Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
File: MFKpUR4ZpULAuyN4td6PT7RSHb4.mft (raw, json)
Hash identifier: nasnM/J42LczgtTWeb9A7/WKL+MYxBoyLHo/MrrzalM=
Subject key identifier: 21:1A:A8:E4:74:44:6B:A2:3C:31:D0:E8:66:6E:65:9E:2C:C9:37:89
Authority key identifier: 30:52:A9:51:1E:19:A5:42:C0:BB:23:78:B5:DE:8F:4F:B4:52:1D:BE
Certificate issuer: /CN=3052a9511e19a542c0bb2378b5de8f4fb4521dbe
Certificate serial: 0194BBCED7E04214C77826A0495FD36D220A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: MFKpUR4ZpULAuyN4td6PT7RSHb4.crl (hash: JzBQg3oHRtzxKJ0P8cxBawTrIKavBoFdY2d/kC0p8xw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d7:e0:42:14:c7:78:26:a0:49:5f:d3:6d:22:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3052a9511e19a542c0bb2378b5de8f4fb4521dbe
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=211aa8e474446ba23c31d0e8666e659e2cc93789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7c:4a:52:f3:fd:4d:7a:66:57:ca:8c:04:2c:
b6:b4:56:d3:32:a2:24:93:11:83:de:fd:81:5e:1b:
6d:41:9a:b3:b2:67:d9:83:e7:af:89:67:c8:2c:33:
64:f9:62:51:18:0e:86:c5:e5:e6:e5:dd:0e:f8:a8:
39:45:1c:90:d5:a7:d2:cd:3c:6c:3c:ba:d6:95:72:
8f:d0:b1:9a:a1:06:f6:08:31:61:18:0b:3f:a5:6f:
62:f8:9a:11:e6:1f:9b:36:a3:19:d1:d1:ab:f4:fd:
6f:72:96:bd:a0:bc:da:b4:ac:06:9e:31:30:74:33:
7c:be:39:4d:47:5d:d2:89:59:bc:9f:cb:6d:a1:22:
1b:03:f9:17:96:dc:07:33:74:42:cf:29:55:93:ac:
d2:82:bb:85:91:c2:88:e3:6a:6f:09:29:4d:23:f1:
08:8d:ea:98:09:3d:3e:49:a3:62:07:c8:bd:66:f1:
51:c3:0d:32:cb:6a:85:14:31:74:39:2c:89:f2:fb:
21:f0:d4:26:73:e9:32:3e:37:bd:2e:b4:e8:2e:55:
a9:e6:27:69:d4:cb:3b:cf:75:ae:0a:df:1e:6c:64:
09:f3:0e:70:49:38:b4:9f:1e:f4:4b:ab:15:0c:42:
e8:08:2e:fb:da:ae:9e:85:82:42:f1:d6:eb:68:d6:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1A:A8:E4:74:44:6B:A2:3C:31:D0:E8:66:6E:65:9E:2C:C9:37:89
X509v3 Authority Key Identifier:
keyid:30:52:A9:51:1E:19:A5:42:C0:BB:23:78:B5:DE:8F:4F:B4:52:1D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c9:45:b6:b0:79:79:46:b4:f4:7a:f1:9a:7c:dc:7c:b6:56:
f4:7b:b5:2a:0d:9a:a7:58:15:17:18:c7:5f:67:07:bc:65:77:
93:81:ce:55:3f:79:3a:68:35:30:62:9e:6e:ed:47:b7:fc:f1:
7c:67:42:8e:dd:88:27:49:79:cd:8c:0a:fe:ca:02:c7:e0:04:
9f:d0:dd:72:61:c4:41:71:a4:4e:88:c7:8a:c8:e8:72:5b:03:
c9:04:9c:1e:97:9a:6a:40:6f:74:20:b3:64:00:b7:a9:3f:e0:
7d:18:b9:78:7d:7b:de:d9:a4:eb:c7:cd:fe:e2:5a:95:e4:3d:
67:f4:80:a4:9c:e8:44:c1:bf:06:02:c2:50:81:c5:ae:2c:72:
c9:f9:18:08:f2:29:8f:41:63:5b:e6:a0:12:4f:f3:e8:79:a0:
18:05:e5:c3:cb:09:0e:27:02:5e:25:f9:a6:1f:cc:1e:aa:15:
22:26:8b:85:d9:27:cc:8d:91:2c:34:04:fa:4e:73:89:c3:ae:
40:65:10:97:a4:0f:1a:a0:d8:24:42:f6:ad:17:f9:a8:4d:57:
52:d2:8e:b4:cf:1c:d6:1e:88:8f:78:aa:d4:d0:20:dd:0a:cb:
82:05:26:8c:52:e2:3c:d8:f8:d6:7d:fa:76:84:2b:e1:da:e0:
e4:69:d3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:09:24 2025 by rpki-client