Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
File: mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft (raw, json)
Hash identifier: fYkGbcZIWLYnQmy1qbcTRhlgYWCDr8TZhbM7UqHhcSQ=
Subject key identifier: 21:7B:7C:BD:98:51:01:36:80:C1:31:42:02:24:29:77:24:B2:81:33
Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Certificate serial: 0194BBCDD9690B33F1BFDA513BA30C61B548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: E2H2EgczXO4vEC46FZxvsHwh6_8.roa (hash: 9qoKSnH10eUGGs+3culoGCr3jfo4da0aiqS7K6wGUPQ=)
2: mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl (hash: z+CeUKf3DupiluvijG4Rzpl5QrHDp8UFI9GLiypAurc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d9:69:0b:33:f1:bf:da:51:3b:a3:0c:61:b5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=217b7cbd9851013680c131420224297724b28133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:21:8e:07:5c:3b:a7:1a:91:11:9d:30:73:
aa:a1:97:79:09:22:e3:ab:be:37:af:b2:00:94:cc:
f5:9a:4a:74:ff:6e:21:dc:d7:73:f8:aa:a9:85:66:
e4:8f:1e:58:9c:4d:84:08:ea:18:0a:ce:82:7a:47:
fa:a3:40:ef:a1:62:86:5b:bc:0b:2b:a1:15:5f:79:
ea:2a:da:26:8e:93:96:30:e4:e7:e8:89:28:af:41:
97:4f:f4:4c:3e:f5:4f:92:d9:1d:b2:27:ac:0d:28:
c6:0e:a2:69:5a:cc:de:de:ee:3f:39:bb:0f:96:11:
52:22:fa:1a:ef:a0:ab:a6:5e:95:0d:79:73:43:d1:
69:80:c0:1a:98:78:51:4a:7d:4a:f7:0f:96:ff:63:
22:9c:94:70:a0:fc:5a:29:1d:0f:a2:74:79:4d:8f:
83:06:63:97:37:a6:09:c3:57:c4:8d:d0:08:64:54:
84:75:86:c0:30:43:97:05:fa:07:7f:8f:73:ac:cd:
8b:a4:cd:f5:2b:11:1a:c1:d8:cb:57:45:55:a4:bb:
cc:0e:51:77:be:1d:86:a5:ae:07:b2:4b:cf:7d:ca:
95:42:b9:44:cd:b6:ed:fc:b0:7e:24:7d:ab:a7:db:
46:99:64:3b:b7:56:bd:4e:d7:1c:90:3c:5c:84:2d:
35:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7B:7C:BD:98:51:01:36:80:C1:31:42:02:24:29:77:24:B2:81:33
X509v3 Authority Key Identifier:
keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:33:c6:0d:15:3c:a0:65:35:0c:32:67:ae:6d:c9:48:f5:a1:
3f:1b:dc:d3:64:a0:10:6a:5b:47:92:68:bc:76:49:9f:11:9e:
8b:3e:6b:7c:23:a2:96:70:1e:0c:59:7e:cc:dc:47:6c:51:dd:
92:b8:9e:f6:c1:45:9b:02:10:3b:fe:77:de:2c:79:65:cf:de:
4c:6e:d7:cc:8b:cd:a9:cd:19:c4:23:a3:72:f2:13:77:91:8e:
2c:bc:0c:06:d0:a6:51:b0:2c:bc:60:93:20:63:74:9f:7f:a7:
14:7f:b5:61:4e:cc:95:51:b2:f9:23:99:2f:32:5b:74:db:1d:
8b:10:49:97:b4:a2:9c:03:9f:12:67:27:c2:b7:e6:15:25:8a:
69:7b:ac:05:41:d9:a6:8d:2d:36:a7:b6:37:a4:ad:a4:ad:92:
f6:6b:a5:79:b2:4d:20:23:7c:8c:33:95:fb:ef:64:1c:fd:58:
bd:3b:06:b7:c7:e1:af:d2:25:a8:ad:4d:01:44:75:a8:9f:6a:
d1:28:7f:93:60:cf:1d:0c:56:f1:d5:87:42:28:0d:d5:52:1d:
fd:6b:55:ae:ac:a2:f3:a0:d4:af:37:df:3a:93:f8:84:44:3d:
44:e8:11:af:1d:1c:f3:56:e7:83:b5:41:c9:b3:c5:16:a3:ac:
d0:9a:71:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdlpCzPxv9pRO6MMYbVIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MDk3YzJiYjA2MmI1YzI5OTIzOTFhNGVkMWVlNGY0ZmEz
Nzc5Y2IwHhcNMjUwMTMxMTAwMDE3WhcNMjUwMjAxMTAwMDE3WjAzMTEwLwYDVQQD
EygyMTdiN2NiZDk4NTEwMTM2ODBjMTMxNDIwMjI0Mjk3NzI0YjI4MTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrMhjgdcO6cakRGdMHOqoZd5CSLj
q743r7IAlMz1mkp0/24h3Ndz+KqphWbkjx5YnE2ECOoYCs6Cekf6o0DvoWKGW7wL
K6EVX3nqKtomjpOWMOTn6Ikor0GXT/RMPvVPktkdsiesDSjGDqJpWsze3u4/ObsP
lhFSIvoa76Crpl6VDXlzQ9FpgMAamHhRSn1K9w+W/2MinJRwoPxaKR0PonR5TY+D
BmOXN6YJw1fEjdAIZFSEdYbAMEOXBfoHf49zrM2LpM31KxEawdjLV0VVpLvMDlF3
vh2Gpa4HskvPfcqVQrlEzbbt/LB+JH2rp9tGmWQ7t1a9TtcckDxchC01nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCF7fL2YUQE2gMExQgIkKXcksoEzMB8GA1UdIwQY
MBaAFJgJfCuwYrXCmSORpO0e5PT6N3nLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUFsOEs3Qml0Y0taSTVHazdSN2s5UG8zZWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xN2E2OWQtYjdmNy00YmExLWI3ZWUt
OThiYzI1NGMyM2U1LzEvbUFsOEs3Qml0Y0taSTVHazdSN2s5UG8zZWNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8xN2E2OWQtYjdmNy00YmExLWI3ZWUtOThiYzI1NGMyM2U1
LzEvbUFsOEs3Qml0Y0taSTVHazdSN2s5UG8zZWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzPGDRU8
oGU1DDJnrm3JSPWhPxvc02SgEGpbR5JovHZJnxGeiz5rfCOilnAeDFl+zNxHbFHd
krie9sFFmwIQO/533ix5Zc/eTG7XzIvNqc0ZxCOjcvITd5GOLLwMBtCmUbAsvGCT
IGN0n3+nFH+1YU7MlVGy+SOZLzJbdNsdixBJl7SinAOfEmcnwrfmFSWKaXusBUHZ
po0tNqe2N6StpK2S9mulebJNICN8jDOV++9kHP1YvTsGt8fhr9IlqK1NAUR1qJ9q
0Sh/k2DPHQxW8dWHQigN1VId/WtVrqyi86DUrzffOpP4hEQ9ROgRrx0c81bng7VB
ybPFFqOs0Jpx1w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:46 2025 by rpki-client