Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
File: mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft (raw, json)
Hash identifier: 7X02nqn3tn0vm67eepFoWdLjrRLIJv/4UOQ9lZe1kYI=
Subject key identifier: BC:5A:4D:03:90:ED:39:9C:0B:4E:FF:F4:1F:3E:09:F1:0E:49:31:20
Authority key identifier: 99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47
Certificate issuer: /CN=9972148c7362c2c9399bb3af741592c42516c547
Certificate serial: 0194BD17A7B53824ADECEB23B5D652746A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
Manifest number: 0F66
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl (hash: JVEiVnyxS0oZu5MIuNZeRcrMxpMXUJI7FakGxtXketc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a7:b5:38:24:ad:ec:eb:23:b5:d6:52:74:6a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9972148c7362c2c9399bb3af741592c42516c547
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=bc5a4d0390ed399c0b4efff41f3e09f10e493120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:4b:a6:b7:01:5a:e4:d6:85:65:75:11:7b:
06:99:e1:a5:ed:c1:f5:0c:02:58:f1:3c:13:2e:4c:
89:15:43:64:f6:e4:ea:49:0c:88:a1:f4:a6:f8:5f:
b3:58:18:ed:4e:65:73:9e:a1:29:04:98:f5:07:59:
37:4c:eb:20:3f:d6:41:2a:49:82:89:9d:43:77:23:
26:9f:fb:ec:90:42:fc:7a:1e:15:71:fa:25:73:ee:
b5:38:16:49:b9:c2:94:88:54:dd:90:00:77:58:b3:
37:da:7d:59:69:89:9f:e2:91:a0:1c:93:7f:d6:de:
5b:58:11:e3:5c:2f:22:39:3c:0b:6e:ae:8a:36:20:
9e:95:b4:42:66:a5:f2:42:60:9a:5c:3e:31:c0:0d:
32:d4:58:40:30:6e:21:48:65:b5:cd:fd:5a:fc:39:
dd:93:3f:22:69:69:16:6d:f9:98:09:6e:df:0d:cc:
24:ac:ef:6f:ac:9d:5d:b4:c4:dc:03:58:1e:f8:50:
fd:87:02:cf:0e:51:5b:08:8a:00:ba:68:7b:cf:84:
0c:d9:40:3e:6b:0b:22:5b:04:a3:8d:d7:df:54:cb:
2d:13:7b:8b:a1:c8:7a:9d:f0:28:9f:a4:30:d3:31:
e6:bb:c7:07:b2:c9:5f:b2:97:04:bf:28:17:13:14:
7b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5A:4D:03:90:ED:39:9C:0B:4E:FF:F4:1F:3E:09:F1:0E:49:31:20
X509v3 Authority Key Identifier:
keyid:99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0e:e2:67:98:a1:b5:37:93:24:73:a2:84:14:b4:88:8c:6a:
c0:6d:93:31:ed:42:77:b8:91:85:35:c2:92:a8:8d:79:15:7b:
ca:52:d5:86:1d:7b:1d:48:b7:cc:e7:de:cc:00:b5:fd:c0:d4:
5d:86:8c:ff:21:58:45:a1:67:01:cb:8e:51:f9:17:d2:6c:00:
a1:55:4b:7f:fa:61:42:f3:bb:a4:5f:3b:f1:20:6e:ce:3d:90:
9a:d2:a1:2e:2d:e5:be:e2:f2:c0:54:0b:70:51:1a:b6:f7:78:
bc:8b:01:fe:23:d9:e7:c2:a6:fb:41:dc:b2:7a:8b:7f:64:b8:
79:7a:a0:04:fe:38:40:d1:90:3b:ab:53:28:d1:ce:75:f8:f3:
bf:19:24:da:e9:6f:98:f3:29:64:d7:65:77:89:cf:58:94:0e:
9b:c9:6e:9e:ec:45:d8:79:b4:7e:14:67:73:2e:e3:c0:36:d9:
34:48:87:2e:c7:ba:e2:61:39:d8:0f:67:e1:00:ca:19:71:ee:
05:5c:80:b4:98:eb:e7:92:15:c2:ea:11:b4:28:ff:46:70:c3:
28:43:ac:7b:ca:82:ac:1d:a2:3a:40:e0:0b:79:db:2c:d8:6c:
d1:77:45:78:5f:1a:ed:a6:90:25:2b:b7:54:e3:c9:b0:75:66:
42:b7:bf:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6e1OCSt7OsjtdZSdGpiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NzIxNDhjNzM2MmMyYzkzOTliYjNhZjc0MTU5MmM0MjUx
NmM1NDcwHhcNMjUwMTMxMTYwMDMxWhcNMjUwMjAxMTYwMDMxWjAzMTEwLwYDVQQD
EyhiYzVhNGQwMzkwZWQzOTljMGI0ZWZmZjQxZjNlMDlmMTBlNDkzMTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW5LprcBWuTWhWV1EXsGmeGl7cH1
DAJY8TwTLkyJFUNk9uTqSQyIofSm+F+zWBjtTmVznqEpBJj1B1k3TOsgP9ZBKkmC
iZ1DdyMmn/vskEL8eh4Vcfolc+61OBZJucKUiFTdkAB3WLM32n1ZaYmf4pGgHJN/
1t5bWBHjXC8iOTwLbq6KNiCelbRCZqXyQmCaXD4xwA0y1FhAMG4hSGW1zf1a/Dnd
kz8iaWkWbfmYCW7fDcwkrO9vrJ1dtMTcA1ge+FD9hwLPDlFbCIoAumh7z4QM2UA+
awsiWwSjjdffVMstE3uLoch6nfAon6Qw0zHmu8cHsslfspcEvygXExR7GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxaTQOQ7TmcC07/9B8+CfEOSTEgMB8GA1UdIwQY
MBaAFJlyFIxzYsLJOZuzr3QVksQlFsVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVhJVWpITml3c2s1bTdPdmRCV1N4Q1VXeFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81ODdiN2ItMDcxYy00MzBiLTllYjIt
NmVjNjI2OTBiMTliLzEvbVhJVWpITml3c2s1bTdPdmRCV1N4Q1VXeFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81ODdiN2ItMDcxYy00MzBiLTllYjItNmVjNjI2OTBiMTli
LzEvbVhJVWpITml3c2s1bTdPdmRCV1N4Q1VXeFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHg7iZ5ih
tTeTJHOihBS0iIxqwG2TMe1Cd7iRhTXCkqiNeRV7ylLVhh17HUi3zOfezAC1/cDU
XYaM/yFYRaFnAcuOUfkX0mwAoVVLf/phQvO7pF878SBuzj2QmtKhLi3lvuLywFQL
cFEatvd4vIsB/iPZ58Km+0HcsnqLf2S4eXqgBP44QNGQO6tTKNHOdfjzvxkk2ulv
mPMpZNdld4nPWJQOm8lunuxF2Hm0fhRncy7jwDbZNEiHLse64mE52A9n4QDKGXHu
BVyAtJjr55IVwuoRtCj/RnDDKEOse8qCrB2iOkDgC3nbLNhs0XdFeF8a7aaQJSu3
VOPJsHVmQre/Tw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:00 2025 by rpki-client