Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
File: MU0IhXjsDimwS0PpAUk1hnJjZP0.mft (raw, json)
Hash identifier: 0HnYhNeE3/1KrjiVtO5+5yA+LT3hYcnLeFc89l7GssE=
Subject key identifier: 3D:DE:06:1A:1B:9B:C9:73:36:5F:36:68:A0:6A:3F:92:8C:E5:87:FC
Authority key identifier: 31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
Certificate issuer: /CN=314d088578ec0e29b04b43e901493586726364fd
Certificate serial: 0194BBCDE3D0ECB5B9A8BD5E434E0D2AD82F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
Manifest number: 1162
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: MU0IhXjsDimwS0PpAUk1hnJjZP0.crl (hash: aIiJazyQB/H9RQzllvM+fesmFx0JcNkHyefhyyJ9qy0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e3:d0:ec:b5:b9:a8:bd:5e:43:4e:0d:2a:d8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=314d088578ec0e29b04b43e901493586726364fd
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=3dde061a1b9bc973365f3668a06a3f928ce587fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2b:53:8d:86:2f:bf:4d:1d:c7:f0:b6:8d:21:
0f:83:09:30:73:df:44:9d:24:b1:39:35:c3:2e:65:
f0:39:45:3c:e4:ad:01:a5:3b:60:45:37:ed:bd:a6:
04:4a:b3:71:ba:9f:5f:13:d2:4b:51:36:ad:b4:02:
08:5d:ce:4c:db:88:5d:9f:53:20:c9:9d:87:4a:6b:
94:84:82:67:0e:e0:c7:f5:4c:0e:4f:95:72:73:54:
49:0b:fc:d6:5c:de:58:d5:82:86:9e:f2:76:bb:4e:
f8:d9:96:c4:bf:09:2c:a7:4d:c1:22:0c:a2:32:6f:
de:b8:7d:84:92:d1:c9:63:4e:61:ba:ea:9a:a7:3c:
67:3a:6a:5c:ae:30:6a:4a:81:6f:96:97:0e:10:6a:
85:0f:60:d3:37:ac:b3:18:a8:7e:b9:d2:4b:3c:ae:
0b:df:9c:0b:83:6c:b4:be:76:9e:9c:c7:b3:07:e9:
f9:9c:f5:92:44:c9:c0:bc:e9:67:df:1f:18:9c:ff:
fa:9f:fc:19:42:cf:b9:76:79:69:61:5d:99:c0:f8:
97:d3:65:0b:ae:41:59:cd:d3:bc:7c:d1:8c:4b:4a:
24:25:3d:05:03:bf:e1:29:86:ae:07:47:6c:a6:68:
02:a0:25:3d:2b:15:d9:88:a0:91:1f:15:01:a9:92:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DE:06:1A:1B:9B:C9:73:36:5F:36:68:A0:6A:3F:92:8C:E5:87:FC
X509v3 Authority Key Identifier:
keyid:31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:17:6b:8b:bb:79:62:34:49:8c:b3:ca:0d:6a:ba:75:c8:22:
4b:b3:39:ce:63:ec:b4:14:c3:53:95:d9:e2:ad:71:a7:fa:f9:
18:7d:72:3b:cd:5f:4a:24:ac:08:57:c7:6f:9d:0b:9d:3d:65:
9b:65:e7:85:e8:e9:3f:4f:c9:74:25:01:04:7c:7f:8b:72:eb:
bb:a4:b4:0f:a1:ce:69:fb:33:b3:e2:13:fe:ca:e7:f7:37:be:
cd:d5:90:81:d2:d0:33:06:18:47:9e:61:cb:9c:7e:3c:d2:4a:
97:ac:9f:38:d8:09:e0:74:19:19:ad:8a:35:8a:a0:bf:1c:46:
5c:a0:3b:af:67:d5:48:1b:28:8e:55:03:34:4e:3d:0c:27:e9:
f3:80:5a:34:75:14:70:25:9e:26:f9:de:a0:e2:92:1c:b9:ec:
38:2c:cc:fc:05:c2:d5:d1:d5:4f:39:60:ee:36:a5:4c:2b:56:
c1:44:a0:0b:3a:09:66:d6:ce:b7:16:20:d6:4e:67:33:46:38:
93:e3:67:9a:09:7d:89:f9:5d:ea:e0:90:b4:17:62:3b:8c:24:
15:54:ad:00:cd:17:ec:3c:77:82:00:e0:73:ac:18:fb:42:a4:
57:ca:c3:c1:90:fb:f4:08:a4:e0:d6:f0:22:a6:db:86:be:9c:
08:7b:f7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:14 2025 by rpki-client