Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
File: MPjiwMh-k3meIyhPNrhhXbeHg6s.mft (raw, json)
Hash identifier: xBYtOwf+cCNwkdTDIJKhAPQowbJ42+Jm1Cu98YIW3Fs=
Subject key identifier: 47:04:61:6F:D9:81:A3:35:DB:62:0A:D2:BE:59:B0:5F:A8:CB:69:27
Authority key identifier: 30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
Certificate issuer: /CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Certificate serial: 0194BCA9F737A8559826476171A9BCF44CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
Manifest number: 1329
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: 1-RWOiprTQ-uVnwhklGyyfsDfjnk.roa (hash: KKoCIqZllKz4mT5mjhqOfo5AkvT5jJCo40l+tooCAf8=)
2: MPjiwMh-k3meIyhPNrhhXbeHg6s.crl (hash: OBxIChlySsUhbUdC9yGlMFdt6epSUbeGzLQsSL38oNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f7:37:a8:55:98:26:47:61:71:a9:bc:f4:4c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=4704616fd981a335db620ad2be59b05fa8cb6927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:75:28:de:b7:a5:d1:06:0e:70:f9:34:26:
38:cd:b8:83:eb:03:89:0b:0c:bf:b6:71:fa:8b:5a:
c2:1e:1f:1c:9d:e0:67:45:e2:4d:24:90:4a:da:45:
13:40:cf:ee:cd:89:b9:b6:65:bc:d2:7f:ab:d0:02:
03:9c:91:03:3c:c5:78:b5:70:c8:61:05:9d:cb:56:
7b:c8:96:e4:16:e3:7c:7e:e1:f6:33:2a:17:09:fa:
05:2b:85:67:d0:c6:e1:6e:17:c3:b6:4a:26:d2:24:
02:e1:fd:83:85:83:79:0f:57:9a:39:9e:56:f4:d3:
a2:29:5a:9c:12:4b:84:97:44:e9:0c:61:c1:94:af:
48:73:a8:07:bf:64:f3:92:21:ea:cb:9e:d6:ef:52:
c5:3c:df:d2:c7:d8:1d:43:dd:9f:66:7d:88:21:e3:
88:ae:38:7f:f8:7a:18:e8:dc:13:5f:26:ba:c2:d2:
ce:1e:9b:3d:7d:44:d6:13:be:24:a9:fb:4e:d3:61:
56:42:76:21:f3:ea:c3:61:71:f1:8a:fb:94:de:b1:
1f:a8:df:ab:ef:9d:58:3c:09:1b:24:01:91:9c:3f:
3f:95:33:0d:6b:6a:aa:8e:c0:77:4a:5c:d7:7d:68:
e4:d5:cf:8c:72:fd:90:f1:03:03:60:54:cb:49:9c:
ff:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:04:61:6F:D9:81:A3:35:DB:62:0A:D2:BE:59:B0:5F:A8:CB:69:27
X509v3 Authority Key Identifier:
keyid:30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b4:71:2e:44:71:d6:6f:23:67:3c:7f:6e:d7:b0:e4:59:ad:
f9:83:bd:8f:43:31:a6:6b:b6:83:42:0c:55:47:f9:df:3b:b0:
5f:72:27:d8:2c:8c:04:f0:df:30:7c:d8:30:c1:ad:22:19:2a:
bc:66:ed:d3:8a:32:bf:fe:7b:26:b8:4c:55:1f:af:07:05:13:
25:a3:23:4f:bf:8c:ce:3f:28:5c:61:fd:24:d9:e2:f7:60:2a:
80:93:36:fc:59:17:9f:7c:ec:3c:6a:bf:32:00:ca:c4:42:ea:
90:43:fc:db:ae:c8:de:e9:4b:8d:ae:d0:1c:1a:ae:19:63:88:
66:b1:12:e3:48:2e:5b:71:e9:39:4a:a4:51:8d:5c:eb:81:f3:
15:00:12:7e:91:c4:a9:cf:61:43:89:d5:1c:f1:b9:50:db:13:
55:fe:c4:f3:1a:92:40:60:69:cb:c7:75:8f:e5:c6:db:18:45:
c6:e4:00:d9:87:f3:51:90:5d:ed:d1:cb:6d:3f:b9:71:59:72:
cd:bf:3c:4c:10:d8:8b:12:c0:69:26:cf:6f:82:95:04:a0:6c:
dc:0f:ba:67:ae:ee:a5:b8:b3:ee:3a:48:fb:49:c1:61:0e:01:
a1:65:14:6a:03:68:c3:db:4f:97:cc:ce:b2:04:b9:61:6e:f8:
33:4b:48:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qfc3qFWYJkdhcam89Ey0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZjhlMmMwYzg3ZTkzNzk5ZTIzMjg0ZjM2Yjg2MTVkYjc4
NzgzYWIwHhcNMjUwMTMxMTQwMDQyWhcNMjUwMjAxMTQwMDQyWjAzMTEwLwYDVQQD
Eyg0NzA0NjE2ZmQ5ODFhMzM1ZGI2MjBhZDJiZTU5YjA1ZmE4Y2I2OTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBJ1KN63pdEGDnD5NCY4zbiD6wOJ
Cwy/tnH6i1rCHh8cneBnReJNJJBK2kUTQM/uzYm5tmW80n+r0AIDnJEDPMV4tXDI
YQWdy1Z7yJbkFuN8fuH2MyoXCfoFK4Vn0MbhbhfDtkom0iQC4f2DhYN5D1eaOZ5W
9NOiKVqcEkuEl0TpDGHBlK9Ic6gHv2TzkiHqy57W71LFPN/Sx9gdQ92fZn2IIeOI
rjh/+HoY6NwTXya6wtLOHps9fUTWE74kqftO02FWQnYh8+rDYXHxivuU3rEfqN+r
751YPAkbJAGRnD8/lTMNa2qqjsB3SlzXfWjk1c+Mcv2Q8QMDYFTLSZz/QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcEYW/ZgaM122IK0r5ZsF+oy2knMB8GA1UdIwQY
MBaAFDD44sDIfpN5niMoTza4YV23h4OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85OWJlNGQtZjhlYy00NDMwLWE5Y2Qt
N2UxMmI4N2QwNmMyLzEvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85OWJlNGQtZjhlYy00NDMwLWE5Y2QtN2UxMmI4N2QwNmMy
LzEvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbRxLkRx
1m8jZzx/btew5Fmt+YO9j0Mxpmu2g0IMVUf53zuwX3In2CyMBPDfMHzYMMGtIhkq
vGbt04oyv/57JrhMVR+vBwUTJaMjT7+Mzj8oXGH9JNni92AqgJM2/FkXn3zsPGq/
MgDKxELqkEP8267I3ulLja7QHBquGWOIZrES40guW3HpOUqkUY1c64HzFQASfpHE
qc9hQ4nVHPG5UNsTVf7E8xqSQGBpy8d1j+XG2xhFxuQA2YfzUZBd7dHLbT+5cVly
zb88TBDYixLAaSbPb4KVBKBs3A+6Z67upbiz7jpI+0nBYQ4BoWUUagNow9tPl8zO
sgS5YW74M0tIsQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:19 2025 by rpki-client