Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
File: Mk73breQdOacczAs5MLgr0f0Uwc.mft (raw, json)
Hash identifier: 01/kGnl0bzdkmbSRXx2ZfEjwQ3F8jFzsXrOOaoDWdiM=
Subject key identifier: 47:9E:70:5F:EE:8A:C9:F3:67:9F:6A:31:0D:FD:64:91:69:80:2D:38
Authority key identifier: 32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
Certificate issuer: /CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Certificate serial: 0194BD4EC9109096412BE9166005533592AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
Manifest number: 0272
Signing time: Fri 31 Jan 2025 17:00:44 +0000
Manifest this update: Fri 31 Jan 2025 17:00:44 +0000
Manifest next update: Sat 01 Feb 2025 17:00:44 +0000
Files and hashes: 1: Mk73breQdOacczAs5MLgr0f0Uwc.crl (hash: a/Lk7uU2ZfnSgDUx94K+aU0LpzwPeLt2P+vBswpkZc0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c9:10:90:96:41:2b:e9:16:60:05:53:35:92:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Validity
Not Before: Jan 31 17:00:44 2025 GMT
Not After : Feb 1 17:00:44 2025 GMT
Subject: CN=479e705fee8ac9f3679f6a310dfd649169802d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:0e:a4:a5:e1:e8:8c:b6:39:a1:8e:fb:41:
e1:bb:ac:06:f6:a0:59:f2:19:87:01:6e:c5:7b:81:
bf:b1:ff:12:f7:d3:71:99:f7:ee:3e:4c:4a:97:1f:
49:fd:4f:ff:81:d7:af:61:ad:f9:e5:7a:6a:1a:57:
d4:9d:cb:33:62:92:24:57:85:ab:7a:d6:9f:96:92:
60:99:44:77:d4:d7:ba:23:df:00:56:31:af:ec:26:
fa:05:e7:bd:21:ec:27:2a:0e:a1:c6:39:c4:09:34:
a2:d4:74:ee:01:bd:7e:33:23:ef:77:60:91:1e:85:
38:0a:43:c5:8c:14:50:82:1e:b1:f2:d9:11:74:d3:
29:6a:53:c7:e7:05:4d:3f:2b:a3:ed:6c:a5:4a:1b:
83:39:9e:d3:25:88:c5:36:8b:da:59:e6:cb:06:fc:
cb:e3:99:63:4e:15:84:e0:93:f7:bb:9e:a9:56:f3:
59:75:ca:17:01:17:d9:1f:15:a9:0a:25:9e:18:79:
64:0c:d2:d2:7b:03:e4:42:00:62:bf:44:10:71:a0:
95:69:a8:21:1e:f7:99:ca:1a:a4:8a:02:92:4d:be:
83:ce:77:8d:61:48:20:2f:50:24:52:f6:5e:f3:bc:
75:36:32:31:98:21:87:97:76:27:dc:ce:c8:26:22:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9E:70:5F:EE:8A:C9:F3:67:9F:6A:31:0D:FD:64:91:69:80:2D:38
X509v3 Authority Key Identifier:
keyid:32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d5:41:67:47:bb:93:e3:0f:6f:dd:c4:40:42:33:4c:46:b4:
50:f3:08:0e:6d:c7:be:99:2d:e4:73:0e:a0:27:e5:ae:2b:26:
2c:2b:65:7c:0b:17:09:40:52:f5:f3:d2:ed:5b:ca:a3:48:91:
ca:83:8a:7b:b7:80:4e:1f:95:d6:e6:ad:49:80:5c:89:a4:d0:
6d:88:06:40:aa:df:d5:12:6f:e7:04:e5:8a:a9:25:79:8c:16:
04:ae:3a:e9:1e:72:e4:f5:e5:9a:c6:51:75:30:1a:2c:82:ab:
37:98:d8:b2:f1:6d:cd:f4:6d:77:13:2f:47:5d:a7:a8:e3:c4:
7f:ab:fc:ba:60:a9:3a:b8:44:21:cb:d7:1b:e8:e4:33:5f:a7:
df:3b:f3:fb:86:35:ec:07:bc:be:3f:64:70:07:82:9a:8c:ea:
d2:b8:55:28:f1:69:cc:45:31:cf:1d:ab:d1:b2:b3:eb:2e:53:
49:6d:05:ce:0a:ce:96:9d:11:b0:93:06:11:a4:5a:78:41:c2:
9c:c0:f3:f3:34:a2:a8:51:0b:05:ae:f8:1e:48:05:7c:85:29:
a2:0f:fc:30:ac:b4:3b:db:aa:79:dd:1a:92:54:34:0d:8a:b5:
35:a9:9e:20:19:f8:7f:d8:b1:1e:17:08:de:a1:00:b1:ca:bf:
4a:4a:de:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:57 2025 by rpki-client