Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
File: mrlC3a28mskLTs---tsjEyOmcFU.mft (raw, json)
Hash identifier: NpT36tvtJ52enrGu1rQcgAR9qfi9puEX0GZpHx1OFl0=
Subject key identifier: 14:13:C0:24:BA:0C:68:CF:54:49:3B:B6:B8:D3:E7:C6:A6:7D:72:EB
Authority key identifier: 9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
Certificate issuer: /CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Certificate serial: 0194BC3C266AEE1B3FD6F75817DE8AD0DC85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
Manifest number: 0B0F
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: mrlC3a28mskLTs---tsjEyOmcFU.crl (hash: 924SgBsBsy1Sx0uH1wUyyrSPc976dLIYybyoCjPiyGA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:26:6a:ee:1b:3f:d6:f7:58:17:de:8a:d0:dc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=1413c024ba0c68cf54493bb6b8d3e7c6a67d72eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c0:62:ba:af:ab:b0:43:ef:20:0b:1f:2e:0a:
ce:b5:bb:3f:3b:e1:0c:2d:41:73:ec:3a:5a:ca:5a:
eb:4d:13:30:78:37:03:57:d9:72:bb:24:b0:0d:6d:
6d:53:65:d1:1d:ec:33:fd:11:e4:a7:a4:2f:1a:5f:
5f:82:54:92:73:c8:c2:82:56:d6:bf:1b:b7:44:1d:
ad:b9:f1:16:f3:dd:57:ab:c9:7c:8e:77:b2:d1:eb:
37:38:06:b2:7c:95:f8:8e:39:1e:58:d0:4b:70:10:
2b:ca:4d:3b:06:21:b0:ca:0d:f8:24:3f:ec:24:fe:
8b:ab:94:25:63:18:b8:39:f7:8c:0e:2b:70:30:af:
de:10:cf:48:58:49:ea:24:1c:a5:b0:b8:0d:6b:c9:
a7:25:48:c0:8b:dd:fb:71:77:6b:3c:25:53:fd:a9:
69:b0:59:16:d3:5d:f6:7a:ba:ac:cf:e5:3c:04:bc:
c8:98:c8:3b:4e:ae:33:a0:f8:8b:1b:f3:ea:85:6b:
51:4e:d0:31:93:fd:2a:14:9b:8e:d7:be:59:9e:af:
da:80:4d:ba:64:4b:e4:fa:f6:0b:81:76:5d:34:b4:
5f:bb:c3:76:03:89:16:f6:b9:5c:e7:dd:4b:a1:63:
f5:a9:36:5a:b9:db:05:e0:09:b1:93:6a:b2:b7:34:
71:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:13:C0:24:BA:0C:68:CF:54:49:3B:B6:B8:D3:E7:C6:A6:7D:72:EB
X509v3 Authority Key Identifier:
keyid:9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2a:08:fd:7e:b9:27:c4:71:21:31:b2:dc:50:81:6b:0a:a1:
91:29:ce:93:0f:3f:f8:4c:5a:90:bf:0e:77:9c:4a:1c:cd:6f:
aa:4c:ae:c7:ff:2d:a2:4b:d7:e8:43:6d:6f:08:c3:60:13:27:
69:be:53:67:48:ee:95:0e:37:84:11:8f:d8:67:23:1a:72:53:
6a:37:f0:5d:c5:a2:40:24:3d:4d:e3:8f:d6:c8:af:a0:e5:11:
12:a6:d7:b6:da:77:de:a7:17:4b:34:15:91:88:ae:b8:f9:3c:
99:9a:33:27:74:d5:48:3a:d0:80:ff:8d:49:e1:d4:85:0b:43:
19:2f:52:d6:a0:62:f6:82:b4:dc:3a:d2:03:84:4f:81:06:b1:
61:a0:80:44:4c:4f:64:5b:17:4e:e3:94:05:9b:45:48:03:8d:
d2:19:bb:7b:e5:62:01:c5:c7:15:e0:72:dd:be:11:70:d6:3a:
66:e9:be:52:ec:2b:2e:16:3e:c9:f3:8a:36:1c:d6:92:dd:fb:
3b:18:51:ed:cd:72:88:f4:d7:3e:b0:d5:48:6c:f4:59:eb:77:
1c:c2:d2:fb:b4:2d:5d:d4:66:6f:31:92:06:49:40:40:8b:20:
c2:60:aa:e4:1c:f9:47:5b:d0:71:8a:32:72:c0:9b:3e:76:e5:
32:35:61:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PCZq7hs/1vdYF96K0NyFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYjk0MmRkYWRiYzlhYzkwYjRlY2ZiZWZhZGIyMzEzMjNh
NjcwNTUwHhcNMjUwMTMxMTIwMDQ2WhcNMjUwMjAxMTIwMDQ2WjAzMTEwLwYDVQQD
EygxNDEzYzAyNGJhMGM2OGNmNTQ0OTNiYjZiOGQzZTdjNmE2N2Q3MmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sBiuq+rsEPvIAsfLgrOtbs/O+EM
LUFz7DpaylrrTRMweDcDV9lyuySwDW1tU2XRHewz/RHkp6QvGl9fglSSc8jCglbW
vxu3RB2tufEW891Xq8l8jney0es3OAayfJX4jjkeWNBLcBAryk07BiGwyg34JD/s
JP6Lq5QlYxi4OfeMDitwMK/eEM9IWEnqJBylsLgNa8mnJUjAi937cXdrPCVT/alp
sFkW0132erqsz+U8BLzImMg7Tq4zoPiLG/PqhWtRTtAxk/0qFJuO175Znq/agE26
ZEvk+vYLgXZdNLRfu8N2A4kW9rlc591LoWP1qTZaudsF4Amxk2qytzRx/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQTwCS6DGjPVEk7trjT58amfXLrMB8GA1UdIwQY
MBaAFJq5Qt2tvJrJC07PvvrbIxMjpnBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJsQzNhMjhtc2tMVHMtLS10c2pFeU9tY0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84MmNkNTctZWZkOS00NjY5LThhNDkt
YzYxYWI1NmQzNTk3LzEvbXJsQzNhMjhtc2tMVHMtLS10c2pFeU9tY0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84MmNkNTctZWZkOS00NjY5LThhNDktYzYxYWI1NmQzNTk3
LzEvbXJsQzNhMjhtc2tMVHMtLS10c2pFeU9tY0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSoI/X65
J8RxITGy3FCBawqhkSnOkw8/+ExakL8Od5xKHM1vqkyux/8tokvX6ENtbwjDYBMn
ab5TZ0julQ43hBGP2GcjGnJTajfwXcWiQCQ9TeOP1sivoOUREqbXttp33qcXSzQV
kYiuuPk8mZozJ3TVSDrQgP+NSeHUhQtDGS9S1qBi9oK03DrSA4RPgQaxYaCARExP
ZFsXTuOUBZtFSAON0hm7e+ViAcXHFeBy3b4RcNY6Zum+UuwrLhY+yfOKNhzWkt37
OxhR7c1yiPTXPrDVSGz0Wet3HMLS+7QtXdRmbzGSBklAQIsgwmCq5Bz5R1vQcYoy
csCbPnblMjVhDw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:02 2025 by rpki-client