Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
File: Mke--VN94WS_urpRZr4CrPftgto.mft (raw, json)
Hash identifier: CU2gUAnaJdubtEG1D69R0FMMDwMExkJIqYBv7ixNeNA=
Subject key identifier: A9:4D:85:B1:0A:7C:D1:9E:B9:1E:B9:65:DF:7D:30:39:4B:19:DB:CE
Authority key identifier: 32:47:BE:F9:53:7D:E1:64:BF:BA:BA:51:66:BE:02:AC:F7:ED:82:DA
Certificate issuer: /CN=3247bef9537de164bfbaba5166be02acf7ed82da
Certificate serial: 0194BBCEAB66D12AE1B64FFDF7424BC87179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: Mke--VN94WS_urpRZr4CrPftgto.crl (hash: nOOZLk8Jc/2sLiFJGovwI7KrZjs07z7r9AAR+Lc9UWY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ab:66:d1:2a:e1:b6:4f:fd:f7:42:4b:c8:71:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3247bef9537de164bfbaba5166be02acf7ed82da
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=a94d85b10a7cd19eb91eb965df7d30394b19dbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:c5:c4:c3:b5:bf:8a:5d:25:ed:77:38:3b:
1a:87:e7:8f:ee:c2:54:81:f5:7b:15:2a:82:21:78:
16:a1:c9:52:ce:82:2a:91:f3:c6:17:de:4d:46:a3:
1d:7b:9e:a5:c9:13:a7:87:41:eb:e2:06:98:39:62:
fc:27:ca:72:cf:9a:95:ad:8e:c3:ec:b9:24:54:7e:
9d:41:e4:72:60:49:14:e7:91:2a:4f:e7:dc:e0:95:
f6:e7:21:04:37:08:b1:8b:93:75:1b:28:fc:20:e4:
4f:5c:f0:83:4f:5e:53:d8:73:71:d8:ee:e3:99:a7:
5f:8c:70:ca:4e:27:40:4a:30:f3:78:d3:04:eb:76:
07:dc:1c:af:c3:2f:bf:d9:43:8d:1d:95:a1:d8:fb:
f9:09:59:de:a7:da:ad:cb:1a:96:ad:cf:35:7b:0a:
01:dd:6f:d1:80:76:da:b5:4e:f9:2b:09:2e:a8:00:
8c:94:74:2b:78:d2:25:89:ea:05:b9:e9:96:47:8a:
6a:d6:e0:e4:cb:12:6f:df:7b:7b:1f:d0:7c:e4:44:
26:52:02:0f:dd:fa:2a:41:d3:ab:8d:7b:4f:01:2d:
05:f3:28:c5:d6:65:a8:02:11:ee:2a:51:0f:57:11:
0c:73:a0:41:7e:d8:cf:0f:1f:fc:51:0f:42:e5:9c:
89:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4D:85:B1:0A:7C:D1:9E:B9:1E:B9:65:DF:7D:30:39:4B:19:DB:CE
X509v3 Authority Key Identifier:
keyid:32:47:BE:F9:53:7D:E1:64:BF:BA:BA:51:66:BE:02:AC:F7:ED:82:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8f:09:f9:a9:ca:43:9b:4e:92:bd:de:23:1f:3e:a3:f6:be:
a6:02:1b:5e:6b:cf:19:69:83:a0:f8:a2:a4:8c:c4:20:b9:6f:
1a:02:70:ae:0b:ca:01:10:4b:bc:c0:2f:26:3a:75:c6:ee:4a:
7b:57:dd:d7:35:e6:ce:a8:d2:da:83:1f:63:78:04:6f:0f:cd:
69:b1:8c:a8:34:40:ab:a0:b0:b4:62:00:c0:31:15:2d:90:9f:
3a:38:ba:f0:b1:aa:27:33:bd:7a:70:4c:86:79:88:e6:d9:a3:
ac:85:3d:5e:92:b1:9b:2d:85:52:95:fb:7b:76:3b:a5:a1:1e:
8b:db:14:2a:59:5e:a0:9f:e4:02:c2:2d:90:59:52:3f:e9:43:
39:9a:70:68:03:3f:ed:65:11:12:48:bf:76:72:55:cf:67:ce:
ac:d5:f7:a3:cd:0e:0f:b5:77:4a:11:1a:28:7c:12:22:d3:6e:
8f:1d:a2:5e:b5:e9:a7:f2:49:b4:4a:97:75:bc:4d:19:9a:5d:
26:f0:05:50:2b:ed:23:d7:8e:bd:14:3e:91:cb:86:1f:3d:9b:
f9:b5:af:56:41:0f:88:9d:5d:3b:0a:f7:ee:c3:f6:0d:80:d1:
f7:21:ed:33:5f:b9:a1:fc:6f:36:43:f0:aa:bf:c5:46:b0:2a:
44:d9:60:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:19:17 2025 by rpki-client