Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
File: MvbeMKm492SENE0M07bAJz6t028.mft (raw, json)
Hash identifier: 9BeBFjn1XrudEH7aXIA6Lp8V8BRWTBlaTXRcpINBIy8=
Subject key identifier: D4:15:F5:63:C5:1F:F6:E4:67:A2:83:D7:03:CB:F8:07:25:32:AD:3C
Authority key identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
Certificate issuer: /CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Certificate serial: 0194BBCE05778438A5D883052C1C22AC28F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
Manifest number: D6
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: 4h6gd-8--_DbMb2PIrFary1u45w.roa (hash: omFQCpjJiNTW/cNLim2vTaoqpmXOjD5FAaL5ZDoz4f8=)
2: MvbeMKm492SENE0M07bAJz6t028.crl (hash: H/p5ZIrDNc5+ab9sXZGr1q6b8fy6fCq05RKezsLXUfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:05:77:84:38:a5:d8:83:05:2c:1c:22:ac:28:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=d415f563c51ff6e467a283d703cbf8072532ad3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:e0:f8:f9:54:da:9a:b2:a6:da:42:3a:fd:
ec:1a:e8:4b:d7:27:12:e4:e1:60:42:1c:7d:1e:3f:
83:ec:d3:a7:7e:74:ab:e1:f5:39:b2:9c:aa:cd:d5:
ff:10:e2:8d:42:ec:c8:e6:62:86:ac:65:e3:ba:39:
58:18:fd:65:46:f9:db:cf:50:93:42:bf:b3:44:86:
3e:eb:73:27:33:22:52:fd:a0:87:19:cf:df:60:a4:
d9:69:01:4c:a9:06:18:9d:f0:ed:00:72:df:80:97:
62:28:45:47:08:99:f9:a7:ff:b2:ad:d6:53:16:32:
23:44:05:09:26:7b:b9:2e:23:f4:30:25:ce:37:fa:
0a:3e:bb:08:cf:02:87:bc:04:33:bc:c9:d5:ae:ca:
97:6a:b4:4e:47:2c:b4:9d:40:14:66:3e:18:38:0e:
3f:65:12:98:b0:76:43:6c:37:94:80:d7:f8:ab:48:
72:10:91:b5:dc:1f:da:8f:90:b6:6e:c4:72:24:70:
66:2b:1d:5b:12:bc:cd:ee:85:f6:c7:92:45:29:05:
8b:7d:fe:de:b4:15:62:8a:ce:cd:7e:b3:45:6d:81:
dd:08:dd:4d:5a:22:fb:44:94:07:16:58:bb:82:17:
ae:1f:37:0b:0f:9c:c6:bf:28:af:df:64:59:15:e6:
d0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:15:F5:63:C5:1F:F6:E4:67:A2:83:D7:03:CB:F8:07:25:32:AD:3C
X509v3 Authority Key Identifier:
keyid:32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:75:27:5d:33:72:dd:4f:21:11:3b:72:bb:de:13:df:27:dd:
ba:bc:b4:b5:3f:a2:67:80:79:92:1c:80:f1:74:d8:84:b6:a3:
b9:80:a6:32:22:1e:67:2c:34:ca:7a:31:56:3c:e1:cd:45:20:
63:10:02:f4:69:06:48:42:fe:b4:76:9a:6a:f7:81:af:6e:35:
e9:28:b8:56:98:a2:64:a8:c6:ee:9d:ca:90:44:66:94:e6:59:
eb:60:0f:e2:5d:9c:bf:c7:c4:40:f2:2a:ad:b5:82:f1:b1:ca:
d0:d1:87:d3:61:53:d7:59:05:18:d9:b0:05:69:26:9c:1e:b2:
7f:3a:f5:87:7c:36:df:48:56:c4:11:a3:44:60:02:4f:1f:9d:
92:26:82:27:94:eb:ee:ef:b3:d8:54:ad:83:38:87:4d:4a:0c:
de:45:5d:b0:a4:93:26:81:68:44:a0:47:85:79:58:ba:97:37:
d3:47:d8:e6:f6:ad:68:21:72:c9:84:d4:2e:d6:c0:d0:3b:a6:
77:a3:39:c3:88:a2:b8:28:5e:b6:b6:b0:52:90:4c:a7:9b:9d:
c4:ac:ed:2f:79:87:cc:5e:b6:a7:32:31:9e:a1:9d:46:2a:0d:
5c:1e:d9:c3:98:fa:a5:79:3b:d1:25:61:58:ec:c0:fa:db:79:
55:01:ed:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgV3hDil2IMFLBwirCj4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZjZkZTMwYTliOGY3NjQ4NDM0NGQwY2QzYjZjMDI3M2Vh
ZGQzNmYwHhcNMjUwMTMxMTAwMDI4WhcNMjUwMjAxMTAwMDI4WjAzMTEwLwYDVQQD
EyhkNDE1ZjU2M2M1MWZmNmU0NjdhMjgzZDcwM2NiZjgwNzI1MzJhZDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnvg+PlU2pqyptpCOv3sGuhL1ycS
5OFgQhx9Hj+D7NOnfnSr4fU5spyqzdX/EOKNQuzI5mKGrGXjujlYGP1lRvnbz1CT
Qr+zRIY+63MnMyJS/aCHGc/fYKTZaQFMqQYYnfDtAHLfgJdiKEVHCJn5p/+yrdZT
FjIjRAUJJnu5LiP0MCXON/oKPrsIzwKHvAQzvMnVrsqXarRORyy0nUAUZj4YOA4/
ZRKYsHZDbDeUgNf4q0hyEJG13B/aj5C2bsRyJHBmKx1bErzN7oX2x5JFKQWLff7e
tBViis7NfrNFbYHdCN1NWiL7RJQHFli7gheuHzcLD5zGvyiv32RZFebQRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQV9WPFH/bkZ6KD1wPL+AclMq08MB8GA1UdIwQY
MBaAFDL23jCpuPdkhDRNDNO2wCc+rdNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jYmQwNjAtYWQ2OC00ZjVmLWFkNWUt
YzA0MDQ0MzdlODViLzEvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jYmQwNjAtYWQ2OC00ZjVmLWFkNWUtYzA0MDQ0MzdlODVi
LzEvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHUnXTNy
3U8hETtyu94T3yfdury0tT+iZ4B5khyA8XTYhLajuYCmMiIeZyw0ynoxVjzhzUUg
YxAC9GkGSEL+tHaaaveBr2416Si4VpiiZKjG7p3KkERmlOZZ62AP4l2cv8fEQPIq
rbWC8bHK0NGH02FT11kFGNmwBWkmnB6yfzr1h3w230hWxBGjRGACTx+dkiaCJ5Tr
7u+z2FStgziHTUoM3kVdsKSTJoFoRKBHhXlYupc300fY5vataCFyyYTULtbA0Dum
d6M5w4iiuChetrawUpBMp5udxKztL3mHzF62pzIxnqGdRioNXB7Zw5j6pXk70SVh
WOzA+tt5VQHtTg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:41 2025 by rpki-client