Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dfaa1d-c183-413b-b52a-4bab9f07e397/1/MIBAAletBvcQp6t-A5w7net3QNQ.mft
File: MIBAAletBvcQp6t-A5w7net3QNQ.mft (raw, json)
Hash identifier: TuUZFE1s5w8D+uVBdHAKboFhAlPz8EKd4MqKahdzNzI=
Subject key identifier: 32:C4:76:23:03:A7:60:E9:DE:86:0D:E6:92:88:B5:DD:33:00:02:EA
Authority key identifier: 30:80:40:02:57:AD:06:F7:10:A7:AB:7E:03:9C:3B:9D:EB:77:40:D4
Certificate issuer: /CN=3080400257ad06f710a7ab7e039c3b9deb7740d4
Certificate serial: 01957A90416AAE612CBDB077EC0D472B932E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIBAAletBvcQp6t-A5w7net3QNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/dfaa1d-c183-413b-b52a-4bab9f07e397/1/MIBAAletBvcQp6t-A5w7net3QNQ.mft
Manifest number: 48
Signing time: Sun 09 Mar 2025 11:00:29 +0000
Manifest this update: Sun 09 Mar 2025 11:00:29 +0000
Manifest next update: Mon 10 Mar 2025 11:00:29 +0000
Files and hashes: 1: MIBAAletBvcQp6t-A5w7net3QNQ.crl (hash: htI1Cik2uyzFx6EJ9vTdh0r5uFPTzy9gXcx8YQFwc/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7a:90:41:6a:ae:61:2c:bd:b0:77:ec:0d:47:2b:93:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3080400257ad06f710a7ab7e039c3b9deb7740d4
Validity
Not Before: Mar 9 11:00:29 2025 GMT
Not After : Mar 10 11:00:29 2025 GMT
Subject: CN=32c4762303a760e9de860de69288b5dd330002ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2b:9c:95:8f:ee:d9:ad:d2:9a:df:35:72:9d:
70:e9:e2:b9:47:66:c8:06:a1:20:9d:11:27:9a:f2:
6d:c0:b4:7f:3f:ee:a5:55:5c:25:ec:fd:cb:7a:78:
a8:74:aa:b0:91:9a:5a:9d:3f:15:6a:cb:77:aa:59:
bb:ae:6a:b6:de:69:ae:40:55:ab:1b:36:18:f5:03:
c8:1b:6c:51:57:37:7e:99:fd:0a:b3:4b:ec:f0:ee:
d1:4c:fd:df:8b:fb:d2:95:78:73:4d:22:f9:1a:c8:
35:a8:d2:72:69:73:c1:c2:19:50:76:a9:82:3f:16:
2d:59:e5:42:25:7d:4c:29:34:33:e8:87:4a:7c:05:
3e:0d:7a:3c:f6:e3:70:f5:ea:45:b4:6a:54:00:86:
88:34:d8:e9:57:f9:0a:fa:ad:e1:77:db:56:63:7f:
8b:3b:f3:84:33:24:36:68:ea:d6:96:59:9f:9d:ff:
f4:e3:de:b8:ea:25:27:6a:ed:fb:1e:a2:a4:8d:1d:
39:51:29:25:0d:5b:37:6f:fe:2d:26:d8:55:13:f4:
13:c6:15:1c:27:9c:28:ec:54:38:1c:f9:71:1f:af:
f3:3a:58:4d:59:98:4e:5a:c0:bc:5b:a6:09:7d:c2:
ba:ed:0f:e0:0a:70:b9:e2:85:27:74:40:5c:71:8f:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C4:76:23:03:A7:60:E9:DE:86:0D:E6:92:88:B5:DD:33:00:02:EA
X509v3 Authority Key Identifier:
keyid:30:80:40:02:57:AD:06:F7:10:A7:AB:7E:03:9C:3B:9D:EB:77:40:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIBAAletBvcQp6t-A5w7net3QNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dfaa1d-c183-413b-b52a-4bab9f07e397/1/MIBAAletBvcQp6t-A5w7net3QNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dfaa1d-c183-413b-b52a-4bab9f07e397/1/MIBAAletBvcQp6t-A5w7net3QNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0b:bd:c8:0d:d3:14:e7:9c:8d:d3:3d:78:2d:4a:10:be:c3:
