Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.mft
File: m263eIMkLPw4ZQB4iNCt7-s-cYs.mft (raw, json)
Hash identifier: 27sel9MlykzqFO2AfwHhEG1t7tQOQUpiHj4uaGvbIig=
Subject key identifier: 57:52:C6:F3:5A:79:36:4D:01:32:40:F1:B9:41:59:67:24:69:3C:C1
Authority key identifier: 9B:6E:B7:78:83:24:2C:FC:38:65:00:78:88:D0:AD:EF:EB:3E:71:8B
Certificate issuer: /CN=9b6eb77883242cfc3865007888d0adefeb3e718b
Certificate serial: 0194BCE0C9623A25FA1C78622DD34F09C2C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m263eIMkLPw4ZQB4iNCt7-s-cYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.mft
Manifest number: 0119
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: m263eIMkLPw4ZQB4iNCt7-s-cYs.crl (hash: 9CKt2Tkt8ok5SzUqizOgQx2Dv85iv7NlOsQSc7BUxpA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c9:62:3a:25:fa:1c:78:62:2d:d3:4f:09:c2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6eb77883242cfc3865007888d0adefeb3e718b
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=5752c6f35a79364d013240f1b941596724693cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:72:7a:10:7c:ef:69:c6:14:d2:1e:10:df:
53:27:ca:93:19:65:78:ca:0f:df:9c:52:e3:3b:b5:
ae:ed:09:3c:5a:25:ec:b7:a6:4a:60:02:9d:b5:3a:
e4:05:c3:8a:48:99:02:0c:3f:bd:3b:f4:93:af:1e:
bb:56:c2:59:dc:13:db:fe:59:59:74:26:f4:37:96:
01:33:95:14:a8:99:fe:2b:7a:41:5b:b9:29:c6:77:
08:f4:b1:b8:03:13:5a:06:e2:96:06:9d:71:53:df:
93:88:a8:5a:15:30:a1:18:85:4d:c8:03:b9:47:76:
0f:df:c5:ea:b4:26:5c:d5:6a:a4:6c:4f:32:84:ca:
19:42:d4:10:b9:58:35:38:f8:a0:7d:c5:28:4e:f4:
5c:22:d2:a2:fb:58:12:bc:57:4a:79:74:40:17:c4:
70:d9:63:64:66:ba:48:05:2a:35:10:08:96:cc:ea:
b1:45:c9:ee:95:2b:e7:8a:b1:6b:6f:ea:06:50:4f:
b9:05:e2:9a:1b:e9:86:6d:25:ff:0c:ad:bb:97:55:
18:54:3c:f8:d1:1f:3f:8b:40:c1:6a:34:08:33:c2:
75:a0:a1:4c:4b:a5:c8:97:8c:9d:dd:20:68:86:9c:
8f:57:3a:b2:cd:72:e0:4a:5c:1d:4a:a6:df:3f:6f:
34:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:52:C6:F3:5A:79:36:4D:01:32:40:F1:B9:41:59:67:24:69:3C:C1
X509v3 Authority Key Identifier:
keyid:9B:6E:B7:78:83:24:2C:FC:38:65:00:78:88:D0:AD:EF:EB:3E:71:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m263eIMkLPw4ZQB4iNCt7-s-cYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ba:b7:10:f7:03:9b:6f:58:ed:28:dc:b7:9b:a8:83:e0:d9:
a7:8a:52:ca:39:14:28:31:4d:ea:64:35:4c:4c:0a:83:6e:26:
18:2d:6a:5b:b9:e1:7a:7e:72:ef:58:1c:c0:b5:80:01:54:01:
e3:3c:28:09:50:3e:c4:f9:5a:9c:bd:2d:5f:03:91:d3:a6:71:
82:64:d3:a9:2a:9a:9c:24:13:a0:93:d0:cc:19:0a:4b:b0:9e:
b2:2d:e1:10:66:db:a5:d7:06:ba:83:60:2c:69:6b:99:a5:5b:
63:42:c8:ae:6d:8b:ef:30:70:ca:25:fa:b6:f9:80:d3:d0:cc:
c5:f6:27:e1:f9:5a:ca:44:64:58:25:3c:ed:1f:26:42:a1:89:
62:34:d8:2d:c5:65:72:77:d9:fc:28:86:33:7a:1a:35:8a:2d:
25:21:97:f8:c1:14:99:ac:38:62:d8:4c:f8:1d:27:41:ac:73:
f0:42:f7:58:cd:0f:2c:c5:4e:31:31:67:4c:dd:fb:0d:41:e1:
19:a8:a3:f2:97:dd:cf:6a:0e:0c:6a:1d:77:f4:58:a9:53:62:
b2:a5:44:ed:ee:93:2f:c1:e7:39:9d:a6:10:cb:28:ee:78:91:
18:bf:1f:4f:5b:dd:74:9a:6b:0e:11:27:98:fd:d5:cd:f7:d9:
a0:d5:17:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:42:58 2025 by rpki-client