Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
File: mpVYgYJyucVAD8XaGIE6zOkXWI0.mft (raw, json)
Hash identifier: mY+EJir/nukSYK3zOqiNPzDc1czSWhaTbPfoFmw/RyI=
Subject key identifier: 96:20:2E:25:F4:42:70:31:99:8C:8F:0D:4C:95:AB:F0:BC:46:07:96
Authority key identifier: 9A:95:58:81:82:72:B9:C5:40:0F:C5:DA:18:81:3A:CC:E9:17:58:8D
Certificate issuer: /CN=9a9558818272b9c5400fc5da18813acce917588d
Certificate serial: 0194BBCED1C72F8008FADA91618D43657C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: mpVYgYJyucVAD8XaGIE6zOkXWI0.crl (hash: CJ2yDdB7Tk0HH3hFAczD00tP/2NNGQr7H3xRgFWyMB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d1:c7:2f:80:08:fa:da:91:61:8d:43:65:7c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a9558818272b9c5400fc5da18813acce917588d
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=96202e25f4427031998c8f0d4c95abf0bc460796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:b7:40:35:0e:15:d4:d0:4f:da:be:47:b9:
d4:aa:52:cb:9c:72:83:98:ee:fd:5d:c7:3e:8f:39:
f5:b3:b2:ae:ae:53:fa:f6:49:0b:0f:c1:f8:61:2e:
f8:41:c4:87:3e:1c:94:1d:b1:44:6f:c8:63:f9:de:
8d:54:cf:98:bb:0d:8c:2f:f7:d7:a2:ba:55:c7:a0:
e8:69:1d:d5:a3:f0:f1:ea:10:1d:d9:54:ae:7a:ee:
4b:e9:d3:43:7b:4a:9f:c5:4c:a3:da:bc:0b:e0:6b:
90:ff:9e:47:ef:9a:23:82:d2:fc:e7:e9:71:6c:6d:
1a:18:19:92:5f:12:cb:a7:45:59:3b:58:b9:07:23:
e0:ed:4d:cd:bd:3e:68:e8:52:f8:f5:10:a7:5d:60:
0e:c0:bf:ef:31:52:d4:a2:5e:2f:0e:21:7e:c7:88:
5c:f9:f6:bf:e4:e9:e9:1d:5c:3e:69:be:bf:37:3e:
32:e6:5e:a1:fc:cc:6d:ac:9a:b6:b4:45:b2:82:9f:
d7:cb:73:48:6a:e7:83:af:20:c4:9a:c9:d0:69:8b:
b3:41:75:b4:e5:72:cf:33:c5:b9:1f:f1:82:77:ee:
0d:d0:94:53:48:78:0f:e6:9a:f9:20:72:d5:e9:ad:
05:f2:1f:56:7e:77:77:b8:57:17:73:c7:ba:ec:21:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:20:2E:25:F4:42:70:31:99:8C:8F:0D:4C:95:AB:F0:BC:46:07:96
X509v3 Authority Key Identifier:
keyid:9A:95:58:81:82:72:B9:C5:40:0F:C5:DA:18:81:3A:CC:E9:17:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:8e:45:a6:fe:f6:2c:0d:08:35:8f:c9:73:ed:bf:b6:f4:97:
84:a9:fb:34:3e:0e:00:ff:1d:df:66:8a:32:47:e0:09:2b:84:
da:3d:33:ba:60:dc:70:f5:40:4f:0f:92:3c:b3:b8:bb:7a:5c:
bd:03:3c:d1:d3:63:64:76:9a:a8:ae:23:63:5c:49:49:5f:a7:
c6:c1:bb:5d:45:b7:29:72:e3:5c:9c:7c:37:cb:d8:79:00:4a:
f3:c7:bd:20:1d:2c:f5:a5:8a:86:de:06:ee:3f:aa:e8:b4:bd:
1f:a8:68:c0:4b:2d:bc:a8:63:73:0d:76:a1:f5:02:d0:53:27:
fa:9e:79:b0:9b:89:34:db:fd:f9:a3:c4:83:c4:72:de:5e:ae:
9d:c7:05:6c:be:50:5c:37:8a:ad:49:11:12:20:03:49:a3:fb:
e2:0d:25:79:7b:43:1d:78:2b:b4:dd:d5:00:3d:a3:71:21:ec:
b0:88:78:3c:c2:cd:14:eb:b0:7a:9f:8a:b0:85:8c:61:80:35:
79:c3:98:a7:0f:3b:1f:d9:f9:e5:a5:10:a8:02:71:e8:61:6d:
38:8e:bf:a8:4c:93:4d:bc:cc:95:84:09:cd:38:a8:44:97:37:
64:5f:c3:c6:0b:17:fa:8f:49:3c:23:98:fe:84:50:60:13:35:
d2:da:43:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztHHL4AI+tqRYY1DZXw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTU1ODgxODI3MmI5YzU0MDBmYzVkYTE4ODEzYWNjZTkx
NzU4OGQwHhcNMjUwMTMxMTAwMTIwWhcNMjUwMjAxMTAwMTIwWjAzMTEwLwYDVQQD
Eyg5NjIwMmUyNWY0NDI3MDMxOTk4YzhmMGQ0Yzk1YWJmMGJjNDYwNzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnay3QDUOFdTQT9q+R7nUqlLLnHKD
mO79Xcc+jzn1s7KurlP69kkLD8H4YS74QcSHPhyUHbFEb8hj+d6NVM+Yuw2ML/fX
orpVx6DoaR3Vo/Dx6hAd2VSueu5L6dNDe0qfxUyj2rwL4GuQ/55H75ojgtL85+lx
bG0aGBmSXxLLp0VZO1i5ByPg7U3NvT5o6FL49RCnXWAOwL/vMVLUol4vDiF+x4hc
+fa/5OnpHVw+ab6/Nz4y5l6h/MxtrJq2tEWygp/Xy3NIaueDryDEmsnQaYuzQXW0
5XLPM8W5H/GCd+4N0JRTSHgP5pr5IHLV6a0F8h9Wfnd3uFcXc8e67CFnbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYgLiX0QnAxmYyPDUyVq/C8RgeWMB8GA1UdIwQY
MBaAFJqVWIGCcrnFQA/F2hiBOszpF1iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBWWWdZSnl1Y1ZBRDhYYUdJRTZ6T2tYV0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMzNkODItOTM4ZS00ZjM1LWFhNDgt
ZDRlOWNmMjZlZTEwLzEvbXBWWWdZSnl1Y1ZBRDhYYUdJRTZ6T2tYV0kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMzNkODItOTM4ZS00ZjM1LWFhNDgtZDRlOWNmMjZlZTEw
LzEvbXBWWWdZSnl1Y1ZBRDhYYUdJRTZ6T2tYV0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxo5Fpv72
LA0INY/Jc+2/tvSXhKn7ND4OAP8d32aKMkfgCSuE2j0zumDccPVATw+SPLO4u3pc
vQM80dNjZHaaqK4jY1xJSV+nxsG7XUW3KXLjXJx8N8vYeQBK88e9IB0s9aWKht4G
7j+q6LS9H6howEstvKhjcw12ofUC0FMn+p55sJuJNNv9+aPEg8Ry3l6unccFbL5Q
XDeKrUkREiADSaP74g0leXtDHXgrtN3VAD2jcSHssIh4PMLNFOuwep+KsIWMYYA1
ecOYpw87H9n55aUQqAJx6GFtOI6/qEyTTbzMlYQJzTioRJc3ZF/DxgsX+o9JPCOY
/oRQYBM10tpD0Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:28 2025 by rpki-client