Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/313b2a-73d0-4f60-99b9-8221a606c0a3/1/1mgN10jNpt4SlOof13ZbMmxnEOI.mft
File: 1mgN10jNpt4SlOof13ZbMmxnEOI.mft (raw, json)
Hash identifier: dDbHfdUIcyCcu78XRY7PEOl+1C9xKPuzjGWyo3EM/xg=
Subject key identifier: 4F:CF:57:56:77:6F:20:1A:62:8B:A8:CB:37:D0:65:B2:FA:D1:38:1C
Authority key identifier: D6:68:0D:D7:48:CD:A6:DE:12:94:EA:1F:D7:76:5B:32:6C:67:10:E2
Certificate issuer: /CN=d6680dd748cda6de1294ea1fd7765b326c6710e2
Certificate serial: 0194BBCE2C6F179FAEC1377CD42C201D1313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mgN10jNpt4SlOof13ZbMmxnEOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/313b2a-73d0-4f60-99b9-8221a606c0a3/1/1mgN10jNpt4SlOof13ZbMmxnEOI.mft
Manifest number: 0A59
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: 1mgN10jNpt4SlOof13ZbMmxnEOI.crl (hash: PsMwyqX45k9lGRGe848iDpwGnRQ/uKueQfmSMOxNgO4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2c:6f:17:9f:ae:c1:37:7c:d4:2c:20:1d:13:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6680dd748cda6de1294ea1fd7765b326c6710e2
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=4fcf5756776f201a628ba8cb37d065b2fad1381c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:d1:83:8f:34:3b:51:cc:f8:1f:41:00:f7:
01:43:23:80:8f:d9:21:2f:c8:6e:c6:d5:68:10:b9:
d9:fc:54:a6:92:08:b5:c5:f2:73:aa:50:27:8f:1f:
13:ac:00:16:6d:8a:a6:40:a3:fd:35:57:45:15:fc:
44:0f:f5:39:4f:ae:16:2e:8a:1b:b4:78:b9:13:f6:
bf:6c:54:a0:f8:09:81:60:09:92:9a:d0:6d:b9:3a:
aa:e7:33:27:33:a6:2f:0a:e8:15:68:db:4f:8b:95:
17:86:f7:91:5b:c3:fb:5e:1a:5d:6a:4a:73:95:90:
d6:66:25:10:a1:35:d7:db:65:2e:5c:5b:e8:56:57:
89:5f:d4:3c:67:33:43:7e:9d:86:d8:b2:cb:d2:f7:
65:97:0b:aa:bd:c0:46:48:3a:b7:fe:12:0a:d9:74:
39:3b:88:62:5c:8a:45:82:cb:59:fb:f9:51:e1:0a:
fd:74:99:81:eb:39:b7:96:41:ee:68:f4:c6:77:e7:
af:c9:88:d0:1b:31:29:cd:fd:39:4f:d6:93:3c:96:
6e:1d:b1:8f:9d:d9:95:77:6e:95:88:6b:f3:f8:b7:
7d:41:06:31:f7:f4:b2:c9:e4:bd:f3:fb:50:94:43:
3d:58:db:bd:62:30:83:fb:b0:90:f4:af:07:75:06:
ff:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CF:57:56:77:6F:20:1A:62:8B:A8:CB:37:D0:65:B2:FA:D1:38:1C
X509v3 Authority Key Identifier:
keyid:D6:68:0D:D7:48:CD:A6:DE:12:94:EA:1F:D7:76:5B:32:6C:67:10:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mgN10jNpt4SlOof13ZbMmxnEOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/313b2a-73d0-4f60-99b9-8221a606c0a3/1/1mgN10jNpt4SlOof13ZbMmxnEOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/313b2a-73d0-4f60-99b9-8221a606c0a3/1/1mgN10jNpt4SlOof13ZbMmxnEOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:19:61:1e:bc:0d:3c:7a:bc:1a:c8:d5:88:76:80:3d:0a:12:
7d:87:65:18:4b:00:69:9c:73:39:5e:67:11:45:21:1c:37:b2:
69:a9:7c:c1:e6:6a:a3:91:3a:a0:4d:af:47:d5:cd:4f:40:b9:
44:3f:d0:ca:c3:a5:ae:d5:bb:2a:59:36:53:ab:0c:61:0d:84:
e4:3e:83:7e:8d:5b:57:bc:a2:41:46:0a:29:5b:28:5d:b1:8d:
c6:b4:5d:7c:77:9d:b1:17:8f:4c:38:43:ea:ac:cc:0b:52:0a:
40:4a:bc:4f:e9:f4:d5:c7:2b:32:e3:d5:6a:c4:9e:b5:7a:73:
e7:0a:f7:64:8a:ee:0e:3a:4e:f1:47:68:09:47:b7:ac:29:3b:
0a:b9:d6:7c:43:fc:46:af:64:e3:6a:90:3b:9a:6f:01:50:04:
0f:6e:49:37:82:1e:76:f6:a7:82:c9:16:d8:e2:c3:a6:bf:c1:
20:f1:d1:ca:18:0e:f5:49:1a:fc:cb:c4:c4:d2:93:7e:18:62:
01:07:cb:7e:51:fe:b8:a3:82:db:81:a5:0a:63:97:7a:55:98:
5f:f3:6d:fe:b8:50:61:31:8e:65:91:f0:f4:ad:ef:68:c9:68:
25:70:09:ce:05:7f:6c:63:81:23:cc:86:1d:ae:fb:c8:5e:a5:
76:90:2e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:40 2025 by rpki-client