Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
File: mYf1lRU_EX4prIkHh2ZWpLin7GI.mft (raw, json)
Hash identifier: c492AxzcTxpc9Du+AcOEluRGMtokhotC/Ab1obrtkHQ=
Subject key identifier: 32:5E:A4:08:13:B5:6A:14:59:1E:CA:74:BD:34:1C:84:C0:B0:49:79
Authority key identifier: 99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62
Certificate issuer: /CN=9987f595153f117e29ac8907876656a4b8a7ec62
Certificate serial: 0194BD17E2DB40666FA54FD526B71BF4126F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
Manifest number: 0F12
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: mYf1lRU_EX4prIkHh2ZWpLin7GI.crl (hash: 3MTZQm90QPK18DB5jn/IjbwkwQq6wCkg+xzLyCULjSo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e2:db:40:66:6f:a5:4f:d5:26:b7:1b:f4:12:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9987f595153f117e29ac8907876656a4b8a7ec62
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=325ea40813b56a14591eca74bd341c84c0b04979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:83:ee:b0:0c:d5:63:12:2d:88:81:68:c8:
7c:fd:c5:b4:1f:49:02:17:cc:2d:78:cd:f6:dc:0d:
48:be:5d:aa:25:55:df:25:0a:02:44:3e:e4:07:6f:
b6:7f:cf:95:f5:ec:1f:fd:76:ec:1a:55:02:3d:5f:
0f:20:49:73:fa:99:9e:9f:6a:f9:e3:d2:eb:98:71:
db:82:75:d4:82:1b:ae:df:93:13:1e:fe:a4:fe:ff:
4f:c7:b9:f0:17:12:e5:96:33:e8:50:d1:6f:bc:44:
ef:96:29:00:58:4b:a1:c2:a9:e4:7c:bf:e5:f6:65:
54:fe:ef:6e:5d:62:d5:a9:4a:8f:3b:7e:5a:14:fc:
3c:80:10:72:54:13:d1:fd:1c:9b:35:7e:59:a5:ce:
e1:98:4c:dd:20:a6:d0:87:8f:6d:73:e8:ad:6e:fc:
b4:46:d8:41:d0:57:2d:ba:f1:a7:f0:5a:ba:f3:9e:
d8:e6:a7:fc:47:40:55:c7:40:b0:79:2f:78:2c:e6:
e7:d9:50:df:6d:c9:30:b8:e3:17:cb:62:86:6e:f8:
c5:b5:74:ba:03:f1:54:39:7f:12:e0:33:6d:30:d6:
11:54:84:af:77:b9:62:3f:a3:f9:bd:a7:61:89:1d:
0a:02:6d:e6:3d:06:ed:51:07:73:2b:d1:43:92:48:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5E:A4:08:13:B5:6A:14:59:1E:CA:74:BD:34:1C:84:C0:B0:49:79
X509v3 Authority Key Identifier:
keyid:99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:63:6b:7d:17:7f:2b:15:a7:4b:bc:41:32:f7:5f:c1:dd:e0:
75:5c:04:0b:c5:e5:c1:5b:3e:52:57:58:f1:ca:0c:fc:52:85:
89:3b:a6:82:3a:be:06:d7:b6:3b:d0:e5:46:d1:3f:2b:d0:04:
3c:9d:5c:5a:39:d7:36:91:8f:e5:e5:d5:bc:c2:2f:11:59:49:
e2:da:ad:da:06:b9:56:5b:8b:3a:6d:cd:77:90:00:74:af:f6:
32:de:63:52:e2:f4:b4:15:bc:42:7e:a7:16:aa:09:ab:7b:d5:
cd:ce:9c:7a:9a:64:5a:44:d3:fa:9c:ea:6d:a6:2e:ab:26:11:
b2:ca:ad:2c:a5:25:31:42:34:56:02:17:dd:cc:1f:bc:59:d8:
6f:6f:d9:39:c6:58:11:7f:22:50:a8:bc:52:95:c3:4b:32:d9:
d8:cf:2d:e2:3a:3c:8f:ee:cd:88:ad:7e:35:50:97:d3:a4:95:
fb:b8:e4:f8:ed:9c:d2:52:47:8a:ac:95:19:e5:da:2b:86:25:
25:1f:1b:14:09:35:c6:95:c6:51:45:3f:18:ee:90:a6:19:3b:
c7:09:44:52:1a:79:1a:3d:56:c1:d5:9c:47:ee:1b:2e:15:88:
0f:d7:ca:31:83:e5:10:5a:b0:49:be:a6:7a:50:c0:b2:7c:95:
56:97:a3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:31 2025 by rpki-client