Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/mfrSUn6vqVIVqP7Weif608-y038.mft
File: mfrSUn6vqVIVqP7Weif608-y038.mft (raw, json)
Hash identifier: R1+xckX0MidlSvKbCpNNkeLQGUgz6HDF95OKxFOAKWs=
Subject key identifier: 05:46:9C:23:65:DB:03:37:F4:78:7E:51:0D:5F:FF:BE:F5:78:79:18
Authority key identifier: 99:FA:D2:52:7E:AF:A9:52:15:A8:FE:D6:7A:27:FA:D3:CF:B2:D3:7F
Certificate issuer: /CN=99fad2527eafa95215a8fed67a27fad3cfb2d37f
Certificate serial: 0193F21AD84A00569BE0D25EF19AC1531C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfrSUn6vqVIVqP7Weif608-y038.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/mfrSUn6vqVIVqP7Weif608-y038.mft
Manifest number: 086F
Signing time: Mon 23 Dec 2024 06:01:05 +0000
Manifest this update: Mon 23 Dec 2024 06:01:05 +0000
Manifest next update: Tue 24 Dec 2024 06:01:05 +0000
Files and hashes: 1: mfrSUn6vqVIVqP7Weif608-y038.crl (hash: VnODipO7u3zpUqXJNfelN/BWzC2cI8A4ubWtlJcFwjo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f2:1a:d8:4a:00:56:9b:e0:d2:5e:f1:9a:c1:53:1c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fad2527eafa95215a8fed67a27fad3cfb2d37f
Validity
Not Before: Dec 23 06:01:05 2024 GMT
Not After : Dec 24 06:01:05 2024 GMT
Subject: CN=05469c2365db0337f4787e510d5fffbef5787918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2b:a8:37:02:87:57:cb:55:79:d0:09:85:aa:
da:48:40:c4:d8:73:27:0e:3e:52:93:0b:68:fc:f4:
f4:3e:ad:24:90:a1:38:e6:1f:2a:3a:99:36:b9:e2:
f0:fe:9e:84:50:15:50:8f:86:5a:47:ed:f1:e2:e2:
41:5e:ba:22:8e:6f:66:60:99:72:43:13:3a:ce:59:
59:aa:78:5e:4f:08:b4:35:51:88:2c:dc:e2:e4:5d:
68:3d:0d:05:39:13:d1:1d:e0:ad:d3:22:41:3a:52:
bd:b5:ea:c5:81:1d:c0:fe:88:39:11:ec:c5:27:5a:
7e:1d:2f:13:fa:5c:e8:02:76:b5:b5:f2:32:aa:a4:
34:3a:24:70:36:7b:fc:78:f0:fe:e3:7d:5c:1f:b2:
b2:ca:fb:2f:ba:93:85:8f:6c:ee:55:db:aa:5b:89:
7f:72:99:aa:90:3e:1b:6c:2b:d3:1d:82:57:74:0e:
1c:eb:e1:0c:df:dc:29:98:a8:b7:b5:63:4a:f6:cd:
4f:21:58:2a:4b:d7:fb:12:40:c8:64:75:d9:99:20:
c1:58:2f:b7:c7:b2:67:ba:02:f8:06:19:9d:06:79:
38:52:d5:bf:c1:79:e7:c9:b6:5f:5c:3e:3e:ef:66:
04:cc:71:c5:9c:83:42:fb:a9:bb:1c:06:7a:da:76:
a8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:46:9C:23:65:DB:03:37:F4:78:7E:51:0D:5F:FF:BE:F5:78:79:18
X509v3 Authority Key Identifier:
keyid:99:FA:D2:52:7E:AF:A9:52:15:A8:FE:D6:7A:27:FA:D3:CF:B2:D3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfrSUn6vqVIVqP7Weif608-y038.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/mfrSUn6vqVIVqP7Weif608-y038.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/mfrSUn6vqVIVqP7Weif608-y038.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e9:e6:21:c8:6f:8e:87:69:fd:f7:75:01:f5:9b:e8:47:bc:
