Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
File: mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft (raw, json)
Hash identifier: /PCfofJ3nhjdhPou7mn9RZidC86HedmAAHQx1jdGHzw=
Subject key identifier: 1A:54:A3:5F:D5:B2:75:AE:93:D4:C0:58:37:CC:B2:11:06:BA:1A:21
Authority key identifier: 9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
Certificate issuer: /CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Certificate serial: 0194BBCE6847D6308D87E9DF38AADDE814CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
Manifest number: 0A16
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl (hash: XaBaBVkfozMmuPGSxnHCMMbNaRHeKVrQHqm11n3laks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:68:47:d6:30:8d:87:e9:df:38:aa:dd:e8:14:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=1a54a35fd5b275ae93d4c05837ccb21106ba1a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:c4:3d:47:5b:86:2b:35:78:7a:71:31:1d:
d5:86:30:96:51:82:3d:9c:93:cd:68:fd:05:7c:25:
d9:cc:35:0f:59:2a:73:a0:63:4e:25:ff:f8:6d:b5:
85:e8:f5:9d:57:25:a5:2f:7e:0d:c3:1f:4d:08:77:
e1:e6:28:f3:44:6b:4e:c1:0d:7b:9f:1d:1c:e4:51:
91:dd:3b:a4:a0:12:d0:7b:d6:f8:ba:dc:6b:61:23:
ea:47:bc:51:22:eb:21:e8:dd:fd:59:1b:4a:6b:11:
a3:99:6b:14:30:a5:37:a3:8b:82:25:b5:db:4c:27:
56:89:3c:88:cd:6d:2a:30:dd:ca:8a:95:2e:f8:43:
a4:c3:d5:55:d5:62:f5:6b:d5:77:cb:15:86:58:20:
80:0e:00:4a:8b:33:27:e7:48:c5:fd:00:4b:a0:81:
da:a9:77:e0:13:b9:af:f3:2a:24:a6:92:9b:c4:e3:
df:03:79:40:6e:8b:4a:bb:ca:13:9e:73:46:0d:fc:
0a:e7:82:64:d8:e8:a1:1f:5c:c6:d5:83:ba:34:86:
23:32:f4:82:97:09:ae:fc:02:0f:dc:0f:5a:32:26:
e0:a0:96:6b:87:3e:f0:8a:5a:5f:26:70:00:46:28:
4a:0f:12:c9:21:57:01:e4:45:6f:49:03:ee:21:94:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:54:A3:5F:D5:B2:75:AE:93:D4:C0:58:37:CC:B2:11:06:BA:1A:21
X509v3 Authority Key Identifier:
keyid:9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c4:c0:7d:54:c3:1a:21:e2:8f:5c:42:19:5d:d1:d9:d9:49:
3e:4a:da:28:2e:66:90:ff:a7:a8:ba:46:e0:8a:fc:c9:2e:71:
21:4a:83:36:2a:57:15:e8:f1:1f:25:d1:36:41:e0:b4:4e:43:
a5:44:63:9d:64:f3:97:42:07:64:bb:9c:eb:ad:7c:b5:99:3c:
d1:38:eb:49:19:3f:6e:62:12:02:99:5a:f2:15:70:5b:a3:0e:
b7:8d:1e:76:8b:1d:11:17:65:3e:1e:b8:28:91:be:d1:fe:37:
59:24:2d:e2:c7:84:c4:c5:a5:8e:5a:a2:77:8b:90:9c:ec:d2:
89:a3:6e:15:7a:e0:7c:3d:07:67:27:6b:70:aa:c3:92:57:fc:
22:e9:0e:94:9c:83:d8:c6:14:e8:1e:be:f8:6f:ca:14:df:fe:
92:98:c0:54:b7:a8:30:3e:11:01:26:da:e1:02:78:67:35:ed:
51:5f:07:a5:8a:f5:5f:05:6b:ab:67:37:e5:e0:f8:ed:6f:85:
0e:fd:4c:32:2c:1f:eb:f9:d0:83:11:72:59:94:58:36:d4:6c:
f5:5b:52:99:05:44:a8:23:ae:7a:49:fa:49:f9:35:25:ce:0b:
ba:c1:76:e8:b2:5f:27:df:7c:48:96:b4:d4:2a:73:5a:06:ba:
8d:c3:23:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:13 2025 by rpki-client