Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json)
Hash identifier: 6IjvfO1I8DafhHKymUbKG62rru0l1MHzYthzkk/jJ8o=
Subject key identifier: 0C:65:59:95:E5:36:E4:B4:DB:6D:11:92:33:2E:CB:31:00:04:E6:0A
Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Certificate serial: 0194BBCDCF286AA01736F5B98B5086AAB7BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
Manifest number: 0506
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: Y7aJkHulJTy5CxK7Lo8NKFlWIHyV66p3/uvDHIlAy4A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cf:28:6a:a0:17:36:f5:b9:8b:50:86:aa:b7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=0c655995e536e4b4db6d1192332ecb310004e60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:29:c4:56:85:3d:03:e7:98:0b:c2:e6:2d:
8c:b6:fc:1b:9d:03:c9:f1:ab:a6:91:b1:f4:09:ca:
bf:c3:a2:54:ca:ec:23:a1:95:16:1c:bb:14:ae:b7:
7e:3e:33:13:a4:57:3b:51:f3:4d:24:4f:32:df:e1:
e3:7a:3b:80:60:13:9d:6c:9d:c8:7f:fa:30:96:65:
d5:53:cb:dc:6e:58:2a:cd:df:16:8b:4d:d2:d4:08:
e7:86:2e:95:61:91:f0:9f:c3:e3:31:b6:d8:0e:be:
e5:a5:4e:ce:0e:c9:95:fd:c7:60:d2:d7:df:65:71:
70:14:a6:e5:77:f6:30:e1:e2:49:09:2a:50:2e:56:
33:a2:2f:4c:5e:d9:0c:a0:31:9a:1a:bd:e9:03:c4:
ee:7e:e4:38:cf:de:9e:53:0b:61:65:de:e0:d3:99:
4c:cb:a6:30:3a:ca:06:89:7f:f0:90:a7:6e:06:33:
1d:ed:15:c9:54:bb:fe:5f:92:28:70:d1:c1:62:93:
58:4b:3c:86:3a:9c:78:4b:ea:0f:83:1c:86:2b:45:
12:64:87:c8:71:08:83:b8:c7:e1:46:82:c6:a3:ae:
db:71:f1:ba:2f:cd:fe:2d:49:e0:e3:fb:77:a1:eb:
2d:c4:b7:2a:4b:75:89:67:fc:6e:d9:9e:8c:d0:f0:
5c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:65:59:95:E5:36:E4:B4:DB:6D:11:92:33:2E:CB:31:00:04:E6:0A
X509v3 Authority Key Identifier:
keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:41:93:51:1a:69:f2:a4:3d:6c:0b:06:bd:e8:f1:8c:27:c3:
76:97:58:f5:b8:b4:d1:52:a0:84:6d:c4:2a:9b:e8:10:fb:db:
73:86:23:ef:f6:4a:99:f0:e9:53:1c:41:d0:0c:b1:cb:a2:4e:
86:c3:1a:d3:cf:14:08:91:0b:a1:c5:17:f2:64:be:d8:26:db:
ac:6b:41:a0:9f:e9:7d:8e:17:96:61:03:49:03:23:58:b4:3a:
42:4e:fd:22:b6:ee:7f:cd:b9:7d:d0:be:f5:13:ac:82:a5:6f:
bb:9c:bb:94:06:b4:10:58:42:98:e1:12:7d:6d:96:eb:91:ee:
1d:f7:92:ce:98:58:59:0a:66:20:0e:ea:8f:e8:af:45:43:a8:
6e:5b:51:3c:8d:54:7a:88:e6:a8:0f:06:49:d9:bb:9e:23:fb:
b1:22:15:0c:6c:17:3b:aa:56:f7:38:76:3a:80:0e:f8:32:72:
90:0b:72:c3:21:df:d7:87:72:e0:c1:17:78:2c:bb:53:7d:ba:
45:48:04:b0:d3:95:af:d9:2a:e5:03:49:98:09:6f:0e:37:56:
df:a9:c1:1c:c0:74:45:7c:0a:93:aa:8a:42:ac:91:ee:8f:45:
7a:7c:1b:a2:34:14:5b:a6:85:1d:1c:36:7c:87:57:90:6f:12:
83:74:ed:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:06 2025 by rpki-client