Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.mft
File: MqNUd_Ow3WY3wp0-G9_A2qxxvmE.mft (raw, json)
Hash identifier: s44yjdYNNhZMk1Y/2qbIae/nAFQ7r5ht29hq93ofl6k=
Subject key identifier: A4:02:02:22:DE:78:F8:F5:71:F4:61:D6:64:80:09:2C:49:AF:85:AE
Authority key identifier: 32:A3:54:77:F3:B0:DD:66:37:C2:9D:3E:1B:DF:C0:DA:AC:71:BE:61
Certificate issuer: /CN=32a35477f3b0dd6637c29d3e1bdfc0daac71be61
Certificate serial: 0194933FD64DC074BD40463CAF7877156ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.mft
Manifest number: 0BAE
Signing time: Thu 23 Jan 2025 13:00:21 +0000
Manifest this update: Thu 23 Jan 2025 13:00:21 +0000
Manifest next update: Fri 24 Jan 2025 13:00:21 +0000
Files and hashes: 1: MqNUd_Ow3WY3wp0-G9_A2qxxvmE.crl (hash: /8hfJEiyrzqQ0RvsMCoSKtLl8vgokhz7eFsG5eFtuv4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:3f:d6:4d:c0:74:bd:40:46:3c:af:78:77:15:6a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a35477f3b0dd6637c29d3e1bdfc0daac71be61
Validity
Not Before: Jan 23 13:00:21 2025 GMT
Not After : Jan 24 13:00:21 2025 GMT
Subject: CN=a4020222de78f8f571f461d66480092c49af85ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:a4:0c:23:86:6b:33:01:8b:32:14:31:27:
5a:cd:7e:fb:b5:d1:99:58:89:d5:00:4b:2d:7f:db:
e6:93:1e:55:47:93:4e:f3:f8:a7:48:e0:8e:ab:37:
2d:09:2b:98:ed:b5:11:ee:07:d9:f0:c0:b7:a9:ae:
1e:4e:2f:1d:1e:61:10:6a:7c:1f:4d:44:d7:78:fd:
ab:5d:68:f3:14:b6:d8:69:b2:88:26:fe:af:9a:50:
b8:9c:54:95:e0:b5:03:e0:6a:7f:b8:65:b8:bb:d7:
c2:30:c4:46:dd:23:29:0c:48:f6:68:4f:d2:7a:3c:
06:3a:22:74:a1:7f:87:67:4a:b7:ff:57:38:00:ad:
c7:d1:dd:93:72:2f:ca:21:96:81:f2:5e:e7:93:3c:
20:9d:d0:4a:15:62:a7:40:94:8c:e0:d9:a2:f6:b0:
cc:76:9d:4c:08:b9:3a:2e:b8:c4:4d:fc:66:48:f4:
28:10:1d:70:b0:cf:5e:00:8a:c8:3b:14:33:06:cf:
77:da:ad:5e:e3:04:4e:f2:11:0e:cf:f2:fd:bb:a8:
1d:14:8b:2b:2e:1d:23:7b:1a:74:17:04:87:ac:13:
02:1f:cb:1f:7d:16:98:8b:31:03:49:8b:a8:f5:11:
3c:40:93:14:a9:6a:ce:b5:5d:bc:f3:99:4f:0a:f6:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:02:02:22:DE:78:F8:F5:71:F4:61:D6:64:80:09:2C:49:AF:85:AE
X509v3 Authority Key Identifier:
keyid:32:A3:54:77:F3:B0:DD:66:37:C2:9D:3E:1B:DF:C0:DA:AC:71:BE:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fe688-c8d9-40b5-8faf-7e3f3aa8897f/1/MqNUd_Ow3WY3wp0-G9_A2qxxvmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:50:e6:b8:eb:f2:fe:09:7b:9d:6e:cb:2d:b6:4e:31:2d:31:
9d:6d:4c:e7:5d:90:2c:e4:f7:19:9c:55:c0:a6:d3:b9:d7:92:
ec:8f:06:66:7d:fb:36:74:18:3d:df:48:35:b0:75:7a:83:0e:
16:6c:14:87:41:b0:27:f8:0c:e1:c7:f4:76:da:98:1e:a1:1f:
3b:5b:36:f1:8c:1c:a1:da:9a:fc:ef:0d:d6:57:cf:09:d2:ce:
f0:1f:46:3d:3e:f1:cc:d1:46:15:69:47:cb:1b:0c:8d:a5:1f:
ce:96:c6:10:a3:c3:af:bd:c8:9d:fb:e6:c1:56:d2:21:b5:3a:
a8:e6:46:5c:5c:d3:f7:26:67:4e:a9:61:b7:8b:05:13:0b:5b:
d7:89:68:e0:a0:eb:8b:83:c0:84:c2:1d:cc:f7:9b:fd:af:3e:
f4:aa:ca:b4:b4:ab:1e:ce:b6:b1:f2:48:5c:d8:98:70:74:85:
49:4a:6e:58:bb:65:ee:29:1d:75:3a:b0:7a:fc:41:b4:50:4e:
76:97:bb:20:74:62:0d:80:8d:75:e8:aa:41:45:83:d4:78:83:
e3:92:d5:c7:72:36:68:ca:77:49:0c:41:3f:5f:2e:9e:12:bc:
ea:ef:0a:6a:2e:b3:e6:1e:4a:a0:f6:1e:35:1b:b9:71:0f:86:
01:ff:f6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:58:29 2025 by rpki-client