Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
File: 6Md5F2XIhNCFX-0_-MPycJmpoBo.mft (raw, json)
Hash identifier: FzFPAUNxkBiYdzKt2VCGVgTUYxNQhgvWuTB/QDeZlD8=
Subject key identifier: A4:B7:E4:E4:AC:83:3D:BF:78:30:88:9A:4A:27:4A:F8:DB:66:D8:F1
Authority key identifier: E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
Certificate issuer: /CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
Certificate serial: 0194BC3C39FDB2026A4C446358A30305D766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: 6Md5F2XIhNCFX-0_-MPycJmpoBo.crl (hash: rqPTASsFxEkGtavqJwCkmXhOeo+P2gxjry76A5D19As=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:39:fd:b2:02:6a:4c:44:63:58:a3:03:05:d7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=a4b7e4e4ac833dbf7830889a4a274af8db66d8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:c4:ca:91:0c:e7:fc:3a:28:a0:00:94:5d:
a4:08:04:f5:58:48:23:e7:82:7f:ea:4f:cc:09:2f:
de:dc:12:fc:7b:37:7e:cc:21:f7:be:69:5b:79:4a:
61:fa:65:3c:2c:43:3d:0b:db:68:0e:15:2e:aa:48:
2c:57:98:82:fb:99:5a:fc:ec:c1:0e:d4:c1:a1:39:
bb:16:07:28:c7:4e:86:7f:94:6d:d0:ca:27:db:ad:
92:2e:2a:67:f5:af:a0:31:17:2c:9c:3a:f8:56:bc:
48:6c:44:91:00:eb:ae:2a:13:5a:9b:38:c8:39:78:
58:2a:8a:2e:69:59:13:d7:2b:24:ff:6f:a0:5e:98:
b2:46:3e:c9:61:8f:35:08:0a:8e:24:8f:f8:ae:02:
61:99:58:3e:64:63:2f:b1:00:cf:15:2c:b6:e4:9a:
79:ed:b6:6c:1c:47:f3:c3:29:ea:68:7f:d7:e3:9a:
59:77:35:a9:5e:9d:73:ba:7c:42:b1:dd:ba:2e:f5:
4d:1d:2a:03:84:71:2d:c3:78:2e:1e:c6:ba:85:58:
f5:5e:15:36:7b:50:42:17:8c:cb:e0:f3:13:fe:cf:
a1:bd:f8:19:b9:55:ea:3d:fd:e3:45:ed:a1:94:ba:
de:55:fe:49:77:83:50:4b:6c:2f:19:73:fa:90:d8:
d6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B7:E4:E4:AC:83:3D:BF:78:30:88:9A:4A:27:4A:F8:DB:66:D8:F1
X509v3 Authority Key Identifier:
keyid:E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:38:19:16:5f:bf:33:bd:d5:f4:52:ab:3f:6b:d7:f0:77:8d:
2c:f1:bc:d1:91:5d:19:27:97:7a:da:0a:0e:0a:9b:58:b1:70:
e9:1a:3a:94:e0:dc:02:e6:17:b2:19:a1:49:82:05:54:2b:10:
3f:2f:1b:7a:ee:c3:39:2b:c0:46:5b:a2:cb:5b:8a:f1:41:e2:
78:44:a7:2f:d8:36:81:a2:7e:74:3e:25:4c:7a:76:c3:df:ad:
20:c9:c2:95:b9:4d:d3:ee:b6:f3:5c:18:71:21:fb:0d:eb:8f:
45:dc:34:2f:bc:d2:9a:1f:b4:19:13:6d:2d:a3:5c:19:72:74:
34:58:ba:36:1a:4d:15:e5:d4:79:6d:8d:c4:0b:7a:fd:21:51:
94:f2:5a:f0:f8:88:43:4c:22:ee:d1:5d:cc:22:ff:d9:d0:28:
69:71:6e:18:e6:a8:57:31:36:92:de:d7:07:6f:da:26:f0:6a:
ca:55:36:79:14:99:73:b3:42:b6:42:6d:3c:f8:28:ab:0a:ea:
92:66:da:fe:04:a5:f5:e5:31:d3:11:46:8b:0a:5b:f7:5c:85:
f0:cd:73:95:0a:c4:38:3e:6c:89:93:20:21:32:6b:31:84:85:
90:ad:93:b6:ca:67:19:59:2c:36:5f:fe:7d:6b:f3:47:84:0b:
c7:23:f7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:22:31 2025 by rpki-client