Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/820f17-37bb-4867-bc80-c7d3e96fd35b/1/MP2VzoDqznNONA3dcjEQ-lJS-jQ.mft
File: MP2VzoDqznNONA3dcjEQ-lJS-jQ.mft (raw, json)
Hash identifier: 29ixlgqp27OoL5oW/m+UIo+kR16facMQHX392uNakwc=
Subject key identifier: 5A:6A:FF:70:C8:0F:8D:47:3E:88:DA:C8:CA:05:0A:B3:B4:B0:FD:26
Authority key identifier: 30:FD:95:CE:80:EA:CE:73:4E:34:0D:DD:72:31:10:FA:52:52:FA:34
Certificate issuer: /CN=30fd95ce80eace734e340ddd723110fa5252fa34
Certificate serial: 0194BC3C2767814C822C0AEAC8C9C3B8F4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MP2VzoDqznNONA3dcjEQ-lJS-jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/820f17-37bb-4867-bc80-c7d3e96fd35b/1/MP2VzoDqznNONA3dcjEQ-lJS-jQ.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: MP2VzoDqznNONA3dcjEQ-lJS-jQ.crl (hash: U+ldfdfeOyDGxEJOEMww/HHsrilCBynC06BN9FmKi68=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:27:67:81:4c:82:2c:0a:ea:c8:c9:c3:b8:f4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30fd95ce80eace734e340ddd723110fa5252fa34
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=5a6aff70c80f8d473e88dac8ca050ab3b4b0fd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:15:c8:3a:07:76:02:b9:b4:a4:45:c1:64:
02:8c:62:b2:e1:c4:e5:01:61:1d:d6:d6:f6:df:d7:
c8:e0:95:ef:3d:9f:58:fc:6d:47:de:bf:1f:76:2c:
f0:73:aa:1a:41:12:9e:ae:57:f4:46:d1:e0:1f:70:
57:58:5b:64:2c:7d:82:f9:21:34:53:46:77:7e:4a:
40:7a:b7:fa:5e:5a:bd:32:ca:9d:48:d6:c5:f8:2b:
27:2e:a0:6b:36:5f:1c:7a:46:79:c3:02:56:b4:51:
b5:66:85:7e:21:95:96:d6:5e:4d:3d:d1:cf:8c:ee:
be:2c:cc:c1:fe:cd:76:61:0d:22:31:3c:dc:19:98:
55:cf:aa:59:85:54:97:91:33:0e:69:fe:45:61:e7:
b9:d4:c7:1b:f1:9e:fe:32:bf:6e:d3:6f:2f:2c:0c:
75:14:54:ac:e3:7d:d8:ca:74:4a:50:e7:10:ca:5b:
e3:1c:d1:73:92:3c:c4:7e:e2:1b:a1:02:f8:bd:d5:
0d:86:fa:56:45:2b:bf:44:64:3b:60:74:3d:84:15:
41:a0:43:61:e8:98:cc:d8:b5:9a:43:cb:ba:dc:1b:
07:ec:af:7b:f2:22:95:c0:81:c9:85:50:0c:00:28:
6c:75:6a:dc:bd:35:9b:82:e1:2a:52:77:77:6f:40:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6A:FF:70:C8:0F:8D:47:3E:88:DA:C8:CA:05:0A:B3:B4:B0:FD:26
X509v3 Authority Key Identifier:
keyid:30:FD:95:CE:80:EA:CE:73:4E:34:0D:DD:72:31:10:FA:52:52:FA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MP2VzoDqznNONA3dcjEQ-lJS-jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/820f17-37bb-4867-bc80-c7d3e96fd35b/1/MP2VzoDqznNONA3dcjEQ-lJS-jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/820f17-37bb-4867-bc80-c7d3e96fd35b/1/MP2VzoDqznNONA3dcjEQ-lJS-jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9c:8e:32:17:00:6f:ae:53:33:b9:64:8f:84:3b:da:7e:59:
d8:1d:1d:7e:77:10:10:7b:06:d0:ba:fc:ca:03:95:60:e4:67:
0d:7c:13:50:b6:c4:e3:20:f5:c4:21:7a:ec:a4:69:eb:a2:72:
49:b8:60:2c:06:3e:c7:4b:69:f2:2f:dd:7a:3c:d6:de:68:ad:
38:73:a5:09:a5:bb:de:a8:0f:b7:de:f3:a6:23:72:c7:78:f2:
9c:c1:0b:d7:dc:87:d4:c6:c7:65:cf:95:e8:b4:2a:da:18:b0:
40:a4:7c:b4:17:a7:2b:4a:83:1d:af:79:c7:3b:78:28:6a:85:
77:3e:2f:17:75:0c:6c:cf:1b:dd:7b:32:4c:9a:de:a9:6b:11:
74:1c:94:8c:3f:31:65:96:37:04:f8:65:a8:5b:0f:bb:74:70:
3c:9d:9d:e5:4c:a6:78:37:25:7a:70:aa:be:ea:d2:20:ff:d4:
f9:54:a7:c4:25:fe:18:0f:d2:f3:98:ce:f5:4d:2c:e4:23:b2:
46:ea:c5:12:39:03:42:ae:e3:b0:45:57:51:a8:99:88:d9:4c:
44:df:87:3f:08:d3:4d:4f:0b:d5:e0:6f:d7:dd:57:a0:5a:ae:
3e:ab:af:a6:07:8b:20:ad:0f:64:1f:3a:9f:a9:5c:9c:03:89:
a7:dc:5e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:14 2025 by rpki-client