Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
File: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft (raw, json)
Hash identifier: q3jnd0DqbNr//GrzHiJRnwd9Wy4h62EAcikcI4Gne8Q=
Subject key identifier: 5B:39:70:5F:5E:87:40:5D:23:0B:F1:E4:A1:7F:04:DF:F3:F4:C5:66
Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
Certificate issuer: /CN=31d7d9d29cecf8e59122233d716e6b050e718478
Certificate serial: 0194BCE090DA2D81B1E1C71660263A90E0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
Manifest number: 04
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl (hash: 7s94K9zxA1wqqI74/pRaRzhfs67Ta5KKi83cF2YghSM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:90:da:2d:81:b1:e1:c7:16:60:26:3a:90:e0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=5b39705f5e87405d230bf1e4a17f04dff3f4c566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:24:19:0b:ef:7f:52:e3:fc:f1:78:d3:36:09:
5e:82:98:23:7c:68:b7:40:7f:14:a8:6e:d8:a8:66:
00:74:00:9d:8e:c1:be:78:0a:56:84:51:4f:62:59:
56:07:6e:88:1e:a4:b7:68:9b:98:08:7e:d5:f8:0d:
11:ab:5c:76:35:11:3a:08:57:74:47:76:51:90:4d:
8b:af:0a:59:e8:ab:f0:a2:1b:16:e1:f9:ec:cf:b0:
25:1a:62:7c:15:7d:1c:b2:31:3b:7e:ca:5b:70:fc:
3b:33:59:5a:91:06:15:65:4e:67:78:dd:9a:81:de:
1b:8d:93:d1:68:48:a0:be:8c:37:00:31:01:04:d1:
fc:db:79:55:ec:b0:6c:5d:f6:c9:be:eb:cb:c1:74:
89:f1:cb:dc:bb:1b:c1:76:dc:09:95:ce:93:d6:a0:
f5:a1:f1:50:0a:9d:0d:3c:af:84:95:c5:1e:1c:9e:
3f:81:3a:40:ea:93:1d:c5:a6:da:db:2d:93:0b:15:
46:33:f9:10:1d:2e:7b:08:30:fd:27:62:dc:a9:8c:
28:32:6e:c0:b2:28:b1:3c:9d:2b:cc:5a:cf:b1:7f:
af:65:98:85:e5:8a:a4:71:c6:b3:89:70:83:dd:bc:
64:4a:73:8b:12:05:74:54:bf:24:72:b5:e4:d3:d4:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:39:70:5F:5E:87:40:5D:23:0B:F1:E4:A1:7F:04:DF:F3:F4:C5:66
X509v3 Authority Key Identifier:
keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:27:e1:06:2e:e0:d3:91:01:b3:83:b0:f5:70:d1:86:af:79:
0c:05:5e:c8:9c:55:90:ad:06:12:e6:77:1b:84:36:5f:98:a9:
0d:aa:09:e2:19:1d:e9:85:e3:f6:29:5f:0b:1d:a0:e3:65:14:
40:40:97:82:46:79:b0:64:f1:7c:d8:30:09:70:ba:e4:8a:e0:
05:82:54:71:06:f1:c7:9a:94:7f:ea:f2:86:c4:87:af:24:16:
d0:a6:2c:95:50:f2:f4:56:9d:99:b3:6e:a0:ec:40:f9:d8:83:
c5:91:9f:f2:3d:26:48:e8:b9:19:51:12:9c:b8:9e:d1:48:94:
fe:a6:84:e3:5e:ef:87:a3:2d:21:c9:17:89:ce:22:9b:30:e6:
82:71:79:88:67:39:e4:c5:5f:25:cb:ea:c1:19:b1:df:86:9d:
80:97:76:ea:40:83:7c:15:6a:37:30:79:00:20:b9:f0:ad:c9:
33:12:75:64:a0:25:f4:83:2a:7e:d3:7d:7b:a5:53:e6:3e:1c:
7b:9f:b4:4a:a5:db:31:72:7a:1f:1d:60:89:22:fe:65:8b:b3:
fd:91:aa:d6:59:86:bc:58:2f:64:9e:b1:6c:d8:0a:68:15:91:
43:a8:df:82:75:a4:35:3c:4f:37:f6:7d:bd:3f:86:3a:3e:be:
2f:2f:b9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:12 2025 by rpki-client