Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
File: M35ja6YMcU_-h1SrnQTG0e7bm4k.mft (raw, json)
Hash identifier: AVVUx9EDdNhIkNqZz3lBG7LEUM5ev1NviEjO34WChYA=
Subject key identifier: 6E:5B:3A:ED:94:7F:D1:82:4B:7E:B7:95:75:F2:56:4A:DA:8F:24:15
Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Certificate serial: 0194BC3C53CB4D40C727FB845078D7FB741A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
Manifest number: A8
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: M35ja6YMcU_-h1SrnQTG0e7bm4k.crl (hash: 03tUxBSm+KJIgMzxfzfOQh47lrE9ImKRntgMEa9YnAE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:53:cb:4d:40:c7:27:fb:84:50:78:d7:fb:74:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=6e5b3aed947fd1824b7eb79575f2564ada8f2415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:c4:8a:6b:7a:a5:4d:1b:1e:c1:57:31:29:
b8:e8:ae:1a:74:97:ad:e3:32:c2:42:16:7c:ca:67:
59:73:bb:e4:39:53:45:7d:c8:e4:bb:42:bb:49:ec:
84:b5:bf:66:84:3c:ff:35:e6:1d:d6:6c:4b:2f:d7:
be:0a:30:50:21:ea:62:d7:bd:37:c9:67:82:f3:8c:
30:50:90:29:16:95:8c:98:3f:42:f5:14:ea:e8:5e:
f7:11:cf:e7:ae:d1:cc:36:5a:4c:18:6f:3a:f9:d5:
f8:2d:8b:42:7a:68:a0:84:70:2c:69:b6:88:4a:14:
67:ef:3d:d5:eb:b9:2d:59:be:91:45:a4:52:44:f7:
77:8d:08:93:93:f1:64:86:b0:8b:d5:1c:cc:91:25:
d0:fd:91:65:23:a7:45:f5:8d:07:c1:31:23:93:ca:
46:8d:26:1f:ff:12:12:2c:30:c5:5a:ab:14:bd:f8:
ba:92:cf:b1:51:9e:15:a4:fe:9a:3a:cc:dc:2a:21:
79:41:f5:02:0a:4e:8b:7d:88:01:67:12:95:d3:36:
66:aa:22:42:5e:e5:48:da:7d:9d:a3:52:92:fc:df:
17:5d:4e:44:cf:48:07:33:6e:b4:10:51:95:6b:32:
f8:82:e1:18:f5:62:c0:af:ee:d1:71:b4:d2:ec:0f:
28:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5B:3A:ED:94:7F:D1:82:4B:7E:B7:95:75:F2:56:4A:DA:8F:24:15
X509v3 Authority Key Identifier:
keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:31:41:46:27:c4:cd:61:e8:86:f2:c0:10:26:e6:46:78:25:
c3:94:b5:68:c5:d1:68:45:e2:4c:bf:ee:e9:35:ad:88:a0:1e:
a6:34:de:f8:2e:20:cd:c7:94:24:8c:b9:58:3c:5f:b8:60:4c:
ea:0c:ae:39:ff:8c:60:82:3d:30:52:4c:c8:15:d4:3f:71:2b:
7f:f5:94:97:0a:24:24:76:e4:a9:78:58:31:36:9a:74:5b:34:
e1:99:38:fe:3a:94:21:51:27:16:3c:80:0c:9c:50:7c:40:03:
46:05:86:c0:e0:cf:58:6a:c9:fc:90:1d:54:a2:87:c7:32:65:
89:b3:75:1c:59:73:c5:93:90:a6:30:0f:2d:95:b1:57:f7:d6:
71:39:d1:9f:8e:c2:3d:5d:10:62:b7:0d:01:f7:06:eb:e0:ad:
8a:db:65:f2:c9:ae:a2:f7:8f:35:d6:d6:b7:22:9e:9d:33:52:
d4:42:9b:f1:d7:1e:0d:25:f6:9c:cf:0a:05:9a:84:f1:e4:c8:
6b:65:17:28:f2:40:36:7b:b9:15:b3:f0:cc:b7:df:f2:bb:a5:
7c:df:25:72:77:19:12:8e:d6:96:61:31:b5:a9:8f:f1:a6:40:
5b:c3:3d:b5:1a:51:b5:19:ea:57:7c:67:99:5b:e3:3b:9b:d1:
c5:e1:38:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFPLTUDHJ/uEUHjX+3QaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzN2U2MzZiYTYwYzcxNGZmZTg3NTRhYjlkMDRjNmQxZWVk
YjliODkwHhcNMjUwMTMxMTIwMDU3WhcNMjUwMjAxMTIwMDU3WjAzMTEwLwYDVQQD
Eyg2ZTViM2FlZDk0N2ZkMTgyNGI3ZWI3OTU3NWYyNTY0YWRhOGYyNDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+PEimt6pU0bHsFXMSm46K4adJet
4zLCQhZ8ymdZc7vkOVNFfcjku0K7SeyEtb9mhDz/NeYd1mxLL9e+CjBQIepi1703
yWeC84wwUJApFpWMmD9C9RTq6F73Ec/nrtHMNlpMGG86+dX4LYtCemighHAsabaI
ShRn7z3V67ktWb6RRaRSRPd3jQiTk/FkhrCL1RzMkSXQ/ZFlI6dF9Y0HwTEjk8pG
jSYf/xISLDDFWqsUvfi6ks+xUZ4VpP6aOszcKiF5QfUCCk6LfYgBZxKV0zZmqiJC
XuVI2n2do1KS/N8XXU5Ez0gHM260EFGVazL4guEY9WLAr+7RcbTS7A8otwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5bOu2Uf9GCS363lXXyVkrajyQVMB8GA1UdIwQY
MBaAFDN+Y2umDHFP/odUq50ExtHu25uJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzkt
NzBjMjI4ZWU5Yzk1LzEvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzktNzBjMjI4ZWU5Yzk1
LzEvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApTFBRifE
zWHohvLAECbmRnglw5S1aMXRaEXiTL/u6TWtiKAepjTe+C4gzceUJIy5WDxfuGBM
6gyuOf+MYII9MFJMyBXUP3Erf/WUlwokJHbkqXhYMTaadFs04Zk4/jqUIVEnFjyA
DJxQfEADRgWGwODPWGrJ/JAdVKKHxzJlibN1HFlzxZOQpjAPLZWxV/fWcTnRn47C
PV0QYrcNAfcG6+Ctittl8smuovePNdbWtyKenTNS1EKb8dceDSX2nM8KBZqE8eTI
a2UXKPJANnu5FbPwzLff8rulfN8lcncZEo7WlmExtamP8aZAW8M9tRpRtRnqV3xn
mVvjO5vRxeE48Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:06 2025 by rpki-client