Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
File: 9h0r7udUOkGpCKGgHs_AqHJqOuI.mft (raw, json)
Hash identifier: 5qEey/DhyuqvbfFJykESv1oKKp8biwXCIXMyxN9mW4k=
Subject key identifier: 14:E9:9A:B6:BF:CE:80:A4:50:E7:5D:0F:34:A0:E4:BF:27:7F:4D:E5
Authority key identifier: F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
Certificate issuer: /CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Certificate serial: 0194BD17C2C2103DCFF9258F7336BEE0102A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
Manifest number: 08CC
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: 9h0r7udUOkGpCKGgHs_AqHJqOuI.crl (hash: nTnRf9eCrqhkVCqKQe4btVUIP/EJKe0h/PlWbkkTiVg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c2:c2:10:3d:cf:f9:25:8f:73:36:be:e0:10:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=14e99ab6bfce80a450e75d0f34a0e4bf277f4de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:04:b9:07:88:21:59:f5:49:d8:82:86:09:
20:bf:af:6d:bd:99:8f:22:c7:6f:00:5f:d1:94:8d:
5e:1e:fa:f8:a8:e3:38:c7:41:79:f7:11:63:5e:34:
10:de:66:87:9a:88:51:1e:bf:0a:c2:5e:f0:ae:23:
35:fe:81:3d:35:e1:02:c8:c8:b3:b2:d1:5d:0e:2a:
c6:d6:03:67:b8:a3:0d:e1:e4:aa:ce:ad:c6:2c:0b:
7c:d1:11:40:ed:10:07:4b:bf:34:37:23:55:88:fb:
ae:fa:16:d8:9e:09:49:b8:41:3d:6f:2b:a2:e5:50:
77:a0:21:20:54:dd:ac:7b:ef:29:1b:96:e6:20:11:
d9:af:a8:85:5b:2a:ce:1f:cd:76:2d:56:7f:36:12:
da:c6:ff:c8:92:cb:ab:b0:60:4c:85:83:a2:99:2a:
4d:ad:1a:0a:0e:7a:9e:81:ab:d6:3a:d3:29:b7:c9:
2c:1f:11:4a:8f:2d:7e:f6:a2:fd:5b:5a:f6:18:79:
b6:cb:13:d8:f1:b1:f8:a6:36:ac:d3:d1:5e:ca:f0:
6c:31:5a:90:24:fd:af:62:09:51:bd:93:80:d4:25:
e2:c4:21:b0:43:60:7c:71:0e:e6:da:d6:d3:23:73:
e2:12:c9:fd:3c:f2:72:44:8d:af:20:15:09:22:0d:
e4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E9:9A:B6:BF:CE:80:A4:50:E7:5D:0F:34:A0:E4:BF:27:7F:4D:E5
X509v3 Authority Key Identifier:
keyid:F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:72:36:39:14:86:39:d2:9a:92:a0:c9:47:32:7d:99:e8:9f:
d8:c8:25:6c:78:0a:59:07:33:1c:8c:55:4a:2c:1c:e0:2a:c5:
4c:f6:b0:b7:62:fb:2c:6c:e2:5e:9b:5c:e5:24:10:33:21:d3:
91:47:6f:b3:67:55:39:bc:69:a9:54:4f:52:99:5a:8e:ea:dc:
e9:0c:db:4a:cf:de:87:b3:3d:de:51:01:eb:e0:a8:52:88:fc:
8e:29:3a:04:81:76:1c:ae:66:73:35:bf:cd:0f:7c:2e:bd:4f:
77:00:83:ea:fd:ea:fb:ec:f7:bf:d9:62:49:e0:a5:d1:ed:ae:
c4:6f:ee:0b:a0:b3:01:43:a3:a6:c9:53:78:01:aa:7a:ed:4b:
19:00:cc:39:19:2b:89:a0:4e:74:22:a2:1c:e6:dd:35:1e:e9:
12:c0:2f:55:92:2f:7c:a0:00:7f:35:11:40:cc:cf:73:16:6f:
34:db:c0:13:dc:6c:82:7d:4e:9e:f3:6e:b2:1b:90:bc:a2:a5:
d2:f3:67:53:80:3b:ac:82:73:dd:0c:43:14:98:3e:c6:3e:2b:
d4:c0:74:da:80:03:78:18:c3:da:37:29:d0:bb:47:23:e0:54:
c0:be:49:3d:3b:d7:7f:78:ce:43:ba:25:0b:c7:04:7a:d8:2d:
c4:54:ea:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:12 2025 by rpki-client