Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/00c82c-09e8-48a6-b89f-35ab47762756/1/MX9rB1acJrecodurZmy0yfrDoSk.mft
File: MX9rB1acJrecodurZmy0yfrDoSk.mft (raw, json)
Hash identifier: tmG8O/fwLG3kxtkCJSNh/YP2pxQxqW2bDRycGjAWKCs=
Subject key identifier: E7:E1:E1:1F:51:B7:EB:B5:6A:6B:C0:C8:2E:2D:93:92:5F:D4:BC:97
Authority key identifier: 31:7F:6B:07:56:9C:26:B7:9C:A1:DB:AB:66:6C:B4:C9:FA:C3:A1:29
Certificate issuer: /CN=317f6b07569c26b79ca1dbab666cb4c9fac3a129
Certificate serial: 0194BD17D914E268D8727FD2DD7C243A3DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX9rB1acJrecodurZmy0yfrDoSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/00c82c-09e8-48a6-b89f-35ab47762756/1/MX9rB1acJrecodurZmy0yfrDoSk.mft
Manifest number: 0DA6
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: MX9rB1acJrecodurZmy0yfrDoSk.crl (hash: WG+d5Q+t6DHUgyesVSQybmvf4l1g5W+CqV11Odal2LQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d9:14:e2:68:d8:72:7f:d2:dd:7c:24:3a:3d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317f6b07569c26b79ca1dbab666cb4c9fac3a129
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=e7e1e11f51b7ebb56a6bc0c82e2d93925fd4bc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:c3:60:b0:bd:e9:a7:16:ed:40:68:68:e6:
28:67:74:b0:ab:5a:6f:17:2c:30:ef:f1:0a:cf:0a:
6e:72:19:8f:5d:e6:55:f5:e9:8b:47:52:00:e3:08:
30:b5:c9:14:49:4e:a2:fd:5b:76:e1:3e:ab:09:8b:
04:f9:3f:96:dd:8e:ea:1f:40:b4:9b:ed:78:fc:c9:
61:fc:2a:07:e5:cf:d6:ca:28:67:a4:43:ea:71:5c:
68:01:5d:41:f7:3e:51:d2:18:28:fd:c5:93:59:a0:
3f:73:0d:61:d8:94:57:bb:82:a3:f5:0e:2a:5f:d1:
f5:a4:1a:a7:81:b9:6b:f1:3e:b6:7d:cb:26:ad:9e:
19:f4:62:07:5f:de:b5:29:81:70:23:5c:88:cd:f1:
e6:cd:42:e6:5c:fb:21:0f:9a:e9:07:03:78:86:dc:
f9:4f:37:ee:63:af:31:75:29:35:49:da:fe:7f:7a:
40:7c:af:a6:ae:d3:a8:bc:93:1d:8c:3a:c0:53:25:
ea:60:c3:b8:c3:d7:a4:b1:e5:f0:bf:46:7d:88:49:
18:de:2d:c9:0a:08:cc:d4:25:f2:dc:ea:fc:23:d3:
5b:35:a7:36:f2:96:f3:4e:c2:8e:8a:27:6a:74:5d:
c5:44:d8:d7:b5:71:6d:67:90:e7:f2:7d:c5:ec:b9:
42:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E1:E1:1F:51:B7:EB:B5:6A:6B:C0:C8:2E:2D:93:92:5F:D4:BC:97
X509v3 Authority Key Identifier:
keyid:31:7F:6B:07:56:9C:26:B7:9C:A1:DB:AB:66:6C:B4:C9:FA:C3:A1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX9rB1acJrecodurZmy0yfrDoSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/00c82c-09e8-48a6-b89f-35ab47762756/1/MX9rB1acJrecodurZmy0yfrDoSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/00c82c-09e8-48a6-b89f-35ab47762756/1/MX9rB1acJrecodurZmy0yfrDoSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ad:c3:12:35:f5:83:f8:5e:4c:c2:23:2a:8e:f5:ed:0d:96:
fa:3a:4b:1d:0a:8b:29:bc:57:6d:5c:58:9d:4a:36:3b:9e:f8:
c2:76:dd:16:26:54:52:7b:88:bf:75:75:f3:20:0e:7b:b7:be:
f6:fa:49:3f:7f:ea:78:ac:f7:64:0a:00:70:c6:29:f1:56:78:
33:89:99:e9:9c:9d:0b:e9:96:21:51:60:b8:cc:da:b4:48:b4:
fd:d2:40:22:f9:cb:1b:81:ef:3d:f2:2d:31:c1:5a:b3:3a:c6:
ef:77:6f:91:75:7b:81:c9:15:1b:d2:ee:22:47:c5:f1:18:c0:
7c:3c:d6:01:82:22:c1:e4:9c:35:4a:a8:fc:c1:41:02:5b:bd:
0d:d3:24:fc:e5:5f:30:a9:47:38:2d:aa:fb:40:c4:46:ca:9e:
2a:a1:ad:e0:c6:49:1c:8b:91:50:e4:f9:c1:72:bd:d3:f3:9d:
21:12:2f:10:ae:2d:ea:b4:49:b3:54:6d:52:0f:bf:79:94:ba:
cf:c5:88:26:1f:71:7b:47:41:24:7c:ec:dc:c3:3b:bd:c0:d0:
7d:49:1a:98:53:7c:7c:29:44:20:e3:f3:22:2d:ed:4d:54:c1:
26:bc:22:51:3f:e6:35:d8:99:02:b9:b5:e1:34:63:79:f7:cc:
a2:77:21:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:44 2025 by rpki-client