Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
File: MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft (raw, json)
Hash identifier: +2uIevY2UJQLkBiG4sh99oHWRkTH/L9DWTYUdCxjpNc=
Subject key identifier: 97:A1:D1:1B:A2:7B:21:CF:E3:91:8E:04:81:58:36:97:EF:09:2A:32
Authority key identifier: 31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02
Certificate issuer: /CN=31db0f883cf94491451e908c6e682ace36b13602
Certificate serial: 0194BCA9860424256EBEEFAC2394EA3D5E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
Manifest number: 063A
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl (hash: 0fc4b2GlQRL1DZoP8tHIxIwHbsAXC/ba4f1aKGWvAWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:86:04:24:25:6e:be:ef:ac:23:94:ea:3d:5e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db0f883cf94491451e908c6e682ace36b13602
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=97a1d11ba27b21cfe3918e0481583697ef092a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:56:69:31:7f:7d:8b:d4:45:d4:e8:52:a7:
86:a7:16:de:97:5f:1a:e0:0a:b0:d8:fd:1e:d5:b5:
20:81:45:42:e0:c9:af:52:b9:f6:90:5f:3e:a7:3f:
6c:7b:31:00:eb:24:b5:53:6a:27:2d:cb:84:ca:79:
9e:ce:25:fc:f3:e9:bb:37:52:1c:83:56:bd:fd:1e:
2e:3d:23:60:7b:6f:66:e5:77:c8:cc:57:bb:b7:6a:
fb:1c:ee:e0:ad:39:14:99:fa:d2:f7:d3:9f:17:97:
88:58:be:4b:4c:5f:87:26:bd:fe:91:96:41:56:72:
26:42:84:da:e9:6f:19:a4:07:5d:47:58:34:16:74:
1b:a2:fa:01:f2:c6:96:cd:e4:f3:34:4b:32:12:b0:
a5:58:11:89:bf:38:68:50:d9:b9:fb:ce:cc:2d:e6:
bf:9d:67:6c:73:51:80:c5:d3:75:47:fa:83:b4:a0:
88:b7:39:39:68:5d:f9:f1:97:82:f9:ee:8a:b3:84:
65:4f:6c:d0:47:30:95:77:71:b0:a1:34:f8:40:61:
cd:14:45:58:fb:31:ca:4a:d9:c7:40:09:c1:1b:2c:
4b:3f:c6:35:07:93:35:f1:00:9d:e4:80:bf:2b:5b:
b9:8d:1d:3a:b5:d3:41:e0:a6:55:e5:bd:86:7a:8b:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A1:D1:1B:A2:7B:21:CF:E3:91:8E:04:81:58:36:97:EF:09:2A:32
X509v3 Authority Key Identifier:
keyid:31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:73:09:c3:de:6d:94:15:93:e2:bf:f0:73:76:f7:84:16:3d:
f2:58:f8:53:61:9f:ef:8c:0b:01:4b:4e:60:08:65:4e:3c:5c:
a8:f4:1f:2d:25:9f:43:06:5e:46:9b:7b:32:80:16:19:13:07:
ba:33:94:63:55:0e:84:3b:87:a0:e2:07:35:47:bc:9a:35:06:
b7:fb:72:cb:ad:71:45:3d:4e:9d:ca:26:e8:cb:29:69:67:c6:
df:9f:cc:93:76:0e:aa:fc:4c:fd:0c:7f:76:3d:20:80:33:e9:
35:37:58:26:d0:6c:cc:bb:d5:7c:42:a6:f2:d2:70:38:5e:a3:
8b:42:29:b4:ca:12:15:34:94:6e:2d:36:15:6b:2e:37:f8:32:
4f:ac:77:51:9e:7f:7f:44:b7:86:83:c1:ee:e2:98:a2:52:c9:
cb:7a:eb:e6:b1:de:27:fe:a2:be:e2:75:9c:05:00:f5:f6:d5:
56:58:1b:72:5d:c9:98:b1:81:b8:d0:95:3d:c4:52:60:9a:55:
4d:81:02:41:be:37:df:88:86:be:18:19:b8:b6:0e:29:16:9c:
fe:70:22:2b:7d:63:57:8f:fa:d5:98:d9:d8:1f:9b:0d:85:e1:
ce:5e:10:34:a3:3c:77:34:4b:e5:ce:05:2e:ea:28:82:31:f9:
35:29:cd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:19:30 2025 by rpki-client