Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File: MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier: yNgg9vZPiq6gNvOX7igc1Sp7ldL7+eSZTxe4InZm59o=
Subject key identifier: 41:4D:57:7B:4A:46:FB:70:BA:1D:43:D8:7F:55:1A:67:2E:99:14:56
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer: /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial: 0194BD4E57A97DBAE23DD10C7AA536B19F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number: 0666
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: 6csp2LeD7vly2n1j-VpIEsucAhQ.roa (hash: WR+qcQQTkccFoOguSbUEIuw7HhStcNOST97gvk9zp7k=)
2: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: 1cEHEctTI16/6Fs5Fry6ewqV7+MClmdLONFiVtzUUAc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:57:a9:7d:ba:e2:3d:d1:0c:7a:a5:36:b1:9f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=414d577b4a46fb70ba1d43d87f551a672e991456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:8c:91:6c:20:4c:2d:27:1e:8a:e7:b0:53:
74:05:62:5c:8d:42:3f:78:f7:f0:a2:b2:52:e2:e5:
ed:02:0a:51:f6:d9:f2:5a:fa:70:cd:a0:c0:a5:52:
9b:55:40:85:4e:75:9a:e2:ea:9d:f7:f5:86:44:a6:
c3:ce:8e:43:24:8d:69:7d:dc:9d:6f:e3:a9:33:6e:
5a:13:08:4c:22:5e:bb:63:64:db:58:b2:1b:a3:f4:
2a:17:6a:05:38:e4:6c:0e:b4:f0:74:e7:15:9b:5f:
2c:39:a3:2c:ba:ef:5a:e7:03:0a:9c:49:67:c5:23:
91:50:4a:d7:10:26:bf:9a:db:d8:cd:09:0f:43:dc:
97:63:b0:f2:57:08:17:d4:c4:90:bc:2e:f5:6f:02:
47:e6:e3:2b:8d:47:60:d2:1c:95:70:b7:9c:b7:41:
ca:83:e9:7c:78:67:d5:ab:6e:39:36:62:23:6e:2d:
9f:30:f9:a7:a5:42:23:fa:52:d4:50:40:f9:57:24:
7b:19:7e:29:c8:01:1f:12:37:2b:a0:8a:df:3c:5a:
39:42:70:e7:c7:76:25:9f:87:fd:65:2e:0e:40:f4:
26:a3:07:de:26:b9:6c:a6:cb:77:b2:7b:32:dc:66:
8c:bb:aa:75:5f:20:77:c4:6c:df:f4:2a:f6:96:44:
17:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4D:57:7B:4A:46:FB:70:BA:1D:43:D8:7F:55:1A:67:2E:99:14:56
X509v3 Authority Key Identifier:
keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:03:ea:16:4e:ba:e8:64:df:cd:ea:69:f2:65:ac:4e:39:d4:
66:a0:3c:96:58:87:e4:68:4c:f2:3c:b6:f5:38:77:d4:06:5e:
fb:de:47:2f:d0:5e:69:ca:d9:1c:cc:ed:ba:1f:42:f4:e8:b1:
e6:e7:70:d3:43:72:4c:15:71:a4:86:f3:c4:dc:e6:c3:bf:f8:
e5:3c:d8:ac:c6:21:10:8a:7f:f0:77:27:09:3e:ce:03:01:98:
f1:65:5d:5e:db:d4:fe:c2:1c:92:72:ff:95:3c:74:f9:04:f1:
0c:07:a6:63:26:49:fd:c1:23:74:20:f5:df:9e:55:d3:50:7e:
5d:19:8f:58:df:61:1f:99:96:89:0b:9d:a4:b9:e4:5f:9e:35:
74:19:96:24:d5:7f:38:20:bd:ae:30:c9:f5:6a:66:25:ef:ab:
c3:35:27:04:b9:0b:67:83:18:d9:52:ac:42:e8:14:03:e7:9d:
4e:b0:af:70:b2:4d:c0:7b:d8:7e:61:95:dc:9d:76:79:88:38:
da:ab:9b:ca:0d:c2:e0:3b:0d:3e:fc:58:f0:9a:a8:7a:b4:53:
cd:e6:37:52:0d:38:e2:de:b1:ae:b9:f5:f5:7c:4f:b2:c9:45:
af:4a:86:e0:45:3f:dc:49:93:a1:1d:36:31:29:32:04:48:a5:
5f:ef:e6:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TlepfbriPdEMeqU2sZ96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZDVjOWM4NWZmYjc0NjM5NDVlODEyNjU3MGI3ZTI4NTFi
M2ZiN2EwHhcNMjUwMTMxMTcwMDE1WhcNMjUwMjAxMTcwMDE1WjAzMTEwLwYDVQQD
Eyg0MTRkNTc3YjRhNDZmYjcwYmExZDQzZDg3ZjU1MWE2NzJlOTkxNDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs2MkWwgTC0nHornsFN0BWJcjUI/
ePfworJS4uXtAgpR9tnyWvpwzaDApVKbVUCFTnWa4uqd9/WGRKbDzo5DJI1pfdyd
b+OpM25aEwhMIl67Y2TbWLIbo/QqF2oFOORsDrTwdOcVm18sOaMsuu9a5wMKnEln
xSORUErXECa/mtvYzQkPQ9yXY7DyVwgX1MSQvC71bwJH5uMrjUdg0hyVcLect0HK
g+l8eGfVq245NmIjbi2fMPmnpUIj+lLUUED5VyR7GX4pyAEfEjcroIrfPFo5QnDn
x3Yln4f9ZS4OQPQmowfeJrlspst3snsy3GaMu6p1XyB3xGzf9Cr2lkQXEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFNV3tKRvtwuh1D2H9VGmcumRRWMB8GA1UdIwQY
MBaAFDLVychf+3RjlF6BJlcLfihRs/t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZDAzNTEtMDA2Zi00N2FhLWFiMTkt
MTljMDVmNGY0YTdiLzEvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hZDAzNTEtMDA2Zi00N2FhLWFiMTktMTljMDVmNGY0YTdi
LzEvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQPqFk66
6GTfzepp8mWsTjnUZqA8lliH5GhM8jy29Th31AZe+95HL9BeacrZHMztuh9C9Oix
5udw00NyTBVxpIbzxNzmw7/45TzYrMYhEIp/8HcnCT7OAwGY8WVdXtvU/sIcknL/
lTx0+QTxDAemYyZJ/cEjdCD1355V01B+XRmPWN9hH5mWiQudpLnkX541dBmWJNV/
OCC9rjDJ9WpmJe+rwzUnBLkLZ4MY2VKsQugUA+edTrCvcLJNwHvYfmGV3J12eYg4
2qubyg3C4DsNPvxY8JqoerRTzeY3Ug044t6xrrn19XxPsslFr0qG4EU/3EmToR02
MSkyBEilX+/mDA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:38:53 2025 by rpki-client