Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
File: MobxwgXuMYfirBpKW8BJ80Sf9mc.mft (raw, json)
Hash identifier: pLE4HQkJ30G9i8tX6v+1eI8J2U1Qq9qINRLGJelUUF8=
Subject key identifier: FF:A2:BA:2B:44:64:0C:2C:55:C5:93:87:C5:E9:E5:2A:BA:76:12:3D
Authority key identifier: 32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
Certificate issuer: /CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Certificate serial: 0194BCA9AAB499654572A4E2B954FF7E0496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
Manifest number: 10FB
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: MobxwgXuMYfirBpKW8BJ80Sf9mc.crl (hash: 4yDpE/QoQkLsyKwttW/AGWP6hVZ2awQMvAS8RWPPj2o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:aa:b4:99:65:45:72:a4:e2:b9:54:ff:7e:04:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=ffa2ba2b44640c2c55c59387c5e9e52aba76123d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:ce:23:be:0c:fc:18:c8:a9:cd:51:46:7e:
28:ec:02:02:71:66:11:0e:e6:de:ca:61:cc:c2:b1:
d2:0e:72:ea:ce:9d:ea:c3:c3:09:82:cd:0f:61:75:
ea:f4:b2:3b:55:bc:7b:1c:eb:80:6c:31:3f:06:2b:
dd:58:62:49:ad:9f:30:84:51:cd:fe:34:2d:2b:11:
e8:81:e6:c0:39:e1:c7:b4:68:59:fb:5d:cf:f7:03:
e9:af:c7:67:cd:5b:07:8d:03:e5:b8:fa:2f:52:12:
67:39:d5:be:8d:9d:4f:d0:56:7b:b8:8f:bf:22:72:
5e:4b:9c:04:4e:54:ee:27:96:f3:82:06:81:69:37:
61:c1:26:e4:6d:91:4b:21:b2:ba:d8:78:83:18:15:
e4:f6:51:8b:8d:1e:7f:19:3c:e2:57:31:b8:54:7c:
13:3b:6a:0a:04:38:e4:4b:47:a9:d2:39:fe:80:f9:
5f:11:e6:55:69:3c:88:7e:23:7e:77:bd:c8:71:03:
37:b4:13:78:98:a7:b6:cc:7a:cd:b3:82:41:46:79:
39:56:36:ef:f5:ea:b0:c8:7e:33:69:71:76:fb:55:
25:22:4a:a7:62:a1:78:7a:51:cd:57:97:7a:3e:aa:
c1:1d:e1:85:da:38:53:0d:8f:af:b6:14:a8:18:3c:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A2:BA:2B:44:64:0C:2C:55:C5:93:87:C5:E9:E5:2A:BA:76:12:3D
X509v3 Authority Key Identifier:
keyid:32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c3:3a:b1:cc:dc:84:61:16:62:a9:3d:50:3d:a1:9f:9a:50:
39:4d:a6:e7:43:8d:a4:f0:6d:c6:94:46:ba:71:76:3f:04:46:
65:c3:6d:c9:29:b1:ee:b0:fa:df:bb:54:13:b6:7d:8b:30:ad:
d0:aa:8d:f3:16:44:ce:36:15:8c:b8:5f:d2:1c:46:54:c1:3c:
90:c6:fb:aa:d7:f0:22:b7:c6:01:eb:54:bf:ce:d9:b4:d4:5e:
4e:9e:c7:6a:35:74:54:07:e3:ee:b7:a1:e2:cb:a7:bf:ff:08:
0f:62:3a:9e:cf:67:5c:28:d5:d6:04:59:0b:4d:12:d3:3e:28:
b1:2b:98:a5:0e:c4:7c:27:6b:51:3c:ba:16:ac:a3:7c:11:1e:
50:7c:34:f5:f7:99:18:39:4e:ff:3d:99:46:7b:22:e6:06:69:
55:a7:42:a4:4a:48:fa:f1:15:66:6b:91:0f:f4:89:ad:d3:ca:
9e:ef:97:37:af:a9:03:4b:7d:dd:f0:8e:d0:cb:18:ee:a3:78:
15:7f:0b:c4:db:68:ce:8d:42:93:23:df:69:06:f6:37:72:65:
4a:1c:1f:b3:ba:ab:54:24:61:5f:40:0a:25:a1:ec:24:a2:df:
54:07:8f:e9:19:d2:ec:83:06:91:fb:47:25:c0:ef:99:fe:1e:
01:87:33:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qaq0mWVFcqTiuVT/fgSWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyODZmMWMyMDVlZTMxODdlMmFjMWE0YTViYzA0OWYzNDQ5
ZmY2NjcwHhcNMjUwMTMxMTQwMDIzWhcNMjUwMjAxMTQwMDIzWjAzMTEwLwYDVQQD
EyhmZmEyYmEyYjQ0NjQwYzJjNTVjNTkzODdjNWU5ZTUyYWJhNzYxMjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkPOI74M/BjIqc1RRn4o7AICcWYR
DubeymHMwrHSDnLqzp3qw8MJgs0PYXXq9LI7Vbx7HOuAbDE/BivdWGJJrZ8whFHN
/jQtKxHogebAOeHHtGhZ+13P9wPpr8dnzVsHjQPluPovUhJnOdW+jZ1P0FZ7uI+/
InJeS5wETlTuJ5bzggaBaTdhwSbkbZFLIbK62HiDGBXk9lGLjR5/GTziVzG4VHwT
O2oKBDjkS0ep0jn+gPlfEeZVaTyIfiN+d73IcQM3tBN4mKe2zHrNs4JBRnk5Vjbv
9eqwyH4zaXF2+1UlIkqnYqF4elHNV5d6PqrBHeGF2jhTDY+vthSoGDwWUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+iuitEZAwsVcWTh8Xp5Sq6dhI9MB8GA1UdIwQY
MBaAFDKG8cIF7jGH4qwaSlvASfNEn/ZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW9ieHdnWHVNWWZpckJwS1c4Qko4MFNmOW1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8yYmNmYzUtM2JjOS00NzdmLWJjNDIt
MzI0ZWYzNGViZWEyLzEvTW9ieHdnWHVNWWZpckJwS1c4Qko4MFNmOW1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8yYmNmYzUtM2JjOS00NzdmLWJjNDItMzI0ZWYzNGViZWEy
LzEvTW9ieHdnWHVNWWZpckJwS1c4Qko4MFNmOW1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcM6sczc
hGEWYqk9UD2hn5pQOU2m50ONpPBtxpRGunF2PwRGZcNtySmx7rD637tUE7Z9izCt
0KqN8xZEzjYVjLhf0hxGVME8kMb7qtfwIrfGAetUv87ZtNReTp7HajV0VAfj7reh
4sunv/8ID2I6ns9nXCjV1gRZC00S0z4osSuYpQ7EfCdrUTy6FqyjfBEeUHw09feZ
GDlO/z2ZRnsi5gZpVadCpEpI+vEVZmuRD/SJrdPKnu+XN6+pA0t93fCO0MsY7qN4
FX8LxNtozo1CkyPfaQb2N3JlShwfs7qrVCRhX0AKJaHsJKLfVAeP6RnS7IMGkftH
JcDvmf4eAYczew==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:59 2025 by rpki-client