Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f28598-6754-45c3-b411-812d4d8501df/1/mlaEqibBq7oYwZHG6tbWnSkq-Yc.mft
File: mlaEqibBq7oYwZHG6tbWnSkq-Yc.mft (raw, json)
Hash identifier: nR0a8glVcyKd2PunhHDF5Os6tBzplNUQt1mJ7pXQ3Ts=
Subject key identifier: 4A:96:D1:0C:A8:71:D4:57:3A:39:A3:CE:E0:01:F6:3C:18:B3:19:DD
Authority key identifier: 9A:56:84:AA:26:C1:AB:BA:18:C1:91:C6:EA:D6:D6:9D:29:2A:F9:87
Certificate issuer: /CN=9a5684aa26c1abba18c191c6ead6d69d292af987
Certificate serial: 018C814E88AFF650067780A0B82054B9EAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlaEqibBq7oYwZHG6tbWnSkq-Yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f28598-6754-45c3-b411-812d4d8501df/1/mlaEqibBq7oYwZHG6tbWnSkq-Yc.mft
Manifest number: 02C1
Signing time: Tue 19 Dec 2023 09:00:56 +0000
Manifest this update: Tue 19 Dec 2023 09:00:56 +0000
Manifest next update: Wed 20 Dec 2023 09:00:56 +0000
Files and hashes: 1: 2vy1ArEN1tXDaMIBM0WdPrsrzAk.roa (hash: NnGfO3BGBL6B48Nr4B1/nm7Cz/vlrka/jzic9QDesLo=)
2: CQn4-yutIMCjkFr1h71OdaaJ1ck.roa (hash: ryylPCuel6i47FP52GMzDaV44P5Swd474qIWsiXCW3w=)
3: mlaEqibBq7oYwZHG6tbWnSkq-Yc.crl (hash: tB5rLYLt2M7wfwzj2mnpET3s6uUu/LPWkmTyPWh94LY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:81:4e:88:af:f6:50:06:77:80:a0:b8:20:54:b9:ea:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5684aa26c1abba18c191c6ead6d69d292af987
Validity
Not Before: Dec 19 09:00:56 2023 GMT
Not After : Dec 20 09:00:56 2023 GMT
Subject: CN=4a96d10ca871d4573a39a3cee001f63c18b319dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:4d:1f:e0:a7:27:67:7b:a9:29:b5:3c:40:
4a:7f:14:44:2e:c0:fd:29:e9:35:c4:ee:93:f0:23:
93:07:04:81:f9:a0:5e:bd:d6:a6:10:91:06:be:2b:
a4:c7:30:a1:5a:fd:0b:64:e7:e6:02:f9:06:f9:98:
00:bd:ad:12:26:81:80:af:29:79:eb:d0:4f:10:ba:
9b:f6:c0:1d:78:ab:85:ac:34:83:e8:12:05:01:7a:
f9:91:54:85:5a:1d:bb:4c:f7:56:57:b4:5d:28:a6:
07:09:4a:85:e5:4e:33:df:35:0d:7e:46:7b:7d:26:
a3:3d:b9:3d:3b:3c:1c:d9:76:19:76:b7:99:d8:40:
65:31:11:ed:e4:cf:4f:81:ea:be:b5:cf:80:27:38:
a6:5e:44:b8:cb:13:57:ab:ef:60:61:a7:b9:47:9f:
d2:91:0f:2d:86:85:ea:b8:6a:26:ab:3f:27:2d:7f:
1c:3c:f2:bf:b0:b3:a4:22:3c:7b:58:f9:0f:c6:7c:
9a:cd:53:99:11:ab:85:10:3b:05:cd:36:f0:fb:3d:
98:23:49:1e:1d:5a:05:54:c6:b6:c2:4b:a8:12:1e:
25:6e:06:20:1f:b9:aa:55:4a:8e:4f:a7:9a:29:b6:
cb:7e:68:8c:ca:5a:cd:8a:d3:64:15:57:3e:b4:5a:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:96:D1:0C:A8:71:D4:57:3A:39:A3:CE:E0:01:F6:3C:18:B3:19:DD
X509v3 Authority Key Identifier:
