Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
File: c4i9uc1_a6So9hjFpCp2quiSWc8.mft (raw, json)
Hash identifier: mATT81yOLDhHQfIJ0dCYWD8jtqyE6SnrCm5JHiyfFMs=
Subject key identifier: 25:1E:CE:94:38:AA:7E:B8:7C:D5:2E:23:24:3F:5B:79:B1:DF:C6:68
Authority key identifier: 73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
Certificate issuer: /CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Certificate serial: 0194BBCDB3109C7B20C16870AD9A52BE63F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: c4i9uc1_a6So9hjFpCp2quiSWc8.crl (hash: YdtnpoHbj2linfN7YWfXUoy2LdPCHu9SWyvYzQCD5Ko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b3:10:9c:7b:20:c1:68:70:ad:9a:52:be:63:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=251ece9438aa7eb87cd52e23243f5b79b1dfc668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:87:68:a3:85:7b:4f:d6:e8:00:fc:97:09:
77:31:a1:bc:39:41:88:79:b5:22:b6:85:35:84:82:
0e:36:30:c2:3d:99:82:52:b8:53:48:4b:b0:21:14:
e4:6a:33:28:7a:7d:1a:28:1a:56:d9:b1:8c:ba:63:
7f:a3:25:69:46:6a:94:44:68:5b:1c:ab:2f:74:bf:
a2:ec:25:f8:34:fa:49:99:9d:4f:77:ee:c3:ee:5b:
78:82:66:60:4a:d8:2b:6d:a1:ba:a5:14:a9:59:2e:
c3:ce:58:a9:58:a0:af:62:bc:d3:7f:eb:2e:13:20:
5a:cd:89:d0:5e:11:0d:85:4e:9c:1e:99:23:5a:c8:
41:3d:8b:76:29:b2:98:28:ce:17:df:41:91:40:2d:
3f:da:1d:bf:52:75:2c:40:ea:3b:1e:19:87:b1:b3:
2c:1e:89:ed:07:f2:5b:a0:b0:35:cc:75:25:21:94:
e3:a5:56:23:04:bf:42:da:da:0e:06:66:7c:3c:60:
ba:9b:43:91:a5:1b:c9:dc:3f:f7:cd:b3:5d:ea:5f:
6f:03:31:ad:37:f4:8b:dd:03:dc:38:a7:78:90:db:
94:4e:cb:cd:11:a4:54:af:06:04:de:a2:62:31:eb:
5f:15:7a:ea:28:6f:47:cb:0b:37:7a:e0:25:b8:5a:
d0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1E:CE:94:38:AA:7E:B8:7C:D5:2E:23:24:3F:5B:79:B1:DF:C6:68
X509v3 Authority Key Identifier:
keyid:73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e1:22:61:84:87:d2:98:eb:07:d7:32:7c:b8:4d:ae:04:bd:
c0:72:2b:f9:75:f4:9c:5b:ce:d1:61:7d:ac:0a:43:d9:95:c5:
70:ea:71:17:3c:64:05:30:59:da:e2:24:d2:48:97:67:05:a9:
6c:67:b7:18:6a:72:df:8e:47:b6:22:36:d4:28:13:3c:8a:a1:
9f:c7:6e:3d:f3:24:50:ee:2e:ef:00:ae:9b:2c:4a:ae:8b:1f:
15:1b:a9:44:eb:b2:a0:7e:5e:9a:e9:7e:ce:98:e8:5f:7d:36:
46:76:95:6f:3e:49:e5:9d:b2:b4:ef:53:5d:a5:c3:ec:ba:87:
e1:bf:32:29:2e:9b:af:a8:e9:24:30:04:98:06:14:17:77:da:
0e:cc:fd:ab:6f:b6:aa:87:e0:a7:f2:b4:bb:4d:d4:b0:88:94:
36:69:cf:de:e2:ab:1f:ae:c2:62:86:03:65:a4:12:cf:6e:57:
4f:cd:e7:52:d8:25:f0:4e:bf:3f:93:d7:dc:81:7e:9f:f0:74:
ae:69:c7:06:1f:a7:95:0f:f2:3a:b2:7c:ff:72:53:87:68:14:
d8:9c:de:26:e1:ba:8d:74:1e:21:4f:74:b2:92:a6:3a:19:b7:
ae:9b:a2:c5:ac:4e:f5:ad:95:73:86:b3:1d:04:29:7b:8c:60:
53:04:b9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:07 2025 by rpki-client