Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
File: mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft (raw, json)
Hash identifier: ctCEcsZpwacbFnFfA4t6jHOWv5cShtVJON/BJM++suA=
Subject key identifier: 54:FB:71:62:5A:F3:F3:B8:D4:C9:AC:ED:34:BD:3F:EC:CD:60:93:F3
Authority key identifier: 9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
Certificate issuer: /CN=9a727aa6e687b492d212f451deb861ea01f17529
Certificate serial: 0194BC3C36148B6260C1A7E5C496E4DBC497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
Manifest number: 1022
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl (hash: fTBL1KFDP2YsqutAtNyp18va4tqIuIxwWfNj3TLGzGk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:36:14:8b:62:60:c1:a7:e5:c4:96:e4:db:c4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a727aa6e687b492d212f451deb861ea01f17529
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=54fb71625af3f3b8d4c9aced34bd3feccd6093f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:98:2f:0b:98:8f:4a:1a:7d:5b:27:a5:05:
e2:24:46:65:d0:cd:50:dd:f9:19:11:79:60:f4:d7:
5c:74:bd:ca:c4:71:07:b3:f9:ad:aa:de:5d:39:b6:
71:eb:a3:10:07:91:83:29:36:54:2d:88:51:f3:57:
e4:ea:63:8a:ac:f8:95:84:cf:16:16:58:ee:cc:63:
b6:56:b0:9f:95:fa:76:da:71:41:9b:bb:43:26:d3:
bd:64:6a:39:f4:0c:24:69:25:02:e4:f8:3c:26:a1:
39:e9:12:8e:60:02:9f:8e:2b:f4:57:ee:67:fe:7b:
4d:12:6a:36:61:59:cc:15:6b:98:ef:c2:16:1f:8d:
94:f0:40:2d:ca:04:9f:4f:bc:d8:3b:1f:f9:a3:83:
8f:58:6a:ac:c7:b8:47:1f:d4:3a:6b:d7:22:8d:ea:
e1:72:8c:d5:1d:53:73:aa:1b:c3:e3:47:fd:57:9e:
5d:ce:1f:a2:75:72:02:32:99:d4:d9:18:ea:75:5e:
65:15:ef:3b:f2:d0:5a:4c:20:13:7e:06:3e:66:69:
8f:c0:9e:ea:5f:c7:7a:28:ee:1d:fa:71:80:b6:af:
0f:57:c3:20:37:f3:c1:41:ea:00:36:0d:1c:b3:90:
83:5b:df:7e:67:7b:7a:57:55:82:ef:d1:61:9b:eb:
c8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FB:71:62:5A:F3:F3:B8:D4:C9:AC:ED:34:BD:3F:EC:CD:60:93:F3
X509v3 Authority Key Identifier:
keyid:9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f5:3f:9b:86:59:94:df:10:4f:46:7a:30:7d:04:f2:30:57:
a8:3b:82:90:4e:6e:dc:0a:97:55:a3:6b:e4:5c:ce:ea:ad:86:
bb:1a:37:07:db:95:53:b9:80:38:67:32:94:18:ad:7b:c4:91:
94:94:ce:2e:fa:9c:2a:f3:f8:3d:6a:bd:fe:1e:ce:b2:98:05:
04:6d:c8:26:e2:ac:64:1e:0a:77:f5:7b:e9:df:99:7a:12:76:
c8:9f:65:c1:e1:46:50:cf:e2:c5:db:62:8f:04:f1:ad:1f:0b:
9f:b9:64:51:74:60:91:cb:15:07:bd:97:b9:3d:d4:9a:b8:d6:
d1:40:35:4b:95:ff:1f:96:d1:64:f9:52:9b:90:18:56:d2:87:
f2:67:43:63:6a:be:06:e2:2a:1a:35:e3:75:aa:29:04:b6:74:
a6:d0:21:e9:bd:63:59:e9:15:01:34:e5:ea:af:f1:02:ff:1b:
6e:17:ce:ee:ff:e8:2d:2d:59:6d:56:bf:7f:67:9a:5c:20:a6:
61:0b:39:ba:4a:ae:89:a6:df:79:cb:78:d7:66:ac:a4:4e:10:
02:e0:08:ad:24:7a:91:e6:c4:c2:3e:32:73:23:da:6d:e5:3c:
e0:05:f4:72:ee:00:43:02:ee:89:89:e8:05:5c:ea:be:5f:ce:
dc:41:c9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:04 2025 by rpki-client