keyid:9A:56:84:AA:26:C1:AB:BA:18:C1:91:C6:EA:D6:D6:9D:29:2A:F9:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlaEqibBq7oYwZHG6tbWnSkq-Yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f28598-6754-45c3-b411-812d4d8501df/1/mlaEqibBq7oYwZHG6tbWnSkq-Yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f28598-6754-45c3-b411-812d4d8501df/1/mlaEqibBq7oYwZHG6tbWnSkq-Yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c9:9b:05:bb:2f:21:b0:64:26:41:6b:3d:84:e6:b5:52:d3:
13:f3:0f:0a:22:61:95:cc:93:8b:70:ad:81:70:f1:68:37:92:
81:c7:03:e3:a6:a9:ee:72:c7:b0:e7:d2:ce:63:71:d4:17:96:
31:89:b8:17:47:dd:57:3a:f7:0d:61:c3:6a:e4:d4:18:0d:d0:
1d:7b:66:90:48:58:7d:b8:72:8c:0b:9e:b9:7b:c9:62:41:53:
98:2a:71:45:6a:c8:86:0a:14:e7:4c:2e:51:19:c4:eb:d7:13:
01:83:18:88:b6:e5:df:73:83:05:25:3b:4b:80:77:14:e5:e5:
4e:43:10:0a:ec:7e:6c:4d:a2:e7:67:4d:72:d9:2e:1c:d1:be:
2b:64:c3:d2:22:f0:30:4c:f8:d0:81:bc:a3:e0:cb:0f:1a:bb:
a4:1b:2a:5c:c1:a3:8e:5d:dc:48:65:0a:a5:02:f8:a9:9f:8d:
85:df:aa:e3:f4:95:94:9c:3d:07:33:c0:ea:ac:64:23:8c:6a:
7d:a5:f5:d3:8a:55:46:7b:62:67:24:ea:8c:4d:6d:20:4f:6e:
de:7e:44:d0:66:b2:4b:49:96:98:07:5b:43:89:c7:b6:3e:37:
28:42:4a:3d:15:70:58:54:d2:b5:9d:fd:9d:a9:03:10:85:7e:
c9:02:d2:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYyBToiv9lAGd4CguCBUuer4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNTY4NGFhMjZjMWFiYmExOGMxOTFjNmVhZDZkNjlkMjky
YWY5ODcwHhcNMjMxMjE5MDkwMDU2WhcNMjMxMjIwMDkwMDU2WjAzMTEwLwYDVQQD
Eyg0YTk2ZDEwY2E4NzFkNDU3M2EzOWEzY2VlMDAxZjYzYzE4YjMxOWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW5NH+CnJ2d7qSm1PEBKfxRELsD9
Kek1xO6T8COTBwSB+aBevdamEJEGviukxzChWv0LZOfmAvkG+ZgAva0SJoGAryl5
69BPELqb9sAdeKuFrDSD6BIFAXr5kVSFWh27TPdWV7RdKKYHCUqF5U4z3zUNfkZ7
fSajPbk9Ozwc2XYZdreZ2EBlMRHt5M9Pgeq+tc+AJzimXkS4yxNXq+9gYae5R5/S
kQ8thoXquGomqz8nLX8cPPK/sLOkIjx7WPkPxnyazVOZEauFEDsFzTbw+z2YI0ke
HVoFVMa2wkuoEh4lbgYgH7mqVUqOT6eaKbbLfmiMylrNitNkFVc+tFrMtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqW0QyocdRXOjmjzuAB9jwYsxndMB8GA1UdIwQY
MBaAFJpWhKomwau6GMGRxurW1p0pKvmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWxhRXFpYkJxN29Zd1pIRzZ0YlduU2txLVljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mMjg1OTgtNjc1NC00NWMzLWI0MTEt
ODEyZDRkODUwMWRmLzEvbWxhRXFpYkJxN29Zd1pIRzZ0YlduU2txLVljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9mMjg1OTgtNjc1NC00NWMzLWI0MTEtODEyZDRkODUwMWRm
LzEvbWxhRXFpYkJxN29Zd1pIRzZ0YlduU2txLVljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMmbBbsv
IbBkJkFrPYTmtVLTE/MPCiJhlcyTi3CtgXDxaDeSgccD46ap7nLHsOfSzmNx1BeW
MYm4F0fdVzr3DWHDauTUGA3QHXtmkEhYfbhyjAueuXvJYkFTmCpxRWrIhgoU50wu
URnE69cTAYMYiLbl33ODBSU7S4B3FOXlTkMQCux+bE2i52dNctkuHNG+K2TD0iLw
MEz40IG8o+DLDxq7pBsqXMGjjl3cSGUKpQL4qZ+Nhd+q4/SVlJw9BzPA6qxkI4xq
faX104pVRntiZyTqjE1tIE9u3n5E0GayS0mWmAdbQ4nHtj43KEJKPRVwWFTStZ39
nakDEIV+yQLSNA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:46 2025 by rpki-client