
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
File: MJbXr7uKXjFaXEiazqfct1qmXQQ.mft (raw, json)
Hash identifier: yDpO/uVHpOgsrxrn1DxqYrd5+8fO9o5gTE049dp8OUM=
Subject key identifier: 5F:CC:9A:B6:35:E0:84:E3:C6:71:A9:8B:9E:1D:DD:4C:78:3E:C0:13
Authority key identifier: 30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
Certificate issuer: /CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Certificate serial: 0194BBCDE65170E925371677DC0959DE87B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: MJbXr7uKXjFaXEiazqfct1qmXQQ.crl (hash: xwe09l54WuqInDnRsrSjZwwi/TAOW1KB9c51TeZnNmc=)
2: a9vur_G-Sv_-WDNvoaN6FO-mp_Q.roa (hash: 5mLv65w3uElW3I7UtSlBFzQFnR6wfzkGH2z+n02Go3s=)
3: ckPg9sFMxT2re8tM8nExJep_9Qs.roa (hash: DU25ajodIpeW2jQoXz2wnkJ8CRhq6NHvl6w7hFsUi60=)
4: yFSjMkcgtQ4jugHf3jpWTH9Nbv0.roa (hash: hqHHntvNx6acptoTgy50EVxfDKrmw52pRvx+yFRJ3nc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e6:51:70:e9:25:37:16:77:dc:09:59:de:87:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=5fcc9ab635e084e3c671a98b9e1ddd4c783ec013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:c6:9d:25:69:48:75:d5:72:e6:ca:8b:11:
33:03:2c:1b:45:46:00:9f:ec:43:ef:4f:f3:17:fb:
4f:ae:3a:89:a1:c7:4b:d6:10:4e:ea:39:f0:f3:65:
c6:d9:95:8a:e5:b9:d5:87:9f:b0:03:ad:fc:68:56:
d8:0d:b6:33:c5:4c:7a:19:ce:69:c8:5d:a4:8d:67:
66:cc:63:71:e1:68:87:a7:ed:74:03:a9:db:e3:f6:
72:3a:bb:c0:8b:bc:d1:40:90:72:b2:08:72:1d:ad:
b5:b4:70:68:33:77:2c:4c:ff:f3:ee:d3:21:3e:ab:
8b:74:71:eb:16:fc:54:e3:b5:d3:8d:49:25:42:85:
3c:6f:75:7c:9a:d1:37:ef:4c:ca:dc:96:62:11:1a:
24:a7:da:99:f0:e7:7a:5c:59:db:80:1c:b1:28:e6:
86:c1:cc:2d:3b:60:58:37:64:38:4b:ff:01:ae:6c:
79:a9:e8:6a:3d:0b:28:13:0a:82:a7:35:61:2d:cc:
5e:0e:6b:4d:d6:40:64:85:fc:77:63:b3:6d:de:38:
f0:6b:69:56:5e:7f:0b:b9:3e:b9:f1:ec:1f:3a:40:
1e:f3:75:49:f2:3a:e3:af:c6:18:88:94:6e:0b:c5:
ca:61:49:4b:f5:de:18:bd:08:a9:eb:7a:83:18:bd:
54:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CC:9A:B6:35:E0:84:E3:C6:71:A9:8B:9E:1D:DD:4C:78:3E:C0:13
X509v3 Authority Key Identifier:
keyid:30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:af:8c:87:10:5b:72:f1:e8:0b:99:71:17:a7:f3:bb:b7:d6:
ba:a7:66:e2:cc:f6:cf:84:2d:1c:9a:b7:b1:56:04:5c:16:a2:
35:9c:0c:6d:8e:e5:bc:c8:2b:fd:5a:f0:8e:b9:8d:b2:df:f4:
