Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
File: pO9xMrnCMYeert1cpNwysWXwx_M.mft (raw, json)
Hash identifier: SXu9xgtVRxebR1JN42XQdOCfhA1ieC+q7AdWrm9PQfo=
Subject key identifier: 3A:44:25:83:74:2F:EB:49:14:41:2E:6B:3D:FA:D8:23:EA:CA:46:5D
Authority key identifier: A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
Certificate issuer: /CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
Certificate serial: 0194BC72A1A47456B2B43B4FC64EF58BADD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
Manifest number: 0B63
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: pO9xMrnCMYeert1cpNwysWXwx_M.crl (hash: t37TkkCra4fRHXj+4uUwUXVa5xDtNbkuYTlsxm723HI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a1:a4:74:56:b2:b4:3b:4f:c6:4e:f5:8b:ad:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=3a442583742feb4914412e6b3dfad823eaca465d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:84:69:23:73:bd:ee:06:3e:f7:46:6a:b1:
ef:75:42:51:26:59:88:48:2f:06:f1:da:f6:6c:02:
0e:66:f9:b7:05:80:40:97:7d:22:ff:4c:52:74:bb:
6b:aa:4a:99:c1:34:8a:09:25:2a:2e:30:83:57:53:
c8:11:81:d3:b4:4c:90:1f:0a:ed:35:99:13:57:a4:
08:6c:84:da:a9:ed:ba:f8:f3:dc:ad:74:43:3e:40:
99:96:95:a5:0b:0a:e0:d3:f0:a3:c6:66:03:5e:69:
21:4a:cb:b4:ef:f4:49:ce:a9:e1:6f:38:4a:23:7e:
f2:2c:96:d2:7e:ee:24:dd:c1:ae:93:e4:ce:60:68:
da:fd:fb:75:35:a0:08:7b:09:e7:d2:c9:e9:d9:9a:
99:7f:c5:e7:10:56:67:d9:9b:aa:66:94:57:ca:3d:
5a:9a:5d:f1:b8:c6:15:b9:f5:b8:75:0a:68:87:57:
4d:59:25:19:a4:01:c5:bc:2e:d1:39:6a:13:ad:31:
5b:6a:a4:ec:b6:55:e5:2a:3c:53:80:f0:89:e9:48:
72:c2:1a:4b:a8:79:ec:c8:8d:30:bf:55:c4:40:0e:
cd:f0:1d:3b:40:86:33:31:60:e1:2d:22:fd:c9:ec:
e9:c0:fd:38:3a:e6:af:50:e9:82:c8:a2:ad:ea:58:
e4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:44:25:83:74:2F:EB:49:14:41:2E:6B:3D:FA:D8:23:EA:CA:46:5D
X509v3 Authority Key Identifier:
keyid:A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:19:bd:64:75:86:04:98:f5:00:1d:9a:e4:49:2e:b8:64:1f:
ec:20:4e:42:5b:78:29:16:8d:8e:af:00:78:20:b7:02:20:d5:
5a:3a:d5:7f:86:27:14:10:3a:c5:f1:73:89:b0:4e:34:ce:e2:
ad:46:a2:7b:9e:68:27:b6:aa:de:86:0a:28:88:19:22:13:eb:
28:ae:5f:90:3f:07:44:84:37:05:9d:57:14:56:a2:32:df:00:
82:6e:8a:23:58:40:77:10:84:48:e0:b2:43:9f:40:24:b8:9c:
4b:b6:02:e3:a8:1b:67:8a:d5:60:50:23:06:99:04:52:e0:1e:
2f:7d:f3:ef:3c:30:31:06:b5:7b:47:ae:c1:11:13:5a:58:98:
93:d6:45:12:65:48:1e:04:f6:56:da:78:18:ff:dd:03:24:89:
93:90:44:28:5e:16:ab:8d:a8:b8:a9:39:11:04:42:78:9b:c8:
24:5c:67:51:8b:1f:f9:a6:00:c9:e7:08:de:4b:ae:7a:1f:5d:
fd:fe:3f:47:57:03:69:59:4c:20:bc:88:95:6e:a8:2d:55:23:
00:14:c4:b6:6d:90:50:ce:53:8e:45:4c:4b:f3:8c:2a:f9:65:
d0:45:0d:ff:36:cd:e5:13:82:22:71:08:6e:d6:48:95:5c:7f:
45:4a:42:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:14 2025 by rpki-client