Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft
File: DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft (raw, json)
Hash identifier: N2pbN8erKvj1OXoVtU2X+4Zjyhok5ED7X0hHsfOsyCg=
Subject key identifier: 09:0E:DD:C5:B8:BB:A6:48:41:78:E2:DE:37:29:7A:95:E6:A4:0B:6E
Authority key identifier: 0E:85:FD:3C:9F:95:58:B2:18:02:2F:F4:09:FC:55:4F:AE:E7:90:90
Certificate issuer: /CN=0e85fd3c9f9558b218022ff409fc554faee79090
Certificate serial: 0194BC72BDFBC1291FB8DEBA24838A16E627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoX9PJ-VWLIYAi_0CfxVT67nkJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: DoX9PJ-VWLIYAi_0CfxVT67nkJA.crl (hash: E2nZD68Lfy1+U3ez49oiRAfOfhuSNMfiRe0FvJMLwFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bd:fb:c1:29:1f:b8:de:ba:24:83:8a:16:e6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e85fd3c9f9558b218022ff409fc554faee79090
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=090eddc5b8bba6484178e2de37297a95e6a40b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:fd:09:76:9c:b7:ba:cb:a4:1a:af:78:cc:
d2:b5:2b:5d:79:de:a4:d4:f1:f2:13:90:ae:df:39:
b2:61:80:b3:66:6a:16:2c:10:c9:b1:6c:65:b3:20:
84:f4:be:75:e5:0a:f6:69:13:fd:d7:27:15:3a:0d:
c8:a2:69:33:4b:43:19:9c:9b:5f:67:48:b1:9c:0a:
dd:3d:b3:87:3d:9f:b5:64:4b:8f:ab:16:8c:3c:04:
d4:cb:f2:8e:24:dd:0b:b1:a1:42:96:e9:e3:11:4b:
7c:f5:46:10:34:3c:6e:d6:90:e2:67:33:f7:c3:83:
21:3d:ab:67:7a:0a:3b:9e:a5:7c:de:ad:dc:a9:29:
63:e4:0c:42:1c:22:f1:a8:8c:e8:32:5f:b0:78:cd:
aa:e8:d1:bd:2e:ed:80:90:47:e2:cb:05:89:ef:b4:
94:91:a9:39:53:d3:49:c4:a8:4d:4f:9a:f0:bf:35:
18:9e:6b:e8:b4:09:cc:b7:4b:3d:46:54:bc:ad:67:
b7:b9:cb:4a:5b:6c:86:07:28:90:97:e7:e6:16:d2:
85:a4:ba:f8:47:04:b2:fe:e4:e7:b9:ac:1b:70:4c:
0d:c3:50:7d:a4:e5:43:e4:d5:bd:99:63:4e:7b:df:
eb:a7:5f:ba:1e:b5:91:20:28:42:da:d9:ad:39:39:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0E:DD:C5:B8:BB:A6:48:41:78:E2:DE:37:29:7A:95:E6:A4:0B:6E
X509v3 Authority Key Identifier:
keyid:0E:85:FD:3C:9F:95:58:B2:18:02:2F:F4:09:FC:55:4F:AE:E7:90:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoX9PJ-VWLIYAi_0CfxVT67nkJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2f:82:ca:40:88:a1:aa:42:c0:db:32:7b:62:e4:51:9a:a2:
41:97:12:ed:a2:c6:48:60:25:6b:91:83:5a:48:46:52:02:c4:
3b:45:7b:a2:a0:33:52:92:cd:db:9a:0f:a5:37:b8:d0:0b:e4:
69:c9:71:5b:af:af:11:a2:80:2d:84:43:d1:34:2e:7e:34:3e:
c7:93:1b:1f:21:79:76:7e:3d:55:e7:84:fc:b7:19:19:89:9e:
1b:79:43:4a:da:a2:8f:88:5b:d5:39:04:dc:9d:d1:b3:ae:8f:
bb:ed:f3:d2:85:55:3b:06:d0:1a:fb:e8:7a:e8:3e:ee:ce:ee:
17:e2:86:b5:5a:03:2e:95:27:e1:3f:32:50:d4:dd:e7:09:25:
85:67:a2:97:87:1f:4e:5c:37:b4:aa:73:98:41:2a:c2:5b:60:
83:75:bb:aa:5b:f5:ac:d6:bb:77:a9:62:bb:37:53:c1:c9:20:
7e:4c:45:b0:48:bd:1d:4e:aa:90:3a:20:12:ee:86:bd:08:0b:
9f:74:78:f2:29:1d:bd:67:86:d6:91:48:ea:69:06:69:8b:68:
df:2e:cb:ae:f3:a4:d3:0d:46:1e:ec:9d:d9:5e:f8:75:48:f3:
d3:9d:c9:e7:1a:9b:8c:cd:05:7c:01:64:c5:62:08:c0:ea:90:
ea:c8:de:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:49 2025 by rpki-client