Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
File: mSlM_9YStex7SLhCMqRdarbd_5U.mft (raw, json)
Hash identifier: Nv3P3DQYybzmVQnJhgmxJlWoxgjHHisTU+inqWsPU50=
Subject key identifier: BA:35:3D:BA:A6:C1:D2:72:69:08:9A:39:9B:5F:46:FA:EA:D2:77:C0
Authority key identifier: 99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
Certificate issuer: /CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Certificate serial: 0194BD8527431DA539E4D500A68F6B8BB92C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
Manifest number: 016A
Signing time: Fri 31 Jan 2025 18:00:07 +0000
Manifest this update: Fri 31 Jan 2025 18:00:07 +0000
Manifest next update: Sat 01 Feb 2025 18:00:07 +0000
Files and hashes: 1: mSlM_9YStex7SLhCMqRdarbd_5U.crl (hash: tbg9IcWwf/mb8bX7iA01OTilhlESHIaqLoMM7VmGdPg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:27:43:1d:a5:39:e4:d5:00:a6:8f:6b:8b:b9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Validity
Not Before: Jan 31 18:00:07 2025 GMT
Not After : Feb 1 18:00:07 2025 GMT
Subject: CN=ba353dbaa6c1d27269089a399b5f46faead277c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:5a:a5:a3:e0:d8:34:a2:a6:15:69:fa:f2:
7e:60:c1:87:02:1f:f3:37:b8:bc:ff:41:fc:a1:94:
b7:b4:38:94:63:36:b0:a6:89:c2:70:89:01:4d:46:
f8:25:3d:88:21:cb:8b:11:58:49:c6:be:7b:77:93:
c4:62:5b:f2:f7:99:36:12:f4:67:c0:0e:60:b2:7c:
69:6e:f0:ff:da:b0:94:82:64:60:19:54:21:ef:da:
71:ea:c2:10:28:55:74:b1:09:97:59:80:33:43:1b:
9d:8e:5b:26:13:a4:9e:f7:6a:cf:6e:22:47:75:75:
3d:48:0f:0a:8d:68:09:d9:c0:92:3d:32:1d:28:89:
eb:6e:53:ac:5a:43:29:3a:6e:da:7a:4d:54:b4:fe:
8c:4c:77:c3:aa:e8:26:35:d9:e3:3d:8e:31:3f:3e:
02:96:38:c6:73:6a:05:4a:b6:cc:82:45:de:08:03:
1c:b1:a1:e2:55:17:86:0e:d4:3a:c3:89:eb:85:f0:
86:4f:08:f9:58:83:f7:81:9a:3a:6b:3c:b6:2b:d3:
84:52:36:d1:78:1d:6c:52:fe:0d:69:83:14:ca:05:
14:00:36:12:d0:af:c1:20:86:bd:d6:08:a9:e6:ea:
a3:85:82:e0:10:99:39:41:22:43:43:44:5d:af:be:
c2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:35:3D:BA:A6:C1:D2:72:69:08:9A:39:9B:5F:46:FA:EA:D2:77:C0
X509v3 Authority Key Identifier:
keyid:99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:aa:c2:d8:e1:d7:2d:66:5b:dd:f4:2f:14:48:65:bf:31:c2:
02:9d:c1:82:d0:58:e1:d7:4c:e5:4e:a2:54:1b:4d:f6:0d:75:
f9:8c:b4:27:33:e1:7f:a9:93:a8:20:97:1e:44:06:83:f1:91:
6b:a8:ad:07:8f:4a:8d:16:cc:99:5e:7f:0c:44:23:08:4c:1c:
f9:ce:d2:20:5c:61:78:58:7a:bf:3b:ca:19:96:ed:9b:f3:36:
3f:41:c6:33:3d:56:9e:40:29:90:bd:65:93:fe:70:25:97:d6:
63:26:da:f0:c1:ec:86:80:b6:e8:89:a3:cf:11:19:e4:1c:67:
14:a0:e4:c9:11:b8:b6:0b:68:f1:23:d4:aa:58:7f:33:d6:52:
1b:1a:f9:87:0e:cb:38:b9:02:bf:87:27:49:27:41:2d:ae:e7:
69:48:a9:e5:b0:36:f4:66:4c:e3:0f:3b:42:58:06:4b:43:58:
3a:c5:b6:e6:1d:a6:ba:10:4a:73:2b:4c:68:a3:7b:4f:fe:f2:
90:6c:98:23:9a:62:41:06:a9:b2:9b:b1:e5:a5:b6:b2:90:0b:
f5:a7:88:d1:ad:21:bd:6e:8e:8f:b2:54:b0:9f:30:4e:35:c1:
d0:f2:37:4b:a3:08:d4:85:25:a7:99:de:91:6e:e5:a5:23:20:
41:eb:51:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:34 2025 by rpki-client