Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
File: MH-1ujHWxAxPLiMjPmB17q8tUwc.mft (raw, json)
Hash identifier: PoQauO5jXolWYFiWZNLgnMtTg32q47JB3VyDhQp5HsY=
Subject key identifier: EC:AC:02:55:B9:F7:3D:91:16:ED:5F:D5:5A:D7:0F:95:0B:47:FF:BD
Authority key identifier: 30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
Certificate issuer: /CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Certificate serial: 0194BBCE5929439D3F0C8DFDD60F39A22D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: MH-1ujHWxAxPLiMjPmB17q8tUwc.crl (hash: QaxcbetnbFFVDKbYYIf+xhk1Px6omcRc4e1QDFTuRyo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:59:29:43:9d:3f:0c:8d:fd:d6:0f:39:a2:2d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=ecac0255b9f73d9116ed5fd55ad70f950b47ffbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:00:d4:b3:26:e8:ad:06:23:cd:bc:f9:18:1f:
65:0d:e2:91:ca:7e:a4:05:43:b9:f0:02:17:aa:92:
91:db:78:a3:b4:e0:38:b5:88:8c:2a:27:25:fa:24:
a5:da:4a:60:6c:b8:39:44:29:3b:24:1f:32:75:3c:
f5:04:10:79:16:3d:23:7e:aa:f5:bb:cb:03:09:af:
5c:ba:40:ac:15:86:c8:0f:6d:38:b3:57:dd:5d:68:
ac:ab:78:42:db:7f:0e:62:2d:d1:44:a9:ea:d3:d3:
b9:b3:86:d0:5b:9d:74:13:88:0a:7c:82:fa:0a:b5:
a4:99:81:ae:23:b0:b5:e0:42:98:19:08:3f:8c:6b:
ce:ad:56:2c:45:26:0e:30:86:aa:0f:8d:c1:c9:ab:
96:73:c0:ec:05:d4:00:39:6b:5f:5f:93:be:8d:58:
24:a3:9f:1e:7e:df:78:f6:68:f0:75:2c:27:07:a3:
15:e5:a9:fe:a6:5c:d7:47:ed:0d:8b:31:c7:a6:92:
5d:ce:a7:f1:d9:2b:a1:17:66:aa:46:d8:66:bb:17:
23:dd:66:f7:ac:df:4d:c8:8a:03:df:47:e4:f9:58:
4b:d0:5f:55:6a:14:e3:d1:31:64:56:c2:87:f2:b6:
18:dd:80:0b:6f:90:4b:ca:1d:4d:e2:e4:26:1b:c0:
3f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AC:02:55:B9:F7:3D:91:16:ED:5F:D5:5A:D7:0F:95:0B:47:FF:BD
X509v3 Authority Key Identifier:
keyid:30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5a:43:71:46:85:e9:21:18:d2:f2:33:5f:21:bd:e9:57:ab:
c0:41:1f:13:7e:aa:e6:3b:54:e0:d5:d1:35:36:b4:f4:27:07:
c7:fe:83:6d:bc:4d:34:c9:50:fd:a7:2c:aa:84:52:a0:2e:aa:
52:ae:1a:4a:f1:04:13:ec:7d:d9:87:a1:c1:c5:b9:4c:03:9d:
f4:cf:12:82:46:d4:8d:7a:06:1c:64:b7:e3:96:8a:64:b6:b5:
0a:61:5c:7d:f6:6b:99:75:02:45:c8:19:ef:4b:ff:04:22:a8:
2a:f5:05:7a:92:a0:f0:c6:32:98:e3:18:c2:2d:a7:1d:6e:3b:
fc:66:d5:94:32:64:9b:60:13:df:9a:87:8a:d0:46:9a:38:53:
55:2b:da:c5:6a:1e:aa:1f:17:b7:78:71:ed:18:f8:75:ad:a6:
a2:53:d4:aa:0b:ac:4e:12:4e:c6:ba:1c:dd:26:52:69:d2:ef:
a5:98:c6:20:50:3c:32:02:a8:50:be:03:a0:c8:78:76:c9:49:
02:89:99:72:a9:9b:a7:3f:47:ca:89:b5:d1:03:4a:bc:c4:3c:
4c:c5:15:53:45:72:21:b4:2a:45:98:cf:37:ce:c5:be:51:10:
4b:dd:f1:d9:da:31:c6:b7:88:4f:cf:3e:47:6a:a9:7c:76:43:
68:54:0d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:49 2025 by rpki-client