Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/16bf28-842b-48fa-894d-fbf7575aace2/1/Mh6FAflfcDdNRXa5sM1VW68fNas.mft
File: Mh6FAflfcDdNRXa5sM1VW68fNas.mft (raw, json)
Hash identifier: F0VPDM0Wu60NhawnrIC8WwldlbA8qEgQdM+i8Ds8Gkg=
Subject key identifier: 03:63:8A:8E:95:97:62:83:3B:CF:4F:71:85:75:C4:68:4E:D5:64:83
Authority key identifier: 32:1E:85:01:F9:5F:70:37:4D:45:76:B9:B0:CD:55:5B:AF:1F:35:AB
Certificate issuer: /CN=321e8501f95f70374d4576b9b0cd555baf1f35ab
Certificate serial: 0194BCA9DCBD0948A2C2E0ADDD91A0C90C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh6FAflfcDdNRXa5sM1VW68fNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/16bf28-842b-48fa-894d-fbf7575aace2/1/Mh6FAflfcDdNRXa5sM1VW68fNas.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: Mh6FAflfcDdNRXa5sM1VW68fNas.crl (hash: KOWogHOfyP/cEP0tiJLyiXUeHrsB3+G1BWk0Wu/goOs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:dc:bd:09:48:a2:c2:e0:ad:dd:91:a0:c9:0c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321e8501f95f70374d4576b9b0cd555baf1f35ab
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=03638a8e959762833bcf4f718575c4684ed56483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2a:f3:27:ad:bb:59:db:a0:ea:89:87:13:26:
c0:f4:e8:64:a3:97:6a:32:50:73:1a:0a:1d:ba:bb:
46:81:ba:2d:c5:27:12:14:ab:8d:1e:ae:f3:b6:35:
0f:9e:28:6e:b0:7a:14:ff:98:4b:61:fc:38:cc:05:
0e:44:ec:43:19:34:df:c0:be:c9:09:fb:6d:dc:59:
22:25:f6:0f:fb:a2:e9:10:35:a2:d5:fc:9a:4b:55:
f8:07:5d:7d:fa:f3:75:4d:cb:73:2a:5a:87:42:72:
67:3b:1d:f5:6f:69:85:1d:c9:76:04:ef:bf:a0:47:
1e:31:47:ef:52:12:c3:8d:99:9b:5b:6e:46:db:3b:
21:ed:79:da:e0:c6:80:92:c0:14:66:52:e7:ce:1a:
5d:63:9d:b5:9a:04:2b:f4:0e:32:d8:5f:71:a0:cb:
37:51:b2:39:e8:f3:14:2b:c7:d2:f8:26:f9:53:a8:
7b:67:6c:5f:b0:af:ae:42:c7:41:c4:7b:2b:44:e9:
10:89:ca:f9:a6:37:a6:55:d4:19:35:9e:fa:72:4e:
bd:32:03:c5:fe:e9:d2:fb:24:4b:a0:80:fc:12:e7:
6f:44:94:22:8b:a8:4c:6d:1a:82:4f:d3:15:3b:fe:
7b:cf:a2:ee:64:02:a1:f3:f2:0a:bc:a7:9a:d8:87:
50:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:63:8A:8E:95:97:62:83:3B:CF:4F:71:85:75:C4:68:4E:D5:64:83
X509v3 Authority Key Identifier:
keyid:32:1E:85:01:F9:5F:70:37:4D:45:76:B9:B0:CD:55:5B:AF:1F:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh6FAflfcDdNRXa5sM1VW68fNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/16bf28-842b-48fa-894d-fbf7575aace2/1/Mh6FAflfcDdNRXa5sM1VW68fNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/16bf28-842b-48fa-894d-fbf7575aace2/1/Mh6FAflfcDdNRXa5sM1VW68fNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:71:a5:96:d4:d2:2a:41:ee:e5:75:5b:89:48:d7:cd:55:ea:
52:03:8c:9d:a6:a8:c3:60:f5:fe:66:aa:3d:f7:80:38:46:2e:
b4:c9:c2:a3:a4:39:93:18:ec:ff:3e:e9:c8:2b:9d:82:2d:8e:
a5:bd:6e:ac:c5:d4:f4:b6:0b:ce:7c:0b:3b:cf:b7:cd:fc:3c:
d2:28:d9:69:55:bf:f4:48:46:0b:64:21:eb:38:e7:7f:d6:c8:
52:09:ff:ec:6a:14:93:20:04:d1:51:ef:20:34:37:c4:41:4c:
4e:77:d0:2a:79:cd:16:13:0b:49:f9:0d:7e:49:89:9c:f3:8a:
e3:67:37:18:46:f0:9c:0c:a4:8f:59:0e:01:67:f1:84:64:06:
cf:f0:f3:c5:8d:1b:6f:09:56:1b:e1:77:b0:2c:ec:f3:47:f7:
62:ae:67:48:b7:1a:fb:b9:ce:a2:fa:0e:96:72:73:a6:6a:71:
a0:eb:d1:00:62:1d:c5:10:c4:ed:4d:59:8b:f2:a5:74:c8:0b:
70:85:bc:7e:f2:ff:3f:85:3b:d7:a3:5d:e6:57:6e:ba:a3:b8:
6a:e5:8f:28:01:6b:af:48:80:31:31:18:87:4f:8a:4f:ba:92:
6b:65:15:de:59:e6:c4:c2:72:b2:85:9c:e2:bd:43:7e:24:4a:
e5:85:c7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:28:06 2025 by rpki-client