Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
File: MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft (raw, json)
Hash identifier: JZnlSSbdMK3sMT+O9V/wNlXriVOUEh/RbfMGm3FrNnk=
Subject key identifier: 3A:BC:A7:14:60:36:DE:7E:4F:AC:04:DC:0B:0B:65:77:54:9E:3D:2B
Authority key identifier: 33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
Certificate issuer: /CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Certificate serial: 0194BC3C9E88DF21F87DAAB11B8C5F38BA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: 3uMI0eyGDTP_4VBHSu_Gi3THkOI.roa (hash: Cm4F2kvA5ErK54YFSvS76c/R+lAu7cqvwhz+i9YfFXg=)
2: MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl (hash: P07yo7ZsjSK7RIaDY7j5xaXdAJBrHi69ZrO1Tt6GDd0=)
3: n2ei7lteRT65eg7b0439V9xQ1W4.roa (hash: lnyVVF/NC8g5yiXdoOAyp30eKagIiSe2ZKe5V+kWrJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9e:88:df:21:f8:7d:aa:b1:1b:8c:5f:38:ba:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=3abca7146036de7e4fac04dc0b0b6577549e3d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:76:05:34:36:01:b8:8e:73:93:03:c0:2f:f5:
6b:59:ac:14:1b:be:11:de:4a:77:85:eb:e9:64:bc:
6e:5c:03:4f:2b:63:21:43:2e:60:f6:11:ec:1a:7b:
43:64:48:4a:27:80:eb:60:46:e8:4b:fb:ef:4b:31:
ac:50:5a:aa:45:27:a2:fc:13:30:46:8c:4a:06:95:
9d:b5:dd:65:31:7c:6b:2f:60:52:e9:fc:a2:2f:f7:
ab:aa:84:26:cf:e2:10:f3:e0:34:1e:1e:41:59:5f:
31:b3:37:7c:c9:5d:e9:36:e6:e5:e8:c2:98:60:55:
ca:50:01:96:5d:dc:65:44:49:5a:48:59:2e:50:92:
fa:5f:57:76:65:53:d5:7a:05:d7:c2:cc:60:83:4b:
46:c3:de:c8:78:ee:5c:df:ca:58:7c:b2:77:96:10:
a1:e6:44:5c:02:f7:d8:1c:9a:d8:f9:d7:9b:b7:a2:
a6:93:c2:99:95:c5:f0:f0:42:71:fe:8f:79:91:ad:
77:6d:ba:0f:8b:7f:d3:35:e3:29:ad:a6:60:d0:88:
78:b7:6c:03:88:45:2c:f4:60:e8:8d:12:76:16:26:
75:3e:5c:3f:d7:6a:65:e4:4b:03:2b:96:29:15:c0:
9c:dd:23:08:7b:67:30:62:10:96:09:18:b5:84:f0:
c5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BC:A7:14:60:36:DE:7E:4F:AC:04:DC:0B:0B:65:77:54:9E:3D:2B
X509v3 Authority Key Identifier:
keyid:33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0f:10:9e:b7:a6:55:fd:45:6f:07:3f:a8:87:76:8e:bb:32:
ec:90:a4:62:86:90:a3:ed:50:15:61:a0:e7:d0:26:a0:56:68:
36:b6:ba:c5:be:92:c5:15:49:ee:0f:d1:94:34:1a:9e:43:80:
2c:da:f9:d0:43:c3:f4:6e:f5:43:8a:49:b3:17:f3:08:72:28:
0e:e3:95:f4:db:4c:c3:f8:8b:37:fb:c7:01:ce:7a:3b:45:13:
f1:87:7e:24:be:e5:68:39:e1:38:0c:26:29:0e:8f:c5:1a:d0:
ca:20:8e:58:a2:6e:cb:ab:4d:aa:94:eb:a3:ad:a0:31:da:18:
a8:82:e3:35:1d:a3:2c:24:0d:ce:a6:a8:52:62:ac:4f:06:c7:
f7:02:bb:d1:66:d3:64:bb:ac:1a:94:87:7c:d3:15:65:64:67:
29:95:50:ef:ee:ad:0a:54:42:f7:b7:1d:e5:84:39:64:9e:22:
5d:1a:5f:92:27:2d:d8:30:0b:24:14:60:29:21:9f:f6:7a:3b:
62:d5:44:fe:35:19:67:36:55:f4:63:ce:09:06:25:c6:fc:b7:
75:21:fa:4c:b6:d0:73:d8:78:59:5c:e6:e7:5f:7f:ff:6c:06:
65:e8:69:e7:a4:d0:97:cb:01:ab:f0:33:8d:4e:77:ea:5e:81:
e7:6f:67:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJ6I3yH4faqxG4xfOLpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzU4YjQ1MWVlMGZlODViMDA0YTA1NjRmODMxMGZiMjEx
Yzk1ZmEwHhcNMjUwMTMxMTIwMTE2WhcNMjUwMjAxMTIwMTE2WjAzMTEwLwYDVQQD
EygzYWJjYTcxNDYwMzZkZTdlNGZhYzA0ZGMwYjBiNjU3NzU0OWUzZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XYFNDYBuI5zkwPAL/VrWawUG74R
3kp3hevpZLxuXANPK2MhQy5g9hHsGntDZEhKJ4DrYEboS/vvSzGsUFqqRSei/BMw
RoxKBpWdtd1lMXxrL2BS6fyiL/erqoQmz+IQ8+A0Hh5BWV8xszd8yV3pNubl6MKY
YFXKUAGWXdxlRElaSFkuUJL6X1d2ZVPVegXXwsxgg0tGw97IeO5c38pYfLJ3lhCh
5kRcAvfYHJrY+debt6Kmk8KZlcXw8EJx/o95ka13bboPi3/TNeMpraZg0Ih4t2wD
iEUs9GDojRJ2FiZ1Plw/12pl5EsDK5YpFcCc3SMIe2cwYhCWCRi1hPDFGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDq8pxRgNt5+T6wE3AsLZXdUnj0rMB8GA1UdIwQY
MBaAFDM1i0Ue4P6FsASgVk+DEPshHJX6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpXTFJSN2dfb1d3QktCV1Q0TVEteUVjbGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85ZjE4ZjgtOTZjNC00YjIzLTkzMWYt
ZDVmMDQ3YzI5MTkwLzEvTXpXTFJSN2dfb1d3QktCV1Q0TVEteUVjbGZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85ZjE4ZjgtOTZjNC00YjIzLTkzMWYtZDVmMDQ3YzI5MTkw
LzEvTXpXTFJSN2dfb1d3QktCV1Q0TVEteUVjbGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZw8Qnrem
Vf1Fbwc/qId2jrsy7JCkYoaQo+1QFWGg59AmoFZoNra6xb6SxRVJ7g/RlDQankOA
LNr50EPD9G71Q4pJsxfzCHIoDuOV9NtMw/iLN/vHAc56O0UT8Yd+JL7laDnhOAwm
KQ6PxRrQyiCOWKJuy6tNqpTro62gMdoYqILjNR2jLCQNzqaoUmKsTwbH9wK70WbT
ZLusGpSHfNMVZWRnKZVQ7+6tClRC97cd5YQ5ZJ4iXRpfkict2DALJBRgKSGf9no7
YtVE/jUZZzZV9GPOCQYlxvy3dSH6TLbQc9h4WVzm519//2wGZehp56TQl8sBq/Az
jU536l6B529n5g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:01 2025 by rpki-client