Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/18705b-48ac-484c-97bd-ec1a4b9a37b2/1/MFOQl41XlfFI4eYK6c_XKDNIEiw.mft
File: MFOQl41XlfFI4eYK6c_XKDNIEiw.mft (raw, json)
Hash identifier: 6bS7DSaHll6jC2BpiycnV7Ot6rVxbJT7KM41xoWyrMs=
Subject key identifier: 98:A6:29:73:0F:38:D6:97:D5:F0:21:0D:0A:0B:72:30:A7:11:8A:F1
Authority key identifier: 30:53:90:97:8D:57:95:F1:48:E1:E6:0A:E9:CF:D7:28:33:48:12:2C
Certificate issuer: /CN=305390978d5795f148e1e60ae9cfd7283348122c
Certificate serial: 0194BCAA056DD8843B498F7984F2712CA453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFOQl41XlfFI4eYK6c_XKDNIEiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/18705b-48ac-484c-97bd-ec1a4b9a37b2/1/MFOQl41XlfFI4eYK6c_XKDNIEiw.mft
Manifest number: 0ACF
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: MFOQl41XlfFI4eYK6c_XKDNIEiw.crl (hash: xBPXEmhc5FGw+/mhlMjKpwGA5sCrWPoSQNoA3EDHD1I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:05:6d:d8:84:3b:49:8f:79:84:f2:71:2c:a4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305390978d5795f148e1e60ae9cfd7283348122c
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=98a629730f38d697d5f0210d0a0b7230a7118af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:76:e3:48:9b:df:24:4c:7a:90:8d:6c:f7:
9f:03:55:37:a8:73:2c:d1:51:4e:0b:50:4c:17:6c:
43:6a:23:96:83:cb:fa:2a:7c:55:a3:eb:ef:27:24:
ed:1d:ba:79:f6:fe:99:9f:53:6f:c7:0e:fb:30:bc:
a5:d7:df:a0:2d:6f:1b:af:37:e5:af:4d:3a:c6:2d:
4f:a8:73:d8:6b:7b:c8:0e:2e:49:38:0f:05:7d:36:
aa:34:4f:a3:c4:ea:a8:f7:61:79:cf:82:5a:e0:15:
1a:06:e2:88:19:03:dc:51:0f:b1:87:29:83:64:11:
63:c5:47:16:74:c5:dc:39:e9:0d:1c:ab:a2:d3:d0:
7b:14:92:b4:67:29:90:fe:09:f5:73:55:3e:04:c4:
4f:2c:d7:d7:c9:10:da:b3:10:0d:ca:db:8e:06:a6:
c5:24:1b:3d:4d:11:c7:92:77:cc:d9:af:48:48:fe:
6d:18:18:2c:9c:23:c2:b2:37:88:ef:81:79:3a:56:
70:a6:3f:8f:f8:f7:88:bf:9c:6e:ab:32:d1:fc:76:
32:17:f3:f6:7e:b7:7c:ee:ae:19:49:e3:8b:98:ab:
ff:20:22:95:d0:35:c0:65:93:45:72:51:e5:7c:67:
06:74:ee:3e:09:e0:6e:f3:42:24:db:4a:7a:d1:7f:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A6:29:73:0F:38:D6:97:D5:F0:21:0D:0A:0B:72:30:A7:11:8A:F1
X509v3 Authority Key Identifier:
keyid:30:53:90:97:8D:57:95:F1:48:E1:E6:0A:E9:CF:D7:28:33:48:12:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFOQl41XlfFI4eYK6c_XKDNIEiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/18705b-48ac-484c-97bd-ec1a4b9a37b2/1/MFOQl41XlfFI4eYK6c_XKDNIEiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/18705b-48ac-484c-97bd-ec1a4b9a37b2/1/MFOQl41XlfFI4eYK6c_XKDNIEiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d8:00:30:1f:d4:b0:1c:5e:4c:64:0b:5d:99:4d:13:ce:04:
