Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
File: mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft (raw, json)
Hash identifier: k95C7/cbxOi86JIoIoMrBPYemzdtxT3uuCI5ls9Pdyc=
Subject key identifier: 7E:45:1C:3A:D5:8D:85:05:93:9E:A4:22:84:C4:68:58:04:51:7D:DF
Authority key identifier: 9A:F9:D1:E5:5F:43:E4:FD:D6:D2:4F:B4:B0:ED:A6:E9:D1:28:AA:51
Certificate issuer: /CN=9af9d1e55f43e4fdd6d24fb4b0eda6e9d128aa51
Certificate serial: 0194BBCDEF2BB3EF41ADD3F10E8BC5C47872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
Manifest number: 0ECC
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl (hash: DkXoV6zfMvjrQx7xQTl6SJvnjEzqqYoILSmlv7AGk+k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ef:2b:b3:ef:41:ad:d3:f1:0e:8b:c5:c4:78:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af9d1e55f43e4fdd6d24fb4b0eda6e9d128aa51
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=7e451c3ad58d8505939ea42284c4685804517ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:0f:95:99:a2:a0:8c:e5:9c:87:4d:12:0e:
68:18:a1:32:b2:13:66:c7:d4:68:c5:43:68:2b:17:
de:d1:8c:06:0c:8a:22:31:b4:06:46:65:3f:7b:de:
50:65:41:9e:d4:55:d0:40:0a:8a:cc:26:db:95:fe:
82:eb:e2:5a:a5:eb:85:51:0c:16:1b:37:0d:b5:e4:
f4:1b:ae:03:fa:b1:b1:b8:7e:b5:9b:1b:f0:b7:e1:
ea:14:f8:62:ce:ea:03:0c:63:40:16:2a:b6:01:a9:
40:b4:7f:3f:30:49:10:3f:50:8e:10:d6:e8:90:cd:
b5:db:73:f1:9d:42:e5:19:e4:4b:5a:c3:9b:71:b3:
69:ba:f7:09:f9:3c:d7:c2:59:f0:3a:66:cc:12:a0:
d3:a6:41:4b:58:e5:76:68:91:98:65:3d:5d:73:ef:
86:69:25:b1:c0:35:b3:e8:ad:69:fe:00:74:97:0c:
79:76:66:42:db:72:c6:57:9a:9e:69:6e:c7:7f:12:
55:16:4f:b7:23:d6:df:60:f8:ba:8e:6e:6d:16:76:
5e:24:a2:3f:fc:69:5b:57:bc:dd:ef:b5:17:f4:df:
a8:81:76:6a:43:71:d9:bd:cc:7e:63:d3:45:16:16:
12:79:b3:95:b6:4a:6a:8e:a2:3a:0d:de:a0:a4:e5:
c6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:45:1C:3A:D5:8D:85:05:93:9E:A4:22:84:C4:68:58:04:51:7D:DF
X509v3 Authority Key Identifier:
keyid:9A:F9:D1:E5:5F:43:E4:FD:D6:D2:4F:B4:B0:ED:A6:E9:D1:28:AA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:83:9b:80:13:d7:99:22:e5:f1:72:2e:90:b2:12:fb:bd:87:
03:e4:e6:84:86:5f:53:60:f7:1e:bb:b8:33:26:05:15:e8:72:
d4:71:af:1e:e0:b8:00:14:c6:4a:d4:3a:43:0f:8b:61:e6:06:
15:c0:0b:b8:10:2f:f9:0a:dd:b1:3a:e7:90:ff:53:20:30:e2:
24:92:9c:21:49:f7:6a:61:a2:36:51:9f:b9:61:3b:09:16:eb:
af:b3:51:0a:8a:a2:ff:c9:9f:77:ce:5b:ff:f5:40:3f:e0:4d:
07:c8:c5:a4:4f:d6:b8:6d:ad:88:d0:60:18:2d:f6:41:a6:98:
d3:64:35:e6:d2:2d:68:be:90:e3:2f:23:0c:ca:c3:9f:a2:7e:
c7:71:e5:e6:cd:17:ba:eb:82:cc:10:9e:3a:ce:69:68:99:22:
6d:26:7d:1c:95:30:27:66:7e:a1:18:f4:ed:9b:f7:df:c7:84:
29:5a:d9:a2:9e:0a:7f:f8:f4:43:c7:14:46:ae:ca:ec:14:cd:
b1:ae:b6:35:a2:60:37:4d:c4:dc:e7:b2:8b:0a:20:81:0f:b6:
82:f9:c1:0e:04:fa:03:58:ca:38:fe:45:d2:fb:43:88:86:3e:
3d:44:29:67:9e:73:d4:95:63:27:9d:63:47:f9:36:32:d5:88:
5d:6a:0d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:38:28 2025 by rpki-client