Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
File: MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft (raw, json)
Hash identifier: LL2af+MwvRfWVDNq36Zrt/6VFJdcd2MPrI8AWChXTc8=
Subject key identifier: 8C:2A:27:95:19:FD:2D:17:AF:13:24:1E:BA:B6:8C:46:C7:76:18:D7
Authority key identifier: 30:AA:B0:2B:65:4E:91:5C:AD:CA:33:92:92:E2:8C:15:C4:7D:F8:58
Certificate issuer: /CN=30aab02b654e915cadca339292e28c15c47df858
Certificate serial: 0194BC72F7A1183594373A0B323884B5B7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKqwK2VOkVytyjOSkuKMFcR9-Fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
Manifest number: 028C
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: MKqwK2VOkVytyjOSkuKMFcR9-Fg.crl (hash: B40IIQ3ztF2LNgbxwyYDAcnYGuUdJWHO+54Le4NI0oQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f7:a1:18:35:94:37:3a:0b:32:38:84:b5:b7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aab02b654e915cadca339292e28c15c47df858
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=8c2a279519fd2d17af13241ebab68c46c77618d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:cd:75:33:3a:75:c2:a8:0c:bf:40:de:35:
aa:2b:a0:a3:bd:73:48:ab:0e:e9:41:e5:f6:f3:6a:
12:21:69:15:5d:ee:58:52:58:57:b6:e5:6d:49:5b:
25:bb:cf:e1:da:75:57:40:63:e5:07:6d:33:0e:af:
7d:a6:17:ab:5a:84:89:96:5d:3a:8e:75:93:e3:ec:
ec:c3:c3:8b:1d:df:2d:b9:f0:8d:2d:ee:19:69:ad:
6c:e7:a8:0a:50:ab:d8:c5:e5:23:3e:27:c2:4a:6b:
89:20:76:2e:2b:79:a8:97:d2:ea:12:57:a0:3c:df:
ae:29:cf:a3:05:c9:a0:bf:3e:46:69:49:63:92:9a:
79:d0:a4:b8:cc:ab:8c:fd:ee:d4:fc:3f:2d:60:56:
6b:0d:66:24:14:1c:b8:ba:5f:a2:5c:60:d8:ca:2c:
0b:41:48:b6:82:39:e8:7a:2a:9f:5c:f6:f3:01:33:
be:a2:c3:ca:e6:58:73:95:18:ec:b3:d1:07:86:04:
53:da:17:b7:05:f0:9f:60:f1:bc:10:dd:07:d2:9b:
28:09:17:a8:6f:2e:e2:5a:44:54:64:8c:63:5b:47:
02:05:44:cb:2e:a0:df:73:83:d3:c0:5a:b1:1a:21:
4e:a7:06:36:c4:77:c8:24:6e:38:a6:d1:29:7e:5f:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2A:27:95:19:FD:2D:17:AF:13:24:1E:BA:B6:8C:46:C7:76:18:D7
X509v3 Authority Key Identifier:
keyid:30:AA:B0:2B:65:4E:91:5C:AD:CA:33:92:92:E2:8C:15:C4:7D:F8:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKqwK2VOkVytyjOSkuKMFcR9-Fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:67:68:02:59:ec:f2:aa:d5:a5:e4:d0:7f:67:3b:04:68:77:
8d:49:ab:50:3c:4f:0c:13:c6:34:f6:fe:ce:33:55:bd:5c:53:
66:8e:79:80:99:1e:82:80:26:3e:30:e4:2a:53:dc:aa:d3:c3:
7a:ea:be:cc:1d:71:00:f2:3b:85:98:33:78:26:46:6a:2f:7e:
0a:dd:c5:e6:d0:23:fe:cb:18:de:2d:4c:25:35:5c:73:ea:03:
87:b7:99:fc:9d:60:d4:bc:63:02:14:ef:0d:06:d8:b7:48:1b:
25:70:53:72:0a:fa:f2:cf:c0:d2:63:db:d0:7c:6b:b2:ba:3d:
77:71:e5:08:95:9c:6e:19:1f:8e:9a:92:c3:2a:be:5b:40:1b:
39:ac:8b:25:80:b4:a6:c8:31:f9:8d:f9:20:18:57:c8:d5:30:
ac:10:e4:a6:3a:cf:9b:9f:9e:01:8b:66:f6:cb:95:c3:5e:38:
7f:a5:b6:60:b0:a9:15:db:94:21:14:47:54:25:72:7f:23:f0:
c2:e6:f5:af:ab:be:e8:92:82:80:ad:86:bf:96:0d:99:4e:eb:
a0:b4:fe:cc:d8:53:8e:ec:c1:ed:15:d7:e8:4a:d5:2a:31:6a:
8c:1a:9e:c6:98:d5:a8:31:ec:93:be:f8:3d:de:69:cf:35:b5:
77:46:05:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cvehGDWUNzoLMjiEtbfQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYWFiMDJiNjU0ZTkxNWNhZGNhMzM5MjkyZTI4YzE1YzQ3
ZGY4NTgwHhcNMjUwMTMxMTMwMDM4WhcNMjUwMjAxMTMwMDM4WjAzMTEwLwYDVQQD
Eyg4YzJhMjc5NTE5ZmQyZDE3YWYxMzI0MWViYWI2OGM0NmM3NzYxOGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpjNdTM6dcKoDL9A3jWqK6CjvXNI
qw7pQeX282oSIWkVXe5YUlhXtuVtSVslu8/h2nVXQGPlB20zDq99pherWoSJll06
jnWT4+zsw8OLHd8tufCNLe4Zaa1s56gKUKvYxeUjPifCSmuJIHYuK3mol9LqEleg
PN+uKc+jBcmgvz5GaUljkpp50KS4zKuM/e7U/D8tYFZrDWYkFBy4ul+iXGDYyiwL
QUi2gjnoeiqfXPbzATO+osPK5lhzlRjss9EHhgRT2he3BfCfYPG8EN0H0psoCReo
by7iWkRUZIxjW0cCBUTLLqDfc4PTwFqxGiFOpwY2xHfIJG44ptEpfl8DuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwqJ5UZ/S0XrxMkHrq2jEbHdhjXMB8GA1UdIwQY
MBaAFDCqsCtlTpFcrcozkpLijBXEffhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtxd0syVk9rVnl0eWpPU2t1S01GY1I5LUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85YWZmNTQtNTk3MS00MDJmLWFiNjkt
YTQxOTY3MGQxN2UxLzEvTUtxd0syVk9rVnl0eWpPU2t1S01GY1I5LUZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS85YWZmNTQtNTk3MS00MDJmLWFiNjktYTQxOTY3MGQxN2Ux
LzEvTUtxd0syVk9rVnl0eWpPU2t1S01GY1I5LUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2doAlns
8qrVpeTQf2c7BGh3jUmrUDxPDBPGNPb+zjNVvVxTZo55gJkegoAmPjDkKlPcqtPD
euq+zB1xAPI7hZgzeCZGai9+Ct3F5tAj/ssY3i1MJTVcc+oDh7eZ/J1g1LxjAhTv
DQbYt0gbJXBTcgr68s/A0mPb0Hxrsro9d3HlCJWcbhkfjpqSwyq+W0AbOayLJYC0
psgx+Y35IBhXyNUwrBDkpjrPm5+eAYtm9suVw144f6W2YLCpFduUIRRHVCVyfyPw
wub1r6u+6JKCgK2Gv5YNmU7roLT+zNhTjuzB7RXX6ErVKjFqjBqexpjVqDHsk774
Pd5pzzW1d0YFJw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:23 2025 by rpki-client