26:18:24:fb:37:0b:12:d7:8d:b6:76:15:e9:e6:09:35:3c:56:
f9:36:aa:01:e7:a7:62:cb:f0:ff:0d:5f:a8:b8:4c:2f:1b:5c:
b2:70:73:77:fc:ca:9a:dc:0f:39:a7:52:92:6e:99:f5:b3:fa:
57:48:37:12:f8:f0:ae:97:23:d4:10:13:86:9d:e6:75:7a:c7:
af:7e:69:31:e6:11:90:0e:ac:0c:4d:5c:6e:dc:5b:8f:da:a5:
7f:35:63:e3:20:ea:20:c4:57:fb:b1:f4:ed:08:b7:7e:74:5f:
01:e4:a0:23:72:37:af:5d:32:6a:fb:eb:86:e9:f4:c7:d7:f4:
4e:c1:0d:ec:5b:07:ed:ab:72:7a:42:64:b8:92:e9:44:77:1c:
07:d6:ce:7f:26:ef:f3:23:04:00:84:91:e2:62:b2:35:b4:08:
63:bb:3d:47:97:11:ba:0c:3c:6c:08:2d:5e:6f:0d:47:24:cb:
36:04:39:b8:7c:56:3f:33:b7:8e:81:71:e7:fa:f5:3a:80:27:
37:d8:28:73:13:52:bc:13:f0:c7:1a:87:d2:26:19:b0:ad:2b:
2e:f1:61:ac:a8:db:4d:a1:b9:81:e2:2e:f7:f3:7e:d2:79:bf:
a0:ba:7f:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgVt2IQ7SY95hPJxLKRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNTM5MDk3OGQ1Nzk1ZjE0OGUxZTYwYWU5Y2ZkNzI4MzM0
ODEyMmMwHhcNMjUwMTMxMTQwMDQ2WhcNMjUwMjAxMTQwMDQ2WjAzMTEwLwYDVQQD
Eyg5OGE2Mjk3MzBmMzhkNjk3ZDVmMDIxMGQwYTBiNzIzMGE3MTE4YWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKF240ib3yRMepCNbPefA1U3qHMs
0VFOC1BMF2xDaiOWg8v6KnxVo+vvJyTtHbp59v6Zn1Nvxw77MLyl19+gLW8brzfl
r006xi1PqHPYa3vIDi5JOA8FfTaqNE+jxOqo92F5z4Ja4BUaBuKIGQPcUQ+xhymD
ZBFjxUcWdMXcOekNHKui09B7FJK0ZymQ/gn1c1U+BMRPLNfXyRDasxANytuOBqbF
JBs9TRHHknfM2a9ISP5tGBgsnCPCsjeI74F5OlZwpj+P+PeIv5xuqzLR/HYyF/P2
frd87q4ZSeOLmKv/ICKV0DXAZZNFclHlfGcGdO4+CeBu80Ik20p60X88RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJimKXMPONaX1fAhDQoLcjCnEYrxMB8GA1UdIwQY
MBaAFDBTkJeNV5XxSOHmCunP1ygzSBIsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUZPUWw0MVhsZkZJNGVZSzZjX1hLRE5JRWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xODcwNWItNDhhYy00ODRjLTk3YmQt
ZWMxYTRiOWEzN2IyLzEvTUZPUWw0MVhsZkZJNGVZSzZjX1hLRE5JRWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xODcwNWItNDhhYy00ODRjLTk3YmQtZWMxYTRiOWEzN2Iy
LzEvTUZPUWw0MVhsZkZJNGVZSzZjX1hLRE5JRWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdgAMB/U
sBxeTGQLXZlNE84EJhgk+zcLEteNtnYV6eYJNTxW+TaqAeenYsvw/w1fqLhMLxtc
snBzd/zKmtwPOadSkm6Z9bP6V0g3Evjwrpcj1BAThp3mdXrHr35pMeYRkA6sDE1c
btxbj9qlfzVj4yDqIMRX+7H07Qi3fnRfAeSgI3I3r10yavvrhun0x9f0TsEN7FsH
7atyekJkuJLpRHccB9bOfybv8yMEAISR4mKyNbQIY7s9R5cRugw8bAgtXm8NRyTL
NgQ5uHxWPzO3joFx5/r1OoAnN9gocxNSvBPwxxqH0iYZsK0rLvFhrKjbTaG5geIu
9/N+0nm/oLp/DA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:36 2025 by rpki-client