Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
File: mfseX91w4MDmCIWjBYH-DAJBDX0.mft (raw, json)
Hash identifier: DP9C8X4sW9bxJskouU+MRXccyPCd8d+OUDG9kT1bd50=
Subject key identifier: 69:64:F6:D0:06:1E:F9:88:BE:8E:E1:21:C4:61:81:60:5C:2D:4F:35
Authority key identifier: 99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D
Certificate issuer: /CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d
Certificate serial: 0194BBCEEBC95166F51BD066D08FB3503DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: mfseX91w4MDmCIWjBYH-DAJBDX0.crl (hash: mZ2I1yo6NFFgJYTMuWNHxuVq1LTySEKd+QvF2P4igd0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:eb:c9:51:66:f5:1b:d0:66:d0:8f:b3:50:3d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=6964f6d0061ef988be8ee121c46181605c2d4f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9e:77:eb:a5:ec:31:2a:19:90:85:3b:1a:5f:
c9:c2:07:d7:e6:0e:e6:53:fb:29:8e:5f:0f:9e:7f:
64:18:61:30:78:54:33:ca:3a:c5:a6:4c:2a:18:75:
c1:2b:6c:68:93:ac:1f:20:e3:e4:96:46:c1:af:0b:
72:c0:b3:2a:dd:5c:69:39:a5:0b:6a:3f:93:ac:59:
d9:3e:f3:a9:cf:ab:b6:e2:e8:fa:fe:64:d1:cc:df:
a9:05:e1:59:da:7f:5b:88:a2:dd:c1:ba:e1:25:ba:
56:cc:0d:e6:36:89:21:1d:c7:ed:3b:97:a7:95:ef:
2e:d4:2d:e2:68:96:75:3e:5b:05:77:96:4c:39:c0:
96:06:a9:42:99:3f:1c:ef:a6:f7:bb:7b:66:f6:2e:
e9:93:59:be:24:0c:3a:01:cb:79:e4:84:d1:5f:8a:
7d:02:b4:a9:4c:60:d5:a4:76:4e:79:a0:28:08:49:
7e:bb:1d:25:86:ce:0c:a9:c6:06:08:fb:a4:8d:1b:
2d:ff:71:66:0b:7e:80:42:16:ab:dd:16:3f:c2:20:
36:5c:44:6f:be:a8:ec:38:b2:0e:f4:a7:2d:57:46:
bb:1b:dc:fb:24:4e:14:f8:72:bd:ab:8c:a2:28:7a:
f8:f5:22:dc:c3:bb:02:02:96:f5:2e:c4:96:95:e3:
f1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:64:F6:D0:06:1E:F9:88:BE:8E:E1:21:C4:61:81:60:5C:2D:4F:35
X509v3 Authority Key Identifier:
keyid:99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:af:5b:65:65:6a:63:68:72:bb:b0:0b:34:a8:fa:4a:c4:ce:
2b:a3:eb:03:3d:96:21:8d:d5:5a:fe:4d:90:08:ce:e7:c7:1f:
ba:7c:42:14:2e:33:3e:e6:df:0f:36:9e:09:96:c0:27:1a:30:
e6:75:61:a3:6e:5f:6d:12:e8:08:d2:7b:d6:e8:89:03:54:ae:
53:66:7a:91:33:36:2f:26:09:49:5b:6e:b8:54:c9:81:7d:1b:
7a:6b:76:96:a0:f7:27:26:cd:82:15:16:2d:cf:01:5c:77:67:
25:fb:ab:b0:e4:f8:ee:2f:c7:74:e9:66:77:e7:fa:64:8e:3d:
da:7d:d7:91:e3:95:cd:5a:a3:1e:1b:84:14:60:98:6a:1b:7c:
c7:a0:56:e2:5f:59:dd:55:3c:06:40:5c:b4:bf:aa:d2:20:64:
b0:92:3a:4f:a9:7c:9d:09:0a:1d:52:4e:47:d2:5e:46:b1:db:
ba:84:01:b0:75:c9:a0:c3:7a:b9:32:dc:2b:0a:40:d5:a2:0b:
f7:f8:67:5b:c3:8e:67:6d:6f:b9:24:f9:d2:a6:da:60:a6:8c:
d7:ae:26:e2:29:cd:46:d3:33:97:d9:cf:bf:ff:af:3a:8f:95:
20:88:29:82:d8:68:73:5e:1a:fe:a8:51:95:aa:66:4f:0d:91:
94:bf:ba:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:25 2025 by rpki-client