Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
File: me-7KxZTQig3k33SfeNU5o-eAaM.mft (raw, json)
Hash identifier: 3NHd+zFL34axTBy1M3IT4s2c96qbPqpNaJgTPPuPKvE=
Subject key identifier: 18:79:E5:21:0E:40:37:3F:0A:29:5C:24:1F:C7:14:B3:C0:54:C0:D4
Authority key identifier: 99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
Certificate issuer: /CN=99efbb2b1653422837937dd27de354e68f9e01a3
Certificate serial: 0194BD175C75738FE36A5F99166B12FB4950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: me-7KxZTQig3k33SfeNU5o-eAaM.crl (hash: CSptYkDi/w91veyRAqIwpnuVvgW2DHXtPBTQI/5Ytj8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5c:75:73:8f:e3:6a:5f:99:16:6b:12:fb:49:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99efbb2b1653422837937dd27de354e68f9e01a3
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=1879e5210e40373f0a295c241fc714b3c054c0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:8f:74:4a:b6:d7:dc:6f:58:ae:92:3f:09:
86:04:d0:e8:0c:ad:bb:4f:2a:1d:68:61:e0:3a:fc:
c8:bf:05:5a:e8:f7:50:37:79:37:56:e3:dd:ee:32:
88:29:ab:a6:cc:4f:db:01:3d:d9:50:c7:db:58:cf:
7c:b8:f3:17:22:52:1a:96:33:b9:62:1c:8e:4f:21:
c8:7f:fc:49:83:4c:b4:07:f2:aa:a5:78:d1:d5:ff:
59:7b:ec:2c:33:79:1d:cd:d6:27:2a:66:4d:9f:77:
b3:d1:69:09:49:72:60:b5:d5:f2:02:cf:ed:55:74:
31:2a:f6:76:44:ff:33:86:f4:ad:31:55:fb:96:9e:
14:e2:61:43:c7:e5:13:72:4c:75:f2:65:38:b4:ea:
d7:d8:8a:f0:d9:eb:7b:83:e4:c3:98:06:7c:70:f8:
c2:13:b3:29:e9:ca:db:08:b5:59:1e:a9:57:12:49:
ab:a9:2b:99:c7:30:47:78:9b:21:b7:7b:82:fd:5b:
ba:3d:68:8a:73:a4:56:27:f1:55:d8:86:44:de:c0:
4b:86:46:65:ff:b4:72:81:0d:11:52:4a:18:b3:bd:
ae:b7:b6:30:60:a7:a9:ed:9d:9c:4c:52:d3:37:c6:
73:ff:25:2b:4c:ec:91:e5:d2:79:fd:39:6e:47:4d:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:79:E5:21:0E:40:37:3F:0A:29:5C:24:1F:C7:14:B3:C0:54:C0:D4
X509v3 Authority Key Identifier:
keyid:99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:31:fd:c1:80:6d:18:d3:e9:7d:27:d5:34:b9:c3:fb:80:0b:
ea:62:12:c2:f5:8e:a3:73:b8:ee:60:71:71:11:bd:b5:da:a8:
87:6f:70:5b:6e:4e:4d:0a:90:71:82:ee:58:88:75:3d:2b:d9:
c2:b2:53:57:73:52:69:63:36:4c:b1:ef:ba:30:27:be:c1:f2:
54:57:57:4b:09:ff:4b:a3:8a:b1:69:9a:6e:58:47:e5:54:dc:
1b:9e:40:76:4d:eb:62:b5:4f:71:ac:b8:36:6a:9d:4b:7d:6f:
2e:94:25:ed:77:75:f0:de:90:db:04:4c:59:4d:05:b0:93:ee:
0a:7f:77:02:96:db:d9:23:84:ff:49:8e:4e:ec:7f:e3:15:34:
d7:5e:d2:9f:45:c3:52:25:f1:1f:d3:55:fd:69:4d:1f:81:5c:
21:e1:4f:ad:17:ed:a7:f4:8a:1b:96:de:b0:a0:8d:a0:1e:52:
43:d5:9e:14:66:95:3c:11:c2:ae:cb:91:5c:38:53:92:a8:5a:
1c:fe:08:a2:86:c2:1a:8e:9b:4b:0b:49:49:75:62:26:42:64:
23:3e:0e:c4:fb:11:b0:9b:b7:6e:5c:52:c1:d1:0e:8a:8b:46:
04:9d:51:84:9f:d6:61:84:6b:4f:f9:15:61:75:85:d7:3c:37:
d8:bb:66:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:59:53 2025 by rpki-client