Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
File: msLwFwWoWaHX3lAwr4LfmlLI7C8.mft (raw, json)
Hash identifier: t1q3TK9EOVCk42LZzsWemSN+FkJpu3bH08BQf+jeG7o=
Subject key identifier: 7A:45:2A:39:2D:C1:1D:B0:CB:DC:C0:6C:7A:18:84:5E:F7:D6:2F:5E
Authority key identifier: 9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
Certificate issuer: /CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Certificate serial: 0194BBCE9307440824B09B1798E892D0E96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: msLwFwWoWaHX3lAwr4LfmlLI7C8.crl (hash: oMfI8iShe76ol2sMzdcyvZ8W57AJ4uQkX2k9jQfNHXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:93:07:44:08:24:b0:9b:17:98:e8:92:d0:e9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=7a452a392dc11db0cbdcc06c7a18845ef7d62f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:9e:d5:bd:6d:97:c3:7c:9d:67:11:ab:03:
3e:12:e6:d9:88:97:30:1e:06:36:73:f8:42:c5:1d:
d1:cc:a8:26:b3:06:6a:bf:f1:5f:79:18:b7:4c:2b:
5d:48:ea:61:8c:c1:0f:40:42:79:ba:bd:93:22:b7:
84:d3:72:a2:c1:de:da:0e:72:81:37:6f:d7:87:21:
f4:aa:9f:85:ea:34:a0:28:3f:13:28:4b:51:14:32:
4c:71:90:bc:77:b9:22:4d:53:62:a5:9e:a7:a1:2d:
a9:4a:47:e3:10:6a:71:53:b6:11:52:df:97:29:b9:
ab:71:e9:29:2c:bc:d8:0b:96:61:7d:da:1f:bb:0c:
29:49:fa:66:ff:5f:c7:f4:62:2d:eb:e2:d2:b9:18:
19:90:17:c4:65:e0:af:f9:1d:9f:cf:c2:fa:00:05:
c7:d0:ba:6d:80:a0:da:ed:ce:51:ea:b8:0e:c3:bd:
c1:1a:92:30:d3:27:50:c5:30:d7:50:59:86:f4:b8:
f3:50:a5:de:0f:11:50:5e:c1:8b:41:d1:12:4b:85:
3c:1e:ca:d7:97:33:31:59:13:f6:65:7c:33:66:33:
29:b1:3a:f9:0c:1c:db:26:db:1d:9f:fa:85:27:92:
04:80:4f:ba:e0:d3:37:91:4b:9f:10:a5:b0:3f:4d:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:45:2A:39:2D:C1:1D:B0:CB:DC:C0:6C:7A:18:84:5E:F7:D6:2F:5E
X509v3 Authority Key Identifier:
keyid:9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:67:aa:c0:b6:31:34:a3:5d:0a:bd:34:e7:a2:af:34:b9:a6:
e2:9d:90:10:57:5d:21:63:d8:91:fb:bb:44:08:dd:25:a5:48:
58:1a:a0:61:b7:85:09:08:b5:89:2e:7e:d2:b3:1e:3b:0b:d1:
23:f7:2d:4f:2b:43:f8:ec:bc:d2:70:cc:6d:33:b1:74:b5:99:
68:5e:34:7c:41:cb:85:95:f1:75:c8:86:82:87:c4:e0:5a:c7:
dc:a8:af:e7:45:63:d9:a4:cb:d4:fd:65:8a:19:f1:ac:0b:c4:
14:06:16:9b:7d:8c:21:19:4a:48:61:2f:0f:7d:b3:98:e3:a3:
66:57:9a:da:4d:ce:f8:e6:3f:eb:2e:ad:73:99:d1:3b:52:1b:
7d:d7:3e:74:28:3c:60:ab:6d:13:f6:eb:b1:c7:71:ac:2a:27:
4a:b4:2c:82:84:e8:08:5d:74:9f:6d:e1:a7:55:5f:e6:3e:e0:
50:8d:5d:67:a6:33:0e:7d:e6:ea:64:c3:3a:19:9e:34:09:cb:
5a:e7:6a:8a:cd:ec:13:37:24:fa:82:6b:d1:86:87:0c:b7:39:
d7:80:b7:60:1a:9d:7b:74:dd:0f:64:db:eb:78:61:76:7d:5e:
9c:3e:c3:33:3a:12:e5:83:3f:c3:e5:44:24:a4:94:c8:f9:0c:
e6:df:cd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:43 2025 by rpki-client