Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/817ecd-ed5d-4ef2-afce-694016809fdc/1/mAIRdoBqZpOzecvaxP8d_MIJbFo.mft
File: mAIRdoBqZpOzecvaxP8d_MIJbFo.mft (raw, json)
Hash identifier: n1Mn6zsMA+JD41r8aq5lT9icFaKh0xtKsOC74sOspoE=
Subject key identifier: C4:6B:8F:A4:34:1A:2F:19:7C:C6:18:FB:5E:D7:C1:C6:B3:18:DE:B5
Authority key identifier: 98:02:11:76:80:6A:66:93:B3:79:CB:DA:C4:FF:1D:FC:C2:09:6C:5A
Certificate issuer: /CN=98021176806a6693b379cbdac4ff1dfcc2096c5a
Certificate serial: 01965D5F8228234F6AB62ACF86FC5B76AF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAIRdoBqZpOzecvaxP8d_MIJbFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/817ecd-ed5d-4ef2-afce-694016809fdc/1/mAIRdoBqZpOzecvaxP8d_MIJbFo.mft
Manifest number: 1501
Signing time: Tue 22 Apr 2025 12:01:02 +0000
Manifest this update: Tue 22 Apr 2025 12:01:02 +0000
Manifest next update: Wed 23 Apr 2025 12:01:02 +0000
Files and hashes: 1: mAIRdoBqZpOzecvaxP8d_MIJbFo.crl (hash: lM3W+X+dGqDTao8gJVRp4xKlUump1F6PYoSNqOcY1Mg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:82:28:23:4f:6a:b6:2a:cf:86:fc:5b:76:af:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98021176806a6693b379cbdac4ff1dfcc2096c5a
Validity
Not Before: Apr 22 12:01:02 2025 GMT
Not After : Apr 23 12:01:02 2025 GMT
Subject: CN=c46b8fa4341a2f197cc618fb5ed7c1c6b318deb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d1:9a:84:0f:f8:26:3c:7f:fa:cb:ab:61:bf:
b8:17:b9:89:55:ab:60:e2:88:ed:ac:13:93:75:a4:
cd:6b:85:08:23:d2:e0:24:b5:ca:97:10:29:58:01:
4b:0e:12:34:3e:53:14:ed:0d:f5:26:1c:fa:d1:64:
5d:aa:dc:79:3e:ef:76:bc:44:47:ce:93:21:97:34:
a5:0d:47:e9:a2:43:93:ad:d5:a7:0c:fd:70:b1:93:
fa:6e:2b:50:c6:7b:6b:22:b6:95:a3:55:10:03:6e:
a7:5e:c2:a9:d1:49:97:ea:22:40:9b:55:73:22:7d:
d5:52:79:28:70:08:39:74:29:01:55:d4:62:de:e3:
60:87:c3:5b:56:91:0e:30:c9:6d:03:b5:15:69:c2:
08:35:d6:04:b5:6d:78:e6:aa:e9:0c:73:7a:46:ce:
68:c4:8e:2c:4f:93:2c:c9:6e:72:94:e7:dc:31:65:
58:8b:25:22:d5:b9:e5:fc:e2:6c:40:a9:9d:00:e6:
56:a9:41:48:3f:ab:eb:d5:11:85:fb:c9:f7:ac:29:
cd:62:10:e3:30:db:cb:ab:47:af:13:76:1a:41:cb:
ed:cc:1b:2c:a6:eb:7a:82:c2:37:dd:48:f2:10:84:
b0:31:d3:0d:4e:b9:44:89:b9:fc:0d:65:60:6c:27:
2f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6B:8F:A4:34:1A:2F:19:7C:C6:18:FB:5E:D7:C1:C6:B3:18:DE:B5
X509v3 Authority Key Identifier:
keyid:98:02:11:76:80:6A:66:93:B3:79:CB:DA:C4:FF:1D:FC:C2:09:6C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAIRdoBqZpOzecvaxP8d_MIJbFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/817ecd-ed5d-4ef2-afce-694016809fdc/1/mAIRdoBqZpOzecvaxP8d_MIJbFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/817ecd-ed5d-4ef2-afce-694016809fdc/1/mAIRdoBqZpOzecvaxP8d_MIJbFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ac:0d:03:e3:ce:df:3c:93:b1:59:85:71:b0:f1:52:e8:ba:
