Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json)
Hash identifier: RpnBYB28KUY9JN+7lYHVMMWYbs/Dxm3sNSZwZK1YT3I=
Subject key identifier: 17:F5:D2:83:15:E9:DA:05:35:FD:94:81:1B:1D:26:E0:38:87:10:46
Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593
Certificate serial: 0194BD17DA10FDCE03BE980E6706ADED9F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
Manifest number: 137A
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: VhYqIetNKvBU2WNasfQR39WY97orqxMBJgT9gcCKA2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:da:10:fd:ce:03:be:98:0e:67:06:ad:ed:9f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=17f5d28315e9da0535fd94811b1d26e038871046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:af:32:2e:b7:6e:0e:cc:1a:af:51:09:1b:61:
00:d9:b8:e6:8c:96:47:52:d0:e5:f0:5a:3f:66:49:
52:92:75:62:01:56:ed:22:b2:d7:9a:37:a5:82:47:
7c:9e:eb:c2:29:aa:c0:fa:e1:90:7a:2e:27:ef:24:
7f:4c:01:18:9e:a6:24:af:d5:12:57:d8:6f:d6:4f:
56:7a:07:a2:d3:ea:bc:b3:cc:6e:5b:3e:27:91:21:
e5:eb:24:a2:f0:ec:51:7a:48:0d:2c:6b:41:a3:9e:
5f:03:4e:40:2e:ee:28:d3:38:3f:2b:bd:ea:99:7c:
6a:d7:69:53:23:24:18:a7:bd:47:64:3b:07:51:04:
03:16:59:54:d0:19:fe:fd:90:b4:84:ab:71:b6:85:
52:41:40:b3:2f:83:41:9c:41:be:0f:f5:d4:38:35:
ff:f3:2b:d0:1d:f2:cc:92:07:1f:a5:02:72:e8:26:
6a:f3:1e:23:e5:35:9e:57:43:04:28:90:7a:89:a5:
16:d5:8b:25:aa:92:db:2a:60:44:35:a8:4c:4e:8e:
d0:cb:55:db:05:0a:1b:6e:4a:ed:1b:da:0f:97:39:
60:56:1b:d7:f6:cf:f2:a7:89:10:fb:05:e1:06:ce:
12:99:e4:af:c5:ea:50:b6:0d:5f:6a:08:09:26:9d:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F5:D2:83:15:E9:DA:05:35:FD:94:81:1B:1D:26:E0:38:87:10:46
X509v3 Authority Key Identifier:
keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:85:b1:75:e3:6c:8c:15:10:b4:f9:a2:c9:53:30:20:ba:1a:
fa:32:e6:e9:79:8b:a6:fc:e5:87:37:7f:6c:80:d9:53:a0:84:
b8:25:11:fa:f4:4b:00:6f:a2:26:65:05:5d:97:7d:00:a9:71:
67:b7:5a:51:cb:b3:76:5d:22:9f:7d:20:20:83:e1:3f:21:c5:
74:c3:4c:eb:32:8a:01:00:03:a1:1a:6d:06:3b:3f:44:6d:2d:
68:c1:d4:82:b0:75:98:bc:da:b6:41:d6:4e:00:6e:d3:60:7a:
23:b1:7b:1b:eb:38:c6:52:5f:68:f0:10:b2:f4:5e:e5:a4:0f:
10:85:10:a6:76:96:50:f1:67:ab:ae:dd:da:4e:a9:2a:8c:1c:
bd:02:8f:66:2a:8a:86:a2:46:29:59:eb:2c:d2:1c:60:8e:22:
51:b3:80:75:2d:50:96:d2:4e:e8:34:ac:49:2f:b0:d5:75:bd:
d7:24:d5:04:03:7a:c6:24:2b:87:87:73:42:e5:2f:ce:c9:d0:
1b:00:df:b8:10:24:05:ab:a1:62:05:bd:4f:50:d9:39:8c:00:
1e:a6:98:c1:5f:f3:e7:34:d8:67:c9:23:b9:4a:92:ef:f7:49:
ca:5a:95:de:3b:3f:7c:1f:9c:7d:76:8c:71:46:f0:11:f3:2d:
7c:55:24:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:25 2025 by rpki-client