14:b4:b7:68:9d:6b:92:24:12:1b:68:d6:1a:96:78:91:6a:16:
aa:5a:55:3b:7c:93:57:c7:f1:bf:82:96:56:9f:dc:0f:fb:a6:
a4:3e:81:a9:82:98:9a:f6:08:af:c9:ce:4e:af:93:ff:21:76:
b9:e2:a9:61:62:a1:ec:fe:2e:e7:42:c7:80:f7:79:e9:1f:52:
7a:f6:27:82:6f:89:d5:08:7e:88:e0:9d:5c:d2:ab:88:1a:73:
e7:1d:25:4b:50:43:12:18:af:79:25:d0:38:9d:f7:60:b9:6e:
0d:e4:f2:c4:c2:44:6b:6d:72:79:c0:35:65:71:b5:e0:cb:2a:
88:0c:43:30:54:9b:8f:bd:74:38:f3:c7:07:b7:3a:f8:52:c2:
73:7b:34:a0:41:76:b8:53:63:54:5a:51:a2:16:66:57:ce:67:
70:c0:bf:6e:84:6a:d0:c9:14:91:7e:2c:36:d6:0f:a3:f3:2c:
a5:7e:68:a8:a1:09:8d:51:a7:e6:5d:61:d2:22:6c:8a:d3:bc:
47:d0:32:a2:a0:e4:ca:9e:33:74:40:98:53:9b:62:d8:4c:43:
fd:e3:64:35:3a:76:af:4b:1c:b4:95:62:52:07:fb:db:0c:65:
3f:1a:b5:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV6kEFqrmEsvbB37A1HK5MuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwODA0MDAyNTdhZDA2ZjcxMGE3YWI3ZTAzOWMzYjlkZWI3
NzQwZDQwHhcNMjUwMzA5MTEwMDI5WhcNMjUwMzEwMTEwMDI5WjAzMTEwLwYDVQQD
EygzMmM0NzYyMzAzYTc2MGU5ZGU4NjBkZTY5Mjg4YjVkZDMzMDAwMmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCuclY/u2a3Smt81cp1w6eK5R2bI
BqEgnREnmvJtwLR/P+6lVVwl7P3LeniodKqwkZpanT8Vast3qlm7rmq23mmuQFWr
GzYY9QPIG2xRVzd+mf0Ks0vs8O7RTP3fi/vSlXhzTSL5Gsg1qNJyaXPBwhlQdqmC
PxYtWeVCJX1MKTQz6IdKfAU+DXo89uNw9epFtGpUAIaINNjpV/kK+q3hd9tWY3+L
O/OEMyQ2aOrWllmfnf/049646iUnau37HqKkjR05USklDVs3b/4tJthVE/QTxhUc
J5wo7FQ4HPlxH6/zOlhNWZhOWsC8W6YJfcK67Q/gCnC54oUndEBccY/ptwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLEdiMDp2Dp3oYN5pKItd0zAALqMB8GA1UdIwQY
MBaAFDCAQAJXrQb3EKerfgOcO53rd0DUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUlCQUFsZXRCdmNRcDZ0LUE1dzduZXQzUU5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kZmFhMWQtYzE4My00MTNiLWI1MmEt
NGJhYjlmMDdlMzk3LzEvTUlCQUFsZXRCdmNRcDZ0LUE1dzduZXQzUU5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9kZmFhMWQtYzE4My00MTNiLWI1MmEtNGJhYjlmMDdlMzk3
LzEvTUlCQUFsZXRCdmNRcDZ0LUE1dzduZXQzUU5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAu9yA3T
FOecjdM9eC1KEL7DFLS3aJ1rkiQSG2jWGpZ4kWoWqlpVO3yTV8fxv4KWVp/cD/um
pD6BqYKYmvYIr8nOTq+T/yF2ueKpYWKh7P4u50LHgPd56R9SevYngm+J1Qh+iOCd
XNKriBpz5x0lS1BDEhiveSXQOJ33YLluDeTyxMJEa21yecA1ZXG14MsqiAxDMFSb
j710OPPHB7c6+FLCc3s0oEF2uFNjVFpRohZmV85ncMC/boRq0MkUkX4sNtYPo/Ms
pX5oqKEJjVGn5l1h0iJsitO8R9AyoqDkyp4zdECYU5ti2ExD/eNkNTp2r0sctJVi
Ugf72wxlPxq1mg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 09:02:46 2025 by rpki-client