Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
File: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft (raw, json)
Hash identifier: 9u8DVxKN9NIFI9VwarxO7qLZkeBG5uRCuq1Qqsg/pDI=
Subject key identifier: 02:2A:5A:0E:AB:A2:2A:D7:BE:75:8D:90:18:8B:64:EA:C2:91:C1:EA
Authority key identifier: 32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E
Certificate issuer: /CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
Certificate serial: 0194BBCE02DDD6A0496E3623565C30A1B2DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
Manifest number: 10D2
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl (hash: aQ1VcZ9Oy6XyaRgxT/rwbu9xRWbdBiB+SiTfnrIp+cU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:02:dd:d6:a0:49:6e:36:23:56:5c:30:a1:b2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=022a5a0eaba22ad7be758d90188b64eac291c1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:e4:80:79:b4:a2:c5:16:4e:a4:c4:8f:d3:
fa:a6:36:7d:0c:a9:40:8c:f6:be:1d:9e:3a:f8:a3:
13:be:a0:0c:a4:2b:c9:ae:f0:b6:3a:de:b5:8b:b0:
34:1e:51:f3:52:27:81:60:d4:b6:e7:0a:98:d2:3d:
3a:41:87:b6:a3:09:34:36:18:36:1d:a9:4c:34:e0:
22:8a:31:92:2d:b5:9a:a8:63:2f:02:9f:0b:84:36:
0e:b2:db:02:16:5e:d7:c0:39:44:54:f0:11:df:92:
d4:d0:50:a5:06:be:6e:c5:fc:3b:50:41:aa:ab:28:
b9:45:ca:7a:12:e4:97:d7:a6:cc:93:41:21:01:73:
1a:ad:dc:7c:b2:8a:e4:f7:c3:31:29:d9:1d:aa:e7:
db:61:8b:6c:6c:b1:c6:aa:6e:cc:10:a8:2b:08:68:
ac:1c:d6:49:2e:c2:51:6a:ca:55:12:1d:e7:c5:52:
db:63:af:09:d4:48:54:ca:96:c2:96:3c:d2:bc:88:
6b:f7:27:67:48:09:75:09:90:63:a5:ab:b7:e1:0f:
f8:a1:33:e4:a9:5d:36:2d:2d:2b:af:78:3f:54:2c:
8f:2c:e9:99:82:dd:60:1c:8f:ba:61:75:50:96:83:
a2:09:71:39:a3:41:9f:d3:65:e7:04:26:11:1a:f6:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2A:5A:0E:AB:A2:2A:D7:BE:75:8D:90:18:8B:64:EA:C2:91:C1:EA
X509v3 Authority Key Identifier:
keyid:32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:85:85:61:ed:58:9f:e5:05:7b:cb:2f:82:91:0f:c8:ba:a0:
aa:79:e5:6e:a8:da:ad:9d:18:ca:c9:1d:96:f5:1c:09:e8:c7:
0a:f5:ed:38:01:87:9b:32:d2:aa:8b:c7:a8:59:00:f7:f5:32:
db:f0:c3:36:9a:1a:7a:15:86:cb:6e:81:98:fc:c6:dc:a5:d7:
35:dd:32:22:29:4f:7a:e0:3e:f4:18:26:f6:2e:20:76:b1:6d:
98:69:3f:1d:af:95:92:37:28:dc:79:d7:7a:f2:09:46:f5:4b:
1b:b3:a4:56:52:17:e9:ea:07:23:bc:0a:df:85:5b:9d:4c:a9:
8e:44:be:23:d4:08:61:1f:23:5d:73:1d:5a:63:40:17:68:8b:
1d:26:82:e0:88:68:f8:d0:4a:81:41:a7:ea:34:c1:8b:d6:19:
b8:04:0f:27:55:5e:37:73:bf:ec:e6:35:db:aa:8f:ec:8b:04:
07:c9:6f:b3:85:fb:0a:4f:ec:f1:00:54:42:b4:45:30:a9:95:
41:e5:cd:dc:c7:36:b6:c0:98:74:5c:0e:4d:44:12:97:c9:23:
24:e6:e5:4d:c8:b8:42:d6:1e:7a:91:21:8a:84:1f:15:ab:a6:
d5:04:83:c5:71:90:fd:98:d2:cd:60:1d:5d:ab:aa:83:be:88:
c7:57:2c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:36 2025 by rpki-client