Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.mft
File: MqOx8bWRJoaXwQRPuXWEU5qnhoU.mft (raw, json)
Hash identifier: 94yn5wDhque2LMHxWTWfVabB2Iq4ZBxgzxzvfm+Mkqo=
Subject key identifier: CE:9F:C6:99:FA:A7:5E:8B:33:3B:21:65:F7:D6:A4:3C:F1:31:90:2C
Authority key identifier: 32:A3:B1:F1:B5:91:26:86:97:C1:04:4F:B9:75:84:53:9A:A7:86:85
Certificate issuer: /CN=32a3b1f1b591268697c1044fb97584539aa78685
Certificate serial: 0194BBCF04A9D33249D0DBEF8EADAE4BD65D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqOx8bWRJoaXwQRPuXWEU5qnhoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.mft
Manifest number: 0EDE
Signing time: Fri 31 Jan 2025 10:01:34 +0000
Manifest this update: Fri 31 Jan 2025 10:01:34 +0000
Manifest next update: Sat 01 Feb 2025 10:01:34 +0000
Files and hashes: 1: MqOx8bWRJoaXwQRPuXWEU5qnhoU.crl (hash: YFr13yBdyVtRMS7XinnT07GDDqtKkJyVI0TqrXuiweU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:04:a9:d3:32:49:d0:db:ef:8e:ad:ae:4b:d6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a3b1f1b591268697c1044fb97584539aa78685
Validity
Not Before: Jan 31 10:01:34 2025 GMT
Not After : Feb 1 10:01:34 2025 GMT
Subject: CN=ce9fc699faa75e8b333b2165f7d6a43cf131902c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:4d:f2:73:2a:5b:d2:9b:c6:05:83:44:f1:
be:88:27:71:d9:a8:5e:9d:b7:c0:bf:80:91:cd:91:
c3:b5:c9:95:b4:0e:3d:08:af:12:58:26:81:e0:5b:
9f:42:65:9f:17:40:4f:b0:f0:1f:3e:84:f2:e9:86:
f6:38:e7:45:d0:09:4e:e4:f6:d7:a0:16:c3:a5:9f:
00:4f:a3:5d:0b:a6:0c:df:4b:36:09:f3:44:5b:54:
19:39:07:60:2f:df:43:f4:cf:11:8e:3a:50:91:b0:
24:c8:78:90:b7:10:2b:c0:33:51:9a:b9:f3:af:1a:
5d:58:b8:af:d9:0a:c8:18:7f:26:71:d6:7b:b0:96:
3c:08:f9:ba:8a:4e:8d:7e:a0:39:b8:40:e8:ef:27:
f5:28:1e:42:07:04:47:69:42:e7:fb:cd:55:8a:87:
08:97:db:1d:af:82:ad:25:b2:3c:0f:8f:ea:72:0f:
ff:c9:96:45:d9:ed:23:2b:23:27:d6:f6:aa:e3:93:
b4:eb:af:8a:8e:71:81:55:3b:47:e9:ed:ca:4b:dc:
d3:ba:43:83:1a:e8:17:92:62:dc:0f:53:c3:88:f6:
d1:e3:66:d4:da:1d:1f:e2:04:2e:2d:c2:25:6e:7d:
ec:e8:b0:39:b6:3b:4c:03:2c:42:b1:9c:4e:ce:9d:
61:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9F:C6:99:FA:A7:5E:8B:33:3B:21:65:F7:D6:A4:3C:F1:31:90:2C
X509v3 Authority Key Identifier:
keyid:32:A3:B1:F1:B5:91:26:86:97:C1:04:4F:B9:75:84:53:9A:A7:86:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqOx8bWRJoaXwQRPuXWEU5qnhoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6f:ce:bc:fe:c4:4d:ff:c2:3a:24:6f:e0:ad:7f:a1:07:d4:
86:ec:63:ae:b7:a3:b6:73:dd:2c:de:33:03:1e:48:66:f3:65:
b5:bd:26:45:51:19:23:d7:93:92:e6:48:fc:56:18:bd:28:a8:
30:97:db:3c:60:4e:da:7d:4e:d5:ab:aa:5e:ae:57:73:8c:95:
d8:67:14:b1:c1:58:73:68:05:49:d3:1b:45:bc:89:14:33:0d:
1e:80:50:3f:38:04:7d:ec:0a:62:d4:e9:f8:43:32:70:09:ff:
7b:cd:f7:ec:e9:76:02:00:84:80:89:2d:89:fe:9d:0b:7e:f7:
16:e3:7d:22:25:60:54:6f:49:38:53:d1:cf:49:1f:57:eb:d1:
d2:b5:67:f4:1a:29:56:3c:6b:42:5d:5c:87:78:2d:59:aa:9b:
c6:07:b8:d2:5d:8c:0f:07:31:6e:e2:d4:16:3a:3d:78:a3:6c:
f9:08:ee:12:b5:e7:f3:43:e8:0c:56:b6:c9:d3:9a:a5:02:47:
97:c5:23:56:45:9e:52:2d:a5:1d:23:a9:ca:95:96:4d:43:d5:
51:98:39:3e:fb:41:16:b6:03:27:7a:c5:3a:b6:91:0e:64:22:
9a:3c:c7:33:2b:55:ff:20:b7:88:c1:f4:09:73:e4:66:30:f2:
01:08:d4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:20:44 2025 by rpki-client