Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
File: mogMjbFaBDs74WXi2DG6oEerAKw.mft (raw, json)
Hash identifier: UU1cil4yYELhVZQAzsMgDJ+9D3B8PX6lrTGVfdLepE0=
Subject key identifier: 2E:5B:5F:94:2E:7E:E7:9E:6F:1E:94:57:D7:86:F6:36:2E:57:65:E2
Authority key identifier: 9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
Certificate issuer: /CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Certificate serial: 0194BC3C5022E8E3B1E1531EA4C32C232071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
Manifest number: 0707
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: mogMjbFaBDs74WXi2DG6oEerAKw.crl (hash: PmLllhuP1eBGSaRbbaFgZOTeKyTW2pv2T+hG5UaI/Vc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:50:22:e8:e3:b1:e1:53:1e:a4:c3:2c:23:20:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=2e5b5f942e7ee79e6f1e9457d786f6362e5765e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:e5:60:20:28:0f:1f:07:ca:7e:7e:6c:1c:
8b:93:b4:dc:1f:c4:c8:f9:9b:89:81:bf:f1:b6:d6:
8d:78:09:e5:12:49:ab:7f:b8:27:75:f8:ae:de:15:
c6:64:2f:3e:59:c3:f0:bd:43:e8:40:cc:e3:2e:d1:
d2:29:fb:1b:34:8f:40:ba:be:e4:0a:4e:22:54:88:
db:74:8b:1a:d5:98:77:7e:43:18:0b:fb:1e:6f:b8:
24:2d:0a:12:54:48:70:a0:c0:d3:26:7c:14:21:b7:
d7:91:54:c0:be:fa:07:17:f8:09:a6:0f:be:6f:b9:
c2:61:bc:7d:00:4d:3d:68:1f:3d:18:ce:7b:b6:a3:
7f:91:60:84:73:c2:33:5a:96:2f:b4:97:22:ce:2d:
f1:3a:cc:8d:30:73:a7:73:18:e1:b6:52:26:7f:9c:
ff:09:74:14:2d:31:2e:4b:fa:0b:60:d4:b8:68:66:
4f:66:3c:59:b7:52:bd:73:f4:15:51:39:0c:59:be:
53:ae:5f:e8:cc:8b:f1:b8:03:b0:77:2f:cd:68:54:
62:da:96:b2:28:04:39:6d:31:1e:46:3e:eb:35:ae:
93:d0:73:d1:a6:51:2d:92:82:3c:b5:32:44:36:d9:
94:40:b8:2e:79:81:ca:77:9a:ea:15:d9:39:03:08:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5B:5F:94:2E:7E:E7:9E:6F:1E:94:57:D7:86:F6:36:2E:57:65:E2
X509v3 Authority Key Identifier:
keyid:9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f3:8e:04:fb:3b:27:ae:aa:01:15:29:df:39:6c:1e:48:6d:
c6:81:dd:7c:13:72:5d:2c:c1:89:df:5f:77:e7:e4:ad:9b:5f:
a1:56:c5:8d:6c:39:64:b4:46:40:d6:6b:86:a0:ee:7f:d1:04:
4c:77:65:e7:94:be:96:79:17:c5:ab:c6:63:bd:94:1e:71:07:
33:1c:c4:1c:af:7f:f6:68:13:22:17:d0:e0:14:aa:21:cf:f2:
69:d8:0b:46:b7:db:e3:7e:3d:72:34:08:ea:33:fa:bc:a8:bb:
ce:17:e5:ba:ca:cc:59:0e:97:3d:0c:65:5a:c0:43:76:1b:8c:
86:c6:43:a1:e1:de:e8:11:01:93:da:2a:65:27:b4:7e:7f:37:
45:15:4e:9b:d0:e6:a6:38:45:00:8b:9a:7a:c6:41:17:5d:1b:
35:a0:ff:cc:91:22:cf:9e:ce:8f:fb:b2:ab:ea:32:0d:0b:2f:
26:e8:91:09:c6:4e:b2:89:03:3c:0e:85:4c:76:0e:80:f0:fe:
e0:ec:f9:09:e2:ba:09:06:ed:05:9d:5e:6a:80:e9:b8:8f:4a:
72:0b:61:e1:0b:3d:e7:1c:6c:52:e1:c5:94:58:4d:2c:5f:f1:
0a:f5:36:08:39:e8:1b:ea:dc:12:87:1b:3c:dd:d3:7e:31:1f:
7a:b3:5e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:36 2025 by rpki-client