Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/339cbe-b85e-486d-8f5e-1ee24d88b357/1/mk6XscuztWK0k7LTD4yaKW6fE8E.mft
File: mk6XscuztWK0k7LTD4yaKW6fE8E.mft (raw, json)
Hash identifier: 8bJ4+WEC+ornT4oZaHkTFluYw0Bcv5Y9r9i0HxMmpVY=
Subject key identifier: 61:95:3B:01:70:8F:C9:FD:AA:2C:82:E2:E1:86:D4:9B:44:17:25:0B
Authority key identifier: 9A:4E:97:B1:CB:B3:B5:62:B4:93:B2:D3:0F:8C:9A:29:6E:9F:13:C1
Certificate issuer: /CN=9a4e97b1cbb3b562b493b2d30f8c9a296e9f13c1
Certificate serial: 019514A38F40C4033563FD888F8DC6986F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk6XscuztWK0k7LTD4yaKW6fE8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/339cbe-b85e-486d-8f5e-1ee24d88b357/1/mk6XscuztWK0k7LTD4yaKW6fE8E.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 16:00:17 +0000
Manifest this update: Mon 17 Feb 2025 16:00:17 +0000
Manifest next update: Tue 18 Feb 2025 16:00:17 +0000
Files and hashes: 1: mk6XscuztWK0k7LTD4yaKW6fE8E.crl (hash: o+v1q04A9X3X7peH+DUHfRHTRN12TSbHkJtUlb23biU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:a3:8f:40:c4:03:35:63:fd:88:8f:8d:c6:98:6f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4e97b1cbb3b562b493b2d30f8c9a296e9f13c1
Validity
Not Before: Feb 17 16:00:17 2025 GMT
Not After : Feb 18 16:00:17 2025 GMT
Subject: CN=61953b01708fc9fdaa2c82e2e186d49b4417250b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:cb:55:27:fc:10:a5:b8:44:1b:95:37:0f:
18:18:87:06:12:1a:fa:50:d8:c7:37:a6:6e:26:de:
e5:39:f6:24:d6:54:af:4d:42:a2:dc:2f:67:9e:84:
f0:da:30:82:ac:a9:cc:37:98:19:79:f2:03:53:2e:
53:a3:ec:18:49:1d:b0:7c:60:f2:6b:a5:35:aa:cb:
c1:d6:82:91:ab:b7:9f:49:a9:7b:75:c7:80:41:3e:
16:a2:53:13:20:26:b1:a6:da:bd:f0:11:23:e2:ed:
de:07:ea:64:91:e8:f4:b2:82:d6:77:04:b9:a2:4e:
8d:93:40:c6:48:b9:e1:79:23:15:f6:fb:76:e8:e7:
c1:e7:56:d4:b4:dd:2e:e0:e2:20:94:a5:d0:6a:b9:
2c:99:38:10:db:64:ff:23:11:a5:7b:89:ef:84:85:
75:01:7b:ad:a1:40:34:9f:cb:46:f2:61:4a:33:eb:
52:80:48:0f:8e:2b:ff:4f:e7:09:2a:a4:34:3f:93:
70:21:7e:aa:de:cf:33:01:f7:d9:77:a1:27:e2:a5:
60:bc:b4:37:7c:d8:e0:ac:91:f1:29:90:16:36:7f:
d4:8c:3e:47:f4:4f:c9:98:e7:74:ea:7f:fe:96:38:
7f:10:ec:81:23:a2:f6:4a:ea:33:5a:53:08:d4:5f:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:95:3B:01:70:8F:C9:FD:AA:2C:82:E2:E1:86:D4:9B:44:17:25:0B
X509v3 Authority Key Identifier:
keyid:9A:4E:97:B1:CB:B3:B5:62:B4:93:B2:D3:0F:8C:9A:29:6E:9F:13:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk6XscuztWK0k7LTD4yaKW6fE8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/339cbe-b85e-486d-8f5e-1ee24d88b357/1/mk6XscuztWK0k7LTD4yaKW6fE8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/339cbe-b85e-486d-8f5e-1ee24d88b357/1/mk6XscuztWK0k7LTD4yaKW6fE8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:dc:80:32:42:cc:7b:e3:51:73:5a:d9:0c:df:07:59:03:33:
