Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
File: x_MfTFLp6rWIMOOH0LOQkwaExBo.mft (raw, json)
Hash identifier: ir7OBoohCG4BdKMtfwLfdkusDBmLlmed6rZ4svYNiC8=
Subject key identifier: B1:E9:E8:39:F4:AD:65:FD:20:73:6B:31:35:98:A4:A8:E6:5E:43:DD
Authority key identifier: C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
Certificate issuer: /CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Certificate serial: 0194BCAA0AB10634BC3F42A3FE99EAE68EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: x_MfTFLp6rWIMOOH0LOQkwaExBo.crl (hash: BCjk+PytU6YhrR888lV6OamudkHsmZvM6nrKUfjbhDU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0a:b1:06:34:bc:3f:42:a3:fe:99:ea:e6:8e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=b1e9e839f4ad65fd20736b313598a4a8e65e43dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:c3:bf:b9:18:d0:62:c3:1f:90:e3:d3:bc:
39:2b:a1:ae:6d:f9:91:57:41:a5:c4:af:8c:e0:da:
cb:b8:36:17:b0:0a:a2:b0:2c:f6:44:e0:ea:a9:70:
49:8a:d0:32:20:8b:61:22:da:1b:0b:bb:c9:96:e0:
d8:5a:b4:7b:6a:c4:e8:f7:fb:a5:5f:9a:78:22:b6:
df:a7:fa:56:69:99:98:7d:a1:fd:b0:bd:3b:73:40:
9f:ae:62:ac:4f:2c:0f:3e:84:3f:2c:61:8a:67:83:
f7:73:ba:35:28:dc:de:0e:e7:9d:7f:af:a3:7d:5d:
21:53:44:67:62:8d:b3:c0:61:77:67:f4:c9:5f:64:
40:d6:7a:b6:1a:44:08:fc:36:70:14:e3:d9:46:cd:
3a:7c:32:d0:a9:af:71:3c:fa:e2:5d:8b:9f:f5:4e:
f0:cf:2c:c4:df:4a:b6:61:d7:d3:89:8d:91:bb:c3:
b5:37:11:b2:92:80:ec:94:e9:b3:e9:87:01:05:b6:
32:ff:bb:78:56:ca:21:8d:f4:c5:c9:43:94:e0:b1:
18:a9:01:fc:11:82:29:f5:d2:83:4b:3e:21:83:9f:
6a:ef:e9:90:41:db:12:bc:bf:e9:91:bb:84:42:dc:
4e:cc:f0:12:d2:d3:20:69:78:30:db:5b:f7:c0:02:
aa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E9:E8:39:F4:AD:65:FD:20:73:6B:31:35:98:A4:A8:E6:5E:43:DD
X509v3 Authority Key Identifier:
keyid:C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:89:9e:78:a5:db:e6:06:be:32:51:ae:34:ee:e0:42:4c:c5:
13:e7:b0:a8:77:1d:6f:c0:cf:1d:d1:9d:7f:d3:9d:70:a3:21:
cc:10:8d:18:b3:cd:b4:ed:a7:fa:e5:53:aa:8c:15:dd:f5:01:
cf:84:2f:c0:7e:b4:58:08:09:3d:01:8b:e6:c5:a7:be:da:f4:
02:0b:0b:13:8d:e9:fd:d3:7b:09:0e:e9:15:f1:54:31:51:b9:
0c:9e:41:d1:13:b2:fb:99:5c:3e:53:ee:71:f5:f1:4e:81:b2:
bd:8e:0a:6d:02:ea:08:95:95:f4:9b:14:b5:f9:92:19:ec:32:
8a:32:93:fe:b9:71:95:54:fe:0a:90:cc:14:60:d6:d4:81:c7:
8b:30:aa:09:51:fc:9a:27:f1:86:bb:77:44:8e:b8:df:23:b0:
d6:f3:ee:51:17:e8:3c:59:93:80:04:66:81:91:1b:4e:03:a8:
72:9b:8c:e5:8e:52:4c:9e:c6:a1:13:5a:43:bc:d3:7f:09:99:
ce:45:da:24:03:9d:c7:e9:62:6a:f9:83:40:4d:02:a7:6b:a2:
d5:64:a9:2e:83:15:a3:21:8b:82:00:c5:b4:4d:d1:bd:a2:9a:
4c:6f:44:ab:e9:2a:00:f2:1b:d1:f6:fc:e2:95:f8:d4:cd:c0:
3c:d4:f0:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgqxBjS8P0Kj/pnq5o6/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZjMxZjRjNTJlOWVhYjU4ODMwZTM4N2QwYjM5MDkzMDY4
NGM0MWEwHhcNMjUwMTMxMTQwMDQ3WhcNMjUwMjAxMTQwMDQ3WjAzMTEwLwYDVQQD
EyhiMWU5ZTgzOWY0YWQ2NWZkMjA3MzZiMzEzNTk4YTRhOGU2NWU0M2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiHDv7kY0GLDH5Dj07w5K6GubfmR
V0GlxK+M4NrLuDYXsAqisCz2RODqqXBJitAyIIthItobC7vJluDYWrR7asTo9/ul
X5p4Irbfp/pWaZmYfaH9sL07c0CfrmKsTywPPoQ/LGGKZ4P3c7o1KNzeDuedf6+j
fV0hU0RnYo2zwGF3Z/TJX2RA1nq2GkQI/DZwFOPZRs06fDLQqa9xPPriXYuf9U7w
zyzE30q2YdfTiY2Ru8O1NxGykoDslOmz6YcBBbYy/7t4VsohjfTFyUOU4LEYqQH8
EYIp9dKDSz4hg59q7+mQQdsSvL/pkbuEQtxOzPAS0tMgaXgw21v3wAKqfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHp6Dn0rWX9IHNrMTWYpKjmXkPdMB8GA1UdIwQY
MBaAFMfzH0xS6eq1iDDjh9CzkJMGhMQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iOTAwZWUtMDAwNy00N2EzLTlmNmYt
ODY3MGZiZWEzOTg5LzEveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iOTAwZWUtMDAwNy00N2EzLTlmNmYtODY3MGZiZWEzOTg5
LzEveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYmeeKXb
5ga+MlGuNO7gQkzFE+ewqHcdb8DPHdGdf9OdcKMhzBCNGLPNtO2n+uVTqowV3fUB
z4QvwH60WAgJPQGL5sWnvtr0AgsLE43p/dN7CQ7pFfFUMVG5DJ5B0ROy+5lcPlPu
cfXxToGyvY4KbQLqCJWV9JsUtfmSGewyijKT/rlxlVT+CpDMFGDW1IHHizCqCVH8
mifxhrt3RI643yOw1vPuURfoPFmTgARmgZEbTgOocpuM5Y5STJ7GoRNaQ7zTfwmZ
zkXaJAOdx+liavmDQE0Cp2ui1WSpLoMVoyGLggDFtE3RvaKaTG9Eq+kqAPIb0fb8
4pX41M3APNTwOA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:55 2025 by rpki-client