Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft
File: mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft (raw, json)
Hash identifier: facLM2dgeIgHglyn9S6m8JGLXZlTFV34Rm4fOMuNv0k=
Subject key identifier: BD:EE:05:02:14:19:4B:58:E7:5C:1D:45:EA:02:C8:3C:EC:46:13:5D
Authority key identifier: 99:DA:45:25:E8:D3:14:D5:AA:79:A4:0D:2E:22:7E:E5:56:B0:F5:9E
Certificate issuer: /CN=99da4525e8d314d5aa79a40d2e227ee556b0f59e
Certificate serial: 0194BBCE37BFD41589C1CA4DD45B93F1854B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.crl (hash: V/xuhrhiNqWp9uQMTxXzhjELw8HBBeyYInBTxcchrJc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:37:bf:d4:15:89:c1:ca:4d:d4:5b:93:f1:85:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99da4525e8d314d5aa79a40d2e227ee556b0f59e
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=bdee050214194b58e75c1d45ea02c83cec46135d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:99:a8:90:08:fd:28:0c:19:93:80:9d:17:
92:6a:6b:29:c8:ce:c2:c2:92:79:36:cc:ff:95:19:
e9:42:bc:40:da:b7:c0:f2:16:3a:7d:4e:52:44:b8:
a5:e3:56:15:11:65:b0:05:d4:69:98:6c:99:ba:08:
6d:9e:4d:c6:14:12:32:32:da:ec:06:2e:3a:81:1f:
5a:56:ab:49:03:63:8d:0e:42:d2:1e:46:84:c6:ad:
bf:37:8b:6b:63:66:30:85:ff:1e:d8:64:dc:f5:bd:
dc:a6:45:98:c6:b8:18:4a:fb:e9:b6:7b:01:cb:fd:
cd:c2:20:96:b6:d9:9d:17:66:22:61:97:49:c6:5e:
ae:7c:8e:ff:f4:ba:b5:48:65:7f:b4:36:4e:5e:cb:
22:68:9e:b5:42:b0:1f:84:c7:e5:31:06:12:e6:e0:
f3:f3:21:51:13:cb:05:e4:40:f8:84:ca:21:d3:60:
05:28:df:0a:52:a9:6c:df:c2:ef:85:04:c8:cd:63:
4c:ac:c0:6a:1c:77:df:9f:a0:2a:c5:07:10:d8:e4:
ec:11:2a:7d:f6:66:8a:01:0b:08:32:50:0b:6a:30:
1d:a2:15:a6:56:e9:ac:db:f6:db:c9:16:bc:eb:c0:
07:8c:55:d2:2e:54:85:ca:13:f5:ab:13:d8:6d:cd:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EE:05:02:14:19:4B:58:E7:5C:1D:45:EA:02:C8:3C:EC:46:13:5D
X509v3 Authority Key Identifier:
keyid:99:DA:45:25:E8:D3:14:D5:AA:79:A4:0D:2E:22:7E:E5:56:B0:F5:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:92:d5:2a:eb:3f:a3:15:a4:09:b9:12:f1:9c:c8:1c:85:86:
5b:19:36:f5:26:a3:70:02:78:a1:6e:53:24:e7:c0:46:16:0e:
50:af:cf:f6:49:e7:15:22:1f:32:5b:6e:4f:c9:d2:c1:9f:6d:
bb:ed:97:d2:70:18:bd:66:1a:5f:09:2e:21:04:61:7a:5f:77:
b3:7f:57:21:b7:94:1d:76:d1:59:7c:59:11:e1:12:0a:ed:c5:
d6:b0:73:3f:66:45:fd:a1:36:22:9f:ca:5d:bd:7f:53:ef:bd:
88:66:d3:5b:62:2c:75:15:8a:ff:e1:ab:9e:d2:8d:f1:32:19:
8b:b4:28:ad:04:65:8e:53:d2:43:f6:fc:d4:60:53:27:22:dc:
fb:36:ba:27:e8:d4:8e:00:0e:9e:4d:f0:bc:22:83:6d:66:5c:
51:99:16:bf:af:ce:dd:57:e5:0e:0d:07:3a:5a:e7:24:97:ae:
b0:ab:f4:36:70:67:2a:c3:36:3e:4d:bf:26:2e:93:a6:7e:df:
70:fc:a1:44:be:a8:63:fd:a2:15:3c:cb:48:85:46:b9:da:35:
94:44:a0:4c:ad:44:86:07:d1:aa:cb:20:76:fb:17:9c:81:6d:
b6:0b:10:33:d4:f5:0e:16:60:83:70:a6:6b:2f:4a:fc:f4:fc:
a2:71:9b:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zje/1BWJwcpN1FuT8YVLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZGE0NTI1ZThkMzE0ZDVhYTc5YTQwZDJlMjI3ZWU1NTZi
MGY1OWUwHhcNMjUwMTMxMTAwMDQxWhcNMjUwMjAxMTAwMDQxWjAzMTEwLwYDVQQD
EyhiZGVlMDUwMjE0MTk0YjU4ZTc1YzFkNDVlYTAyYzgzY2VjNDYxMzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9WZqJAI/SgMGZOAnReSamspyM7C
wpJ5Nsz/lRnpQrxA2rfA8hY6fU5SRLil41YVEWWwBdRpmGyZughtnk3GFBIyMtrs
Bi46gR9aVqtJA2ONDkLSHkaExq2/N4trY2Ywhf8e2GTc9b3cpkWYxrgYSvvptnsB
y/3NwiCWttmdF2YiYZdJxl6ufI7/9Lq1SGV/tDZOXssiaJ61QrAfhMflMQYS5uDz
8yFRE8sF5ED4hMoh02AFKN8KUqls38LvhQTIzWNMrMBqHHffn6AqxQcQ2OTsESp9
9maKAQsIMlALajAdohWmVums2/bbyRa868AHjFXSLlSFyhP1qxPYbc3DJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3uBQIUGUtY51wdReoCyDzsRhNdMB8GA1UdIwQY
MBaAFJnaRSXo0xTVqnmkDS4ifuVWsPWeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWRwRkplalRGTldxZWFRTkxpSi01VmF3OVo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wYjQ5MDMtN2JlNS00NDg5LThjZmEt
Njk4MTNjMmQ4Y2NkLzEvbWRwRkplalRGTldxZWFRTkxpSi01VmF3OVo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8wYjQ5MDMtN2JlNS00NDg5LThjZmEtNjk4MTNjMmQ4Y2Nk
LzEvbWRwRkplalRGTldxZWFRTkxpSi01VmF3OVo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpLVKus/
oxWkCbkS8ZzIHIWGWxk29SajcAJ4oW5TJOfARhYOUK/P9knnFSIfMltuT8nSwZ9t
u+2X0nAYvWYaXwkuIQRhel93s39XIbeUHXbRWXxZEeESCu3F1rBzP2ZF/aE2Ip/K
Xb1/U++9iGbTW2IsdRWK/+GrntKN8TIZi7QorQRljlPSQ/b81GBTJyLc+za6J+jU
jgAOnk3wvCKDbWZcUZkWv6/O3VflDg0HOlrnJJeusKv0NnBnKsM2Pk2/Ji6Tpn7f
cPyhRL6oY/2iFTzLSIVGudo1lESgTK1EhgfRqssgdvsXnIFttgsQM9T1DhZgg3Cm
ay9K/PT8onGbSw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:41 2025 by rpki-client