2c:55:f3:8b:dc:ae:e3:23:32:63:21:46:02:2d:b0:b1:dc:b2:
d2:65:0f:b4:d1:e3:50:8a:13:a8:8e:9a:17:8b:1b:65:52:5d:
d1:bc:08:f1:2f:84:3c:c7:38:99:96:ab:43:f1:07:e2:8d:de:
65:7c:1c:58:40:d6:fa:65:1c:8b:49:52:92:df:12:23:a7:3e:
16:c2:41:c4:c0:a9:73:de:69:d6:f7:4b:e3:6a:33:9a:5e:65:
23:21:7b:d4:2e:d0:f5:86:24:64:2c:ba:e0:aa:5c:34:60:56:
f5:2a:9c:87:96:92:f1:dc:22:69:18:a4:0d:2b:74:36:ac:b8:
59:f8:47:2d:a2:f1:8d:0e:36:e0:7d:56:36:bc:58:4c:a8:95:
e6:e7:bf:3e:d0:c5:59:1d:6c:d2:85:8a:07:c6:43:35:a2:74:
ba:90:64:02:15:e7:da:a1:16:e3:47:9e:49:1c:04:a2:ff:fb:
ec:7d:4a:ad:d9:96:2a:9d:4a:0d:d0:96:a7:f6:dd:3b:88:01:
d3:73:61:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zeZRcOklNxZ33AlZ3oeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwOTZkN2FmYmI4YTVlMzE1YTVjNDg5YWNlYTdkY2I3NWFh
NjVkMDQwHhcNMjUwMTMxMTAwMDIwWhcNMjUwMjAxMTAwMDIwWjAzMTEwLwYDVQQD
Eyg1ZmNjOWFiNjM1ZTA4NGUzYzY3MWE5OGI5ZTFkZGQ0Yzc4M2VjMDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlTGnSVpSHXVcubKixEzAywbRUYA
n+xD70/zF/tPrjqJocdL1hBO6jnw82XG2ZWK5bnVh5+wA638aFbYDbYzxUx6Gc5p
yF2kjWdmzGNx4WiHp+10A6nb4/ZyOrvAi7zRQJBysghyHa21tHBoM3csTP/z7tMh
PquLdHHrFvxU47XTjUklQoU8b3V8mtE370zK3JZiERokp9qZ8Od6XFnbgByxKOaG
wcwtO2BYN2Q4S/8Brmx5qehqPQsoEwqCpzVhLcxeDmtN1kBkhfx3Y7Nt3jjwa2lW
Xn8LuT658ewfOkAe83VJ8jrjr8YYiJRuC8XKYUlL9d4YvQip63qDGL1UhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/MmrY14ITjxnGpi54d3Ux4PsATMB8GA1UdIwQY
MBaAFDCW16+7il4xWlxIms6n3Ldapl0EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUpiWHI3dUtYakZhWEVpYXpxZmN0MXFtWFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jZjhmOTktZTU4MS00ZjVmLTg3NWYt
ZGY0ZThjNzM2NGZlLzEvTUpiWHI3dUtYakZhWEVpYXpxZmN0MXFtWFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9jZjhmOTktZTU4MS00ZjVmLTg3NWYtZGY0ZThjNzM2NGZl
LzEvTUpiWHI3dUtYakZhWEVpYXpxZmN0MXFtWFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOK+MhxBb
cvHoC5lxF6fzu7fWuqdm4sz2z4QtHJq3sVYEXBaiNZwMbY7lvMgr/VrwjrmNst/0
LFXzi9yu4yMyYyFGAi2wsdyy0mUPtNHjUIoTqI6aF4sbZVJd0bwI8S+EPMc4mZar
Q/EH4o3eZXwcWEDW+mUci0lSkt8SI6c+FsJBxMCpc95p1vdL42ozml5lIyF71C7Q
9YYkZCy64KpcNGBW9Sqch5aS8dwiaRikDSt0Nqy4WfhHLaLxjQ424H1WNrxYTKiV
5ue/PtDFWR1s0oWKB8ZDNaJ0upBkAhXn2qEW40eeSRwEov/77H1KrdmWKp1KDdCW
p/bdO4gB03Nh+g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:57 2025 by rpki-client