Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/937592-0d73-48cf-b0c3-79e2cac301e1/1/MWixdJ_XJ9XP9nt0LWUr0d3SKH0.mft
File: MWixdJ_XJ9XP9nt0LWUr0d3SKH0.mft (raw, json)
Hash identifier: EKD4b3bbge53eudnQCVP2Sm+yPibPF1mmZjUD9crX5U=
Subject key identifier: 0F:D1:AE:75:BA:28:6E:94:42:C9:6B:7E:BE:8F:9B:67:D0:C6:D3:CA
Authority key identifier: 31:68:B1:74:9F:D7:27:D5:CF:F6:7B:74:2D:65:2B:D1:DD:D2:28:7D
Certificate issuer: /CN=3168b1749fd727d5cff67b742d652bd1ddd2287d
Certificate serial: 0186E451211D7D4F1B7EF460D48CD4AC3F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWixdJ_XJ9XP9nt0LWUr0d3SKH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/937592-0d73-48cf-b0c3-79e2cac301e1/1/MWixdJ_XJ9XP9nt0LWUr0d3SKH0.mft
Manifest number: 01
Signing time: Wed 15 Mar 2023 08:09:27 +0000
Manifest this update: Wed 15 Mar 2023 08:09:27 +0000
Manifest next update: Thu 16 Mar 2023 08:09:27 +0000
Files and hashes: 1: MWixdJ_XJ9XP9nt0LWUr0d3SKH0.crl (hash: N3j/GeEkA/ByG0TOKZOVaHGweVWC6fNzJB6cSp7rw/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:51:21:1d:7d:4f:1b:7e:f4:60:d4:8c:d4:ac:3f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3168b1749fd727d5cff67b742d652bd1ddd2287d
Validity
Not Before: Mar 15 08:09:27 2023 GMT
Not After : Mar 16 08:09:27 2023 GMT
Subject: CN=0fd1ae75ba286e9442c96b7ebe8f9b67d0c6d3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:41:a7:4c:ae:cc:59:3e:86:2c:0d:cb:2a:b1:
de:7a:82:f7:64:b6:90:14:87:a1:92:b5:7a:9a:34:
c3:23:39:86:2c:46:7a:e3:59:1c:3a:80:26:fe:55:
51:03:34:5a:55:fa:54:44:5f:9d:70:a2:32:38:d0:
2a:87:5d:4f:8a:b0:8f:01:ab:70:62:14:d4:cf:88:
ce:ba:a0:7f:a4:93:90:8c:e1:2c:0e:c4:2d:d5:c9:
82:b8:29:37:5a:2d:1f:b4:84:49:36:f2:ef:ad:d1:
bc:60:7a:5b:6b:cf:9f:41:d0:be:2d:02:0b:43:8b:
a3:4d:8b:34:c2:e4:59:9d:fa:8f:9e:ec:2a:fa:18:
05:bf:c2:ce:58:10:86:ec:8a:f2:9a:23:ac:60:db:
0d:07:e9:db:b3:9a:22:33:3f:17:5e:70:5b:00:47:
6d:86:55:f3:f4:c1:a0:e1:7e:d0:96:41:37:39:28:
55:bf:02:3d:66:aa:77:42:0b:76:6b:fc:93:e9:bb:
ec:13:8f:9f:23:1d:07:3c:1d:20:09:16:f3:8c:f1:
4e:ca:ed:67:42:94:36:62:0c:c2:3a:ce:98:49:52:
c5:02:62:b9:d2:65:c3:55:da:25:b0:e6:6e:a6:7a:
ac:cc:4a:dc:02:65:6a:c7:13:5b:cc:53:49:79:9f:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D1:AE:75:BA:28:6E:94:42:C9:6B:7E:BE:8F:9B:67:D0:C6:D3:CA
X509v3 Authority Key Identifier:
keyid:31:68:B1:74:9F:D7:27:D5:CF:F6:7B:74:2D:65:2B:D1:DD:D2:28:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWixdJ_XJ9XP9nt0LWUr0d3SKH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/937592-0d73-48cf-b0c3-79e2cac301e1/1/MWixdJ_XJ9XP9nt0LWUr0d3SKH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/937592-0d73-48cf-b0c3-79e2cac301e1/1/MWixdJ_XJ9XP9nt0LWUr0d3SKH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:57:ab:79:a9:1e:5c:7a:67:0b:c8:42:d9:5e:ec:3e:48:e6:
ea:e8:7f:1a:4a:0b:96:1e:6a:a5:a7:ae:49:75:c9:96:3b:d8:
ca:03:32:fd:35:78:29:e1:3b:18:c7:aa:ef:94:9c:ff:54:17:
4d:a2:32:1c:8d:11:52:31:cd:71:68:e7:e5:21:f8:84:67:f4:
8c:63:f2:11:35:49:f8:c0:d4:00:7d:8d:aa:6b:06:9b:63:55:
2c:10:94:24:58:97:c9:27:c4:31:61:a7:a1:ac:ec:ca:b7:ab:
44:2e:20:5b:3f:90:b9:2f:71:14:53:4d:eb:42:4a:44:07:7f:
60:08:28:19:5b:44:c0:fd:a4:c3:d0:ea:38:b1:1e:98:b0:77:
ee:79:d4:82:41:4b:67:d1:8b:24:43:a1:56:33:90:f4:81:e1:
ca:d3:b3:31:b3:dc:20:56:dc:0e:46:49:70:ee:83:54:dc:78:
0d:9d:e2:38:85:27:15:a1:29:29:29:c7:97:a1:4d:c4:bd:98:
32:b5:6c:81:b4:1d:b9:21:f9:52:6b:63:f3:fc:53:2f:f6:93:
5f:84:8a:20:09:19:33:72:da:7e:56:e4:77:81:b3:26:de:bb:
95:b0:3e:82:ae:73:a1:cb:76:dd:9b:0f:23:42:34:64:8b:97:
84:c7:91:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:54 2025 by rpki-client