Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: ipkODTgauaw2wC9LQEuXZveGu1NErOd2qISJi7nhnks=
Subject key identifier: C2:9B:78:E9:03:06:63:CF:FA:FE:95:B9:2C:A7:8D:09:A2:AF:6B:0C
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 0194BD1758646F80FA6E82EBEDE1D347E3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: V9YHc4ASz4E4If88qdrFqh0XLv4HiooG+4sQ6HSHLek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:58:64:6f:80:fa:6e:82:eb:ed:e1:d3:47:e3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=c29b78e9030663cffafe95b92ca78d09a2af6b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:61:4f:e8:54:ae:c0:fc:73:ea:37:dc:35:
96:f6:93:bb:85:42:54:b2:4a:3e:d3:d6:d8:07:96:
97:ca:b1:9d:df:9c:3f:5a:1a:a3:0d:60:08:4c:46:
b0:64:86:db:59:0e:5d:11:cd:b5:bb:0c:3d:52:11:
c0:5f:e6:56:e2:5a:8b:cc:3c:82:98:bf:31:a1:aa:
64:d0:71:51:ee:64:21:ab:98:f5:e4:bc:cc:e1:b2:
1c:c7:bd:dc:a4:e7:0f:ba:5b:9a:44:ff:8e:46:f9:
1e:a6:65:83:51:be:ac:6f:fb:7b:f2:e4:85:1f:9d:
05:9f:be:49:b6:29:8a:e2:6c:aa:2c:63:5d:b4:f7:
1a:1b:32:f9:e7:65:5e:c6:c5:5b:82:7d:42:7d:22:
80:82:70:ba:d3:53:bb:90:17:bf:14:4e:c4:af:dd:
fb:bf:7c:30:49:46:9f:aa:66:e7:cd:4d:f4:05:d6:
d4:f8:a2:b5:d0:16:3e:86:95:16:9f:66:9d:40:55:
eb:a8:b1:b7:08:4d:39:bf:17:3a:4d:5d:b6:14:f8:
52:05:09:4b:22:03:39:27:6e:37:9c:50:87:d1:d9:
8f:99:6a:bd:e3:d3:2e:89:b1:df:cf:2a:e1:cc:ab:
1a:30:8a:d5:7f:ed:38:df:25:6f:ce:65:17:96:47:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9B:78:E9:03:06:63:CF:FA:FE:95:B9:2C:A7:8D:09:A2:AF:6B:0C
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:df:8b:ac:98:32:ca:9a:65:5e:e6:20:4e:21:4d:87:ab:3a:
50:4e:7f:3b:0a:2f:a5:5a:b3:b2:7d:56:10:98:13:44:90:dd:
d6:65:0b:05:6f:46:7f:a5:a3:b0:c6:7b:75:fe:ee:3b:7c:fa:
19:41:d1:9a:48:f4:ba:62:88:56:0f:e1:72:8e:b9:8c:1a:c9:
b2:21:be:2f:d7:60:40:26:aa:ab:50:52:d6:65:bf:23:e3:d8:
5a:04:85:29:81:8d:8d:f4:d2:ab:36:c8:30:44:a7:91:eb:81:
5f:70:94:26:9e:29:4c:9e:4a:07:5c:5c:af:8e:24:3a:40:96:
52:a6:92:97:da:55:5a:91:20:62:15:72:43:66:02:30:e8:f3:
91:27:f3:f5:0a:96:23:59:70:88:2d:3b:7a:16:70:41:75:70:
a8:ba:c1:df:5b:94:69:7d:1f:b4:ac:43:48:05:df:d5:5d:96:
92:2b:0b:6a:c3:e8:20:0a:f8:70:5b:3f:05:1b:4a:89:df:62:
4f:35:c6:20:b0:37:44:15:c2:81:af:04:0e:de:0f:54:c8:29:
d7:6f:e0:bd:eb:18:1f:d4:81:81:95:8d:0d:ba:6e:d2:dd:13:
e9:ed:39:22:be:40:69:3f:00:13:2b:f2:11:97:9e:e2:f6:f9:
a7:5b:52:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:59 2025 by rpki-client