Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
File: DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft (raw, json)
Hash identifier: 8qvHaJ5/DZEJ//GwRG+yxMCiudYsgVY5nN1AW2xJyww=
Subject key identifier: 2E:19:24:9E:9E:88:4A:20:EA:BC:B7:68:65:DF:F1:BE:AC:4B:DE:E8
Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353
Certificate serial: 0194BBCE53D692A8C6C6D68F35618BDFDE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
Manifest number: 0616
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl (hash: fU5pBrZLv1eqHpsk9ZvZqfNZH4qSn2FcnRM4XAmBuvo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:53:d6:92:a8:c6:c6:d6:8f:35:61:8b:df:de:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=2e19249e9e884a20eabcb76865dff1beac4bdee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:5c:0d:a7:53:f1:7f:14:67:d4:96:9c:70:
10:77:9b:44:46:b7:e4:a1:47:b6:09:d3:44:2e:a8:
25:5d:73:df:0c:bb:6e:16:ab:3d:82:4e:ed:fb:a0:
80:75:8a:29:d1:77:84:79:7a:1e:c4:da:75:9e:2c:
0f:4a:10:9c:13:96:a4:a4:6a:92:6f:d4:24:38:c6:
65:e2:d4:b3:d6:45:2e:8c:3f:cc:c8:cb:2e:1a:ab:
57:0a:3e:92:ff:3e:3b:3f:7c:1c:5f:42:f7:c5:d4:
d9:9c:31:fa:cf:65:6b:33:9d:91:94:8c:65:d6:ad:
b5:57:28:62:0a:e8:2b:47:e0:17:e7:f2:11:eb:95:
23:d3:ae:78:d3:cc:d9:1c:8d:a7:90:7f:e0:4f:2f:
7b:54:88:d5:f3:35:ef:3b:47:3e:f2:14:a5:8b:03:
86:16:35:20:22:15:16:67:9c:42:54:b8:45:aa:25:
7e:50:4f:cb:f2:59:bb:81:53:e4:7c:d6:ca:77:3f:
b9:9a:b9:43:b9:e5:c6:e3:7a:f9:6f:a6:c8:d7:7d:
db:ae:64:d0:33:df:5d:ce:14:0c:db:d5:ec:e6:3a:
d6:9a:85:1d:5d:1b:e1:e1:b0:86:d8:1a:52:71:4b:
b4:a8:fe:aa:20:98:46:a6:95:08:3e:91:5f:65:93:
db:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:19:24:9E:9E:88:4A:20:EA:BC:B7:68:65:DF:F1:BE:AC:4B:DE:E8
X509v3 Authority Key Identifier:
keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ce:1d:29:45:b4:a9:c9:b3:9e:a8:01:4e:62:f9:fb:0b:03:
c1:da:c6:90:f3:b7:06:a0:79:dd:e8:96:25:34:b9:de:07:a5:
f9:c2:7f:ac:78:c0:b8:22:b6:4a:0c:07:b3:5e:ba:b6:4c:ee:
5f:8b:4b:46:8b:05:97:6d:5b:0d:01:96:e8:9c:46:07:ae:7c:
e1:a0:f9:3e:24:34:82:25:72:4c:45:9a:ae:77:8b:7f:c2:80:
2a:97:2d:c1:f4:fd:c7:ad:9a:f5:f1:76:7f:a4:77:22:66:be:
c2:75:68:6c:75:d7:e8:de:4c:73:26:92:2d:29:34:8c:87:91:
4b:4a:b2:df:71:1c:8d:5c:97:1b:6c:4b:e9:29:7c:bf:02:93:
57:c9:28:dd:41:1c:b5:66:10:60:3f:f1:b4:1a:9c:f4:27:b8:
2b:72:54:dc:bb:97:c6:a0:b5:81:39:06:b3:5e:8f:d0:dc:2c:
f7:19:1e:5e:d5:f9:8d:2f:cf:41:71:da:e5:ca:8a:2a:cf:1e:
3d:fc:06:df:3f:47:96:15:b4:4b:bb:5e:b4:4e:4e:93:db:cf:
d0:19:e6:d7:93:9d:dc:eb:00:20:b7:14:db:e7:7a:bf:88:07:
45:ad:a7:72:ad:e0:b0:1f:d2:a4:88:f1:9c:db:c8:26:ee:c0:
bc:86:7d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:42 2025 by rpki-client