Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c9c0d8-7013-46c3-9c28-434f9e0d750c/1/M2PXLN2TqwL-P3iNYh1xXZ79dpk.mft
File: M2PXLN2TqwL-P3iNYh1xXZ79dpk.mft (raw, json)
Hash identifier: D5QXazIonvD3uihbncIHCc+sQoFjPG5WO4l4vLW8ZDE=
Subject key identifier: A7:1D:BB:9B:1C:FD:C5:D9:0D:56:88:53:14:8C:BD:AF:E3:5E:5D:26
Authority key identifier: 33:63:D7:2C:DD:93:AB:02:FE:3F:78:8D:62:1D:71:5D:9E:FD:76:99
Certificate issuer: /CN=3363d72cdd93ab02fe3f788d621d715d9efd7699
Certificate serial: 0194BBCDC3222858A6E8F78BD665D5284B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2PXLN2TqwL-P3iNYh1xXZ79dpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c9c0d8-7013-46c3-9c28-434f9e0d750c/1/M2PXLN2TqwL-P3iNYh1xXZ79dpk.mft
Manifest number: 100F
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: M2PXLN2TqwL-P3iNYh1xXZ79dpk.crl (hash: JWDXnuQWDGQf2jEtHPkVkWHjgE6twLTuPDaXR53GzPQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c3:22:28:58:a6:e8:f7:8b:d6:65:d5:28:4b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3363d72cdd93ab02fe3f788d621d715d9efd7699
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=a71dbb9b1cfdc5d90d568853148cbdafe35e5d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d4:af:d1:fb:53:b7:fe:6d:9d:d5:de:80:63:
b2:cd:bb:86:2b:24:2b:11:49:48:86:f5:3c:bd:67:
5a:72:c6:96:44:a2:d2:49:f9:dd:87:f5:fe:c9:f0:
48:60:2e:81:a1:e0:0e:7b:bd:3f:e5:58:20:ad:32:
f5:25:96:e9:68:3f:4f:7c:fa:69:3b:44:92:ea:87:
cb:99:f7:a8:a3:ee:85:90:1a:af:21:88:53:b1:c1:
9f:0b:2e:d2:06:aa:9b:27:58:24:1b:2f:df:0f:40:
47:cc:25:30:d3:da:5b:54:e7:8e:37:40:5c:ad:a2:
69:16:97:b5:d9:6a:d5:7d:c0:95:c4:3e:e8:0b:cf:
a0:56:c4:dd:86:88:c0:b8:98:9f:65:36:e4:50:29:
b8:ac:02:a0:7f:71:b8:67:1f:ec:ba:00:8c:c4:49:
0c:06:80:b1:7f:6a:66:ed:18:c3:99:8c:34:5b:e8:
91:28:0d:79:10:e5:ce:a1:5b:f6:8e:bd:6d:e9:03:
fc:fa:17:ba:0f:cd:40:c1:dd:a5:2c:73:a3:3a:db:
6a:bb:fa:1e:24:6b:d6:e4:84:ba:bd:9d:3a:a3:92:
93:a5:94:2b:23:9a:32:3e:c7:2d:3d:55:71:34:44:
61:1e:be:bb:8e:ad:9c:12:72:0f:c7:6a:b7:40:48:
1d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1D:BB:9B:1C:FD:C5:D9:0D:56:88:53:14:8C:BD:AF:E3:5E:5D:26
X509v3 Authority Key Identifier:
keyid:33:63:D7:2C:DD:93:AB:02:FE:3F:78:8D:62:1D:71:5D:9E:FD:76:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2PXLN2TqwL-P3iNYh1xXZ79dpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c9c0d8-7013-46c3-9c28-434f9e0d750c/1/M2PXLN2TqwL-P3iNYh1xXZ79dpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c9c0d8-7013-46c3-9c28-434f9e0d750c/1/M2PXLN2TqwL-P3iNYh1xXZ79dpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c9:86:c3:47:c3:59:50:3d:cd:30:bb:35:2e:35:52:2c:5a:
1f:3f:dc:7a:fa:5f:a5:3b:ed:69:f5:6d:51:a0:76:4f:54:22:
97:2d:7c:89:ca:18:83:da:07:35:44:2f:b6:51:87:0d:eb:2b:
0a:0d:68:c1:5f:e4:45:70:a2:1a:e1:87:b9:48:a3:3d:ab:b4:
06:03:1e:2c:0e:c8:bc:c9:eb:98:3f:d9:f7:ca:89:20:4d:11:
3f:a8:6a:bf:25:57:64:f1:a1:cc:2e:9c:cc:d9:9e:90:dd:c5:
59:e0:43:5f:c1:0c:ce:1d:41:66:cb:d6:44:38:df:72:64:d3:
24:dc:1b:f9:91:b9:63:31:04:14:cf:a5:51:dd:c0:4f:ff:15:
ff:b8:12:41:5f:e2:46:93:f5:ff:ed:22:5a:f5:23:b3:23:fb:
ed:78:a4:e1:43:54:40:76:f1:0f:f6:8f:8e:81:03:8e:45:48:
dd:9b:d6:6e:0b:2a:d0:a1:4c:35:1b:3b:c6:6e:9d:9c:92:41:
72:f1:3e:52:2d:06:42:d6:aa:ee:0a:fc:af:70:95:2e:68:2a:
f4:ae:96:b1:d9:ee:be:e8:9b:72:bb:b8:f2:31:1a:b3:2d:15:
08:a3:5e:47:b7:e2:c5:75:4a:96:0e:f3:1b:63:17:33:6f:2a:
2e:ad:30:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:20 2025 by rpki-client