Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
File: IaqfF_jMpH37krSQLSwrMgPb7aY.mft (raw, json)
Hash identifier: 2lXIl5tGGcZBBotU+VKRl1gVxC5P8AcZNI2JKeLV9Ag=
Subject key identifier: CD:6B:7A:20:D0:06:E8:F8:7C:F7:1E:0B:12:FD:ED:23:09:EE:03:54
Authority key identifier: 21:AA:9F:17:F8:CC:A4:7D:FB:92:B4:90:2D:2C:2B:32:03:DB:ED:A6
Certificate issuer: /CN=21aa9f17f8cca47dfb92b4902d2c2b3203dbeda6
Certificate serial: 0194BBCDD87E1E08DFC043EA5BBAE04B572F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
Manifest number: 04C6
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: IaqfF_jMpH37krSQLSwrMgPb7aY.crl (hash: Ap8qD36NliD4Dair7tU1q+qOHq8+LPiTgB6Ip0X2dPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d8:7e:1e:08:df:c0:43:ea:5b:ba:e0:4b:57:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21aa9f17f8cca47dfb92b4902d2c2b3203dbeda6
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=cd6b7a20d006e8f87cf71e0b12fded2309ee0354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:41:5c:a9:13:61:22:39:17:49:5d:4a:6a:66:
b7:7b:01:42:ea:87:2c:3e:ba:a1:e7:48:b3:d6:19:
77:68:3a:2f:ae:ab:86:d5:67:60:6f:93:dd:cf:af:
02:22:a6:34:69:a2:88:e6:09:65:2a:56:25:70:22:
4e:1c:fa:40:50:42:8e:4c:96:60:d1:5d:aa:11:d6:
87:76:b7:65:b4:02:f4:ff:66:6b:5f:73:42:5a:5b:
4b:92:61:d1:b9:13:b8:8f:44:90:8e:ce:89:76:fb:
70:d9:6a:4e:24:86:8a:0e:8f:90:09:14:fd:68:c5:
57:82:b4:76:3f:fd:0e:cb:aa:f1:4b:b3:8b:09:11:
fd:b2:55:ba:39:5f:29:cf:b4:59:d8:96:00:58:18:
1d:5b:9a:c9:21:54:c0:6f:51:75:2b:06:5e:e8:8c:
b4:f4:0e:32:ce:8d:eb:68:a8:82:33:58:25:84:a3:
a5:fa:d5:b3:f4:2f:b7:8b:e9:45:42:1c:08:02:aa:
d1:9f:af:ad:d5:a2:a0:ce:d8:fb:94:d2:ba:8a:cd:
6b:c0:cc:80:34:f7:68:74:c7:1f:c0:9c:be:27:2c:
68:eb:2f:f3:e4:07:ff:b7:a4:d6:6b:a8:47:20:28:
7d:93:29:11:bd:b0:6d:b9:63:3a:af:c0:78:69:86:
22:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6B:7A:20:D0:06:E8:F8:7C:F7:1E:0B:12:FD:ED:23:09:EE:03:54
X509v3 Authority Key Identifier:
keyid:21:AA:9F:17:F8:CC:A4:7D:FB:92:B4:90:2D:2C:2B:32:03:DB:ED:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6a:74:f1:bc:7a:e5:16:70:43:04:49:c2:5e:d6:1c:5c:d5:
e2:55:94:29:34:4f:2f:60:21:4f:df:59:f6:95:9f:34:ad:6b:
4a:5a:8f:ed:8a:db:88:e4:3a:d0:3a:7d:96:cd:4b:ce:97:88:
41:58:4d:35:57:27:58:59:56:8a:da:e0:ad:a7:1e:99:bc:48:
9a:de:23:4d:c5:49:07:23:ae:6d:29:0b:40:e9:87:df:25:75:
e2:36:12:b4:08:03:da:0a:6e:fb:53:a3:60:0f:e6:07:b8:7e:
89:ec:0e:3f:b3:a5:1e:9f:1a:ce:69:93:1e:46:0e:51:c2:d5:
42:19:b2:9a:02:0f:d0:c0:0c:6d:4f:42:a0:82:f0:b3:3a:13:
6d:7e:81:71:21:23:37:c8:b1:2e:cf:da:cd:5d:b1:53:30:0f:
4f:24:7f:d0:4b:13:9f:dc:6b:b9:21:85:e9:f6:27:e4:03:4a:
db:e9:1e:69:bd:5a:55:b3:c9:51:fe:a0:56:1c:4b:0f:4b:93:
52:dc:fe:98:d1:ac:03:d0:cb:97:c8:33:ee:7f:1b:f7:1e:7b:
60:42:ed:c5:20:e3:ea:26:66:36:f8:60:eb:6e:d5:93:c3:cc:
9e:72:1a:55:c5:e8:67:39:c7:1b:be:89:48:0a:a2:f3:34:3b:
3f:d6:be:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:12 2025 by rpki-client