Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
File: MFMuPcNxjy4bVWppRwsec53TkCI.mft (raw, json)
Hash identifier: Fm90TCMiXf0ziCUU0Udat9d2AtRGKEF1JJr5njm+ato=
Subject key identifier: 03:D6:5F:1F:E0:98:96:69:D2:25:86:89:08:CB:D1:C1:16:55:8B:B3
Authority key identifier: 30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
Certificate issuer: /CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Certificate serial: 0194BCA9DC56608A54022D9FA6BE6775D900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
Manifest number: 09CC
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: MFMuPcNxjy4bVWppRwsec53TkCI.crl (hash: D9dyV95cxp7BOIxgqDyHf7fe1IxZY05WUwDdm2bZ1FE=)
2: gcvZb-H-QkR_u2nZg2XXj4qsub0.roa (hash: eOyY8yl+p8N7UEzFU3Q8jcWAiNPWbKDEoBQqZkxOiME=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:dc:56:60:8a:54:02:2d:9f:a6:be:67:75:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=03d65f1fe0989669d225868908cbd1c116558bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a2:95:14:69:4d:b7:9a:ec:25:35:c7:c1:2c:
7d:17:0c:5f:ef:b0:99:10:d5:f7:c4:ad:54:c6:de:
8a:5d:32:ae:aa:50:b3:bf:97:8e:f2:3d:bc:b0:07:
b3:1c:c6:d6:ed:cf:61:0a:69:47:ce:fd:b9:9a:bd:
ef:6f:09:ec:72:88:5b:19:b6:45:1e:5c:3a:9f:02:
57:0e:ad:83:a5:f5:bc:f3:0a:42:43:49:b7:5d:42:
5f:a7:81:27:cb:52:a2:64:99:1c:65:fb:4a:3c:14:
c6:d2:85:36:cf:46:ca:fa:d3:2e:66:a6:de:d8:70:
c2:5e:5a:14:56:5a:8c:1f:da:bf:b1:74:58:8b:c4:
71:0c:fd:d1:39:1e:42:9e:b5:8d:68:a5:3f:b8:32:
2d:5b:14:e9:85:61:de:23:57:0b:4c:33:14:61:4b:
c0:f1:64:f6:8c:69:a9:9a:8b:65:f4:aa:55:b1:c6:
b9:46:9f:44:f2:a2:60:9b:cf:19:43:57:54:74:5e:
3d:bf:a3:4f:b2:7a:bb:d1:d0:19:a5:d9:0f:3d:30:
0e:f7:85:9d:ea:53:9a:8c:02:92:df:d7:7e:c8:4e:
b8:a1:36:e8:ca:e5:ae:f3:ba:34:c5:73:26:da:90:
b2:cb:a4:a7:ee:d6:80:bb:99:93:22:6f:3b:41:09:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D6:5F:1F:E0:98:96:69:D2:25:86:89:08:CB:D1:C1:16:55:8B:B3
X509v3 Authority Key Identifier:
keyid:30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ad:24:36:1f:68:36:02:ef:c0:4c:6f:94:a0:7a:22:e2:eb:
d4:bf:9a:73:3f:3e:92:8c:3c:60:5e:08:de:91:06:52:6b:6d:
75:d6:ca:9f:f8:6e:07:32:c5:64:f0:1e:3d:0c:1d:19:e9:b8:
42:b9:e1:85:e1:74:0b:b4:c1:c6:62:52:34:53:00:1c:3d:0e:
f2:19:f7:54:85:8e:8b:49:e5:8f:3d:d5:ea:0d:5a:ab:72:6c:
95:17:71:7a:bb:70:1f:5e:f8:a6:35:5e:a3:b5:ed:fb:fd:c3:
d5:c5:69:5c:0e:e2:b3:08:3d:24:db:9b:68:ce:61:d6:23:fa:
14:06:9c:a0:58:b2:17:6d:6b:93:ea:7d:82:38:73:5b:04:f9:
f9:85:0a:61:69:f1:4d:f9:9f:f9:7d:a5:a4:0d:7a:a4:55:9b:
17:e2:4f:a2:65:32:39:26:00:46:e7:8a:dc:41:0b:e4:53:b4:
b4:a7:56:ca:aa:9a:50:3e:1f:f1:c2:46:2a:c7:a0:8e:26:de:
38:d7:07:9b:d0:c2:a4:53:b1:f0:93:61:89:7f:56:11:90:1f:
ef:b5:40:59:94:91:52:fc:45:ce:b3:ed:37:fc:2f:fb:95:ec:
7c:16:81:fd:02:1d:14:48:65:9e:2c:33:c5:5f:25:15:e4:ca:
48:7b:15:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:05:06 2025 by rpki-client