Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.mft
File: mK47fDdSIET2g56i65KSvq3Up3M.mft (raw, json)
Hash identifier: gogmuFdC6ifFT/4cfW8I3i4ITAwj5B0pt4s5wQqv4Qo=
Subject key identifier: 0F:4D:7B:3E:09:01:C3:99:66:73:BA:55:22:F7:CB:63:9D:EB:3F:FE
Authority key identifier: 98:AE:3B:7C:37:52:20:44:F6:83:9E:A2:EB:92:92:BE:AD:D4:A7:73
Certificate issuer: /CN=98ae3b7c37522044f6839ea2eb9292beadd4a773
Certificate serial: 0194BBCE6ADAD1A622A76A2546C655AF1D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK47fDdSIET2g56i65KSvq3Up3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: mK47fDdSIET2g56i65KSvq3Up3M.crl (hash: y7mdQvwJKw8qKrp4VZGVGEuB/p5EC3jTmVmrDYq1kzg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6a:da:d1:a6:22:a7:6a:25:46:c6:55:af:1d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98ae3b7c37522044f6839ea2eb9292beadd4a773
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=0f4d7b3e0901c3996673ba5522f7cb639deb3ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:e8:df:29:e6:85:3b:92:20:5a:a7:4d:0a:
ea:48:83:c3:8d:b8:c1:09:11:66:16:b7:34:1f:47:
23:27:d3:40:7a:4f:7a:68:ae:1e:18:73:0f:59:9d:
f7:64:9e:43:cd:10:c0:51:97:b7:e5:c9:66:a3:cf:
fa:74:c6:36:50:39:b9:cd:a1:86:1e:a1:0b:30:40:
bb:85:6a:f4:b6:e7:3d:b8:43:53:e1:48:dc:51:9d:
f1:d7:b5:69:19:66:31:f0:40:f0:48:b5:c0:f8:79:
57:84:9f:64:34:eb:c0:6f:a0:5b:41:07:31:72:2f:
3a:39:4b:4b:f0:98:c5:01:5c:8c:9e:47:15:7c:c6:
f9:51:fa:b0:00:ef:41:16:df:0a:44:1b:cb:40:20:
e9:f7:71:0a:4a:c9:02:51:ca:11:dc:73:89:38:74:
59:f1:30:e1:e3:31:30:e8:db:b8:d7:68:f2:75:12:
a6:83:e3:b3:4d:22:8a:f8:34:05:69:23:da:4e:0a:
94:7a:7f:a7:dc:46:ce:50:2f:d7:ef:75:23:ec:b7:
ec:6c:25:f0:23:86:0d:d1:32:5c:03:5f:30:a8:cf:
38:a6:3d:e9:9b:6a:a4:ae:01:2b:83:9c:24:8a:54:
d7:ec:cd:51:5c:6f:b2:a0:8e:fd:9a:64:ed:b8:65:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4D:7B:3E:09:01:C3:99:66:73:BA:55:22:F7:CB:63:9D:EB:3F:FE
X509v3 Authority Key Identifier:
keyid:98:AE:3B:7C:37:52:20:44:F6:83:9E:A2:EB:92:92:BE:AD:D4:A7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK47fDdSIET2g56i65KSvq3Up3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b6:cb:90:7e:a3:28:36:35:1d:f7:d1:37:b1:94:bc:15:1a:
95:ec:87:5d:f3:c6:94:3c:3f:c9:8d:d4:a7:a3:ee:c5:b2:b8:
f6:6e:22:79:9c:fc:0d:21:42:52:3f:da:6e:0e:a1:ac:af:b6:
bf:7f:9e:8f:8a:7f:83:52:b3:d5:60:71:a3:05:db:c8:4b:10:
e0:a2:ac:56:ec:c7:a2:14:02:9a:a2:63:81:41:b0:71:95:15:
cc:e4:5f:7e:e3:8c:d6:0d:db:17:4d:89:9b:09:4a:5d:26:e6:
f4:33:6f:2f:9b:53:4e:29:ba:d2:30:e7:d9:26:58:ad:24:d5:
b0:19:5f:db:c0:cc:3c:77:7a:22:4e:74:15:d6:e7:c9:22:45:
f2:20:2e:5f:4e:6c:a9:82:cf:77:c4:78:d2:6b:5b:87:9e:b3:
0f:83:b6:f5:6e:74:89:3d:0a:c0:5e:76:82:ff:72:36:bd:f6:
a6:42:e3:ca:31:b3:6b:f8:e9:c8:e2:2f:c9:86:43:33:cb:ca:
9f:5f:db:73:c2:55:c8:e2:47:f8:c6:2d:79:82:4b:48:52:8e:
5d:04:d2:87:3d:5c:8e:0b:9d:ea:88:44:2a:1a:d0:ef:72:30:
06:c9:dc:e4:55:fe:dc:15:14:9a:21:12:92:47:18:31:d8:a2:
e3:07:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:12 2025 by rpki-client