Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
File: cV2dGCxjrtg5f743LjYA9D2-62o.mft (raw, json)
Hash identifier: U/52cm18rfppI2Q1+KdjwkiosUXx2kTXfg4qOXcNaFs=
Subject key identifier: 67:C4:A6:82:ED:45:03:B7:EC:22:0B:73:0D:3B:D6:EA:83:C4:BF:6F
Authority key identifier: 71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A
Certificate issuer: /CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
Certificate serial: 0194BBCDC1547E8A96488D71D40B67D7F7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: cV2dGCxjrtg5f743LjYA9D2-62o.crl (hash: jrsfsDHHtV340+cfh8IlPCuWfA7X40ib7wrc7Y9oVog=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c1:54:7e:8a:96:48:8d:71:d4:0b:67:d7:f7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=67c4a682ed4503b7ec220b730d3bd6ea83c4bf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:4b:08:4d:48:d9:a4:d3:5c:bc:30:7e:53:
a1:c3:b2:0a:9b:ae:f5:ec:0b:6e:18:e7:c0:c2:d5:
a2:58:fb:84:c9:5e:88:5d:83:5e:1e:a0:50:28:27:
4b:90:38:62:80:ae:3e:e7:1b:0b:60:10:aa:84:28:
c4:97:b1:66:4a:21:2f:ec:1b:71:71:2a:38:f1:9f:
0b:f4:25:4c:88:54:3c:0f:9a:21:7e:0a:e0:10:1f:
87:1e:5f:ea:d8:08:50:83:d7:c9:39:80:83:8f:5f:
b8:d0:bd:cc:c2:1e:6f:51:0f:4f:3d:51:d1:7e:46:
57:f6:95:92:d3:0a:b6:5d:7c:e8:ea:6e:67:94:eb:
38:07:62:2e:0f:64:01:76:e4:11:30:9a:6e:f0:ad:
00:60:c1:57:02:32:25:1b:0f:b1:d5:22:b7:aa:94:
a9:b0:3b:11:94:b8:52:e6:98:a6:c6:44:da:7a:b4:
ff:3d:46:ea:c6:f2:30:58:8d:6a:56:c5:53:c2:e6:
b4:d6:0b:d9:0d:0b:53:37:46:b3:91:38:b7:0e:84:
38:98:d7:6f:d7:aa:03:81:46:6f:98:be:5f:96:12:
fc:f4:9c:61:d6:f6:df:a2:5b:61:38:93:b7:16:2a:
e3:ea:f8:03:a6:44:5a:ab:9a:ef:dc:cd:f1:e2:a6:
db:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C4:A6:82:ED:45:03:B7:EC:22:0B:73:0D:3B:D6:EA:83:C4:BF:6F
X509v3 Authority Key Identifier:
keyid:71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:04:7b:a3:52:a9:ab:91:95:6a:41:39:0f:db:0a:65:88:11:
08:bd:56:3f:71:60:17:28:f7:ee:5b:4e:cd:a5:8c:0d:10:51:
f2:db:cc:8b:cb:8a:a8:8a:9e:c5:02:ab:d0:eb:f4:94:a4:b9:
32:82:9d:9b:d9:de:2f:75:8b:ef:0f:96:c1:ce:fa:c5:8c:4b:
8f:e3:6f:06:f4:22:ba:82:dd:1b:6e:60:32:ca:55:1b:32:15:
0a:b0:af:0c:74:e0:a5:89:7b:24:92:6d:27:68:a6:16:c9:00:
86:48:73:77:e5:7d:44:b0:ae:06:bb:78:bb:4e:54:2f:86:74:
a0:3c:c8:d1:ba:68:cf:ad:b8:89:0c:18:2a:be:2b:4a:2c:8d:
f6:ac:c3:53:9b:4f:17:af:25:33:72:40:54:05:a4:43:65:48:
50:6d:29:72:4c:ad:7d:35:77:29:2c:a4:2f:91:3e:94:5c:88:
26:b6:7d:45:56:2f:af:60:c0:fc:ef:fb:b1:b8:2f:18:3d:6d:
3f:ba:6e:7f:0c:86:60:dc:97:bf:6a:ea:ec:31:68:85:e5:dd:
01:64:ad:0f:97:4d:64:fe:f6:3e:52:e7:fa:2f:26:f4:56:46:
58:cf:ab:f5:90:4f:ea:1e:a5:f0:fe:44:bb:1f:7c:99:80:81:
57:fb:5e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:54:24 2025 by rpki-client