Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier: xNSumdJv9ZRyHreAOZ93/MPfJrL8ulHYyvQ3rD/p76w=
Subject key identifier: 85:56:E5:87:A9:3C:5A:EC:F9:CF:27:11:8E:4F:0D:DF:FC:EB:FA:3E
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 0194BC3BD41FBAFF045749A18BAE6A1BD247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number: 1154
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: 9eN9v_hmY4BXhqwgwPbmdRtwaxg.roa (hash: /I1wfagsAtpLvGcRUkgr5rbaITh/yY12WpQcMZ73aQ0=)
2: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: UGHw/KjjhMHE66NTq2m9F0XO4p/ELZNzVAXCQRaricw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d4:1f:ba:ff:04:57:49:a1:8b:ae:6a:1b:d2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=8556e587a93c5aecf9cf27118e4f0ddffcebfa3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:ee:19:5e:a9:96:c5:92:af:a1:fe:28:24:
13:2f:73:43:be:02:63:5b:26:5a:45:8e:25:0d:e6:
13:3d:39:1f:3f:47:65:be:28:e3:3a:30:64:14:c4:
b5:c0:35:90:72:9c:6d:fe:54:ed:7d:74:87:df:4c:
37:56:44:17:38:2c:51:ee:df:1c:27:53:fa:81:5b:
b2:80:9c:04:83:50:15:86:84:ed:61:4f:10:8f:1d:
49:f7:58:42:35:36:2d:fe:0b:ab:4d:53:a2:0a:f5:
7a:21:e7:85:c0:2e:85:81:1e:2b:c3:2a:1d:94:d8:
36:49:9f:6d:0d:b3:03:08:4b:2b:de:dc:be:2a:7e:
5d:c9:71:50:0a:f7:59:5d:de:58:16:d7:ee:6d:8e:
92:37:22:fb:f8:29:dc:1a:aa:06:04:9e:36:84:8b:
89:59:2f:40:d1:8a:43:34:8d:ad:45:26:64:cf:71:
c1:22:0d:15:0a:65:c7:4c:98:bd:a2:6b:55:36:4f:
0b:f7:a6:59:e2:bc:6d:fb:32:30:b0:b6:f1:87:52:
7d:6b:f2:e8:74:5f:da:e6:46:3e:5c:7c:bd:70:e8:
ba:d7:7d:bc:e2:8c:ec:91:88:06:23:a1:f3:3b:5d:
86:d9:39:ed:5a:9e:e2:a4:23:01:68:bf:06:6d:5a:
1a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:56:E5:87:A9:3C:5A:EC:F9:CF:27:11:8E:4F:0D:DF:FC:EB:FA:3E
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:71:99:c5:95:dc:c0:75:7c:02:d1:9c:14:fa:e9:23:7f:bd:
b7:1a:fa:bc:e4:ae:45:7f:9c:48:45:49:91:9b:2d:d2:d4:f1:
bd:4d:5f:bf:a4:80:95:7b:8c:26:a3:d5:3d:8c:7a:32:2c:33:
32:6f:d3:9c:0a:36:8a:4f:ab:19:58:41:1f:10:79:b3:7f:72:
83:e1:83:8d:a4:b5:d3:7f:0d:e7:b9:6d:ec:53:8c:6b:9b:43:
de:73:01:cb:d8:22:6c:1d:75:58:e6:78:82:bf:ad:ee:d5:81:
a7:73:ef:85:f9:87:73:36:27:6f:a6:6d:f4:fa:ec:64:68:db:
bd:2e:c4:f1:62:8a:30:db:98:3e:16:15:e8:5f:0f:e7:5a:bc:
1f:c1:54:8f:c2:c9:a9:15:b4:13:2f:0a:1c:d0:eb:fa:29:2f:
03:f9:fb:06:9b:9b:bc:1e:5e:e3:9b:95:39:de:87:9f:c7:ca:
bb:8f:16:67:74:5a:c1:7b:c3:cd:4b:f1:c4:ed:4e:e8:f5:b4:
03:3a:15:d2:c6:4f:3c:5d:c2:85:72:01:6c:23:d0:b3:f6:8f:
5c:21:6f:53:d3:ad:8a:42:c2:d3:9e:d4:5e:bd:c7:a4:94:c6:
92:73:7d:19:96:c3:42:84:09:33:32:3c:ab:57:e9:81:55:5c:
35:c8:65:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9Qfuv8EV0mhi65qG9JHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxN2E5Mjc0MjYwODlmM2I4YzUwMDA4MzIyMWE3OThhOWQy
ZTg0NjYwHhcNMjUwMTMxMTIwMDI0WhcNMjUwMjAxMTIwMDI0WjAzMTEwLwYDVQQD
Eyg4NTU2ZTU4N2E5M2M1YWVjZjljZjI3MTE4ZTRmMGRkZmZjZWJmYTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKzuGV6plsWSr6H+KCQTL3NDvgJj
WyZaRY4lDeYTPTkfP0dlvijjOjBkFMS1wDWQcpxt/lTtfXSH30w3VkQXOCxR7t8c
J1P6gVuygJwEg1AVhoTtYU8Qjx1J91hCNTYt/gurTVOiCvV6IeeFwC6FgR4rwyod
lNg2SZ9tDbMDCEsr3ty+Kn5dyXFQCvdZXd5YFtfubY6SNyL7+CncGqoGBJ42hIuJ
WS9A0YpDNI2tRSZkz3HBIg0VCmXHTJi9omtVNk8L96ZZ4rxt+zIwsLbxh1J9a/Lo
dF/a5kY+XHy9cOi613284ozskYgGI6HzO12G2TntWp7ipCMBaL8GbVoajwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVW5YepPFrs+c8nEY5PDd/86/o+MB8GA1UdIwQY
MBaAFDF6knQmCJ87jFAAgyIaeYqdLoRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5Njgt
NDY0YjhmM2I4MzYzLzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5NjgtNDY0YjhmM2I4MzYz
LzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHGZxZXc
wHV8AtGcFPrpI3+9txr6vOSuRX+cSEVJkZst0tTxvU1fv6SAlXuMJqPVPYx6Miwz
Mm/TnAo2ik+rGVhBHxB5s39yg+GDjaS1038N57lt7FOMa5tD3nMBy9gibB11WOZ4
gr+t7tWBp3PvhfmHczYnb6Zt9PrsZGjbvS7E8WKKMNuYPhYV6F8P51q8H8FUj8LJ
qRW0Ey8KHNDr+ikvA/n7BpubvB5e45uVOd6Hn8fKu48WZ3RawXvDzUvxxO1O6PW0
AzoV0sZPPF3ChXIBbCPQs/aPXCFvU9OtikLC057UXr3HpJTGknN9GZbDQoQJMzI8
q1fpgVVcNchlEQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:41 2025 by rpki-client