Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft
File: kljqmCx9enWV6Dphx66z12GIlww.mft (raw, json)
Hash identifier: fHq/5i7CtIilAg/jKVhrrDZ7jO67YP6R/zvIgufVKnE=
Subject key identifier: 3D:4E:8A:EC:DA:DC:59:B1:AB:43:D6:29:B3:15:F6:38:D1:90:C1:4A
Authority key identifier: 92:58:EA:98:2C:7D:7A:75:95:E8:3A:61:C7:AE:B3:D7:61:88:97:0C
Certificate issuer: /CN=9258ea982c7d7a7595e83a61c7aeb3d76188970c
Certificate serial: 0194BD1816B79AFA4F1EE59C47259C642BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft
Manifest number: 11D0
Signing time: Fri 31 Jan 2025 16:00:59 +0000
Manifest this update: Fri 31 Jan 2025 16:00:59 +0000
Manifest next update: Sat 01 Feb 2025 16:00:59 +0000
Files and hashes: 1: kljqmCx9enWV6Dphx66z12GIlww.crl (hash: LLBun00zgPiLMyxIw8xfIXJY3TJWP0W1ItvKAKKdpZ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:16:b7:9a:fa:4f:1e:e5:9c:47:25:9c:64:2b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9258ea982c7d7a7595e83a61c7aeb3d76188970c
Validity
Not Before: Jan 31 16:00:59 2025 GMT
Not After : Feb 1 16:00:59 2025 GMT
Subject: CN=3d4e8aecdadc59b1ab43d629b315f638d190c14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d7:4a:2f:1d:a4:65:96:9c:36:97:18:b6:fa:
7d:87:37:4d:6e:21:52:5c:aa:a1:92:a6:1e:d1:f5:
fa:c7:4b:c4:f4:8a:44:e2:78:bc:7b:e6:40:58:2e:
c1:a3:34:00:80:8a:46:1a:55:1b:1d:2d:db:03:c7:
5f:80:60:12:24:4f:05:c8:8c:31:55:2f:56:1b:de:
f3:c2:1f:b1:54:fd:73:bb:8e:25:0d:a6:71:6c:7d:
4c:a7:b6:d6:ae:3e:d9:58:3a:37:75:f9:fb:9e:09:
28:d4:3e:b4:a4:ab:32:f9:f0:cc:ed:2e:8f:6f:bb:
50:96:cf:55:2e:4e:16:8e:44:5d:91:71:01:e5:af:
7f:36:16:3b:02:d5:5f:aa:56:a6:2b:ef:42:c0:4a:
e5:f6:40:0c:58:df:e8:f6:71:a3:0d:af:32:b0:a6:
d4:87:8c:84:2b:e9:7a:b9:31:db:17:52:c2:cf:64:
3a:a5:99:fc:7f:ee:d8:ac:70:8a:f5:81:33:12:61:
4f:e0:43:79:95:d6:ba:17:c9:ee:e6:08:44:67:3b:
c6:1f:c1:76:9d:89:c9:02:00:8c:87:b3:06:87:42:
ba:ac:db:04:81:53:c9:87:5e:0f:eb:20:32:e7:16:
d7:9f:5e:a2:47:86:ea:0d:e9:9d:19:c7:7b:b2:d5:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4E:8A:EC:DA:DC:59:B1:AB:43:D6:29:B3:15:F6:38:D1:90:C1:4A
X509v3 Authority Key Identifier:
keyid:92:58:EA:98:2C:7D:7A:75:95:E8:3A:61:C7:AE:B3:D7:61:88:97:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:79:a9:ff:77:fc:2b:43:df:9d:dd:9e:95:9e:ac:90:a6:7f:
4c:b8:a9:0b:2a:ff:e0:a8:bd:01:57:0b:6c:bb:c4:ec:1b:b5:
b2:cf:1f:6d:a1:68:aa:1e:1d:1d:dd:1a:76:0a:b2:ed:c7:5b:
26:e2:6b:b4:d2:6b:83:ec:5c:b0:48:97:d4:72:0c:4e:86:44:
0c:06:98:7a:29:2b:fc:3f:80:70:24:78:dd:44:90:2f:44:c6:
78:26:0f:58:be:f1:99:98:14:ae:42:70:36:00:c8:ac:14:a8:
c7:0e:58:55:25:6c:a3:f3:2c:ef:3a:19:ce:45:e4:a4:37:0d:
7d:0c:21:d9:b7:aa:f1:20:34:d6:15:3a:a5:51:0e:b7:21:8e:
6a:20:b6:e0:57:84:db:f6:58:9f:d9:d1:3e:e2:db:2d:51:c1:
c5:99:61:0d:03:3a:e8:ee:92:8a:0a:c0:a4:17:5c:18:33:cc:
df:10:8d:1c:92:35:1c:9c:47:32:f1:d6:83:b4:be:ff:43:b2:
db:e5:b3:96:44:22:ae:d9:6d:9b:35:19:cb:c1:c4:dc:06:57:
36:c9:04:c9:3f:e6:c7:06:6e:4c:82:d3:0d:ef:62:79:75:e4:
c5:4f:27:74:db:89:2e:63:34:25:ee:a1:41:8a:ee:2f:74:ce:
fb:3b:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:13 2025 by rpki-client