Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.mft
File: M3SaPCzREJZkQBHb8I7W2DmHLgc.mft (raw, json)
Hash identifier: R90JrmevNKII43JEXv+CFVa7Gx1VdQjReDArP/8Kpes=
Subject key identifier: CC:AF:40:22:88:04:2A:B3:D8:BE:9D:D9:51:8A:F2:B6:7D:48:45:7E
Authority key identifier: 33:74:9A:3C:2C:D1:10:96:64:40:11:DB:F0:8E:D6:D8:39:87:2E:07
Certificate issuer: /CN=33749a3c2cd11096644011dbf08ed6d839872e07
Certificate serial: 0194BCAA15CF3289791809ACCAEE9D8C8BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3SaPCzREJZkQBHb8I7W2DmHLgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.mft
Manifest number: 10CF
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: M3SaPCzREJZkQBHb8I7W2DmHLgc.crl (hash: BcCs4EK6lM661wrIuA3VCmsNto0lkpQMblyjslgr8Vs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:15:cf:32:89:79:18:09:ac:ca:ee:9d:8c:8b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33749a3c2cd11096644011dbf08ed6d839872e07
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=ccaf402288042ab3d8be9dd9518af2b67d48457e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2a:f8:7c:7e:d3:24:87:5b:91:de:93:e0:24:
45:8b:1f:60:75:a7:2d:f4:b3:0d:1d:61:85:48:d0:
0c:d8:56:2d:dd:dc:c4:9c:c7:ae:4e:8a:8d:95:84:
c2:a3:1a:56:54:b1:98:50:f3:83:e3:86:c1:14:df:
e3:8e:7a:76:a7:e8:a3:62:67:90:2e:bd:ba:57:44:
ee:c0:5e:2c:60:ad:01:c0:77:e8:02:a2:22:e1:0c:
96:da:c7:b9:ce:5d:0f:cb:a7:f8:f0:7f:e9:49:57:
41:58:69:9f:1c:8f:64:cb:4d:66:24:51:a1:df:b7:
f3:16:7b:54:38:65:3e:7e:4d:38:ab:c7:23:1b:61:
80:1d:b9:4b:1c:94:0a:89:36:e9:0b:ee:95:dc:c2:
29:76:44:f4:1e:b4:46:98:74:6d:01:9f:74:2a:db:
d3:a7:48:2d:64:a3:15:2e:3e:e8:a3:dd:97:1a:87:
75:b8:82:47:60:9c:e4:19:6b:e6:85:ec:ec:27:9c:
42:d7:7c:04:3c:ec:fd:7a:eb:1a:16:ae:b3:fd:d3:
29:c4:f6:0b:5c:10:42:aa:de:f1:fd:7d:0f:bd:9c:
3b:bf:78:76:0a:d2:9f:84:ea:be:2c:f2:1c:4f:c8:
94:23:9b:1d:a5:c6:24:dc:f5:09:bf:24:1d:11:a6:
1a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AF:40:22:88:04:2A:B3:D8:BE:9D:D9:51:8A:F2:B6:7D:48:45:7E
X509v3 Authority Key Identifier:
keyid:33:74:9A:3C:2C:D1:10:96:64:40:11:DB:F0:8E:D6:D8:39:87:2E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3SaPCzREJZkQBHb8I7W2DmHLgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c6:0f:e5:d7:90:63:93:f5:99:ff:5a:58:86:86:b3:6b:2c:
c4:55:0a:75:89:fa:3c:06:3d:65:c2:a9:88:3a:86:72:80:0a:
4c:20:a2:de:c3:b9:23:5c:70:75:90:ba:11:0e:54:4d:92:b6:
81:cc:56:e3:cf:53:65:68:c1:a5:6c:77:8b:04:b8:21:2b:e6:
e5:0e:6b:42:c7:cc:c7:c3:57:b9:89:48:3e:b9:75:8d:0b:4a:
58:59:29:e9:4c:85:c0:2c:2a:79:4c:17:c2:93:a7:fb:5c:02:
f7:17:a0:99:9f:ed:74:9c:01:74:21:c6:d4:10:2f:70:17:6c:
63:83:ae:c9:33:34:9b:a8:ff:74:53:a2:37:3b:c7:78:02:af:
a0:27:bd:77:52:5e:1a:49:30:c7:9c:a5:e0:bd:25:d2:04:6a:
8b:57:1d:c5:bc:3f:56:db:1f:d7:08:c7:03:33:ad:98:13:86:
2e:c1:c9:69:95:6a:0d:b4:9d:51:cc:4f:c5:ce:02:1c:8b:37:
cb:cd:b6:75:5b:4d:26:53:a4:f4:97:70:99:ad:be:c8:b5:c5:
76:0f:68:95:28:c9:6c:aa:38:df:ff:ab:4f:b1:b1:9a:56:97:
06:63:60:73:85:76:3e:6b:4b:ef:24:91:00:08:75:44:bf:6f:
80:94:03:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:40 2025 by rpki-client