Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft
File: 9xPX34BXC8z7JzeT8ApdRshT5Jo.mft (raw, json)
Hash identifier: 4TerfPZekxUDoh8Ur0W1m8WFAqocYKtXYfRDcM/vYHA=
Subject key identifier: 95:65:55:29:74:8D:0F:E8:38:2C:88:6C:FA:C9:50:FB:4F:A7:D9:EF
Authority key identifier: F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A
Certificate issuer: /CN=f713d7df80570bccfb273793f00a5d46c853e49a
Certificate serial: 0194BCA9798746CB66A314F03652B0170786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft
Manifest number: 034D
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: 9xPX34BXC8z7JzeT8ApdRshT5Jo.crl (hash: 9gJKELu3IX6JRTglOrX9BPJbpeOI2Bm6mGzNYgG2kMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:79:87:46:cb:66:a3:14:f0:36:52:b0:17:07:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f713d7df80570bccfb273793f00a5d46c853e49a
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=95655529748d0fe8382c886cfac950fb4fa7d9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:34:f2:e3:24:8c:11:8c:2c:b1:98:00:d2:
2f:0e:68:91:81:74:81:ff:a4:62:80:f7:07:20:00:
7d:f5:7c:ca:06:50:c8:9b:78:83:c5:c3:af:f1:a0:
b5:86:29:12:ec:d2:4b:5e:67:6a:f7:41:7f:14:8e:
21:ce:6c:ae:a9:da:12:e3:9e:19:d8:c0:58:1a:77:
3a:c6:3d:30:f7:cd:11:49:c1:8a:b3:7f:36:0f:b5:
a7:22:1f:af:9b:3b:48:04:4a:d4:1c:e6:c6:9b:96:
97:5f:12:93:01:db:8c:b2:a7:0c:f4:8d:6e:ad:4a:
ff:93:7f:54:a0:c6:a0:97:8b:14:03:c2:54:27:a1:
33:e6:30:fd:ff:5b:5a:25:9e:89:9b:5c:77:82:f2:
43:9b:05:96:87:8c:81:06:67:0d:09:e6:a4:db:63:
ea:b4:a2:51:c0:e5:1c:7b:b1:02:be:6f:01:4e:2a:
49:03:c0:5b:2c:0a:73:3c:eb:fb:11:27:06:8c:97:
44:03:b1:bf:f6:11:bb:eb:00:de:e0:8f:13:37:5d:
05:d5:e2:77:73:93:fd:bc:e1:37:2e:28:6c:7a:08:
e0:be:78:e9:e5:14:76:01:5a:b7:fe:26:49:0f:78:
33:dc:eb:80:ae:fa:59:8c:24:56:58:d1:5d:02:6e:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:65:55:29:74:8D:0F:E8:38:2C:88:6C:FA:C9:50:FB:4F:A7:D9:EF
X509v3 Authority Key Identifier:
keyid:F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1f:ac:ed:60:2c:8d:d8:4d:6c:0a:c4:73:c5:e5:a3:03:88:
62:c5:e2:12:ec:34:22:a0:cc:37:35:14:2d:f8:27:73:3c:da:
35:1f:11:87:17:d4:fc:62:10:bb:6b:ec:04:d6:32:49:9c:25:
06:cd:59:91:8a:33:c6:e7:29:d9:9e:f5:a2:9c:35:38:39:c1:
7f:f8:20:ca:ff:40:bd:cd:a6:c5:cd:f2:e6:11:ca:df:90:df:
a0:0a:74:95:6e:45:8c:dc:49:f5:19:c4:30:5e:0b:fe:eb:02:
2f:73:a9:e7:3d:a9:f3:36:0e:93:a7:d6:f7:2e:3d:85:0b:a2:
49:90:46:57:c5:0e:f0:53:8e:85:ce:90:16:ba:7b:59:90:4a:
dc:05:39:c0:90:eb:cf:4a:fd:05:c1:a7:79:cf:b1:20:74:38:
e3:53:2b:fb:b5:bd:99:81:a9:90:72:28:82:0b:ae:ae:91:ce:
7c:a6:5a:40:f2:07:8f:3a:6f:66:86:79:29:a4:0f:f3:7d:43:
3d:ee:40:7a:81:4f:89:54:e1:97:4d:1e:8d:3b:15:d6:85:49:
51:d6:8f:22:77:04:6c:b8:b2:09:0a:1e:2b:4c:b0:23:62:5b:
7a:85:53:6d:6f:c3:95:2d:83:2c:27:1a:42:96:7f:0f:7a:43:
63:4b:ad:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:57 2025 by rpki-client