Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
File: mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft (raw, json)
Hash identifier: 3ZnWUnAN8pTXKBfTTVNQe8AL7IXgklc1kS8g0jQL084=
Subject key identifier: 95:24:57:B2:EB:7D:B2:9A:E9:99:E9:5F:81:10:82:B3:07:41:C4:E6
Authority key identifier: 9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
Certificate issuer: /CN=9a961a121c520054df4ce59e5592ac68b0506bef
Certificate serial: 0194BC3BC903094FC40C7106836700117D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
Manifest number: 041F
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl (hash: 5gqmEovgNry7qm6b9RGsgZCM9ivZ+LrK3fbfL/YslM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c9:03:09:4f:c4:0c:71:06:83:67:00:11:7d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a961a121c520054df4ce59e5592ac68b0506bef
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=952457b2eb7db29ae999e95f811082b30741c4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:87:9f:b3:b6:36:72:19:07:32:47:f0:27:
0f:27:ef:a0:55:e7:db:30:e7:e6:b9:e2:8d:fd:84:
8e:c2:30:ad:44:43:52:e4:b3:ab:bb:99:d8:e3:4f:
c0:72:3b:b4:78:5e:cc:23:bc:ac:96:69:4d:03:3e:
38:d2:70:60:85:da:a8:8d:98:1d:3a:fb:9a:65:82:
46:9a:41:e5:9a:60:7f:c3:e7:a4:04:ed:3b:f0:85:
24:65:5c:99:c6:2c:f1:6c:f4:a5:3b:72:7d:13:ed:
8f:45:44:bd:41:4b:a8:7c:67:a5:49:5c:0d:4c:32:
0f:fb:2d:dd:fa:57:bb:60:5a:0c:1e:71:25:74:e4:
36:de:48:18:6a:8c:0e:c0:f6:68:18:ac:90:0e:fa:
7d:13:c3:ad:90:a7:69:06:5f:ee:b4:05:00:cb:3b:
06:1d:7c:77:f8:5e:f5:a6:e6:1d:a3:47:4e:7f:87:
a7:73:26:1d:c7:52:71:52:e8:4b:72:ae:06:a4:b1:
91:ea:16:61:c7:63:ac:97:8b:76:f6:db:be:ae:8d:
60:96:df:91:91:02:f6:6c:44:54:4d:9d:87:cb:5c:
ba:27:ee:b6:69:26:e0:7f:21:7b:92:e7:fa:d5:e5:
73:35:00:78:99:c6:cf:8a:62:0e:65:97:1f:5f:11:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:24:57:B2:EB:7D:B2:9A:E9:99:E9:5F:81:10:82:B3:07:41:C4:E6
X509v3 Authority Key Identifier:
keyid:9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:50:f6:b6:ad:35:b9:1c:a1:cb:bd:b2:95:be:e0:fd:4e:7f:
84:41:90:ea:ed:bd:6e:04:8e:ac:69:63:41:ab:24:72:ce:97:
37:c9:01:9a:7e:e5:18:ed:1d:65:d5:d5:ce:5a:c7:af:bd:75:
8d:5d:aa:48:24:02:81:8e:78:99:eb:34:2d:04:bb:cd:21:b1:
d9:c6:da:ed:2a:cb:dd:a0:20:22:98:15:50:3a:a9:92:b0:e8:
61:07:15:79:76:c4:5d:43:69:28:a8:64:a9:6d:0a:93:7e:9b:
34:8a:88:28:4d:cd:9e:1a:fb:44:f8:29:91:42:d2:34:ac:c8:
34:43:d5:9c:53:cf:40:30:94:8a:70:52:7f:d4:9c:e9:be:04:
9f:fd:8e:82:f1:ad:50:57:6e:b9:cf:93:b1:a0:8c:1b:89:da:
0f:38:48:3a:af:8a:9e:f5:5b:2b:d4:00:68:1d:44:0c:28:f4:
ee:92:9e:fb:4e:4b:e8:01:6f:1e:a9:81:bc:ae:d6:9a:b4:4b:
ce:85:79:68:33:9b:cb:fb:a6:f6:bc:25:18:20:db:1d:b9:09:
06:be:69:c1:a8:2e:78:2f:b9:6d:f1:2a:95:8d:ff:1d:c9:d7:
86:3f:09:a5:5d:20:2a:2b:84:bd:bd:62:33:00:f9:da:fe:7e:
22:6f:48:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:34 2025 by rpki-client