Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
File: mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft (raw, json)
Hash identifier: s7zYDUUz7lB56qCnS6yMYTD/H7TjTTWyJ3T9B0wp/eQ=
Subject key identifier: 80:41:18:B6:A7:AF:2C:72:31:D8:C6:EB:79:AA:01:CC:8D:7A:A8:AE
Authority key identifier: 9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
Certificate issuer: /CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Certificate serial: 0194BBCE340B4ABA564BC27EED54326B2C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
Manifest number: 031C
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl (hash: gZfxYA1sCrUAg7c7u3PCJQnFhaxkMqLsD9jBdfvXszY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:34:0b:4a:ba:56:4b:c2:7e:ed:54:32:6b:2c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=804118b6a7af2c7231d8c6eb79aa01cc8d7aa8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d1:f4:72:9d:ce:58:9d:88:56:44:a3:49:6d:
40:1d:51:ea:d2:72:f7:36:70:55:74:ce:fb:a9:7f:
6a:83:3b:3d:0f:02:19:ac:6c:ec:78:e1:30:13:72:
6d:f1:12:54:5e:b8:ca:41:e0:b3:54:50:ff:a2:7f:
d7:c8:25:78:d8:72:d8:c7:b3:da:d0:38:6a:0a:0e:
b5:76:29:7e:94:25:b7:47:e8:e4:2d:7c:80:00:b3:
e9:07:0b:5f:e7:fd:a4:86:32:cc:6c:04:af:ef:18:
fb:86:ec:01:ac:06:1b:f8:f5:f5:5a:5e:95:4d:80:
78:ef:03:42:a6:72:cd:51:5b:05:52:db:a3:9d:45:
c3:4d:29:b4:cd:c7:26:31:23:78:dc:7a:36:23:36:
68:c8:bf:4b:3b:d4:c7:bd:99:7f:3f:1c:cb:64:7a:
8c:16:65:23:92:16:e1:14:f1:f6:3b:cf:73:3a:a8:
fc:d2:57:3a:1e:a6:c4:a9:1c:78:a9:bc:86:6e:1a:
2c:f8:c8:2b:20:55:7e:60:46:f6:75:64:18:ac:2b:
76:de:b5:72:28:b7:02:52:aa:b7:04:9b:d7:f7:97:
3c:b2:80:ad:43:ee:5e:65:58:97:33:a2:5c:86:e8:
16:b8:21:f3:86:d6:9f:a3:4e:25:a8:87:21:ed:80:
ca:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:41:18:B6:A7:AF:2C:72:31:D8:C6:EB:79:AA:01:CC:8D:7A:A8:AE
X509v3 Authority Key Identifier:
keyid:9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5d:da:0a:30:a1:42:be:58:62:c0:83:d4:1b:5e:3d:d5:61:
6a:8e:be:c5:04:c2:37:01:38:82:f5:3e:de:19:da:96:8c:43:
64:17:47:b1:40:85:8b:6a:59:86:5e:58:b8:cc:8b:b5:97:ea:
de:12:f9:94:31:6d:27:ab:41:5d:0d:a5:c9:10:75:13:e4:d8:
5c:87:52:1e:fb:78:89:c2:1b:1a:c2:50:a8:0b:af:f8:bf:1f:
d2:46:a8:75:6d:21:db:ac:1d:15:c6:16:f7:13:2f:c9:22:78:
88:d0:f1:33:7e:b1:a4:61:b1:c8:0b:91:ad:f8:1f:12:f9:25:
4d:90:43:35:b3:39:40:53:49:2b:37:4a:2c:bc:86:e0:74:36:
ca:33:03:27:49:5e:e1:3d:12:d2:d9:ab:f5:38:e3:f6:a1:24:
a7:af:da:cd:e9:a3:65:e3:ea:35:03:fc:b7:7d:65:b4:f7:96:
a0:bb:80:82:0f:cf:4e:f9:86:b4:98:f0:fe:f8:1d:69:73:63:
b8:8f:21:c2:e8:65:8a:a8:94:48:f5:ab:d5:95:a0:f8:5a:30:
c8:0a:bd:db:ea:bd:cc:80:c5:b9:6c:2e:b7:f2:b8:26:28:12:
02:8e:08:78:76:d5:40:ff:5b:27:59:01:3f:98:76:9d:98:0d:
45:fe:6d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:19:11 2025 by rpki-client