Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
File: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft (raw, json)
Hash identifier: GAcds1jkvdfSjE2L/hb6aCKZ4uHTHKZPkGTsSTptnZ0=
Subject key identifier: E2:95:68:D2:30:D9:DE:27:24:14:05:62:B9:2A:1D:83:64:AD:15:BE
Authority key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
Certificate issuer: /CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Certificate serial: 0194BC728E02E89E40DF1A6D21ACB9F7A145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
Manifest number: 0DA9
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl (hash: lytsHX6RdnnnnS56xgZ5eXneazM2RpW0QYrclSIOpnY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8e:02:e8:9e:40:df:1a:6d:21:ac:b9:f7:a1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=e29568d230d9de2724140562b92a1d8364ad15be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:3a:a7:57:6f:00:21:69:c9:bb:69:13:1e:
5a:51:2e:49:0b:77:2d:5d:12:52:8b:41:3a:7f:b6:
27:25:cd:4e:19:e0:b7:f3:f0:fe:89:0d:fd:7a:ba:
d9:00:79:26:05:fa:74:fe:83:21:00:69:93:ac:7d:
75:28:5f:46:bd:00:69:f2:bd:7b:b4:cb:e7:4f:60:
07:84:1b:29:cb:a4:08:84:59:d2:47:b4:28:df:f9:
dd:52:1c:01:6f:a5:1c:80:b9:18:d1:d5:75:d0:cc:
7f:aa:84:56:4d:7c:5f:84:af:ec:d9:9b:aa:81:74:
0f:4f:e3:5f:f2:91:03:f3:09:4e:8a:cf:6a:de:cb:
cd:57:bf:8b:65:b6:69:39:4e:0c:12:ca:b5:05:e6:
dc:71:1b:69:0b:b2:7a:51:d6:28:ef:14:ed:4b:28:
7e:96:94:bc:e4:ff:0e:b0:eb:4c:c0:8b:3a:98:d0:
00:8d:b3:fa:b0:d8:4e:4c:95:d9:a8:83:e6:a6:7f:
5a:4c:0e:20:b8:12:67:fe:a5:3e:8d:73:05:01:d4:
0d:82:ab:30:17:38:50:4b:26:92:4b:91:09:88:80:
d4:07:3e:c7:f3:b2:09:53:35:e2:8f:9f:50:28:00:
6c:b4:e0:24:5d:c3:98:51:e3:50:d4:b0:e5:55:d0:
4c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:95:68:D2:30:D9:DE:27:24:14:05:62:B9:2A:1D:83:64:AD:15:BE
X509v3 Authority Key Identifier:
keyid:63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e9:14:ca:48:a6:94:57:e4:fa:ab:60:ed:8f:01:37:d2:0b:
f3:8c:16:54:c7:00:16:be:9c:46:e5:53:f4:17:a5:ee:6e:59:
6c:4a:10:ff:e9:4c:52:19:11:71:dd:f3:20:bf:4c:8b:a2:29:
65:d8:4a:34:a2:6a:e6:11:e8:38:d1:fd:9b:df:9f:3f:b0:31:
e1:59:b4:2e:16:a3:bc:a0:09:56:7a:be:22:70:f3:fc:9b:d1:
2a:4d:44:22:9c:a9:99:21:f4:a5:4a:b2:c1:58:81:5c:09:f2:
19:f5:81:eb:f8:47:4d:33:5b:f1:3c:d1:bf:95:9d:f6:d5:9c:
bb:14:e1:86:c9:47:fd:a1:da:fb:24:ea:b2:aa:b4:2a:e6:35:
4c:72:47:83:f8:49:fc:56:44:2d:e3:1e:e1:79:b2:6f:47:7e:
6e:28:ca:61:cc:70:2f:22:68:60:78:03:e6:e2:b5:7b:72:a0:
08:c9:f7:7f:ca:6e:94:71:4e:22:da:7a:5f:22:7b:bc:71:88:
b2:14:98:8c:c5:9f:91:fb:86:38:20:19:56:0a:98:8c:62:da:
16:ba:8e:87:40:58:ab:88:8e:ea:72:95:95:85:92:a6:7b:6c:
43:26:12:4d:73:9f:10:10:1e:d2:5e:1b:bf:f7:3e:94:da:a0:
e4:42:81:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:01 2025 by rpki-client