Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
File: MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft (raw, json)
Hash identifier: +bcjSd3ATu6F85Jl1LEqd8tsE3aqvGYZZek/nwJb+9w=
Subject key identifier: 42:8C:B2:F0:A8:C5:30:F3:F8:B4:C1:5B:5E:09:ED:07:3F:1B:4C:04
Authority key identifier: 30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
Certificate issuer: /CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Certificate serial: 0194BD180215486C96CC4BA9CCA06B413DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
Manifest number: 0821
Signing time: Fri 31 Jan 2025 16:00:54 +0000
Manifest this update: Fri 31 Jan 2025 16:00:54 +0000
Manifest next update: Sat 01 Feb 2025 16:00:54 +0000
Files and hashes: 1: MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl (hash: bqEA4xl4xChuMGgZkDFj5O99nlyiB8uV3CyA8lhoSd4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:02:15:48:6c:96:cc:4b:a9:cc:a0:6b:41:3d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Validity
Not Before: Jan 31 16:00:54 2025 GMT
Not After : Feb 1 16:00:54 2025 GMT
Subject: CN=428cb2f0a8c530f3f8b4c15b5e09ed073f1b4c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:4e:72:b8:7d:8d:1a:0e:55:fc:3d:c9:dc:
b9:1e:a9:e7:53:74:9a:d1:05:63:64:3d:e9:5a:e1:
11:9e:9f:0d:d1:bb:bf:11:dd:20:e3:a3:fc:db:81:
24:69:1c:46:69:d4:e9:ef:21:73:5b:6b:be:d0:d9:
87:a5:04:54:7a:8f:d1:c7:a8:aa:21:e3:3f:d4:03:
6e:82:3f:58:71:02:c7:a5:b5:c3:a1:9f:17:58:5d:
da:31:13:21:54:32:ce:20:19:d9:c0:4e:4a:12:70:
97:a9:b6:7b:88:64:3a:3c:d1:ea:93:2b:4a:9e:95:
f1:d4:9c:84:23:de:57:7f:36:f3:a6:7d:9a:59:02:
a7:3c:03:f3:5e:86:8b:43:05:63:d9:38:e8:83:ae:
2f:f1:08:2c:29:33:e2:49:46:3e:fb:6b:ec:7e:f9:
10:71:20:af:59:e3:cd:23:85:52:90:3f:01:c0:7c:
6e:93:95:dd:49:be:1a:b3:13:f1:ec:00:81:2d:7d:
8f:7b:48:9e:67:99:aa:48:fe:d9:e3:4e:12:59:1d:
40:bc:ca:7a:b5:ba:39:bd:ca:69:4b:19:3b:28:1c:
11:4f:df:c8:56:25:8e:a0:a8:19:5c:fb:29:71:e6:
0e:91:0c:2c:5e:da:cc:00:f4:33:5e:65:6a:4e:dd:
a1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8C:B2:F0:A8:C5:30:F3:F8:B4:C1:5B:5E:09:ED:07:3F:1B:4C:04
X509v3 Authority Key Identifier:
keyid:30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:47:75:e4:c1:f7:8e:44:36:41:3c:af:f7:19:01:eb:b8:e5:
f1:3b:1a:71:2f:1d:41:21:39:46:76:62:8f:92:1e:6b:cb:94:
04:13:48:2c:b1:29:79:be:9d:7c:fd:f3:a8:2c:30:f7:96:a0:
fa:24:4f:8c:71:8a:64:71:b2:93:62:6f:ba:35:63:93:ad:34:
cb:1c:cc:fc:a9:f7:3d:d1:4a:f9:dd:5a:1a:8c:07:d2:0f:87:
d3:ee:51:32:01:5b:d5:73:5e:56:25:eb:4c:35:ce:37:8e:2c:
68:4a:bb:72:94:e8:13:1d:50:d9:37:ab:4b:d2:89:6a:cf:40:
00:d2:bf:f2:04:68:1b:53:9c:83:c8:19:9f:2b:e8:a3:1a:49:
10:8c:28:e8:e2:c2:6b:f4:05:db:ad:5a:15:4a:21:53:d1:a8:
28:f9:4d:52:de:63:32:f4:3b:0a:21:e2:2d:b8:ef:54:fa:7a:
80:4e:57:ae:6f:4e:0f:88:3c:1b:f2:44:e9:3d:08:e2:cc:fe:
50:74:c2:2b:b6:82:00:1d:dd:4b:42:29:c7:66:f9:12:7d:79:
5e:d5:9d:3f:ca:35:59:83:a1:18:bd:b9:23:47:95:1a:b1:58:
9d:39:d4:c3:61:7b:22:fd:a2:ce:a8:b1:b2:75:d9:32:4e:f0:
86:8b:c0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:34 2025 by rpki-client