Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
File: maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft (raw, json)
Hash identifier: ToGXMEtQbPNkuCiwIDbqZsOwKpe9zooKapEEkMvXaF0=
Subject key identifier: 62:F4:29:2F:D1:EF:E0:CC:9A:7A:33:C5:EF:4A:C6:C8:69:5A:75:87
Authority key identifier: 99:A5:E4:C1:CD:E8:BC:B3:B8:42:07:70:D5:9A:83:A7:91:7C:8C:C8
Certificate issuer: /CN=99a5e4c1cde8bcb3b8420770d59a83a7917c8cc8
Certificate serial: 0194BCA99CC3856D52782BD96A4F7B00273C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
Manifest number: 0FE8
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: maXkwc3ovLO4Qgdw1ZqDp5F8jMg.crl (hash: hn0SKLLcSJBAEDN2DCqo6cOfHKUMzdFBUSah64TU0NY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9c:c3:85:6d:52:78:2b:d9:6a:4f:7b:00:27:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a5e4c1cde8bcb3b8420770d59a83a7917c8cc8
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=62f4292fd1efe0cc9a7a33c5ef4ac6c8695a7587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1b:9a:3e:16:9b:5f:c1:16:99:8c:44:57:a7:
4f:ab:c0:39:b5:50:fe:c5:96:ae:1d:06:89:d8:e8:
0d:bf:90:6d:04:9b:83:a0:37:50:e0:f6:af:fb:49:
be:be:3e:6c:99:c7:41:84:47:54:8e:43:e7:1e:a1:
0e:32:1d:2a:8c:f3:b3:fb:b4:fc:69:cb:8a:90:ed:
9a:c0:83:ec:c2:c0:10:ae:7b:93:1d:0a:4b:66:04:
22:3c:63:be:08:9e:29:46:a8:07:43:4d:c5:cb:c9:
81:6f:5e:31:bb:a9:5d:57:5f:8e:2c:6f:94:35:96:
79:80:bf:01:0c:c2:14:d4:1e:a5:9b:79:e6:89:45:
ea:08:1e:b1:e9:0f:0a:e7:fa:9f:14:ad:de:58:7f:
31:7b:2c:3b:38:9b:02:a4:56:d3:cc:c5:04:f3:9a:
1c:af:dd:4b:93:0a:dc:46:9e:44:a6:57:2f:75:3a:
ee:7f:55:38:fd:e1:72:49:a6:0a:c4:ff:cd:ef:4f:
28:95:ad:48:cd:e3:73:59:41:8b:3f:da:23:5a:69:
82:92:2a:ef:c5:c7:e2:ae:b0:ba:1b:ec:50:f0:24:
97:3d:1c:78:ef:c8:dc:f4:5a:85:10:1a:b6:50:65:
79:62:d8:e0:96:1c:99:af:a0:41:07:11:70:f6:87:
a6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F4:29:2F:D1:EF:E0:CC:9A:7A:33:C5:EF:4A:C6:C8:69:5A:75:87
X509v3 Authority Key Identifier:
keyid:99:A5:E4:C1:CD:E8:BC:B3:B8:42:07:70:D5:9A:83:A7:91:7C:8C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:52:56:85:42:9c:fb:27:f5:6d:af:be:95:0a:b5:db:83:fb:
a0:3c:dc:07:a8:05:b0:7d:e1:99:c1:e6:62:63:51:6d:c8:29:
4a:22:0c:5a:e3:df:e8:2b:12:6b:59:06:56:96:87:4c:a9:10:
85:bb:a3:55:b5:31:a3:67:67:4a:13:56:26:e4:3e:b6:9a:99:
9e:79:09:bd:4c:dc:b2:5f:0e:18:95:ba:47:7c:95:7b:f9:30:
db:51:54:d2:c6:c6:fd:07:fb:0c:b0:50:66:ef:8c:fd:89:50:
a0:fa:96:25:e7:28:a3:34:45:7f:59:58:76:90:4a:bc:dd:50:
92:f7:f7:61:e3:8e:65:37:98:f1:69:8d:bc:f3:f5:1c:04:16:
59:5b:be:ee:e6:aa:c7:bd:71:6d:c3:f6:3a:67:0e:dc:96:b1:
6c:27:80:e9:70:80:12:8e:27:06:46:2e:56:23:1b:69:49:52:
41:85:e1:06:a8:e8:af:2d:6f:78:1d:89:51:f5:9b:93:b9:91:
a3:a4:13:7e:9a:6c:2c:40:49:e0:46:c1:ca:15:c8:95:82:1f:
e5:a7:9d:e6:cb:8b:c4:41:76:b1:5d:e3:d9:68:5d:e6:c7:ae:
a1:07:cf:cc:46:c1:6c:e7:2a:77:f7:a0:a9:54:6e:ef:5a:22:
52:02:eb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:27 2025 by rpki-client