Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
File: MRRFNToII-2u8So6M1b6gJjhXqw.mft (raw, json)
Hash identifier: 3It65M8z5iD/zPITRQ7QnrYHXWiTdUy8ZteQqp9Xwro=
Subject key identifier: 10:AE:70:23:5F:DB:2A:CD:4E:72:F4:EC:E0:BF:ED:3A:E3:EC:C0:3F
Authority key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
Certificate issuer: /CN=311445353a0823edaef12a3a3356fa8098e15eac
Certificate serial: 0194BD17FA9BEEFE7F03B02C7B1BF76CE299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
Manifest number: 0AA3
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: MRRFNToII-2u8So6M1b6gJjhXqw.crl (hash: BufCPZeS2yDzq7ov/44fUwnniOOuhDlcwAkVxZGWAcA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fa:9b:ee:fe:7f:03:b0:2c:7b:1b:f7:6c:e2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311445353a0823edaef12a3a3356fa8098e15eac
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=10ae70235fdb2acd4e72f4ece0bfed3ae3ecc03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:63:fa:c2:b6:47:c4:da:15:07:29:f7:b5:
fb:0f:85:a3:4b:d7:1c:18:f0:cc:e3:04:6d:e3:73:
8c:77:66:3c:80:b5:39:94:40:87:08:4e:c3:25:2a:
db:d2:7d:1a:9f:46:f5:93:3e:17:36:cc:e8:0f:a3:
fc:39:1f:61:c0:a8:49:f6:c3:1f:d8:45:87:be:2b:
0d:f1:c4:7e:dd:54:f2:67:28:63:c0:1d:c6:4b:75:
d4:db:c4:21:45:fb:41:fa:66:86:e5:e2:b8:cf:6b:
a9:65:19:7c:f9:bb:dd:40:20:be:e3:5f:47:5a:2d:
d6:c7:3a:92:85:21:d1:e0:83:4a:1a:dc:0d:10:80:
a0:d8:4b:d1:68:95:aa:08:5b:0d:20:9c:06:e3:1a:
3a:fd:f6:81:ec:50:b1:ab:c9:0a:e3:59:3a:f0:66:
1c:46:d9:15:58:6f:90:71:dc:ca:58:76:97:7b:ec:
ca:fd:ce:cb:58:36:89:14:3d:46:fe:a2:77:67:56:
e3:b2:f0:92:80:19:d4:0d:54:7b:54:63:20:66:68:
f8:11:cd:01:95:7d:80:d2:6c:58:ca:0b:a7:40:ff:
10:fb:8d:66:44:14:e5:26:54:54:37:62:fd:e2:af:
94:77:03:72:0a:bf:50:e2:c9:15:b0:af:4d:76:b4:
99:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AE:70:23:5F:DB:2A:CD:4E:72:F4:EC:E0:BF:ED:3A:E3:EC:C0:3F
X509v3 Authority Key Identifier:
keyid:31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d4:37:61:3f:de:44:97:c5:d4:95:f8:0c:67:3d:70:26:d2:
30:bc:58:77:bb:e8:f1:d7:eb:bd:6e:74:e4:dc:b9:9f:aa:43:
16:9e:ce:d2:30:1d:37:11:7a:c4:a0:1b:82:da:20:81:41:7d:
ae:f3:0d:1b:9f:32:0a:b0:65:26:8b:27:6b:0c:f8:5c:e1:a3:
8d:56:2b:2f:4a:bb:73:75:ea:a8:d6:61:34:bb:72:ad:0e:59:
ab:4d:f0:66:9f:fd:2d:e6:7e:b2:47:ad:05:cc:a1:60:a5:03:
f6:af:25:2f:b7:3f:f7:8c:96:0f:27:d2:5c:a3:be:fc:53:39:
47:93:fc:61:c2:5c:92:10:39:c9:31:b9:ad:50:e0:17:4b:a0:
84:c1:28:f5:e9:35:17:4b:4f:9c:50:72:19:31:35:3f:6b:fd:
fe:2e:3c:8c:c6:36:e4:48:8a:12:30:96:ee:5b:e1:a6:67:56:
a6:ee:97:76:bf:24:63:14:26:0c:e2:31:67:43:40:8f:31:13:
44:91:b2:19:cf:ec:2b:d9:96:80:c3:a8:84:b4:28:0d:0a:f8:
35:6f:04:c8:fb:75:9e:06:67:e7:1c:ae:3e:1c:c2:cd:24:8b:
f3:dd:4d:68:27:1d:b0:92:a1:a5:b2:c9:92:e1:3d:de:03:ab:
05:b4:61:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:39 2025 by rpki-client