e7:eb:d2:50:5b:e6:7e:f7:b7:c9:0a:8d:cd:7b:96:f8:19:00:
26:8b:12:d9:12:98:01:1f:42:19:a2:9b:af:a6:02:6e:e1:ec:
bf:fe:04:fb:e1:00:5b:92:79:02:9a:19:c1:67:ad:1e:3c:cb:
79:0d:d7:d6:d9:d2:79:72:22:0c:14:fb:90:a7:99:77:b4:d1:
80:2c:b8:c0:11:2e:c0:e7:fc:61:fa:56:a1:70:c9:6f:e8:b3:
ad:66:a5:b4:7f:ad:b5:93:09:2d:f3:d0:33:19:b3:0e:d5:06:
36:74:c0:f7:9a:31:99:9e:32:e7:9b:22:41:90:33:1e:2b:a8:
9d:77:32:e5:63:b8:f8:78:7b:56:74:0c:26:0f:15:9f:4f:ad:
39:fe:f9:91:ec:4e:0e:b1:f6:81:d1:75:d1:a9:12:9a:e5:f3:
1a:7e:63:cc:18:ce:c1:9c:b6:e7:52:c6:38:e1:e4:30:b1:eb:
eb:f3:cf:77:01:22:9e:b1:d5:89:99:52:47:45:10:a2:b7:00:
92:0e:d0:1d:f3:d7:9d:ff:5e:91:6f:f3:a6:ab:a7:35:3c:5e:
b9:ac:64:53:ab:36:ce:71:3c:37:90:3f:9c:8e:1d:4b:c9:b5:
89:6b:76:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZdX4IoI09qtirPhvxbdq+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MDIxMTc2ODA2YTY2OTNiMzc5Y2JkYWM0ZmYxZGZjYzIw
OTZjNWEwHhcNMjUwNDIyMTIwMTAyWhcNMjUwNDIzMTIwMTAyWjAzMTEwLwYDVQQD
EyhjNDZiOGZhNDM0MWEyZjE5N2NjNjE4ZmI1ZWQ3YzFjNmIzMThkZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dGahA/4Jjx/+surYb+4F7mJVatg
4ojtrBOTdaTNa4UII9LgJLXKlxApWAFLDhI0PlMU7Q31Jhz60WRdqtx5Pu92vERH
zpMhlzSlDUfpokOTrdWnDP1wsZP6bitQxntrIraVo1UQA26nXsKp0UmX6iJAm1Vz
In3VUnkocAg5dCkBVdRi3uNgh8NbVpEOMMltA7UVacIINdYEtW145qrpDHN6Rs5o
xI4sT5MsyW5ylOfcMWVYiyUi1bnl/OJsQKmdAOZWqUFIP6vr1RGF+8n3rCnNYhDj
MNvLq0evE3YaQcvtzBssput6gsI33UjyEISwMdMNTrlEibn8DWVgbCcvtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRrj6Q0Gi8ZfMYY+17XwcazGN61MB8GA1UdIwQY
MBaAFJgCEXaAamaTs3nL2sT/HfzCCWxaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUFJUmRvQnFacE96ZWN2YXhQOGRfTUlKYkZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84MTdlY2QtZWQ1ZC00ZWYyLWFmY2Ut
Njk0MDE2ODA5ZmRjLzEvbUFJUmRvQnFacE96ZWN2YXhQOGRfTUlKYkZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC84MTdlY2QtZWQ1ZC00ZWYyLWFmY2UtNjk0MDE2ODA5ZmRj
LzEvbUFJUmRvQnFacE96ZWN2YXhQOGRfTUlKYkZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKwNA+PO
3zyTsVmFcbDxUui65+vSUFvmfve3yQqNzXuW+BkAJosS2RKYAR9CGaKbr6YCbuHs
v/4E++EAW5J5ApoZwWetHjzLeQ3X1tnSeXIiDBT7kKeZd7TRgCy4wBEuwOf8YfpW
oXDJb+izrWaltH+ttZMJLfPQMxmzDtUGNnTA95oxmZ4y55siQZAzHiuonXcy5WO4
+Hh7VnQMJg8Vn0+tOf75kexODrH2gdF10akSmuXzGn5jzBjOwZy251LGOOHkMLHr
6/PPdwEinrHViZlSR0UQorcAkg7QHfPXnf9ekW/zpqunNTxeuaxkU6s2znE8N5A/
nI4dS8m1iWt2nw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:16:18 2025 by rpki-client