Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
File: MxpRr9TLZoLCMN7WQGWMETxWL9I.mft (raw, json)
Hash identifier: 3qlyCgwdhmmhnDuEyCX/yntxtE1wtmUnfy1Y1SU0NYM=
Subject key identifier: 93:32:84:F9:87:3B:77:33:BF:5D:D9:F1:F3:CD:D0:85:41:A2:E9:5F
Authority key identifier: 33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
Certificate issuer: /CN=331a51afd4cb6682c230ded640658c113c562fd2
Certificate serial: 0194BC04CB5D6570399CCBFD3375F07AA72E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
Manifest number: 0678
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: MxpRr9TLZoLCMN7WQGWMETxWL9I.crl (hash: gLgltBmNcjHsI4GNCSNaJlrkXUu4RJ9Qk/VXY68WXjo=)
2: TS9TQNQnmKCUyfNW3iHSrKN4kHU.roa (hash: FKmub+udVUMJc6SCu1H3/G3fAnw8GwGXkDsFmXaZ8+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cb:5d:65:70:39:9c:cb:fd:33:75:f0:7a:a7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331a51afd4cb6682c230ded640658c113c562fd2
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=933284f9873b7733bf5dd9f1f3cdd08541a2e95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:d7:e2:41:76:a0:38:95:d4:5f:38:a0:b9:82:
ba:bf:26:d5:f7:ba:5c:4c:51:e1:46:8e:c0:9f:64:
bd:dc:2f:7f:f6:8b:b1:f5:66:9f:0e:de:32:21:36:
8f:a5:f4:32:87:42:e4:1a:ca:03:44:73:4c:71:a3:
c8:ff:ae:52:dc:ea:97:06:8a:8b:7a:59:da:61:18:
83:27:59:f6:72:7c:4c:5f:25:08:f7:36:81:ce:85:
19:49:fc:90:85:af:d7:dc:87:fd:0c:c8:f1:14:33:
88:ab:65:20:c9:de:23:ce:c4:6f:68:0a:e8:a6:45:
64:ea:96:27:be:8c:25:3f:35:7c:7b:09:8a:12:36:
d5:b8:d4:d3:4c:8c:d2:fa:65:c7:86:dc:f1:4a:77:
1a:2a:de:93:44:91:3d:02:e8:d6:74:c8:41:35:e4:
0c:be:0f:ef:ce:ff:1c:57:98:9c:d5:8e:e5:a2:22:
d0:aa:1d:50:67:3d:ec:51:97:dc:e9:e0:db:ff:8d:
9d:23:66:41:f3:30:54:23:d4:ea:ae:e2:56:88:39:
c3:d2:92:c3:6c:41:22:48:3d:35:c0:a5:a9:d4:28:
41:3b:c5:9c:98:fe:2e:8d:41:c2:f8:07:51:37:41:
89:0b:b2:6d:e7:4c:e0:8d:8c:8f:85:71:5b:52:19:
16:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:32:84:F9:87:3B:77:33:BF:5D:D9:F1:F3:CD:D0:85:41:A2:E9:5F
X509v3 Authority Key Identifier:
keyid:33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1b:7e:74:d8:8f:6a:52:36:8f:b2:72:c5:87:55:76:cc:16:
98:3e:89:25:5e:75:89:b1:b9:e9:06:46:ff:d3:ee:df:73:78:
02:21:b1:d2:78:fe:6e:63:19:1d:88:ec:17:85:ee:e4:ee:0b:
7e:c8:b5:3c:f9:e9:09:98:9d:be:70:a3:14:c9:13:29:28:0e:
33:ad:d8:ec:4f:e1:2f:6f:3d:c4:c2:c2:61:e3:9b:71:ef:69:
f8:41:ec:42:39:e0:d2:84:1e:50:05:2d:22:a1:8c:57:94:47:
f5:8f:cc:f0:24:99:3c:59:41:13:ba:a6:a0:45:8b:60:16:c2:
39:d3:b5:e7:66:b8:3b:b7:22:26:6b:90:f6:6c:13:23:d6:01:
a5:53:1e:7a:05:8a:91:f9:c5:e5:0d:d6:be:e9:54:8c:e8:38:
58:bb:d1:7f:17:b1:79:07:ae:ac:ea:a6:0e:3a:11:5f:ae:32:
a4:97:91:42:c9:91:69:cd:08:e5:4f:e4:e3:9f:a6:86:2a:72:
96:8d:af:1d:56:42:b8:7e:2a:66:6f:1d:fb:d4:49:05:16:42:
46:5d:86:a8:a0:f0:47:69:99:22:9d:0c:e9:a4:2a:be:e4:d0:
12:75:56:8c:59:0f:61:a6:4d:cf:2b:85:5e:e0:92:e2:4a:f7:
92:6f:2c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:56 2025 by rpki-client