Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c3911-a72f-402a-ae6d-edff5da63101/1/M7ZNwQqQkZAfYgo0aZnXEFpoa2w.mft
File: M7ZNwQqQkZAfYgo0aZnXEFpoa2w.mft (raw, json)
Hash identifier: OqNeFtl7JiIcSpMg/0MgaxaZpbBBonlMmX3S3SHAHSw=
Subject key identifier: CE:0A:42:E4:79:C1:8C:05:5E:5F:94:77:88:95:C7:20:D0:AC:75:D6
Authority key identifier: 33:B6:4D:C1:0A:90:91:90:1F:62:0A:34:69:99:D7:10:5A:68:6B:6C
Certificate issuer: /CN=33b64dc10a9091901f620a346999d7105a686b6c
Certificate serial: 0A5FC58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7ZNwQqQkZAfYgo0aZnXEFpoa2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c3911-a72f-402a-ae6d-edff5da63101/1/M7ZNwQqQkZAfYgo0aZnXEFpoa2w.mft
Manifest number: 08DA
Signing time: Mon 04 Apr 2022 09:16:04 +0000
Manifest this update: Mon 04 Apr 2022 09:16:04 +0000
Manifest next update: Tue 05 Apr 2022 09:16:04 +0000
Files and hashes: 1: M7ZNwQqQkZAfYgo0aZnXEFpoa2w.crl (hash: 4kNcBEGkTCQdBM+9V6aJAFAUxTCbKWlJ1BALDrD1r6U=)
2: MYBMkpm5gLbpJ6MXQRKqVBQ2yGw.roa (hash: XCY25uueEd7j5aX/SaCCf0qGxSJDPPjnvsMdUG/9ed8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174048655 (0xa5fc58f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b64dc10a9091901f620a346999d7105a686b6c
Validity
Not Before: Apr 4 09:16:04 2022 GMT
Not After : Apr 5 09:16:04 2022 GMT
Subject: CN=ce0a42e479c18c055e5f94778895c720d0ac75d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2e:30:88:0b:2e:52:9f:75:46:44:2a:df:2e:
67:b7:78:31:28:1f:47:8d:88:71:3a:da:eb:ba:1d:
7e:b5:9c:6c:dd:39:0f:61:b5:22:13:5d:3a:32:dc:
cc:78:38:56:c5:c8:de:ed:a5:5f:22:19:8c:8c:68:
e5:dd:8c:dc:04:6e:2a:85:60:3a:66:f4:82:99:e7:
40:f9:8e:95:76:10:f2:0e:40:4f:39:ae:3b:af:59:
d4:b3:2c:81:61:bf:08:62:42:af:43:03:61:6a:c1:
0a:76:f2:b2:cc:83:77:0a:71:97:85:60:60:3d:49:
b7:5c:25:a5:09:b1:69:89:6c:8e:ab:24:17:98:1e:
c5:2a:38:2c:79:20:c6:1c:bd:3d:ab:15:77:4a:ba:
36:f4:7c:fd:5f:41:48:9f:12:a0:2b:3c:50:b5:91:
77:4b:4a:1a:44:8c:32:a2:d2:11:a5:b6:84:1c:84:
b9:5e:9e:07:2a:6c:87:ce:f9:f6:7b:52:41:02:36:
88:ba:69:28:34:78:ca:47:f3:1d:79:c9:50:a1:26:
9a:e3:bd:15:81:cc:4d:c3:4d:7c:85:79:ae:ae:e4:
75:b5:b8:87:4b:2e:3d:cd:e4:2c:0b:c4:a1:1b:4a:
4c:7c:23:9c:82:66:f2:b7:7c:4c:02:49:67:9a:78:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0A:42:E4:79:C1:8C:05:5E:5F:94:77:88:95:C7:20:D0:AC:75:D6
X509v3 Authority Key Identifier:
keyid:33:B6:4D:C1:0A:90:91:90:1F:62:0A:34:69:99:D7:10:5A:68:6B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7ZNwQqQkZAfYgo0aZnXEFpoa2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c3911-a72f-402a-ae6d-edff5da63101/1/M7ZNwQqQkZAfYgo0aZnXEFpoa2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c3911-a72f-402a-ae6d-edff5da63101/1/M7ZNwQqQkZAfYgo0aZnXEFpoa2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f8:2f:93:7c:ad:72:12:4e:66:82:cc:8f:8e:58:e9:d7:8b:
