Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/031554-78c4-4577-8058-9b6b87138ae7/1/32d5WjuqRaia2o3afoTpa7euB4c.mft
File: 32d5WjuqRaia2o3afoTpa7euB4c.mft (raw, json)
Hash identifier: wBvsajhsC+jHle6qiiWqv7YiQl/IOvS0X10PaS9nNSo=
Subject key identifier: C0:59:94:27:D7:C6:B4:B6:88:99:33:B7:96:D6:24:C0:6B:86:9B:D2
Authority key identifier: DF:67:79:5A:3B:AA:45:A8:9A:DA:8D:DA:7E:84:E9:6B:B7:AE:07:87
Certificate issuer: /CN=df67795a3baa45a89ada8dda7e84e96bb7ae0787
Certificate serial: 0194BC0505124C88A9332C9AA49EBD14E546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32d5WjuqRaia2o3afoTpa7euB4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/031554-78c4-4577-8058-9b6b87138ae7/1/32d5WjuqRaia2o3afoTpa7euB4c.mft
Manifest number: 08A2
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: 32d5WjuqRaia2o3afoTpa7euB4c.crl (hash: VPtLJ3dYHuKJTGu/pUtOcbuJCveJmdtjgL2qD+Gt4aE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:05:12:4c:88:a9:33:2c:9a:a4:9e:bd:14:e5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df67795a3baa45a89ada8dda7e84e96bb7ae0787
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=c0599427d7c6b4b6889933b796d624c06b869bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e6:bb:31:62:b3:23:a7:09:2c:9c:ab:c8:3f:
98:78:e4:7c:90:03:c8:bc:4f:8c:71:c4:ed:1d:a2:
b7:d1:43:2a:de:23:bb:c1:67:d3:a0:c2:4e:d8:e7:
22:a2:8b:49:49:46:06:d8:25:ab:fd:47:4a:12:60:
57:f8:cb:1d:2b:ad:60:b4:97:3f:49:ff:a1:90:d0:
06:d2:ae:73:b7:38:ba:bd:52:ff:4f:8e:12:c3:b2:
50:cb:d6:99:af:30:84:03:dc:31:97:bc:94:2c:b2:
74:21:1f:78:2d:6d:78:a2:4d:ce:00:00:d2:1d:98:
0b:14:68:7d:b9:e3:01:e2:11:f1:1b:c7:4b:97:ef:
ae:2a:6e:6f:75:c1:87:a4:83:a5:5f:78:de:88:d2:
55:7f:10:30:84:78:a3:5b:bd:a1:ae:c4:d5:11:b5:
f9:59:99:10:da:46:65:5d:d2:f4:5f:67:d3:99:74:
23:50:51:3e:c5:4e:6e:90:be:1d:2d:a7:3f:ac:dd:
74:41:d8:34:85:8c:37:5a:23:fe:ae:b5:85:19:ea:
9f:1c:90:96:56:7c:a2:8b:e0:1f:66:79:71:3f:39:
6b:6f:5e:5d:ec:40:62:ee:82:6c:ed:e9:ba:e2:e9:
ad:6b:df:9f:56:e0:38:03:dd:f1:3e:01:1f:31:ca:
ac:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:59:94:27:D7:C6:B4:B6:88:99:33:B7:96:D6:24:C0:6B:86:9B:D2
X509v3 Authority Key Identifier:
keyid:DF:67:79:5A:3B:AA:45:A8:9A:DA:8D:DA:7E:84:E9:6B:B7:AE:07:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32d5WjuqRaia2o3afoTpa7euB4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/031554-78c4-4577-8058-9b6b87138ae7/1/32d5WjuqRaia2o3afoTpa7euB4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/031554-78c4-4577-8058-9b6b87138ae7/1/32d5WjuqRaia2o3afoTpa7euB4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0d:29:94:b4:69:42:47:da:01:70:a5:fd:60:a7:59:24:f8:
df:cf:d0:84:1f:c2:44:87:56:16:40:2d:29:a6:26:89:b8:17:
e7:56:e9:8b:5b:36:9c:dd:fe:6b:52:25:cb:29:17:1e:66:50:
52:68:76:98:2a:72:a3:fc:27:e1:5a:43:14:2a:4c:33:4e:3e:
e5:13:6f:32:bb:41:d3:c0:85:57:d6:39:38:3f:60:c0:75:99:
53:4f:86:c2:66:22:09:d0:7f:07:3d:8d:2d:5b:bd:39:83:4a:
72:9b:74:a2:57:77:76:cc:b1:f2:d7:5a:40:b4:69:45:85:38:
57:a6:45:b5:56:45:cb:95:17:60:fd:fd:d7:16:69:f7:7b:eb:
92:52:d0:dc:3e:bf:25:a4:20:c1:02:85:31:fa:70:8f:ce:2e:
d8:e7:01:89:43:e2:d6:f8:d3:79:cc:4e:64:4f:9b:d3:e3:b9:
66:8b:5c:56:da:b7:ba:aa:20:58:62:cc:c6:c3:a6:6d:a2:fa:
eb:dc:db:1c:84:0c:27:39:a1:e9:ce:da:f2:5b:5b:e6:f6:21:
dc:ac:e6:dc:bb:ea:c2:3a:fc:7b:a4:5d:ec:1e:65:fe:80:fa:
5f:a5:e5:db:7b:f9:e5:bc:8c:f3:55:65:77:93:a9:2a:17:e5:
6b:b2:83:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:49:38 2025 by rpki-client