Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
File: mQRCuMDNHdU1vq5yuU3TX5JyA40.mft (raw, json)
Hash identifier: OTH3gQ7aOPb1HULUXiVatmFCvQAeEimk/JVOiDVkSzQ=
Subject key identifier: C6:3D:61:4A:64:C7:D1:C6:68:B7:80:40:02:C7:A4:F7:F2:E0:C4:66
Authority key identifier: 99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
Certificate issuer: /CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Certificate serial: 0194BBCE4B8B0272C118632771C4C760DFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
Manifest number: 04FE
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: mQRCuMDNHdU1vq5yuU3TX5JyA40.crl (hash: wGF8YKboxuu/bHJQSCIH6DWRFS9QPhvKlNANyE1XISk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4b:8b:02:72:c1:18:63:27:71:c4:c7:60:df:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=c63d614a64c7d1c668b7804002c7a4f7f2e0c466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:0d:ff:fb:9f:9a:5e:2c:c9:2b:81:b3:c1:
f6:d9:54:03:55:b8:84:ff:ac:c2:0d:ea:07:c3:e3:
a3:4a:6a:e1:22:ea:8c:fb:c6:c9:1b:cc:74:24:93:
f2:04:67:ae:4c:7b:c6:96:88:ad:e0:07:fa:e9:a8:
34:8c:24:e5:0e:c9:91:bb:45:39:3a:12:43:c5:d8:
5b:13:ac:84:95:5b:c7:13:c3:53:ef:d2:a6:7d:82:
5b:ba:1b:15:bb:92:3e:e7:a2:90:14:28:ed:92:74:
7e:4b:6e:d0:8c:b9:d6:33:89:4c:12:9f:29:3c:1a:
6d:2e:d0:f4:1c:a5:37:97:10:96:77:0b:75:09:3e:
24:c9:f7:d3:4c:18:cd:cb:12:69:37:81:39:40:46:
b0:8d:2c:bc:d6:42:7e:db:29:bd:91:d1:23:a7:9c:
99:ac:d9:f2:3c:2d:b0:cf:09:06:0a:9b:75:da:59:
58:0c:bf:ab:6e:7d:5a:3b:60:e7:55:33:af:f0:f4:
95:08:ab:1b:ca:ea:d9:e6:4c:fb:da:74:f2:88:13:
40:e0:fd:ef:91:cb:b9:30:6c:d5:1f:d9:c8:2c:46:
a5:7e:b4:72:af:17:8b:1b:48:6b:0e:6e:5b:bd:9b:
1f:a0:32:02:12:19:1c:de:f2:6b:9e:bf:86:b9:ce:
f1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3D:61:4A:64:C7:D1:C6:68:B7:80:40:02:C7:A4:F7:F2:E0:C4:66
X509v3 Authority Key Identifier:
keyid:99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:84:71:e6:9b:3e:e5:a2:dd:8c:10:65:3b:9f:31:f0:5e:43:
c7:96:0c:71:f0:69:68:28:d2:1d:8a:ea:1d:9c:70:10:3c:76:
42:87:37:03:99:1b:8a:53:2c:03:cd:02:65:99:71:37:9d:05:
fa:f4:78:23:85:e3:7f:55:12:f6:8a:b4:e9:c9:51:a0:47:ce:
b2:91:c9:67:74:09:0e:d2:26:cc:87:ac:eb:9b:66:7c:de:ef:
97:f2:4d:30:54:ea:8b:02:97:c7:ca:26:b1:3c:25:ab:98:6f:
d1:14:ab:f8:e2:0f:04:a7:1d:ea:86:6c:fa:34:1a:e6:4d:db:
fd:11:84:17:41:58:ef:12:cb:8a:1f:fa:8b:8c:69:5c:88:c9:
b0:47:69:dc:8e:49:d7:45:49:d0:e4:c2:3c:3c:94:48:aa:99:
ad:96:b7:e9:f9:dd:2d:91:42:42:8b:b5:5a:9e:b5:da:0f:fe:
f2:b1:cf:75:dc:4e:b3:43:72:ed:26:d3:c9:c4:a4:71:65:98:
e4:37:4b:1d:53:34:fa:cd:a7:c2:00:55:44:c6:ab:53:94:d6:
82:1b:e7:3a:d9:00:82:7c:f7:b8:42:23:0e:ca:74:22:8d:f5:
22:2e:65:06:8e:6b:7b:9f:0b:74:42:6d:75:52:58:5a:9a:93:
4d:42:71:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:30 2025 by rpki-client