Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
File: 3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft (raw, json)
Hash identifier: TC7QnUhhrC0kFSNktU5e9J/OslQcPdI5XP0R9FFp1JQ=
Subject key identifier: 8D:34:74:24:0E:D3:94:F4:06:D3:C4:0A:F5:E3:8F:03:93:1F:8F:34
Authority key identifier: DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64
Certificate issuer: /CN=dcc50a2b974349948b04ee389b2a99d1754fb464
Certificate serial: 0194BD17FE7658AB844AB8B64CF0FDDC8967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
Manifest number: 1007
Signing time: Fri 31 Jan 2025 16:00:53 +0000
Manifest this update: Fri 31 Jan 2025 16:00:53 +0000
Manifest next update: Sat 01 Feb 2025 16:00:53 +0000
Files and hashes: 1: 3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl (hash: YsamE0J2n1UQKNH/Xgh3REtohcTNZSaL6eI9iv0P198=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fe:76:58:ab:84:4a:b8:b6:4c:f0:fd:dc:89:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc50a2b974349948b04ee389b2a99d1754fb464
Validity
Not Before: Jan 31 16:00:53 2025 GMT
Not After : Feb 1 16:00:53 2025 GMT
Subject: CN=8d3474240ed394f406d3c40af5e38f03931f8f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:74:33:e1:27:0c:28:1f:1f:7f:76:3d:bd:
08:95:aa:2e:6c:7c:94:18:06:ef:3e:8e:2a:54:27:
8e:01:34:24:52:ce:34:19:1b:76:fc:d6:70:5a:04:
c2:30:49:80:8d:67:59:27:3b:e8:7a:bd:38:d0:ce:
23:07:5b:89:3c:cb:b2:0a:df:a6:8b:15:c9:af:64:
f7:73:d6:1e:e6:b0:3a:49:32:6b:f9:cc:99:cf:d1:
af:af:8a:25:d6:20:9b:be:14:93:24:2a:26:ff:20:
a4:e4:85:1f:4f:50:d6:73:7d:76:57:9f:72:88:81:
47:8c:e3:30:1f:22:6a:3e:02:8e:87:29:c9:0d:b8:
aa:38:5a:39:ae:d9:92:64:29:a2:e9:04:a7:d4:d5:
27:51:de:82:be:3f:6d:f3:47:57:46:84:d1:ee:ba:
3d:ec:7a:0f:b5:97:43:c9:12:bc:38:21:35:5e:2a:
6a:0d:55:5d:00:ac:04:57:bb:97:06:17:93:16:a3:
de:f2:0d:62:6e:df:86:97:ec:ad:e7:00:7b:33:1d:
67:e4:4f:d8:23:39:a1:9a:64:65:9e:20:3c:2d:bf:
b8:59:87:c4:45:a1:77:9e:b5:09:ae:ca:67:b4:02:
23:ef:5c:8d:86:a8:86:8c:f1:3f:b6:92:5c:2f:81:
57:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:34:74:24:0E:D3:94:F4:06:D3:C4:0A:F5:E3:8F:03:93:1F:8F:34
X509v3 Authority Key Identifier:
keyid:DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f1:c1:89:d1:25:69:8a:8a:72:13:35:30:1a:ca:2a:50:ea:
c0:24:f4:31:cd:8a:bc:3a:5c:90:10:c7:41:2f:e9:07:84:7a:
4a:e5:39:93:7d:66:f2:b6:60:b4:bb:92:73:fc:89:c7:01:ca:
7d:a2:99:b8:67:29:0c:08:47:cf:e8:ea:26:7c:0d:92:f7:dd:
c1:99:fc:0f:a4:0d:11:b9:4d:38:74:51:4b:07:81:4f:90:f9:
45:83:53:73:f8:ca:3e:b8:75:ed:ba:05:61:43:f7:b7:86:96:
22:c5:67:82:a0:fb:eb:8c:ae:d7:24:b4:dd:d9:32:ef:4f:76:
fe:ad:e0:12:b3:a6:04:73:20:6c:70:60:e4:46:8f:45:19:67:
22:31:12:73:4f:07:b0:d4:28:cc:14:9d:91:4b:84:ba:78:3c:
67:4a:f7:ef:c9:b6:b4:55:10:69:6a:93:2b:6c:f7:1e:d1:5a:
6f:9b:e5:8a:5e:d6:ef:00:3c:ef:94:43:07:87:df:14:b2:7a:
57:fd:3c:ac:75:e8:d6:84:00:e7:34:43:55:fa:af:1a:ec:43:
e8:1c:13:05:1b:f9:9c:96:2a:e5:1a:0e:5f:02:82:27:67:90:
78:20:f0:d1:a3:0e:41:c8:2f:f2:ad:ee:d4:6d:17:f6:d7:73:
08:0e:46:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:51 2025 by rpki-client