Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
File: 0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft (raw, json)
Hash identifier: 9HolBQHCi66wzuzm3059Ilndwmm/EKkeAatQtherRZY=
Subject key identifier: 68:31:0E:3E:05:A2:5B:15:61:DB:DB:5D:F1:77:F5:60:CC:82:CE:53
Authority key identifier: D1:49:7B:32:47:76:7D:34:99:91:E9:96:CA:B8:AF:7D:49:94:2A:F4
Certificate issuer: /CN=d1497b3247767d349991e996cab8af7d49942af4
Certificate serial: 0194BD175366718F2F3640CFB2F1506AA379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: 0Ul7Mkd2fTSZkemWyrivfUmUKvQ.crl (hash: s2O02hWWO6ijq5dxkMC3Tdg9574FEQkOd/F4wDznoXs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:53:66:71:8f:2f:36:40:cf:b2:f1:50:6a:a3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1497b3247767d349991e996cab8af7d49942af4
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=68310e3e05a25b1561dbdb5df177f560cc82ce53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:ab:64:21:3c:78:80:d7:01:2c:1e:58:45:
94:a9:8a:da:4b:4e:51:1f:f1:df:85:22:2b:27:34:
78:d0:2f:45:82:da:ec:14:2c:5c:84:27:f3:82:34:
12:f9:32:ba:08:bc:2e:7f:ae:9a:7a:06:89:05:98:
b5:b0:58:ce:14:22:4c:79:50:66:44:71:bf:9b:b9:
0a:1a:8d:4b:8a:0d:05:3a:56:8c:40:a9:e3:cf:52:
b8:81:a7:27:26:ac:5c:2d:95:86:67:38:85:c3:92:
e9:05:64:01:da:df:86:95:7b:23:c8:ae:73:c8:90:
8f:f0:21:6d:b0:5c:25:b8:e0:60:41:54:99:a0:54:
47:60:66:d3:50:b2:cf:78:26:51:10:0f:d6:a0:15:
04:e9:d3:dc:cd:d6:2e:2c:14:8b:c5:5e:f6:7e:6e:
c0:d6:da:9e:c0:16:ec:c5:a6:21:13:04:b2:ab:af:
69:2d:bb:e9:1d:bd:1e:1c:a2:2e:98:97:50:77:92:
8b:b5:67:01:62:62:ed:be:1f:77:d1:b0:3f:79:bb:
1c:07:f3:a6:50:03:7f:95:fb:d5:57:5a:3e:7c:83:
df:c0:e3:9b:d2:1b:c4:f9:ae:bc:ca:2f:60:06:f7:
69:a6:19:a1:da:fe:fe:c5:5d:98:4e:6f:03:09:fa:
75:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:31:0E:3E:05:A2:5B:15:61:DB:DB:5D:F1:77:F5:60:CC:82:CE:53
X509v3 Authority Key Identifier:
keyid:D1:49:7B:32:47:76:7D:34:99:91:E9:96:CA:B8:AF:7D:49:94:2A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4c:06:8f:44:42:ae:c2:1f:c5:24:70:7a:b2:c0:47:3e:ee:
80:5f:c5:4a:b3:40:08:88:9d:d3:56:16:ef:67:1c:3f:93:61:
e9:a7:8d:1d:b7:a1:05:6f:9f:d9:29:c5:2a:b3:9b:68:2a:53:
05:bd:8c:5d:7c:22:1d:3e:22:02:be:4e:22:06:b7:5c:f2:f6:
a2:09:28:13:48:75:6b:c6:99:86:7b:b9:03:7f:3b:62:a9:08:
7e:89:1b:6b:43:6b:37:62:b3:4a:3a:b0:69:48:c1:ec:94:e3:
8b:5f:36:68:db:6b:24:5b:38:ea:37:ac:dd:9c:ce:6f:93:bd:
94:ea:80:25:55:8a:9f:d7:22:73:71:d7:56:47:60:7f:56:a9:
a1:46:c8:ec:02:3c:dd:08:ea:f3:65:04:14:9f:dc:96:34:5f:
b7:07:03:46:80:60:4b:30:bd:f4:e0:72:42:5d:ef:bf:dc:5f:
e6:90:09:ef:f3:d5:43:31:16:90:86:ae:c5:bc:3d:86:f8:4c:
bd:61:dc:1a:c4:1e:81:89:9d:ab:2d:e0:fc:50:c4:fb:6b:00:
f4:99:0a:ef:00:52:c5:9f:69:3e:8f:76:df:af:9e:3f:e8:ff:
24:05:ee:16:f7:3f:b0:82:5a:b9:9b:b3:3e:2e:65:9b:2c:a8:
5c:a2:ac:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:37:38 2025 by rpki-client