Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
File: mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft (raw, json)
Hash identifier: LF9lqeJ5SH51OWviUnXJwbliLfth68HCrA7/dbwHfvc=
Subject key identifier: EA:2A:06:8E:02:52:DE:9C:5B:75:6C:E8:D9:9A:06:57:3E:EE:09:0E
Authority key identifier: 99:F4:97:3E:52:4B:08:71:75:82:57:76:30:D3:31:93:E5:3B:67:C9
Certificate issuer: /CN=99f4973e524b08717582577630d33193e53b67c9
Certificate serial: 0194BC3BBC2926EBA4CD6491FBCD7C7BBEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
Manifest number: 02DC
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl (hash: ApNY+A3CRqc/1Ebv7UFEMAJpIQWXMFjjBam7f8yH7jQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bc:29:26:eb:a4:cd:64:91:fb:cd:7c:7b:be:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f4973e524b08717582577630d33193e53b67c9
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=ea2a068e0252de9c5b756ce8d99a06573eee090e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:ff:d6:6f:ea:41:77:06:5f:1f:35:e6:b9:
7c:7b:b0:05:a2:80:51:19:4f:51:dd:4b:67:b5:fe:
b4:5d:46:e4:cb:0a:48:3b:3a:4b:13:43:61:ba:c1:
aa:14:81:22:96:2f:5b:f6:76:42:e3:8d:5a:3b:9a:
1d:c1:fc:a1:d5:be:50:e5:1f:22:2d:08:89:36:d1:
03:1b:fe:75:72:6e:1c:e9:15:b7:f7:7b:07:0d:0a:
8b:7c:72:88:d0:c2:da:25:b4:74:be:12:f5:4f:1e:
87:a2:f8:38:ec:30:6d:14:14:b5:2b:d8:f4:74:5d:
e4:e1:02:87:e1:78:3f:c7:78:53:e6:d9:64:ff:6f:
30:70:37:e3:81:f2:a6:67:55:ba:c7:3b:32:69:54:
ae:fc:08:c3:d7:c3:dd:fe:e3:d1:d4:6f:ea:06:94:
1f:06:a9:1b:da:ba:c5:ce:cc:e8:e1:ff:94:71:9d:
7c:91:09:24:b4:e4:31:fb:9f:1f:0b:88:c8:f1:20:
73:f9:88:c6:e7:7f:1e:3d:5e:98:c9:e0:ca:52:85:
7d:10:d5:3f:1f:34:4e:92:eb:25:7c:3e:6c:f9:07:
5b:29:de:2d:9f:6e:78:6e:72:a4:11:2d:84:b3:44:
a4:e7:38:25:95:91:23:72:b1:f9:95:1a:9f:66:ae:
81:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2A:06:8E:02:52:DE:9C:5B:75:6C:E8:D9:9A:06:57:3E:EE:09:0E
X509v3 Authority Key Identifier:
keyid:99:F4:97:3E:52:4B:08:71:75:82:57:76:30:D3:31:93:E5:3B:67:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:cc:5e:81:76:89:54:ef:a7:3a:7f:ca:5f:d9:61:1d:c2:93:
48:9a:01:18:66:f9:9a:22:3f:99:a0:00:00:04:12:85:9d:38:
39:7c:62:df:ef:4d:9d:5e:7a:0d:f4:17:21:2f:57:43:68:55:
85:6c:5a:47:cc:41:3d:87:23:51:70:62:f4:c3:cd:9c:63:ae:
d6:36:6a:c6:61:d0:81:35:b4:f1:70:7e:0e:13:8b:f2:50:d1:
8a:c3:d3:22:93:81:75:e3:06:4b:71:10:30:45:a4:48:51:88:
1f:63:a8:09:61:53:54:3e:5c:cc:e5:88:e3:1c:90:75:de:05:
0e:3b:4b:eb:4c:cd:72:1f:bd:26:34:d2:eb:21:be:49:97:45:
2d:be:f3:3f:b2:c4:ff:80:4c:70:39:04:f0:f8:4c:42:a5:d4:
ea:67:fa:4d:47:41:d7:e9:01:1d:8e:06:2c:22:0a:fc:8f:e9:
79:ea:5d:88:11:22:c9:49:ff:c0:bb:55:e9:e3:a9:ef:c6:19:
42:7c:0c:05:74:25:58:75:24:6a:40:ad:7d:b5:26:c8:6f:38:
a7:0e:29:4e:b5:07:b5:5b:30:3c:92:e8:f9:07:69:ea:01:b0:
fa:94:49:1b:94:b0:38:50:fb:af:cf:a2:d2:de:2a:44:41:55:
f2:ba:5c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:18 2025 by rpki-client