyg2OWMwN2RkODc3YTc2OTBkYmE0MjQ2YzNiOWI2YTU4ODUxYmE5NTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkO8TM2EPuF1qpbsqw59Ga0LuMTI
XPPJBh9gjq2W/Z9kCuApsD2RL+WE4kLS3KiPSMZLhN3E7/ce6/MK3GdBB2LUVXdI
uojiisEdUxf+pmlTFZChfHWkX09Y3r/br8Uf5haTsCd//XlA/v/ibow/2vF9MU6u
8MJ1QkSetEl2BJnxQwmTK6cIg8pzcfUMD2dNiHfYzuhMfwIlaoQVV3AbeCgJv3Zt
Lp+7AUuEL60OJfFG3Yyl5EX44hGZ6hk/jSEMm6cfrtJ44qygUHXMjU/oQEhld0Hm
sq6Uv56CQaXI1W2pi58x3ZbTjXkPJFkDJFAVZRrpAIRzaRCRXpCYuTvojwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnAfdh3p2kNukJGw7m2pYhRupVZMB8GA1UdIwQY
MBaAFDAm4kIvpyJFTmCDF9IYYrZqo30zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUNiaVFpLW5Ja1ZPWUlNWDBoaGl0bXFqZlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iNzkyY2MtYWI5Ni00NTZlLTlkM2Ut
YTFlZTQ0MGZmZTNlLzEvTUNiaVFpLW5Ja1ZPWUlNWDBoaGl0bXFqZlRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iNzkyY2MtYWI5Ni00NTZlLTlkM2UtYTFlZTQ0MGZmZTNl
LzEvTUNiaVFpLW5Ja1ZPWUlNWDBoaGl0bXFqZlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACc/cr6E7
aJnEVX5Ql/sGt1NkSP9LhqOqqrCwhqkF83S3a3vDOQ8DOEJT/yCdUvD/b1P7B1oy
5yqKUR45hOB38+BIPDyu1N5N+XajrByPJNbh6PidzFtXaFPBpv3EsjTFoZl2QBR2
nyoqU3Zdl2fWgtqfjFguwmyTPiCuOzdJkvWzTgzWX5HehUFBky5vPDupshD5slqQ
9F/slR3k3J0XAdHqcI+/qbfoj0sMS5go2oCl8jyq8zp+EvAWu42ZXd0ZBfC0kNNR
wREWXQangcbxFDGtlkq8yyQDBEKlxG32X0rtoXgRLTHHRqiIDEQZubZTYir8Ix0G
ix1yCNtv5voOeA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:38 2025 by rpki-client