Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
File: mNtTOItvp7HlovTGhjq3Hxz7VRI.mft (raw, json)
Hash identifier: svdDzxl1sW3bkh3mALY262CxswooEBv/BaI/1NSQ1ec=
Subject key identifier: D1:2C:1A:94:D8:E1:21:C3:D2:BE:D4:D0:D7:BF:EA:09:F7:B2:9A:1B
Authority key identifier: 98:DB:53:38:8B:6F:A7:B1:E5:A2:F4:C6:86:3A:B7:1F:1C:FB:55:12
Certificate issuer: /CN=98db53388b6fa7b1e5a2f4c6863ab71f1cfb5512
Certificate serial: 0194BD857A496381B8F3AEFFE35B5DDDF616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
Manifest number: 0131
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: mNtTOItvp7HlovTGhjq3Hxz7VRI.crl (hash: wA+jnR0q06KOKxhbmysrkwWINtbFIE1vvplqZzrZmw8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7a:49:63:81:b8:f3:ae:ff:e3:5b:5d:dd:f6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98db53388b6fa7b1e5a2f4c6863ab71f1cfb5512
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=d12c1a94d8e121c3d2bed4d0d7bfea09f7b29a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:72:68:5e:7b:bc:20:a9:7a:45:a5:01:9d:
e6:e6:57:d6:88:78:16:2d:bb:d4:6c:9e:73:c4:89:
7f:57:fb:b3:e8:d3:3d:35:93:aa:f6:5b:8d:ff:1c:
31:bb:b1:36:08:d5:bf:43:08:bc:48:c4:f4:9b:b4:
41:24:6d:1e:dc:05:d5:3f:56:93:e3:21:0e:d8:9d:
f8:f1:2d:7f:50:30:0c:68:83:ee:02:31:5b:00:e7:
1a:d2:58:bf:75:5c:72:ba:c3:fb:e4:fa:d9:4e:49:
c2:e9:e8:b3:39:d3:4c:85:d1:72:60:9d:4e:9d:7c:
31:9c:a5:de:97:3c:0c:c7:3e:5d:2d:71:9d:db:45:
18:16:64:ff:47:56:e7:36:03:eb:05:0a:66:fb:86:
97:02:88:d9:f8:fd:38:40:2a:21:2e:08:d3:d3:f4:
e3:a7:6c:82:2e:af:f8:17:48:d9:b5:ee:9d:15:2e:
04:3f:a8:23:f3:d0:f9:6b:e9:2c:d7:d2:55:9e:77:
f3:b4:4d:15:fa:e6:27:4a:99:69:16:61:51:41:40:
81:d7:ca:92:3b:6d:ac:f2:2f:cb:27:80:c7:d8:d3:
f5:82:41:bf:03:59:0a:30:64:a1:42:18:db:1f:b8:
c4:e6:82:08:37:a7:f8:c3:56:d4:01:a8:c8:6e:13:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2C:1A:94:D8:E1:21:C3:D2:BE:D4:D0:D7:BF:EA:09:F7:B2:9A:1B
X509v3 Authority Key Identifier:
keyid:98:DB:53:38:8B:6F:A7:B1:E5:A2:F4:C6:86:3A:B7:1F:1C:FB:55:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c8:a3:1c:60:74:e3:c4:42:04:d7:dd:4b:50:75:a3:3d:ea:
f0:29:91:e2:59:db:5c:28:64:a6:c6:62:7f:96:92:64:d9:96:
89:3a:51:e3:83:d0:f3:db:ef:4f:2e:07:7b:cd:9e:45:be:d2:
b7:ee:2e:9c:91:52:e7:5c:f8:3b:c8:69:f2:7c:36:9b:b9:bc:
35:3a:9b:82:5c:eb:00:8f:a2:44:85:ee:3e:61:9f:b5:57:68:
37:24:00:8f:a1:e7:e1:30:a6:11:34:15:21:5c:25:18:e2:bd:
96:59:fb:24:af:31:bb:e8:6d:1d:c5:74:79:22:f3:ff:30:b2:
35:c5:8d:47:7c:8e:91:1b:5d:e8:58:28:41:d1:66:20:4b:35:
53:bd:e0:38:79:ac:88:fc:f8:79:b7:ee:49:1e:2b:7c:54:48:
72:47:18:07:30:f8:8c:3b:7e:49:f4:16:4f:c4:4a:7e:46:bc:
8c:ae:d5:d6:e6:98:22:5f:12:08:ff:5c:1d:86:b5:d8:85:dd:
f1:75:d2:c4:6a:e5:c5:ee:65:30:b8:b4:27:a1:da:88:ca:2a:
69:77:2a:07:ab:71:ff:b6:6e:03:04:fa:38:22:3a:5c:9b:b3:
71:d2:71:4c:c7:73:79:2a:83:ce:f3:82:77:48:0b:16:f5:fb:
9a:e5:ad:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:55 2025 by rpki-client