Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
File: d7tRRrULW8gaNXR6K75lKqC3Fnw.mft (raw, json)
Hash identifier: NKM2HDo1E7M6/td8AKCz6N2ppDYnT2Jx6pveUnUknNY=
Subject key identifier: DA:4F:79:34:04:E2:9F:AB:C8:DB:58:70:9F:80:32:18:06:D7:4E:D5
Authority key identifier: 77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C
Certificate issuer: /CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c
Certificate serial: 0194BCAA0424C2F408087CBBCC62AA4CB099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
Manifest number: 10CF
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: d7tRRrULW8gaNXR6K75lKqC3Fnw.crl (hash: lwq+MvghHo6eJn3qfkx8ZcN3wcQ1NKbr4ATpadCrBic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:04:24:c2:f4:08:08:7c:bb:cc:62:aa:4c:b0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=da4f793404e29fabc8db58709f80321806d74ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:43:84:66:29:0c:32:22:8c:93:39:9a:35:
13:9b:8d:a9:b7:74:a8:4c:a9:d0:25:ec:47:57:0a:
fa:f2:11:9e:ea:eb:47:19:68:9d:77:eb:84:3b:04:
4a:6c:bf:7c:d8:86:39:0f:c5:a9:25:8f:eb:dc:fd:
36:48:40:d9:6b:55:cf:3d:10:28:e9:cd:48:da:c6:
a1:46:e0:a4:a6:9d:85:6c:46:79:85:09:89:8b:a4:
55:d8:c8:63:77:86:af:04:74:42:68:f8:17:63:f1:
81:44:93:33:27:27:f8:46:56:1d:38:69:b3:28:85:
b7:45:e1:8b:bf:01:40:75:00:f5:90:25:61:c5:a1:
31:28:c8:92:bd:81:3d:d8:71:24:a5:ca:54:11:56:
4b:90:dc:db:8a:1c:2c:29:11:46:45:62:d0:67:6a:
79:d4:2b:63:65:65:b7:b5:7d:1a:68:b4:26:ba:6b:
d8:8b:04:cd:31:11:a0:fd:fd:f9:a9:f7:37:07:b7:
1c:54:15:b3:0d:87:19:39:38:d8:73:88:39:f7:d4:
e1:25:ee:60:9f:e6:be:ca:c4:6d:f1:59:58:74:d1:
9e:1e:dd:8b:70:ea:18:8a:7d:ab:bc:68:a6:e7:45:
e5:c3:f4:86:75:93:31:22:4b:b2:c5:95:73:e1:34:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4F:79:34:04:E2:9F:AB:C8:DB:58:70:9F:80:32:18:06:D7:4E:D5
X509v3 Authority Key Identifier:
keyid:77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:68:f8:0b:61:29:23:04:fd:77:c6:86:88:1e:b5:30:70:f0:
6c:69:f2:63:f9:75:ad:2d:22:1b:a4:52:d1:7f:47:8f:8c:46:
27:0c:64:ad:32:67:a3:f5:37:a5:13:16:be:f2:b5:38:16:69:
50:4c:e9:3e:1a:4c:b0:5f:96:bf:fd:98:cb:ed:48:ed:cf:53:
e0:cd:79:f1:8e:31:30:16:b6:f1:89:5c:51:35:89:9e:07:00:
c7:77:af:db:83:16:3f:49:ee:1b:a5:a4:e4:49:ff:6d:51:f5:
4f:99:62:d9:95:f4:5e:4a:22:1d:88:07:59:15:3b:7c:cf:64:
03:2b:0a:26:07:13:1d:93:a4:30:1f:73:81:5f:09:0c:e4:78:
ce:52:e7:2e:fc:a8:92:92:7f:b7:45:55:4f:fe:0d:f6:6f:d7:
45:00:b5:1e:d8:c0:af:77:37:84:97:2c:eb:b6:03:1b:93:27:
a5:75:bb:5e:2b:06:ec:34:cc:91:db:62:20:f2:98:ff:07:53:
88:c7:76:c9:29:23:ec:65:2c:e7:cd:17:50:02:af:bd:7a:51:
82:cc:bd:43:e6:4f:4a:a7:81:a5:c4:d9:5f:1c:01:69:ab:ec:
b5:e2:5c:a6:77:df:42:d2:25:e6:ae:3c:ce:c7:30:37:7c:f6:
fe:22:28:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:25 2025 by rpki-client