47:ea:53:e7:b8:37:c0:42:8a:d5:05:db:43:d3:3b:3e:0b:f8:
41:44:bf:2c:48:bc:25:a1:c9:76:28:05:16:e7:cb:10:38:07:
68:6f:9a:f1:8a:50:a8:5b:25:8f:45:9f:4e:03:b9:66:27:1b:
35:37:5a:a4:11:aa:b5:7f:0d:f2:af:98:02:f0:b2:e2:7a:90:
06:6b:69:3b:34:c9:6c:d2:77:6c:7c:21:89:21:8f:6a:8c:67:
6a:00:c5:62:4b:0b:61:ac:6b:b8:7c:9b:db:23:8a:e3:b1:a9:
f9:e2:4f:ff:1f:f7:53:3a:ce:c7:6f:e5:f3:c6:75:65:d3:77:
ea:b1:ec:9a:76:d5:6a:36:d9:09:b8:48:f3:2c:52:83:c2:e8:
5c:36:b4:ff:a6:91:d2:01:af:73:a1:d1:aa:34:9e:a5:cd:58:
61:7c:54:b1:b3:f7:4d:8d:3c:24:e6:7c:03:ce:fe:bd:58:09:
3f:f4:5c:88:07:51:e3:fa:e5:03:ec:34:ba:33:28:61:24:85:
73:36:8b:35:c5:f9:e4:6a:d0:ce:fb:1f:4a:fd:af:43:04:b9:
09:72:88:3c:fc:71:72:66:66:c5:51:70:65:4c:5e:95:e3:8c:
f8:53:be:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUUo49AxAM1Y/2Ij43GmG81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNGU5N2IxY2JiM2I1NjJiNDkzYjJkMzBmOGM5YTI5NmU5
ZjEzYzEwHhcNMjUwMjE3MTYwMDE3WhcNMjUwMjE4MTYwMDE3WjAzMTEwLwYDVQQD
Eyg2MTk1M2IwMTcwOGZjOWZkYWEyYzgyZTJlMTg2ZDQ5YjQ0MTcyNTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpDLVSf8EKW4RBuVNw8YGIcGEhr6
UNjHN6ZuJt7lOfYk1lSvTUKi3C9nnoTw2jCCrKnMN5gZefIDUy5To+wYSR2wfGDy
a6U1qsvB1oKRq7efSal7dceAQT4WolMTICaxptq98BEj4u3eB+pkkej0soLWdwS5
ok6Nk0DGSLnheSMV9vt26OfB51bUtN0u4OIglKXQarksmTgQ22T/IxGle4nvhIV1
AXutoUA0n8tG8mFKM+tSgEgPjiv/T+cJKqQ0P5NwIX6q3s8zAffZd6En4qVgvLQ3
fNjgrJHxKZAWNn/UjD5H9E/JmOd06n/+ljh/EOyBI6L2SuozWlMI1F9zmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGVOwFwj8n9qiyC4uGG1JtEFyULMB8GA1UdIwQY
MBaAFJpOl7HLs7VitJOy0w+MmilunxPBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWs2WHNjdXp0V0swazdMVEQ0eWFLVzZmRThFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zMzljYmUtYjg1ZS00ODZkLThmNWUt
MWVlMjRkODhiMzU3LzEvbWs2WHNjdXp0V0swazdMVEQ0eWFLVzZmRThFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zMzljYmUtYjg1ZS00ODZkLThmNWUtMWVlMjRkODhiMzU3
LzEvbWs2WHNjdXp0V0swazdMVEQ0eWFLVzZmRThFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdyAMkLM
e+NRc1rZDN8HWQMzR+pT57g3wEKK1QXbQ9M7Pgv4QUS/LEi8JaHJdigFFufLEDgH
aG+a8YpQqFslj0WfTgO5ZicbNTdapBGqtX8N8q+YAvCy4nqQBmtpOzTJbNJ3bHwh
iSGPaoxnagDFYksLYaxruHyb2yOK47Gp+eJP/x/3UzrOx2/l88Z1ZdN36rHsmnbV
ajbZCbhI8yxSg8LoXDa0/6aR0gGvc6HRqjSepc1YYXxUsbP3TY08JOZ8A87+vVgJ
P/RciAdR4/rlA+w0ujMoYSSFczaLNcX55GrQzvsfSv2vQwS5CXKIPPxxcmZmxVFw
ZUxeleOM+FO+eg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:48:28 2025 by rpki-client