d6:f8:ef:15:10:af:29:cb:33:75:b1:2c:6b:34:eb:34:49:e5:
00:20:05:a7:ad:79:c6:93:29:24:dc:46:2f:cc:a6:ed:77:2e:
bd:f7:12:45:04:3a:19:6e:9f:b4:ab:22:f4:bc:61:43:75:77:
82:6f:94:48:db:b5:96:0a:7d:18:5d:74:6d:6e:fc:19:6d:da:
97:72:8a:6d:83:1d:6e:5d:9c:6f:cf:fc:09:e4:d8:2e:a7:09:
39:1d:ca:ec:74:86:9e:d9:0a:04:a2:77:4a:39:61:c2:d3:f8:
7d:00:f0:fb:27:d7:45:cc:84:86:81:e5:13:27:cb:08:50:d2:
b0:f7:11:f4:42:51:d7:fa:4d:fa:75:95:5d:0e:78:3c:20:83:
a8:87:d1:99:a2:12:fc:e8:db:77:2b:aa:ce:ea:8a:63:a5:87:
23:a9:f4:df:03:fd:6d:2d:a9:d6:f2:7b:00:5b:e2:dd:47:31:
37:10:f8:e7:08:88:d9:68:eb:d1:aa:fb:7a:16:ea:11:e1:2a:
57:d2:87:1d:12:57:10:6e:22:6a:d3:6b:42:15:dd:72:ed:14:
2a:f9:39:39:1c:27:e2:7e:24:b1:1a:03:23:ee:69:af:bb:e9:
59:03:67:09
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIECl/FjzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
M2I2NGRjMTBhOTA5MTkwMWY2MjBhMzQ2OTk5ZDcxMDVhNjg2YjZjMB4XDTIyMDQw
NDA5MTYwNFoXDTIyMDQwNTA5MTYwNFowMzExMC8GA1UEAxMoY2UwYTQyZTQ3OWMx
OGMwNTVlNWY5NDc3ODg5NWM3MjBkMGFjNzVkNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKIuMIgLLlKfdUZEKt8uZ7d4MSgfR42IcTra67odfrWcbN05
D2G1IhNdOjLczHg4VsXI3u2lXyIZjIxo5d2M3ARuKoVgOmb0gpnnQPmOlXYQ8g5A
TzmuO69Z1LMsgWG/CGJCr0MDYWrBCnbyssyDdwpxl4VgYD1Jt1wlpQmxaYlsjqsk
F5gexSo4LHkgxhy9PasVd0q6NvR8/V9BSJ8SoCs8ULWRd0tKGkSMMqLSEaW2hByE
uV6eBypsh8759ntSQQI2iLppKDR4ykfzHXnJUKEmmuO9FYHMTcNNfIV5rq7kdbW4
h0suPc3kLAvEoRtKTHwjnIJm8rd8TAJJZ5p4lfMCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBTOCkLkecGMBV5flHeIlccg0Kx11jAfBgNVHSMEGDAWgBQztk3BCpCRkB9i
CjRpmdcQWmhrbDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L003Wk53UXFRa1pBZllnbzBhWm5YRUZwb2Eydy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTIvM2MzOTExLWE3MmYtNDAyYS1hZTZkLWVkZmY1ZGE2MzEwMS8x
L003Wk53UXFRa1pBZllnbzBhWm5YRUZwb2Eydy5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIv
M2MzOTExLWE3MmYtNDAyYS1hZTZkLWVkZmY1ZGE2MzEwMS8xL003Wk53UXFRa1pB
ZllnbzBhWm5YRUZwb2Eydy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAL74L5N8rXISTmaCzI+OWOnXi9b4
7xUQrynLM3WxLGs06zRJ5QAgBaetecaTKSTcRi/Mpu13Lr33EkUEOhlun7SrIvS8
YUN1d4JvlEjbtZYKfRhddG1u/Blt2pdyim2DHW5dnG/P/Ank2C6nCTkdyux0hp7Z
CgSid0o5YcLT+H0A8Psn10XMhIaB5RMnywhQ0rD3EfRCUdf6Tfp1lV0OeDwgg6iH
0ZmiEvzo23crqs7qimOlhyOp9N8D/W0tqdbyewBb4t1HMTcQ+OcIiNlo69Gq+3oW
6hHhKlfShx0SVxBuImrTa0IV3XLtFCr5OTkcJ+J+JLEaAyPuaa+76VkDZwk=
-----END CERTIFICATE-----
Generated at Wed Mar 12 13:34:32 2025 by rpki-client