Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
File: MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft (raw, json)
Hash identifier: 2U9CFQ6j35XGpIBuvtz3P2DkgB7qgpZxPN9Vsqi+riY=
Subject key identifier: C5:B2:42:F5:87:9A:EE:2B:12:88:83:D1:91:94:82:7A:51:A6:FA:3E
Authority key identifier: 31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
Certificate issuer: /CN=310e2e9fb70668c796adce877b21e09a8a1ad029
Certificate serial: 0194BD4EA4B981F2D022BFAD721CA4DA2A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
Manifest number: 0C2A
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl (hash: vjHhVDjlgaUsIVvHcvLAREODuxUs79JFT6PUnpc3Zho=)
2: QXjAwQSpvYGLG9EKG43DcrvrWjg.roa (hash: /g3NGPvML9niLWrxGUEsCrw0JcuhbxCMPrgB31IKq7M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a4:b9:81:f2:d0:22:bf:ad:72:1c:a4:da:2a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310e2e9fb70668c796adce877b21e09a8a1ad029
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=c5b242f5879aee2b128883d19194827a51a6fa3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:8f:93:b8:d0:01:c2:53:b3:3f:8d:40:30:
66:73:e3:dd:5b:3a:fe:be:c4:94:d5:ab:bc:73:1a:
b1:c6:48:bd:67:06:21:59:47:d3:79:91:54:32:aa:
25:d8:5b:1f:d3:a2:08:60:63:68:71:d2:63:fa:35:
82:62:af:9a:28:85:ef:1f:97:04:a7:4c:ad:e3:fc:
3a:aa:9d:67:ad:78:63:a7:7d:95:82:98:f9:f8:b8:
c9:85:e4:1a:e2:b3:9e:1a:2d:04:04:d2:d7:76:f1:
ec:49:28:b4:a0:e8:9f:51:8e:08:ce:a3:33:61:4c:
89:83:40:54:c1:83:42:c8:66:df:ba:c3:8d:fd:ef:
e2:59:2c:88:29:da:d9:ab:85:ee:d3:de:ad:be:c8:
50:73:6a:9c:66:58:87:b1:dd:26:ba:37:6f:63:22:
3b:1c:22:cc:13:6d:8d:fe:91:fb:72:03:7c:94:f9:
fc:a4:7e:ba:34:81:d5:8d:03:75:f6:53:57:6e:23:
23:3f:c6:e5:be:56:f6:d6:96:8a:3b:be:60:cb:5c:
1c:b7:40:50:5a:81:7e:97:c2:4a:ed:4d:c2:3a:f1:
4f:59:d4:2e:e5:35:22:3d:01:b6:39:19:57:fa:ef:
b5:ea:b7:86:61:d0:69:cf:b0:ae:83:c8:68:62:c4:
f1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B2:42:F5:87:9A:EE:2B:12:88:83:D1:91:94:82:7A:51:A6:FA:3E
X509v3 Authority Key Identifier:
keyid:31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:0b:0d:e7:b2:af:67:dd:41:77:f3:a6:96:a5:e7:09:2c:5f:
35:9b:00:5c:88:bd:bd:55:de:42:0d:64:94:26:fa:33:9b:64:
b6:91:f9:67:ca:9c:5b:c4:ba:a3:3a:c2:f4:01:94:55:12:40:
ff:52:ac:11:a1:73:43:00:a8:de:af:4e:9e:55:a3:61:24:6c:
40:05:30:e0:d1:b6:d9:2c:6a:11:c9:76:dc:56:cb:04:40:12:
31:e6:29:f7:15:a7:20:fc:4b:a3:d5:d8:27:16:a5:1b:65:99:
f9:94:ad:83:30:fc:01:ab:b7:6e:c5:71:db:98:6c:7a:89:59:
13:aa:97:5b:dd:c8:6e:46:fe:17:0e:e2:85:31:1a:7c:46:b6:
3e:90:31:d5:d6:ef:47:1c:f2:f8:9b:d2:7c:8e:1d:dc:44:c6:
82:7c:40:72:53:57:d1:98:d2:02:01:fc:9e:ee:9a:f7:42:57:
6e:48:85:6a:bc:83:88:a9:aa:53:35:e6:c0:f2:7b:c1:1a:3f:
1d:dc:73:11:39:75:d8:4f:c1:08:34:93:b8:5e:75:ac:21:80:
3f:eb:25:26:12:4f:2b:76:06:bc:3a:7e:3e:1c:00:9c:d1:e1:
da:42:6b:7d:1a:19:fb:a9:e0:07:eb:b3:44:06:ba:bb:1e:6c:
7d:0a:28:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TqS5gfLQIr+tchyk2iqdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMGUyZTlmYjcwNjY4Yzc5NmFkY2U4NzdiMjFlMDlhOGEx
YWQwMjkwHhcNMjUwMTMxMTcwMDM1WhcNMjUwMjAxMTcwMDM1WjAzMTEwLwYDVQQD
EyhjNWIyNDJmNTg3OWFlZTJiMTI4ODgzZDE5MTk0ODI3YTUxYTZmYTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE6Pk7jQAcJTsz+NQDBmc+PdWzr+
vsSU1au8cxqxxki9ZwYhWUfTeZFUMqol2Fsf06IIYGNocdJj+jWCYq+aKIXvH5cE
p0yt4/w6qp1nrXhjp32Vgpj5+LjJheQa4rOeGi0EBNLXdvHsSSi0oOifUY4IzqMz
YUyJg0BUwYNCyGbfusON/e/iWSyIKdrZq4Xu096tvshQc2qcZliHsd0mujdvYyI7
HCLME22N/pH7cgN8lPn8pH66NIHVjQN19lNXbiMjP8blvlb21paKO75gy1wct0BQ
WoF+l8JK7U3COvFPWdQu5TUiPQG2ORlX+u+16reGYdBpz7Cug8hoYsTx0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWyQvWHmu4rEoiD0ZGUgnpRpvo+MB8GA1UdIwQY
MBaAFDEOLp+3BmjHlq3Oh3sh4JqKGtApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVE0dW43Y0dhTWVXcmM2SGV5SGdtb29hMENrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9kOWQ4MmQtMWNhNC00ODI0LWE5MmMt
Y2E1NWVmYzc3NTJkLzEvTVE0dW43Y0dhTWVXcmM2SGV5SGdtb29hMENrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9kOWQ4MmQtMWNhNC00ODI0LWE5MmMtY2E1NWVmYzc3NTJk
LzEvTVE0dW43Y0dhTWVXcmM2SGV5SGdtb29hMENrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwsN57Kv
Z91Bd/OmlqXnCSxfNZsAXIi9vVXeQg1klCb6M5tktpH5Z8qcW8S6ozrC9AGUVRJA
/1KsEaFzQwCo3q9OnlWjYSRsQAUw4NG22SxqEcl23FbLBEASMeYp9xWnIPxLo9XY
JxalG2WZ+ZStgzD8Aau3bsVx25hseolZE6qXW93Ibkb+Fw7ihTEafEa2PpAx1dbv
Rxzy+JvSfI4d3ETGgnxAclNX0ZjSAgH8nu6a90JXbkiFaryDiKmqUzXmwPJ7wRo/
HdxzETl12E/BCDSTuF51rCGAP+slJhJPK3YGvDp+PhwAnNHh2kJrfRoZ+6ngB+uz
RAa6ux5sfQooPQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:09 2025 by rpki-client