Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.mft
File: mK47fDdSIET2g56i65KSvq3Up3M.mft (raw, json)
Hash identifier: JLZcTVQfRU4/AVKAYvLObP5lkN/EvqVmOjKGwobMDIc=
Subject key identifier: 29:71:A2:A9:79:0A:5F:E5:BA:C7:2D:58:E5:F0:C1:C2:C8:95:36:C8
Authority key identifier: 98:AE:3B:7C:37:52:20:44:F6:83:9E:A2:EB:92:92:BE:AD:D4:A7:73
Certificate issuer: /CN=98ae3b7c37522044f6839ea2eb9292beadd4a773
Certificate serial: 0195B2FFB0D4B61124635C1B2FECD9452B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK47fDdSIET2g56i65KSvq3Up3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.mft
Manifest number: 14A8
Signing time: Thu 20 Mar 2025 10:00:56 +0000
Manifest this update: Thu 20 Mar 2025 10:00:56 +0000
Manifest next update: Fri 21 Mar 2025 10:00:56 +0000
Files and hashes: 1: mK47fDdSIET2g56i65KSvq3Up3M.crl (hash: 8eDX3T4p4xsbfntHaCnsTO+E6r/6H4rR8cocw8YXkfw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b2:ff:b0:d4:b6:11:24:63:5c:1b:2f:ec:d9:45:2b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98ae3b7c37522044f6839ea2eb9292beadd4a773
Validity
Not Before: Mar 20 10:00:56 2025 GMT
Not After : Mar 21 10:00:56 2025 GMT
Subject: CN=2971a2a9790a5fe5bac72d58e5f0c1c2c89536c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:7c:be:1b:26:6e:1b:ad:9e:fd:5a:c2:15:
d5:d6:fe:e0:2e:6b:dd:98:2a:c9:d6:f7:20:5a:f5:
c8:0d:87:1b:b8:25:a1:fd:f4:f6:02:16:71:fa:a1:
00:10:3e:5d:e7:33:3f:b2:cb:ef:fc:0c:9c:24:5c:
29:e3:40:ba:af:42:48:d3:b2:27:8a:a5:a0:00:d8:
a1:c1:36:96:f2:2d:66:6b:a2:6a:0b:f1:be:df:cd:
bd:65:dc:f8:13:98:f0:f0:cf:d9:d5:4f:29:29:51:
0f:ea:e0:ae:80:19:8d:7c:bb:bc:35:12:b0:e3:62:
20:07:26:85:8f:82:03:1e:c5:c6:78:cb:54:be:c8:
96:04:47:0f:f2:1d:38:6d:be:39:3c:f1:b7:e3:d8:
8f:fd:c6:31:a4:0b:b1:44:df:77:ee:23:34:9c:f7:
46:d3:ee:72:c4:90:e8:2e:d2:50:3d:e5:6c:8f:08:
17:f9:a8:3a:06:f9:59:55:64:3c:07:69:86:d2:2c:
b3:75:fc:ac:94:0d:d5:77:ff:b3:e2:3b:75:f0:f3:
b3:0e:ac:2c:8a:ef:ff:f6:df:bc:23:63:bb:45:49:
c5:1f:d0:e0:0d:8d:cd:9c:d1:d2:31:4d:90:e6:08:
7d:ab:d1:c6:1b:90:0d:8b:66:01:09:f8:98:01:c5:
1a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:71:A2:A9:79:0A:5F:E5:BA:C7:2D:58:E5:F0:C1:C2:C8:95:36:C8
X509v3 Authority Key Identifier:
keyid:98:AE:3B:7C:37:52:20:44:F6:83:9E:A2:EB:92:92:BE:AD:D4:A7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK47fDdSIET2g56i65KSvq3Up3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:42:01:e0:17:d2:de:b9:c8:40:2d:f2:6b:7e:ba:88:08:e0:
b5:a1:75:aa:52:c7:39:91:a1:99:24:bd:53:06:7a:29:4a:ac:
6c:20:23:b3:6d:20:68:ba:cd:97:b8:99:e6:7c:e8:e0:8a:ac:
df:d4:29:58:42:b9:ae:1d:73:9c:88:9d:ef:b5:f1:74:fb:4b:
3e:09:8b:32:92:d6:b2:28:52:16:6f:92:1a:31:9a:62:d7:32:
c7:23:e8:08:e0:4a:32:d2:b5:98:17:94:11:63:6b:e1:2f:98:
a9:88:98:ba:84:a2:92:d8:11:2c:6c:2a:04:f1:7d:8c:c5:43:
9b:f4:01:cc:64:1d:58:5a:e9:d4:87:bc:22:c7:04:75:c7:dd:
8d:9a:4d:a3:20:01:f3:5a:13:f0:63:42:50:82:da:41:42:b0:
46:d2:0c:7c:38:cb:2d:f3:b2:03:58:d8:b9:28:d8:ea:0e:8c:
4d:06:a7:e3:ea:58:8c:1f:29:de:46:68:28:0b:3f:54:33:9b:
38:32:2d:cc:53:2d:0d:20:3f:70:9f:60:95:34:74:42:5b:c4:
6c:c7:12:ce:a5:9d:cb:59:bd:ff:33:50:73:93:e6:98:a7:d2:
c8:41:ad:09:de:23:c9:96:06:38:dc:bb:97:a5:18:49:bd:a1:
f9:0e:9a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:00:20 2025 by rpki-client