Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/00c82c-09e8-48a6-b89f-35ab47762756/1/MX9rB1acJrecodurZmy0yfrDoSk.mft
File: MX9rB1acJrecodurZmy0yfrDoSk.mft (raw, json)
Hash identifier: sM16WnlJ8dkHVqX4fJAf+YSZLnF2HJfy2ldRDJBUHmU=
Subject key identifier: DD:29:11:48:42:02:A0:0B:76:69:3D:1D:00:9D:68:70:5D:5E:29:B7
Authority key identifier: 31:7F:6B:07:56:9C:26:B7:9C:A1:DB:AB:66:6C:B4:C9:FA:C3:A1:29
Certificate issuer: /CN=317f6b07569c26b79ca1dbab666cb4c9fac3a129
Certificate serial: 019536C1B9EDC323375388D7E97D280B4C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX9rB1acJrecodurZmy0yfrDoSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/00c82c-09e8-48a6-b89f-35ab47762756/1/MX9rB1acJrecodurZmy0yfrDoSk.mft
Manifest number: 0DE5
Signing time: Mon 24 Feb 2025 07:00:20 +0000
Manifest this update: Mon 24 Feb 2025 07:00:20 +0000
Manifest next update: Tue 25 Feb 2025 07:00:20 +0000
Files and hashes: 1: MX9rB1acJrecodurZmy0yfrDoSk.crl (hash: tDFNjd1aA0XoEUyJim2XcezSJc7aKwJdNX0gbLWznQA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:36:c1:b9:ed:c3:23:37:53:88:d7:e9:7d:28:0b:4c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317f6b07569c26b79ca1dbab666cb4c9fac3a129
Validity
Not Before: Feb 24 07:00:20 2025 GMT
Not After : Feb 25 07:00:20 2025 GMT
Subject: CN=dd2911484202a00b76693d1d009d68705d5e29b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:96:a0:6e:5e:05:12:ba:bb:2e:38:72:6e:
39:00:0b:c8:4e:4f:9e:11:a8:aa:5b:c0:ed:06:81:
cb:7f:b3:00:78:6a:ed:d2:c7:8b:92:42:0d:0f:ca:
81:5c:39:34:c5:e3:b9:56:5b:86:00:52:ee:89:f5:
81:62:f1:86:92:55:6a:38:c8:bd:5c:15:c7:46:47:
3a:cb:b1:91:19:05:b6:03:1f:8a:81:c3:18:32:7a:
1d:d8:ca:d2:c4:a2:d2:29:37:c7:bc:6d:46:00:5a:
ea:ef:38:ff:28:7c:23:e1:38:78:0e:03:73:ac:0a:
81:a8:9e:d4:03:cd:66:d9:69:d7:8f:f6:99:fb:77:
f1:79:5b:06:04:59:04:4a:4d:6e:8b:25:22:4d:bb:
52:22:34:20:ca:6f:67:d2:92:92:59:0e:ae:d7:00:
18:76:9e:04:1b:56:55:84:5b:6c:6d:d2:eb:93:b4:
b4:c2:ab:ab:1e:72:8e:23:a4:71:29:27:ea:68:db:
39:24:be:72:d3:05:8f:28:72:0d:ce:b2:4c:c4:52:
fa:d8:4e:a9:ec:6e:ce:ac:6a:f1:14:ea:c6:c3:d0:
9b:e5:9d:f7:2e:35:13:bb:df:7d:d2:63:87:74:ba:
88:df:d8:32:90:40:e8:a7:23:9c:7f:c5:ae:34:bf:
f6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:29:11:48:42:02:A0:0B:76:69:3D:1D:00:9D:68:70:5D:5E:29:B7
X509v3 Authority Key Identifier:
keyid:31:7F:6B:07:56:9C:26:B7:9C:A1:DB:AB:66:6C:B4:C9:FA:C3:A1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX9rB1acJrecodurZmy0yfrDoSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/00c82c-09e8-48a6-b89f-35ab47762756/1/MX9rB1acJrecodurZmy0yfrDoSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/00c82c-09e8-48a6-b89f-35ab47762756/1/MX9rB1acJrecodurZmy0yfrDoSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b5:1e:3a:f7:ee:71:50:45:fc:94:3b:33:5a:1e:14:3d:5d:
56:54:5d:9c:76:50:ea:08:c6:9a:a4:96:44:06:bb:c3:c9:3e:
10:36:53:f7:a7:0b:f4:bb:89:2f:7c:05:3f:70:e3:03:a0:bb:
76:95:ec:77:e0:24:d8:d0:b8:fb:8c:d2:a8:e0:e0:5c:f1:b1:
a7:5f:8e:fe:1d:e6:1c:75:70:94:3a:ae:cd:30:1a:52:21:21:
45:68:45:ab:08:95:d4:eb:0d:e0:c8:52:64:ca:29:f4:25:b5:
e5:96:d4:59:4b:db:55:4f:e6:ad:52:07:ac:30:b6:ab:be:33:
40:14:cb:db:2a:32:32:41:72:ba:e5:95:d0:1c:b6:82:fd:eb:
80:c5:84:52:89:77:7c:e0:d6:50:3f:e3:59:c1:11:5e:50:40:
68:10:c4:c7:a3:ae:fa:d7:d6:32:6c:c3:ae:ae:7d:2c:7e:75:
e4:3a:7a:f1:52:80:3b:90:a9:51:24:95:a0:9f:f5:03:0c:32:
04:4e:ef:c0:d2:9a:ba:25:5d:15:39:80:09:ec:2a:26:88:bb:
cd:ef:a1:1d:3d:c2:4d:af:df:55:46:a8:c2:04:4f:6d:c5:f1:
62:ab:df:0a:7e:9f:2f:34:f8:1e:06:66:0d:62:42:87:e8:2f:
2c:33:26:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:17 2025 by rpki-client