Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
File: l5SL1vKtFY5iT9jonp718b2x05o.mft (raw, json)
Hash identifier: nOOAsFNTH+5Yh1t6bxOXpCUtntRuL6lrzHEJSksLaLo=
Subject key identifier: 82:C9:6C:9A:A8:1A:A4:1E:2F:8B:D6:3E:DC:9E:A6:07:9E:65:53:39
Authority key identifier: 97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A
Certificate issuer: /CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
Certificate serial: 0194BD859A9EEB34DA11001E1F86DE72A98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
Manifest number: 015A
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: l5SL1vKtFY5iT9jonp718b2x05o.crl (hash: H8qIm00UkePJydXyrwVW/PVZyQopzKYo3bX3/jqauV8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9a:9e:eb:34:da:11:00:1e:1f:86:de:72:a9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=82c96c9aa81aa41e2f8bd63edc9ea6079e655339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:a0:a8:1e:15:a6:1f:cc:57:93:a8:43:c5:
a1:6c:ab:ec:29:96:06:69:4a:ff:cd:60:73:d7:bf:
0b:2e:01:a6:98:30:19:ee:47:db:92:be:2f:48:74:
1a:f9:27:f2:9d:bd:a0:d2:db:35:b7:2b:2b:82:60:
df:d9:02:9a:95:8b:49:71:0d:ad:96:9f:ba:fc:86:
9f:5b:48:3f:4b:ed:f2:78:ee:88:94:46:57:3e:24:
02:c5:fe:62:ad:9e:1f:37:1b:a3:83:8a:a4:aa:a1:
20:7f:bb:28:7b:e3:a2:ab:3e:96:a8:e3:c2:3b:fc:
fe:f0:19:06:8b:ad:c3:8e:c1:60:2a:07:00:2f:4a:
f4:59:72:6d:9d:0a:57:f6:3d:fb:a0:3c:58:64:54:
12:ff:69:bb:dc:75:aa:23:f8:d0:6f:e2:5d:08:54:
04:7f:13:d2:30:9e:a7:9f:aa:18:2b:6e:07:79:bd:
49:24:74:25:3a:a6:3c:2a:63:8e:54:cf:9b:7a:ca:
be:f6:b6:84:93:fc:c4:92:86:1e:2b:08:42:b4:7c:
d0:6d:a6:cc:ef:7e:c4:8f:28:46:19:5e:e0:be:09:
31:ef:a5:3b:89:7f:40:62:7b:4d:bd:2e:f3:b9:61:
21:1a:6c:2d:03:07:fb:7f:fc:d0:26:70:fe:8b:7f:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C9:6C:9A:A8:1A:A4:1E:2F:8B:D6:3E:DC:9E:A6:07:9E:65:53:39
X509v3 Authority Key Identifier:
keyid:97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9e:bf:8b:bb:e1:4a:36:11:eb:2b:29:43:b6:f4:e6:a0:70:
d4:bf:4b:c0:3d:dc:ae:66:5a:af:47:24:ab:44:50:85:66:41:
48:20:61:19:cd:99:b1:22:78:43:7b:72:dd:c0:61:bd:8e:50:
e6:63:25:a0:3a:58:0a:75:ec:c2:38:f4:09:e6:03:35:8a:b5:
06:a2:a7:8f:03:f4:06:91:2a:25:4f:fc:b4:d7:be:14:ef:e9:
8b:18:ba:ac:12:74:4f:4e:ff:74:c7:28:46:3c:f8:a4:36:b0:
3f:6d:a3:f4:5d:ba:8a:fb:d4:93:cf:a4:6a:b3:2b:41:59:01:
9f:2c:c2:cc:ca:ba:f7:d5:b6:3c:36:66:7c:90:57:a2:4b:0b:
ea:6a:34:b0:95:d7:64:31:2c:64:52:2f:b0:e3:c9:19:5b:c1:
2a:e4:58:5a:e4:5b:1f:5f:97:a9:b8:d9:d2:bf:7b:a1:2d:c6:
38:4f:46:30:d5:dd:17:64:e8:a3:9f:80:fc:4f:c6:2f:7c:c0:
74:bb:72:6e:78:55:f5:28:ee:2e:19:5e:a5:62:1f:85:ad:27:
b2:3b:d8:a4:4a:4a:08:89:d8:4b:21:ff:ae:42:4b:ec:ee:61:
0a:90:79:08:40:35:64:d6:4e:29:f6:cb:4b:dd:b5:a3:55:0f:
8a:f0:9b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:33:07 2025 by rpki-client