Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
File: MBc-_VmPqpjUtSWOUfs6txbXrHE.mft (raw, json)
Hash identifier: BBp9mXEbwcwwoMcEl0Z40TMifBDq0W5O3qDbaEyP8po=
Subject key identifier: AF:35:53:BA:9F:39:32:41:3D:FE:A1:F2:27:FD:CD:3F:32:B8:91:9E
Authority key identifier: 30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
Certificate issuer: /CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Certificate serial: 0194BC7298FA0D49ADBFC9DEE50481EAB6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
Manifest number: 12D5
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: MBc-_VmPqpjUtSWOUfs6txbXrHE.crl (hash: 43FKXvyQnmqhEwapCZ+5zcegYmwr9+nRE4s6ZrX4mD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:98:fa:0d:49:ad:bf:c9:de:e5:04:81:ea:b6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=af3553ba9f3932413dfea1f227fdcd3f32b8919e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4a:25:45:14:a2:51:4d:cd:05:98:b4:39:e3:
98:e6:b7:82:eb:d5:ea:57:80:25:1e:9a:d1:43:f9:
b0:71:9c:22:ac:a6:f3:c1:7e:73:03:8e:56:6b:b6:
ea:c8:9c:24:7a:24:81:09:38:c7:a5:59:d8:c5:4b:
51:09:b5:29:d4:0f:08:3b:e9:45:dd:ed:e0:5a:65:
c4:f3:2f:5b:e7:5b:9a:08:aa:90:10:4d:4c:c3:9f:
ba:c9:bf:d2:04:c4:4b:45:73:ac:66:03:11:a6:e2:
4a:cd:60:5c:a1:57:9f:e8:3c:96:8b:4c:d1:37:b1:
60:29:55:42:0d:f3:ee:be:67:f3:9a:b0:b1:74:65:
29:cc:f6:b9:fd:40:44:a2:1a:09:30:60:db:63:ae:
c3:fe:f8:46:b4:39:76:63:23:eb:53:9b:65:81:98:
a7:ac:fa:4a:2c:19:ae:a4:f7:8b:8c:a4:51:af:5e:
af:db:de:72:21:97:b6:83:72:a1:10:8f:87:94:89:
2f:55:13:11:37:30:f5:47:30:be:af:91:ef:90:9f:
59:7e:08:d9:61:17:ad:fa:82:b8:88:22:a8:1b:12:
47:cd:73:fc:8d:4f:95:f0:60:9b:f0:a0:14:95:dd:
0f:5e:9a:32:94:f6:7d:e2:c2:7c:13:8d:bf:93:35:
6b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:35:53:BA:9F:39:32:41:3D:FE:A1:F2:27:FD:CD:3F:32:B8:91:9E
X509v3 Authority Key Identifier:
keyid:30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:52:94:91:19:81:44:ba:23:e5:e3:f0:e1:65:54:5a:2d:c7:
61:6d:7d:90:8b:66:93:1c:67:04:07:82:0c:3d:81:1e:8a:89:
71:43:80:63:78:3f:ea:49:3e:10:f1:d5:dc:93:97:c5:fe:27:
be:50:3d:a4:11:f8:ee:d7:8a:30:eb:cb:cb:05:44:18:39:a0:
c2:89:18:04:86:56:de:e7:e6:17:18:21:87:3f:98:29:1b:ff:
9f:b8:59:a1:f9:f2:53:ab:e9:d6:c4:37:6b:83:70:58:d9:a7:
49:af:8b:5a:0f:77:33:6e:79:3b:66:ff:ed:3d:94:0a:81:09:
89:9d:05:79:68:62:c9:77:e2:cd:3d:10:19:04:b1:08:cc:92:
05:62:de:e7:32:8b:fb:cb:aa:7f:3b:ed:c5:82:d4:fd:26:18:
bf:37:7c:c5:0f:60:63:e8:18:14:cd:df:cd:5e:4a:38:db:f7:
93:0c:12:b1:44:f5:6d:a6:36:e6:85:f8:aa:61:8b:90:32:44:
95:d0:66:c8:e3:f5:f6:6f:4b:e7:e5:7d:4a:59:bc:29:d1:4c:
5e:2f:cb:9c:10:4a:50:38:7f:4c:8a:02:3d:fc:1c:6b:be:39:
ca:71:fa:4d:3e:83:e8:3d:25:49:99:d6:56:dc:e9:46:b1:f7:
1d:f6:16:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:13 2025 by rpki-client