Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
File: 76psy3hXNGAC5rvEmPiLnobfGAY.mft (raw, json)
Hash identifier: CXRIc4DPoXRNZTN1tyoqZyPV4r/xJ6mO+/VTm3aaNVk=
Subject key identifier: 82:30:54:EA:9D:0E:73:E2:2F:B5:44:1F:77:BB:52:D5:97:25:14:6A
Authority key identifier: EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
Certificate issuer: /CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Certificate serial: 0194BC0512AE5E27BAF30D30AB3DC865CE78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
Manifest number: 01EC
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: 76psy3hXNGAC5rvEmPiLnobfGAY.crl (hash: jYDv0vl2xXCdu5xZ6GkC7a3hBGOGbxOmgdXxBZzD3A4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:12:ae:5e:27:ba:f3:0d:30:ab:3d:c8:65:ce:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=823054ea9d0e73e22fb5441f77bb52d59725146a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:50:9f:2f:0f:8f:2b:74:9c:3d:9f:6d:cd:
b1:dd:11:f8:f1:18:38:a6:b2:38:81:2c:0e:6e:a3:
df:1d:66:f8:81:03:49:33:f1:98:2d:49:74:c9:e4:
c4:53:4a:9d:bf:12:f2:8a:a0:f5:ab:33:8a:e6:57:
5f:e3:55:3a:86:c6:1d:75:d3:6f:b0:88:c9:48:d9:
d8:07:ac:98:99:19:d9:60:8a:38:2b:6f:b5:4b:38:
55:6e:c1:25:ad:18:78:58:e4:72:33:e6:0d:7f:e4:
6d:10:13:59:4a:7b:58:ad:5a:da:3e:da:55:af:ee:
a1:bb:5e:36:06:56:3c:17:55:bc:02:18:fb:ea:5b:
b0:bc:1a:87:5a:f4:89:77:a3:11:b8:58:81:b0:59:
63:4d:37:d7:bd:c7:2c:b0:c2:d8:32:f3:65:6c:f6:
0f:52:ba:f0:82:9c:ac:da:63:69:fc:c9:3a:7a:91:
6d:10:47:55:56:6c:41:78:34:56:5c:72:25:e5:32:
c3:de:5d:31:d6:0c:6b:a4:78:b2:5a:7b:57:d9:05:
42:14:64:a4:f8:f9:a0:7f:dc:1d:2f:e4:c3:6f:2e:
76:79:63:c6:8c:8e:dd:55:a5:21:7e:3e:88:53:52:
e5:34:82:91:e1:21:ef:b8:c5:29:a4:0d:32:74:44:
4e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:30:54:EA:9D:0E:73:E2:2F:B5:44:1F:77:BB:52:D5:97:25:14:6A
X509v3 Authority Key Identifier:
keyid:EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7b:3d:d0:6d:f9:7e:29:23:85:9c:c0:b3:ce:a9:a7:47:3d:
bf:2b:05:81:1d:29:49:7b:2e:68:35:2f:43:26:38:ce:57:42:
35:b0:af:4d:aa:07:f4:4c:a0:bc:bf:74:fc:f6:fe:6c:3e:ef:
fc:e6:0c:7b:7a:1c:bd:52:ec:49:a2:db:2e:13:b7:e6:01:18:
74:ba:9a:45:d2:94:31:3c:b5:ac:c8:64:af:7a:49:4d:d4:76:
de:6f:24:48:04:b5:25:ce:bc:9a:88:11:c8:c4:08:74:30:c4:
84:dd:41:82:9e:63:65:3f:88:74:c4:5e:9a:07:a3:4b:c3:00:
a9:42:ce:f0:c4:ef:be:e5:cb:c0:f9:7f:18:11:16:f1:54:80:
37:c9:78:85:54:9d:4d:73:39:12:7e:c6:38:98:3a:f8:26:1a:
62:33:e5:00:66:2d:41:e7:64:b9:97:5c:50:21:44:74:ca:99:
dd:81:95:34:fc:dc:f4:b6:26:19:d8:7c:d7:a4:41:79:f7:95:
d6:0b:f4:ed:de:b7:00:3e:89:d2:53:08:7a:e8:da:80:5e:fb:
40:63:b8:38:3a:00:63:43:37:50:50:d4:51:79:2f:81:ad:28:
a2:e7:4e:e2:ed:87:87:b9:4a:cd:37:5a:31:0d:93:f5:be:09:
77:c8:ff:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:10 2025 by rpki-client