Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
File: 9bMQ6dROhHDWzYAJWQZssA8pHvo.mft (raw, json)
Hash identifier: Y2voOKZkXAjwf2kq6kRFZ5ouo2S3QkA3bJj7+uygl4s=
Subject key identifier: 37:A5:71:87:0D:F8:90:26:0A:19:2D:AF:EC:55:F5:69:6D:2D:EA:9F
Authority key identifier: F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
Certificate issuer: /CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Certificate serial: 0194BBCE12C2BC9E4ECC2B07F97E721E32D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
Manifest number: 0E8E
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: 9bMQ6dROhHDWzYAJWQZssA8pHvo.crl (hash: /p487DsIbt+bi0bGoGdBQC33qeMHGIbgxnODzCVsX9c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:12:c2:bc:9e:4e:cc:2b:07:f9:7e:72:1e:32:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=37a571870df890260a192dafec55f5696d2dea9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7b:b6:af:9b:85:3b:f0:c3:eb:04:2c:fa:d7:
46:ee:dd:26:19:8a:92:22:35:95:56:74:bc:ff:6c:
23:4e:57:5c:41:76:76:61:f1:04:3e:f2:d3:bf:26:
90:7d:85:f5:dd:9c:d7:c4:8d:ca:cd:b9:df:5d:6a:
4f:12:d8:ea:2a:af:c1:ea:1d:74:66:fb:62:74:ab:
6f:6a:b0:5e:f3:96:ba:6d:32:66:d9:9c:15:a2:6a:
8f:f7:96:58:14:9a:cc:9e:ae:0f:af:4a:50:bd:64:
02:1c:81:a9:de:09:1e:3d:d4:cd:e8:0e:18:3f:84:
a1:f2:28:16:a2:f4:ce:6d:f2:58:7b:ca:e2:4f:8b:
b9:81:61:f1:eb:f5:a3:5b:3c:1d:40:c1:50:ea:5f:
e2:e0:b5:8a:e0:d6:96:f2:ff:3f:47:e0:0f:f4:cb:
50:ac:0f:7c:db:db:2b:7a:19:ea:ed:f2:a7:7d:71:
ca:d8:bf:44:1f:ee:45:06:be:ad:82:2b:75:5c:f2:
79:81:23:0d:0c:ea:a8:04:69:a2:94:4f:83:e0:84:
a6:b6:f2:20:16:0f:57:67:50:04:4a:5e:71:ce:c7:
6f:89:0d:dc:83:99:60:dd:ac:31:6e:24:21:8e:0f:
fe:3e:c5:09:9a:7b:f2:ba:be:5e:cc:57:13:55:d4:
38:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A5:71:87:0D:F8:90:26:0A:19:2D:AF:EC:55:F5:69:6D:2D:EA:9F
X509v3 Authority Key Identifier:
keyid:F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e7:7f:a7:92:be:69:56:df:53:56:cd:67:fd:fc:a4:30:93:
2d:ae:44:c7:84:49:49:78:94:56:5a:30:1b:00:30:d0:02:6c:
4c:b9:b3:a7:6e:ca:29:99:1d:e4:42:6b:08:5e:2e:01:e6:f5:
95:b1:3f:5f:ae:72:81:6a:a3:55:3e:62:6f:f5:a8:11:4b:d6:
62:f3:e1:c8:de:8a:08:85:fb:c8:00:2d:b2:3c:88:95:30:3e:
f8:ca:68:a2:70:47:fc:3f:1b:4c:15:c2:c0:5a:3e:36:2d:e6:
40:65:7f:09:e9:91:ab:ec:43:05:79:85:e8:03:94:39:91:35:
30:c8:58:03:62:61:ae:61:c7:5e:4e:b7:29:83:c7:20:ac:1f:
4d:8a:25:12:4f:5c:87:a0:be:d0:27:c9:cc:bd:d6:47:1f:e2:
cc:95:5b:7c:53:bb:8a:09:0f:7c:64:7d:1f:3c:e1:45:16:10:
79:92:40:03:15:bb:42:ce:7d:20:23:7e:ef:2c:2a:d8:74:04:
9f:8d:cd:6e:34:d1:56:fc:92:ac:ca:3b:c1:52:46:70:71:b0:
28:77:bf:66:ea:a0:a6:2f:d0:ba:09:e6:9d:83:15:f8:9e:3f:
6f:35:00:5a:56:80:83:52:9e:dd:74:2b:f8:f9:cd:e1:0c:24:
f5:0d:c7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:15:37 2025 by rpki-client