Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
File: v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft (raw, json)
Hash identifier: Zw0YVDSAzjMmneY/bVz/lQslVtEILMVQ3yMFQSZChAA=
Subject key identifier: 4B:95:F6:C7:18:99:1C:56:5A:A9:D2:9C:67:B2:87:23:B0:6F:7B:F6
Authority key identifier: BF:42:40:9A:1F:8C:1C:EE:59:74:DB:8A:42:E1:EB:67:2E:E8:34:36
Certificate issuer: /CN=bf42409a1f8c1cee5974db8a42e1eb672ee83436
Certificate serial: 0194BBCF0764E32D2BD98BEA17AC5FE1EE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
Manifest number: 0AC9
Signing time: Fri 31 Jan 2025 10:01:34 +0000
Manifest this update: Fri 31 Jan 2025 10:01:34 +0000
Manifest next update: Sat 01 Feb 2025 10:01:34 +0000
Files and hashes: 1: v0JAmh-MHO5ZdNuKQuHrZy7oNDY.crl (hash: 6xM6yEYJtwebt9v5/xgf9NlcDYW82+GI5x84vj4Ay6U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:07:64:e3:2d:2b:d9:8b:ea:17:ac:5f:e1:ee:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf42409a1f8c1cee5974db8a42e1eb672ee83436
Validity
Not Before: Jan 31 10:01:34 2025 GMT
Not After : Feb 1 10:01:34 2025 GMT
Subject: CN=4b95f6c718991c565aa9d29c67b28723b06f7bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:c0:c2:38:7e:78:de:5c:aa:c8:f0:65:bd:
51:6c:79:a5:39:80:c0:b5:53:1a:ce:1a:1d:50:31:
03:24:a0:94:36:ae:46:23:48:1e:de:c9:34:d3:63:
8e:1d:11:f9:6f:8a:d1:eb:04:46:b7:ce:83:e3:98:
e1:02:17:85:47:ce:3a:1c:f9:da:e8:9d:d9:e9:8f:
5d:6a:03:6c:0f:c2:c7:5f:4d:9d:a5:c3:99:d8:b5:
63:45:f5:0c:e1:87:49:19:14:84:7c:69:fa:d3:7a:
f4:9c:82:b5:1c:38:74:ad:ad:50:64:7f:fb:6f:5e:
87:7b:1c:19:b0:2d:1a:42:ed:0f:40:11:e7:26:4f:
7a:73:c0:f0:d1:fd:2b:56:7d:34:40:2b:a2:a9:d2:
82:7b:e5:c6:c5:e5:38:2c:76:2b:2c:46:fe:1f:27:
00:8e:d0:1a:b3:15:5c:24:cc:30:ef:aa:1a:6a:e6:
a4:ca:34:98:8d:a8:64:5e:87:cd:e5:14:a5:e3:a1:
5f:26:35:b1:d5:b7:73:7a:09:ab:98:e2:04:e1:f8:
76:6f:33:39:55:cc:c1:d1:b3:47:02:7a:27:bc:1a:
a4:83:4d:de:4f:3a:d6:c1:a6:f8:e9:80:ec:57:7c:
2a:8e:73:9e:8c:1a:d0:e8:66:ce:0e:3d:46:53:71:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:95:F6:C7:18:99:1C:56:5A:A9:D2:9C:67:B2:87:23:B0:6F:7B:F6
X509v3 Authority Key Identifier:
keyid:BF:42:40:9A:1F:8C:1C:EE:59:74:DB:8A:42:E1:EB:67:2E:E8:34:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6c:3e:82:43:80:a2:2c:25:4a:f7:41:51:69:19:58:89:da:
79:4f:6d:82:e0:05:74:1b:d2:ad:d1:4a:be:c0:3f:9c:a8:94:
bc:a3:24:fc:58:c3:76:5f:af:98:ab:e5:fa:fb:d5:8b:b8:f0:
ba:bf:35:dd:01:07:63:85:19:c1:b8:18:ea:26:4b:b5:76:2d:
9a:e3:8d:5c:74:01:ee:1d:eb:a7:94:85:43:4c:a3:a2:7f:35:
ba:8d:66:52:72:52:29:ac:ed:45:6b:ec:12:64:40:4c:2f:2a:
11:8f:ab:d0:44:2b:48:0d:fd:92:1d:26:28:99:09:92:f8:22:
7d:01:9c:84:2b:e3:aa:a4:fb:e6:87:6c:a3:76:ca:c6:63:76:
41:53:c9:e0:41:a7:e6:6a:f6:ed:0d:3a:7c:5f:0b:f6:e9:5b:
71:98:63:37:2b:83:4b:c5:89:1a:64:a9:07:43:4f:72:ea:c5:
84:5e:81:7f:42:20:ff:93:ba:d6:2e:ba:86:41:b3:93:fd:22:
6a:bb:f4:fc:66:77:df:ac:41:43:93:01:11:27:5f:b8:ed:75:
a7:aa:34:d0:3b:d2:ad:a6:81:a3:00:be:32:87:55:e8:0f:57:
95:f3:9c:a9:e5:aa:51:58:f2:fb:ad:d0:02:7c:74:01:f8:9e:
d9:5a:25:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:10:02 2025 by rpki-client