Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/65efb6-331a-4f41-b6bb-81d81fe4ffe1/1/mpjDTwEfE3rumlewtiRyWsHfLQA.mft
File: mpjDTwEfE3rumlewtiRyWsHfLQA.mft (raw, json)
Hash identifier: ZgL10X4DvMRiZQ8xXAl89X3me89f1x1L6E+AqglbXFQ=
Subject key identifier: DF:1A:79:2E:92:29:37:3B:6B:59:E6:9B:0B:A1:16:4E:3F:05:9A:B9
Authority key identifier: 9A:98:C3:4F:01:1F:13:7A:EE:9A:57:B0:B6:24:72:5A:C1:DF:2D:00
Certificate issuer: /CN=9a98c34f011f137aee9a57b0b624725ac1df2d00
Certificate serial: 0190E38A98D7FCF2856D41D4CD1EF30E4E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpjDTwEfE3rumlewtiRyWsHfLQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/65efb6-331a-4f41-b6bb-81d81fe4ffe1/1/mpjDTwEfE3rumlewtiRyWsHfLQA.mft
Manifest number: 0623
Signing time: Wed 24 Jul 2024 07:00:29 +0000
Manifest this update: Wed 24 Jul 2024 07:00:29 +0000
Manifest next update: Thu 25 Jul 2024 07:00:29 +0000
Files and hashes: 1: mpjDTwEfE3rumlewtiRyWsHfLQA.crl (hash: cNCwVaafhBAR8VTKqwwpGcrVKsYDhk2ZZR9GWknylis=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e3:8a:98:d7:fc:f2:85:6d:41:d4:cd:1e:f3:0e:4e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a98c34f011f137aee9a57b0b624725ac1df2d00
Validity
Not Before: Jul 24 07:00:29 2024 GMT
Not After : Jul 25 07:00:29 2024 GMT
Subject: CN=df1a792e9229373b6b59e69b0ba1164e3f059ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:c0:b5:00:e7:54:3c:79:a3:7e:96:08:77:
f8:ca:20:c3:1c:2f:1a:47:3e:aa:a8:ce:6a:de:01:
eb:93:a2:43:4d:ea:51:0c:d2:28:fe:f3:54:6a:e0:
6b:9b:ad:e5:e1:79:59:5d:85:10:36:14:f4:5a:e7:
7a:45:5b:94:88:34:4b:05:1d:19:3c:20:8a:7d:95:
85:b2:f3:3d:15:b1:a6:99:c6:0a:3c:22:54:00:5d:
db:82:13:88:40:b0:3e:84:2a:75:8a:9a:4f:e2:ca:
dd:bb:46:24:a5:85:07:51:57:25:3a:e7:25:01:eb:
b7:e8:6f:58:1d:a2:e3:e3:7d:b8:10:d3:a3:11:df:
89:12:74:18:2b:b1:af:f1:25:ce:0c:a0:1f:5f:15:
9b:94:cd:96:10:24:bb:48:48:1a:ab:f0:6e:b1:d8:
cb:a6:c4:27:c7:72:4d:69:e0:b4:bf:3a:35:60:28:
a0:8a:8c:54:d7:a6:c4:5c:e7:44:8d:5c:c2:ad:2c:
7d:d6:66:e5:8e:ca:d3:a7:dd:05:55:b1:4f:40:63:
58:b2:2e:d8:d0:51:bd:60:3e:83:51:ed:ae:f4:7d:
8c:a4:05:b3:76:6b:29:1b:a2:0e:e4:3e:3d:fd:ac:
55:92:8c:56:f9:05:20:12:88:5b:42:e2:19:2c:47:
ad:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1A:79:2E:92:29:37:3B:6B:59:E6:9B:0B:A1:16:4E:3F:05:9A:B9
X509v3 Authority Key Identifier:
keyid:9A:98:C3:4F:01:1F:13:7A:EE:9A:57:B0:B6:24:72:5A:C1:DF:2D:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpjDTwEfE3rumlewtiRyWsHfLQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/65efb6-331a-4f41-b6bb-81d81fe4ffe1/1/mpjDTwEfE3rumlewtiRyWsHfLQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/65efb6-331a-4f41-b6bb-81d81fe4ffe1/1/mpjDTwEfE3rumlewtiRyWsHfLQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:17:85:00:12:99:c0:5a:b0:c9:bd:f4:15:c5:c7:f4:18:c8:
bb:79:a9:7f:1d:78:40:61:62:07:5f:e7:e1:bc:71:84:93:ad:
2d:b7:3a:df:44:ef:56:88:c8:25:76:9b:d9:1f:a8:0a:ad:73:
e2:f6:92:38:72:a8:bd:ba:03:41:d3:5b:2e:26:ee:c1:8a:a2:
38:0e:75:49:42:37:2b:91:45:1e:37:09:82:cd:e4:70:80:04:
e7:1f:13:25:09:7b:65:b1:9b:6b:14:77:d7:3a:34:95:ca:ec:
c7:bf:80:5b:4e:6c:c9:eb:2e:1e:ee:c4:88:d6:a6:a0:f6:9b:
bc:89:7b:a3:5f:66:3f:ee:3e:99:a9:80:ac:84:b6:b5:24:08:
49:04:01:08:da:bb:15:27:72:8a:13:4b:99:a0:9a:65:68:ef:
83:a4:61:57:75:94:0a:f2:60:9b:46:d7:9a:05:54:50:f0:d2:
c5:13:a8:e8:ba:04:f9:9c:ca:f9:80:1e:d6:47:8f:57:2b:73:
24:de:d8:df:b9:d0:f1:de:db:2a:ef:2c:8b:71:b3:db:13:19:
09:9a:b6:ef:ab:6f:34:cc:28:11:3e:9f:72:b9:bf:e6:00:57:
e0:b6:c9:24:a7:09:98:57:81:f6:75:ba:ee:94:02:bd:30:da:
c7:c2:87:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZDjipjX/PKFbUHUzR7zDk4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOThjMzRmMDExZjEzN2FlZTlhNTdiMGI2MjQ3MjVhYzFk
ZjJkMDAwHhcNMjQwNzI0MDcwMDI5WhcNMjQwNzI1MDcwMDI5WjAzMTEwLwYDVQQD
EyhkZjFhNzkyZTkyMjkzNzNiNmI1OWU2OWIwYmExMTY0ZTNmMDU5YWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYPAtQDnVDx5o36WCHf4yiDDHC8a
Rz6qqM5q3gHrk6JDTepRDNIo/vNUauBrm63l4XlZXYUQNhT0Wud6RVuUiDRLBR0Z
PCCKfZWFsvM9FbGmmcYKPCJUAF3bghOIQLA+hCp1ippP4srdu0YkpYUHUVclOucl
Aeu36G9YHaLj4324ENOjEd+JEnQYK7Gv8SXODKAfXxWblM2WECS7SEgaq/BusdjL
psQnx3JNaeC0vzo1YCigioxU16bEXOdEjVzCrSx91mbljsrTp90FVbFPQGNYsi7Y
0FG9YD6DUe2u9H2MpAWzdmspG6IO5D49/axVkoxW+QUgEohbQuIZLEetWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8aeS6SKTc7a1nmmwuhFk4/BZq5MB8GA1UdIwQY
MBaAFJqYw08BHxN67ppXsLYkclrB3y0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBqRFR3RWZFM3J1bWxld3RpUnlXc0hmTFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82NWVmYjYtMzMxYS00ZjQxLWI2YmIt
ODFkODFmZTRmZmUxLzEvbXBqRFR3RWZFM3J1bWxld3RpUnlXc0hmTFFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy82NWVmYjYtMzMxYS00ZjQxLWI2YmItODFkODFmZTRmZmUx
LzEvbXBqRFR3RWZFM3J1bWxld3RpUnlXc0hmTFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQReFABKZ
wFqwyb30FcXH9BjIu3mpfx14QGFiB1/n4bxxhJOtLbc630TvVojIJXab2R+oCq1z
4vaSOHKovboDQdNbLibuwYqiOA51SUI3K5FFHjcJgs3kcIAE5x8TJQl7ZbGbaxR3
1zo0lcrsx7+AW05syesuHu7EiNamoPabvIl7o19mP+4+mamArIS2tSQISQQBCNq7
FSdyihNLmaCaZWjvg6RhV3WUCvJgm0bXmgVUUPDSxROo6LoE+ZzK+YAe1kePVytz
JN7Y37nQ8d7bKu8si3Gz2xMZCZq276tvNMwoET6fcrm/5gBX4LbJJKcJmFeB9nW6
7pQCvTDax8KHfg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:38:37 2025 by rpki-client