Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
File: Mb9CyzMks4trh4t81W9pk263w9M.mft (raw, json)
Hash identifier: JhmNlzBwFgyh0sF8xDiHN5508UVdFN1HMEvAOtoWcd4=
Subject key identifier: 2F:7E:68:D1:36:71:EA:C5:79:F8:A6:35:FA:A3:D2:30:1E:79:93:5E
Authority key identifier: 31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3
Certificate issuer: /CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3
Certificate serial: 0194BCE0C6CACF8494646B32EDE76F45CEB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
Manifest number: 026F
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: Mb9CyzMks4trh4t81W9pk263w9M.crl (hash: IeTlDPz5GuQc+331AMsauqsnEQ0qBTQOS0XA9Rjyb04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c6:ca:cf:84:94:64:6b:32:ed:e7:6f:45:ce:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=2f7e68d13671eac579f8a635faa3d2301e79935e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:aa:49:b7:08:7c:07:12:3a:a8:01:ee:8f:e5:
3a:05:7b:00:b9:68:a2:d2:78:d3:b5:cf:a8:ef:e7:
91:6d:56:26:63:58:0c:7b:75:41:ab:2e:c7:4f:6a:
8c:b9:c1:a5:a8:a7:cd:df:9b:5c:b2:3f:02:d4:57:
7d:5c:51:4b:5f:87:cf:c2:34:5e:4c:3d:c2:8e:5c:
ff:fd:e5:b1:91:9e:5b:5a:7c:e5:6e:2e:fa:21:70:
bf:52:4f:f8:09:7c:cc:ad:ac:5a:1d:27:c2:87:ee:
41:c4:10:38:f1:0b:a3:59:29:00:b2:5c:ea:8e:b9:
4d:6a:38:ac:8c:8f:c0:92:7e:13:ca:64:7f:23:5a:
a7:77:a3:2c:74:49:92:2c:f3:a3:5f:19:90:05:cd:
12:c4:e7:95:2c:97:eb:79:cb:cb:2d:d1:b9:03:67:
2f:8b:72:ac:4e:aa:96:b6:ae:e1:c6:40:0f:00:51:
b7:43:96:9a:19:6a:11:a1:45:33:d7:c8:75:87:f6:
a9:2e:d6:fd:f4:f8:5e:58:8f:38:b0:db:b3:c1:9c:
27:e3:76:e6:f0:18:5e:29:3a:1d:53:77:a8:cc:61:
d1:2a:2c:6c:d2:10:51:47:4f:e4:16:19:d9:99:fa:
57:cd:40:5d:d4:4a:93:98:33:44:d0:f4:ff:e0:f8:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7E:68:D1:36:71:EA:C5:79:F8:A6:35:FA:A3:D2:30:1E:79:93:5E
X509v3 Authority Key Identifier:
keyid:31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e2:5d:a0:fc:ae:fa:d9:55:f0:fa:4b:33:8e:d2:0d:7a:74:
1c:cb:86:c3:2e:57:13:5c:d3:17:da:b5:b2:17:de:08:e4:da:
e8:27:05:23:75:25:ba:2b:45:8b:35:b5:6c:68:e1:04:7f:1c:
f0:17:f5:ec:36:28:4b:10:40:59:15:70:0f:67:9f:fa:88:a6:
be:04:be:8f:94:71:65:15:cb:8f:1a:ef:ff:fd:4e:63:b1:4b:
b4:f1:9e:85:1d:15:ec:8a:32:b4:ef:0b:4f:28:d1:be:29:28:
97:d9:d8:fe:23:b2:20:7d:bc:bb:9d:b6:ee:98:cf:2c:38:a1:
f5:8e:68:2e:6a:99:b3:ef:1b:b1:c5:78:e3:e7:fb:c3:36:7b:
10:bc:6d:33:b9:07:38:11:94:b0:33:f9:22:3b:d5:40:76:2f:
54:ec:b6:3e:2a:a7:c3:53:ce:59:fd:89:70:43:e4:e8:7b:e7:
4a:66:31:89:0b:ab:57:35:7e:ba:26:79:99:36:df:bf:3c:41:
6b:e5:e8:12:99:c1:73:72:1a:6b:20:be:c8:71:f8:92:d4:f8:
ff:08:03:62:21:cb:8a:32:33:94:d6:5d:21:d7:62:1c:9d:7a:
86:93:93:c1:d8:7a:de:e8:18:d8:0b:ae:a3:2c:38:0d:fe:cd:
98:7a:aa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:34 2025 by rpki-client