6f:e6:a3:26:80:c8:81:13:8b:00:d8:a2:f0:48:cb:90:a6:94:
ed:ae:5c:92:11:1d:f3:25:5b:2d:40:0f:82:24:ac:35:d5:6c:
f4:39:d2:9e:cb:7a:66:0e:d5:10:e2:19:c3:2b:52:20:8b:2f:
aa:55:4b:35:55:13:e2:a8:6c:07:45:2e:2e:a4:1a:31:4b:ec:
f5:1c:b8:d0:0f:e5:b1:78:8f:18:5f:66:f5:e8:cb:70:64:d6:
c2:bd:b2:4f:2b:d0:f4:50:f4:28:bc:dd:be:b0:36:31:60:6a:
5a:75:cf:fe:1e:cc:db:95:90:3e:40:0d:a8:10:54:2e:87:54:
a4:22:61:9b:f9:c7:96:62:1c:da:01:29:48:8c:44:bc:46:a6:
03:2f:31:53:f6:9e:f2:21:e7:58:34:f3:bd:b2:cd:c0:5f:51:
c3:03:f1:02:b6:f0:76:44:cb:33:82:7f:df:6d:16:b8:ad:9a:
3a:89:11:02:b8:46:b2:f8:b6:d1:2c:33:03:c3:d0:fe:f2:9e:
52:66:57:8d:bf:f7:88:d0:87:2b:24:cf:82:7c:2d:c1:a3:9e:
ed:92:ed:72:b1:29:b4:6c:a8:bf:55:c4:d1:28:ce:bc:84:fa:
c4:56:7b:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZPyGthKAFab4NJe8ZrBUxwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZmFkMjUyN2VhZmE5NTIxNWE4ZmVkNjdhMjdmYWQzY2Zi
MmQzN2YwHhcNMjQxMjIzMDYwMTA1WhcNMjQxMjI0MDYwMTA1WjAzMTEwLwYDVQQD
EygwNTQ2OWMyMzY1ZGIwMzM3ZjQ3ODdlNTEwZDVmZmZiZWY1Nzg3OTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCuoNwKHV8tVedAJharaSEDE2HMn
Dj5Skwto/PT0Pq0kkKE45h8qOpk2ueLw/p6EUBVQj4ZaR+3x4uJBXroijm9mYJly
QxM6zllZqnheTwi0NVGILNzi5F1oPQ0FORPRHeCt0yJBOlK9terFgR3A/og5EezF
J1p+HS8T+lzoAna1tfIyqqQ0OiRwNnv8ePD+431cH7KyyvsvupOFj2zuVduqW4l/
cpmqkD4bbCvTHYJXdA4c6+EM39wpmKi3tWNK9s1PIVgqS9f7EkDIZHXZmSDBWC+3
x7JnugL4BhmdBnk4UtW/wXnnybZfXD4+72YEzHHFnINC+6m7HAZ62nao6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVGnCNl2wM39Hh+UQ1f/771eHkYMB8GA1UdIwQY
MBaAFJn60lJ+r6lSFaj+1non+tPPstN/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWZyU1VuNnZxVklWcVA3V2VpZjYwOC15MDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80NTZlYWMtNjVkZi00ZGQxLWJmOWMt
MDEwM2E4OTljMmRlLzEvbWZyU1VuNnZxVklWcVA3V2VpZjYwOC15MDM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi80NTZlYWMtNjVkZi00ZGQxLWJmOWMtMDEwM2E4OTljMmRl
LzEvbWZyU1VuNnZxVklWcVA3V2VpZjYwOC15MDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+nmIchv
jodp/fd1AfWb6Ee8b+ajJoDIgROLANii8EjLkKaU7a5ckhEd8yVbLUAPgiSsNdVs
9DnSnst6Zg7VEOIZwytSIIsvqlVLNVUT4qhsB0UuLqQaMUvs9Ry40A/lsXiPGF9m
9ejLcGTWwr2yTyvQ9FD0KLzdvrA2MWBqWnXP/h7M25WQPkANqBBULodUpCJhm/nH
lmIc2gEpSIxEvEamAy8xU/ae8iHnWDTzvbLNwF9RwwPxArbwdkTLM4J/320WuK2a
OokRArhGsvi20SwzA8PQ/vKeUmZXjb/3iNCHKyTPgnwtwaOe7ZLtcrEptGyov1XE
0SjOvIT6xFZ7Cg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:34:51 2025 by rpki-client