Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
File: Marcypb0SkVzktiQfGuWS-D8-SE.mft (raw, json)
Hash identifier: /qkdGhE6U3/OhFJU8el4JaG34j6XRe0Pcrly+KWWGhk=
Subject key identifier: 5C:AC:84:B6:6A:C3:5C:44:72:5B:57:B3:53:4B:5E:B2:19:E2:54:6C
Authority key identifier: 31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
Certificate issuer: /CN=31aadcca96f44a457392d8907c6b964be0fcf921
Certificate serial: 0194BCA98A2E52BF7C1C766F906E83ED3C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
Manifest number: 0B21
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: Marcypb0SkVzktiQfGuWS-D8-SE.crl (hash: mH8ZlzAcNGKRIe8UNGaaixPGbKkhvNEATArxYgnc4fQ=)
2: XFj03ZPCOj3qqoe8oMNPGmud9a4.roa (hash: m6E7RZQpvmKbh+R69KgZ6bmoskHz5Bb8/AlaawR8U/0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8a:2e:52:bf:7c:1c:76:6f:90:6e:83:ed:3c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31aadcca96f44a457392d8907c6b964be0fcf921
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=5cac84b66ac35c44725b57b3534b5eb219e2546c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:99:48:68:dc:05:74:46:38:8b:4a:ab:73:63:
42:2f:0e:71:a8:26:d6:2f:6d:59:3a:19:96:5b:4a:
cd:0d:e3:6a:b7:ca:4e:c0:b4:a1:0d:29:f8:38:68:
ce:05:a1:55:d2:e3:d3:19:c1:09:44:11:06:0c:52:
5b:dd:c0:22:25:d0:ef:38:b5:bd:bb:03:9d:8e:63:
23:d9:09:69:02:08:4a:59:3c:2a:38:85:94:21:8f:
44:31:f9:2c:21:36:3d:88:ed:9a:41:11:07:8f:38:
18:07:ee:34:e7:80:6a:be:35:7a:20:b5:32:4b:09:
99:3a:61:38:84:db:32:fa:1e:14:90:2b:e0:93:70:
e3:a6:ae:76:ab:e7:7e:a0:e0:b6:fa:14:e1:67:13:
13:8a:0f:8b:0b:5d:26:12:11:58:e5:a3:35:81:e8:
9a:e7:4e:14:ce:d5:75:22:74:50:fe:7c:88:5c:98:
bb:f0:b5:56:63:8d:fb:c5:5f:4e:bc:72:e0:58:bc:
3a:e0:33:79:49:96:68:b2:a6:a0:9d:65:f3:57:37:
32:e9:b6:94:bf:69:cc:24:de:3f:4f:d3:ac:7b:f0:
20:c5:5a:82:97:58:c2:5d:3e:be:52:bb:57:f6:3d:
2c:77:10:d9:64:b1:ff:32:3e:d6:27:33:a8:f8:68:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AC:84:B6:6A:C3:5C:44:72:5B:57:B3:53:4B:5E:B2:19:E2:54:6C
X509v3 Authority Key Identifier:
keyid:31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d5:63:8e:7a:15:48:95:59:98:b6:24:24:58:fe:28:51:37:
78:43:be:12:be:8d:e8:49:6d:fd:1b:3d:39:f6:4f:70:09:26:
dd:b3:5c:f7:97:d0:0f:52:ae:bc:74:af:a5:68:a0:26:b9:9b:
d6:33:bf:a4:87:4b:07:4e:d4:e0:56:b7:bb:50:f8:1a:47:bd:
54:19:fc:93:8d:50:27:92:55:c9:28:60:66:7a:6a:52:cf:93:
2e:81:45:82:dd:2c:25:05:e6:05:54:4b:77:e9:1c:73:5f:8b:
59:09:d2:33:b6:b4:30:cc:16:27:35:a0:d9:32:47:a3:6c:06:
94:de:96:70:ac:af:d3:f9:4a:8b:d2:cb:7d:d0:7a:bc:c7:50:
d4:49:06:c2:30:5b:a8:0c:27:43:10:5b:34:3b:43:79:b1:50:
92:bd:83:5a:7c:12:6e:bd:3e:a1:1d:f2:3c:9f:63:03:23:cc:
8e:e0:a0:e1:a6:9e:95:f1:12:a5:70:ae:54:51:2a:60:88:01:
5c:3d:07:7d:20:47:c0:ea:fb:c7:86:47:dd:e6:c4:ba:a2:80:
75:b2:13:c4:c9:e7:c4:6b:24:c5:d8:2d:7c:f8:1f:64:08:ef:
4f:5c:21:4a:36:30:41:b0:42:52:27:67:10:56:58:ea:bb:6e:
a1:99:0e:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYouUr98HHZvkG6D7Tx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYWFkY2NhOTZmNDRhNDU3MzkyZDg5MDdjNmI5NjRiZTBm
Y2Y5MjEwHhcNMjUwMTMxMTQwMDE1WhcNMjUwMjAxMTQwMDE1WjAzMTEwLwYDVQQD
Eyg1Y2FjODRiNjZhYzM1YzQ0NzI1YjU3YjM1MzRiNWViMjE5ZTI1NDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZlIaNwFdEY4i0qrc2NCLw5xqCbW
L21ZOhmWW0rNDeNqt8pOwLShDSn4OGjOBaFV0uPTGcEJRBEGDFJb3cAiJdDvOLW9
uwOdjmMj2QlpAghKWTwqOIWUIY9EMfksITY9iO2aQREHjzgYB+4054BqvjV6ILUy
SwmZOmE4hNsy+h4UkCvgk3Djpq52q+d+oOC2+hThZxMTig+LC10mEhFY5aM1geia
504UztV1InRQ/nyIXJi78LVWY437xV9OvHLgWLw64DN5SZZosqagnWXzVzcy6baU
v2nMJN4/T9Ose/AgxVqCl1jCXT6+UrtX9j0sdxDZZLH/Mj7WJzOo+GgjbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyshLZqw1xEcltXs1NLXrIZ4lRsMB8GA1UdIwQY
MBaAFDGq3MqW9EpFc5LYkHxrlkvg/PkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82NjY3ODYtNTYxYy00YmQwLWE3YjAt
OGY3ZmQzZGMxNWZlLzEvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni82NjY3ODYtNTYxYy00YmQwLWE3YjAtOGY3ZmQzZGMxNWZl
LzEvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAatVjjnoV
SJVZmLYkJFj+KFE3eEO+Er6N6Elt/Rs9OfZPcAkm3bNc95fQD1KuvHSvpWigJrmb
1jO/pIdLB07U4Fa3u1D4Gke9VBn8k41QJ5JVyShgZnpqUs+TLoFFgt0sJQXmBVRL
d+kcc1+LWQnSM7a0MMwWJzWg2TJHo2wGlN6WcKyv0/lKi9LLfdB6vMdQ1EkGwjBb
qAwnQxBbNDtDebFQkr2DWnwSbr0+oR3yPJ9jAyPMjuCg4aaelfESpXCuVFEqYIgB
XD0HfSBHwOr7x4ZH3ebEuqKAdbITxMnnxGskxdgtfPgfZAjvT1whSjYwQbBCUidn
EFZY6rtuoZkOPQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:00:07 2025 by rpki-client