Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/65efb6-331a-4f41-b6bb-81d81fe4ffe1/1/mpjDTwEfE3rumlewtiRyWsHfLQA.mft
File: mpjDTwEfE3rumlewtiRyWsHfLQA.mft (raw, json)
Hash identifier: qUs0yLPPM201frFdsgHDIAJkHabRA1vaDurl+DAZySw=
Subject key identifier: 2D:63:D3:B2:20:61:8D:88:B3:A5:09:DF:05:1F:C6:6D:47:F7:68:1F
Authority key identifier: 9A:98:C3:4F:01:1F:13:7A:EE:9A:57:B0:B6:24:72:5A:C1:DF:2D:00
Certificate issuer: /CN=9a98c34f011f137aee9a57b0b624725ac1df2d00
Certificate serial: 0190E19C3C3831C34DB58741A9749D239D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpjDTwEfE3rumlewtiRyWsHfLQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/65efb6-331a-4f41-b6bb-81d81fe4ffe1/1/mpjDTwEfE3rumlewtiRyWsHfLQA.mft
Manifest number: 0622
Signing time: Tue 23 Jul 2024 22:00:30 +0000
Manifest this update: Tue 23 Jul 2024 22:00:30 +0000
Manifest next update: Wed 24 Jul 2024 22:00:30 +0000
Files and hashes: 1: mpjDTwEfE3rumlewtiRyWsHfLQA.crl (hash: pkRkxVB743ViBJIiuWe6QZznimg3yuwc2OoYhr61MoM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e1:9c:3c:38:31:c3:4d:b5:87:41:a9:74:9d:23:9d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a98c34f011f137aee9a57b0b624725ac1df2d00
Validity
Not Before: Jul 23 22:00:30 2024 GMT
Not After : Jul 24 22:00:30 2024 GMT
Subject: CN=2d63d3b220618d88b3a509df051fc66d47f7681f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:cd:de:3d:2f:86:3f:1e:09:8b:a7:7a:2f:
24:0f:c9:a9:c5:79:ef:55:6a:7a:44:25:f6:89:29:
80:0f:f2:57:e2:ae:ab:48:d9:66:08:ae:fe:eb:4b:
1b:17:9c:90:6c:c8:0c:02:39:c7:1e:24:e0:55:49:
c3:26:8d:f9:6c:a3:90:68:ba:83:43:db:3f:a7:bd:
c8:84:07:a9:50:26:44:5c:ab:a4:28:c0:de:2d:25:
45:4f:5b:4d:fd:26:ad:72:eb:10:38:94:06:d9:ad:
11:bf:c3:6e:71:be:71:d4:13:fd:32:ea:af:7a:01:
85:6d:70:6e:db:77:24:e4:53:3f:e9:13:bc:84:5d:
39:01:0c:57:15:6f:02:7d:41:96:9e:87:d2:c4:d0:
9a:52:7d:88:2a:cb:92:5a:da:5b:6d:18:3c:ba:fd:
42:31:0b:0e:61:aa:d5:79:c8:71:36:ba:4d:71:44:
12:68:a5:60:ec:94:ae:51:ef:2a:94:c3:0d:48:62:
df:a1:d2:ef:dc:17:d6:19:8f:68:ad:c6:c5:0b:54:
91:4b:1e:d9:fa:c1:dd:33:3a:4d:3b:4a:ee:62:07:
cc:0d:5a:d3:bc:6f:70:56:86:cf:6b:d9:12:d2:0f:
b0:bc:c7:72:16:27:bd:a7:6a:b0:e8:ad:74:da:a7:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:63:D3:B2:20:61:8D:88:B3:A5:09:DF:05:1F:C6:6D:47:F7:68:1F
X509v3 Authority Key Identifier:
keyid:9A:98:C3:4F:01:1F:13:7A:EE:9A:57:B0:B6:24:72:5A:C1:DF:2D:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpjDTwEfE3rumlewtiRyWsHfLQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/65efb6-331a-4f41-b6bb-81d81fe4ffe1/1/mpjDTwEfE3rumlewtiRyWsHfLQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/65efb6-331a-4f41-b6bb-81d81fe4ffe1/1/mpjDTwEfE3rumlewtiRyWsHfLQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ca:51:48:dc:71:02:fa:42:69:87:ec:f4:32:38:ea:24:93:
06:a6:96:a3:81:21:98:db:cc:79:5c:bc:8a:d4:62:45:33:08:
4f:a7:26:d2:94:08:76:a2:33:b4:e0:30:cd:63:60:1e:98:fe:
64:97:ca:5c:75:5e:64:98:b6:9d:5c:90:e1:6a:f2:af:24:ea:
18:2a:c2:b1:92:49:01:25:79:1f:07:8e:56:67:47:d9:c0:3d:
b5:b3:90:d6:cf:3b:7c:0c:b8:e4:b4:3f:83:d3:12:be:47:fc:
00:42:f9:92:bf:8e:c4:a7:b3:ab:47:5b:45:8a:76:91:93:74:
b3:0b:11:8c:d8:87:e6:f3:6c:5a:18:39:11:90:b0:82:b4:27:
24:35:ba:31:46:89:b0:49:7a:66:51:27:1d:99:b0:ea:ec:88:
22:ba:4d:f2:54:5e:0e:cd:67:d7:24:42:57:ed:16:a7:fd:68:
06:89:ae:da:6b:5c:45:78:91:c2:88:37:3d:a5:f2:f7:07:20:
0a:55:62:3a:9d:46:25:8b:12:a1:45:20:99:9d:f4:16:c5:d2:
60:cd:eb:19:e7:8b:70:fc:f2:cd:af:90:35:c5:0b:f6:d1:0b:
c2:11:a1:90:a8:8d:9b:a4:b2:c3:47:a3:0c:ae:2b:ff:39:3c:
f8:8a:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:55:25 2025 by rpki-client