Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
File: M4YMg3IhmQcJz1rqKduBaJU-feA.mft (raw, json)
Hash identifier: 9yUvxlvP+72hBzoZHns4VEbdYc3cR5sVcLslXpaxLSM=
Subject key identifier: F7:4F:E3:C2:CD:94:33:2B:3B:B7:E1:FA:06:B4:E6:70:B0:CE:51:0A
Authority key identifier: 33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
Certificate issuer: /CN=33860c837221990709cf5aea29db8168953e7de0
Certificate serial: 0194BC731AE7D8511A34F4976188BF88E6BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
Manifest number: 0561
Signing time: Fri 31 Jan 2025 13:00:47 +0000
Manifest this update: Fri 31 Jan 2025 13:00:47 +0000
Manifest next update: Sat 01 Feb 2025 13:00:47 +0000
Files and hashes: 1: M4YMg3IhmQcJz1rqKduBaJU-feA.crl (hash: xSFU0qErVEW/ktykkvpbwUncXSqG/ZATUHYaimOyjL0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1a:e7:d8:51:1a:34:f4:97:61:88:bf:88:e6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33860c837221990709cf5aea29db8168953e7de0
Validity
Not Before: Jan 31 13:00:47 2025 GMT
Not After : Feb 1 13:00:47 2025 GMT
Subject: CN=f74fe3c2cd94332b3bb7e1fa06b4e670b0ce510a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:eb:08:16:6c:bb:93:fa:3c:f6:f1:a2:1d:
21:d3:10:30:50:b0:11:4f:fa:f4:cf:ca:8f:df:18:
85:d0:2c:24:92:07:53:83:b1:fb:c1:cd:0f:da:c7:
62:e7:9e:8e:5f:8f:27:57:39:06:31:52:50:83:63:
0b:78:da:29:22:cf:aa:b7:ca:6d:aa:a4:8c:d1:48:
92:ad:23:dd:d6:71:ee:84:e8:39:e4:23:54:61:cd:
2d:a4:fe:70:70:a1:2c:45:c4:46:e9:e8:40:58:04:
59:d3:d7:f5:25:ad:1b:8a:9d:11:82:b0:17:8b:45:
de:f4:4b:73:83:de:d1:6d:68:05:bf:f3:14:a0:e5:
23:28:87:56:6c:92:d5:ab:4f:e8:87:13:bd:5a:a5:
fa:02:91:d0:48:40:89:a5:3c:79:fb:97:b2:a1:93:
bc:b5:f4:54:19:44:ae:32:4f:f5:87:54:04:5e:04:
e1:6d:ab:af:9c:33:b2:91:57:de:48:0a:da:5c:f3:
87:c5:13:ea:76:1f:fa:cf:88:ba:22:ad:4e:6d:a0:
33:42:78:b9:a2:10:da:55:fd:a5:a0:27:19:d9:5c:
5a:e5:14:3a:f8:11:40:99:7c:d9:40:d8:4f:b7:76:
53:ea:4e:59:a0:4f:7b:f9:ba:84:71:90:08:b9:19:
90:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4F:E3:C2:CD:94:33:2B:3B:B7:E1:FA:06:B4:E6:70:B0:CE:51:0A
X509v3 Authority Key Identifier:
keyid:33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4a:bb:02:f5:46:a4:60:48:54:3a:22:1a:9d:44:09:46:e8:
d0:f2:ca:e5:0b:b0:d3:e5:bb:7f:61:b5:5f:86:9e:f3:4f:ec:
0e:91:25:6a:b0:74:a8:7c:a3:1e:ac:e9:af:cc:5f:b9:13:48:
01:7a:fc:3c:6b:8b:d7:90:d4:d0:33:0e:5d:68:cf:3b:6a:46:
8f:70:08:a1:6e:08:ca:a0:07:9a:6b:2f:6d:bd:76:91:df:a9:
3a:35:e7:6b:28:e8:cf:7e:cd:86:10:30:b2:a6:42:a4:3b:a1:
00:ec:0b:65:40:c1:50:0f:d6:11:40:ba:40:58:10:2c:9c:39:
b0:73:93:5a:93:35:f9:37:ff:ad:a3:93:82:4b:77:09:f1:d2:
72:ff:a9:7a:03:0f:cb:19:33:6d:f4:32:ff:86:e8:3a:94:de:
9a:02:10:cf:f4:8d:b4:85:43:59:8a:a9:8c:cc:57:d8:18:30:
7d:f0:fc:57:8a:b4:eb:75:ed:fb:42:74:3a:d8:8f:1f:de:1f:
41:8e:eb:ad:c2:99:57:1f:76:71:5f:4f:81:84:29:c4:a8:40:
49:54:57:ae:73:e4:2d:dd:81:d6:5c:0e:fc:fb:32:76:0d:0e:
b7:05:ae:fe:1a:8f:b4:84:4b:26:18:34:ef:95:c9:5c:7c:01:
c8:0c:38:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:52 2025 by rpki-client