Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
File: Iwz5e62CJ98tajnFT2OCEIFQ9og.mft (raw, json)
Hash identifier: ps7Vn+kfVn5i4aoPxjE/SEqOEUBphLMGo+cwpAPMaZg=
Subject key identifier: C5:2D:B8:8F:41:A7:D0:5C:05:3A:10:08:7D:62:A4:7C:A6:F3:F1:B9
Authority key identifier: 23:0C:F9:7B:AD:82:27:DF:2D:6A:39:C5:4F:63:82:10:81:50:F6:88
Certificate issuer: /CN=230cf97bad8227df2d6a39c54f6382108150f688
Certificate serial: 0194BBCE452D5745FBDA72A929AE066A4461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
Manifest number: 1349
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: Iwz5e62CJ98tajnFT2OCEIFQ9og.crl (hash: lyp4dYHRdNt+fDC5lD71VT+n5B5bkimNjGWFViEEN8c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:45:2d:57:45:fb:da:72:a9:29:ae:06:6a:44:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230cf97bad8227df2d6a39c54f6382108150f688
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=c52db88f41a7d05c053a10087d62a47ca6f3f1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:95:ac:d4:26:1b:ad:9a:e7:bb:1e:e4:a6:
3f:d0:9c:67:09:bb:0a:b5:54:ae:e5:58:61:0e:93:
d3:de:55:82:3b:0c:5f:e1:22:50:37:6e:5a:fd:f3:
66:1e:79:2f:6e:c0:c8:8f:1c:45:83:39:75:08:13:
49:69:7f:a2:42:69:60:9b:20:b9:5f:dc:16:a7:f2:
f5:2c:ff:b6:78:bd:43:8c:cd:b9:86:a6:ad:98:3c:
f5:69:48:d8:53:d9:f3:ae:b6:61:fe:77:93:dc:ae:
56:1b:e5:4e:ed:80:06:9a:21:86:4f:42:34:0a:79:
69:3e:28:5b:16:e7:51:3a:2a:17:a4:9e:82:1d:5b:
83:b5:e4:18:8c:95:be:ac:f2:5d:06:bc:3f:b5:cd:
aa:93:7f:de:b5:c2:85:4c:44:09:49:9b:64:de:7a:
b7:fd:8b:b2:f4:75:21:2f:86:cc:8e:02:a5:0c:6d:
6b:11:d6:2f:9a:db:65:31:fd:29:a5:61:dc:c6:13:
fb:76:f2:4b:8b:18:9c:67:6c:d4:d3:94:73:72:42:
16:59:82:6b:2f:2c:35:ff:88:14:64:1f:53:00:2d:
f6:10:1d:b7:6e:ba:2f:18:c3:cd:b1:7d:ae:b4:ff:
e3:d2:2d:ac:5f:37:b3:31:6c:a9:ab:53:d3:15:38:
43:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2D:B8:8F:41:A7:D0:5C:05:3A:10:08:7D:62:A4:7C:A6:F3:F1:B9
X509v3 Authority Key Identifier:
keyid:23:0C:F9:7B:AD:82:27:DF:2D:6A:39:C5:4F:63:82:10:81:50:F6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:95:0c:26:ad:92:8e:b8:e7:3d:fa:9e:e4:e5:38:9f:40:43:
83:9f:1d:72:55:07:85:9b:60:17:4a:30:e2:c5:2e:3e:07:b9:
a7:56:61:42:bd:7a:ce:13:e7:39:e2:a6:87:81:1e:53:8e:4a:
60:f5:91:af:5e:62:5f:37:3d:72:af:c6:2a:70:7f:f7:da:33:
bf:13:e2:bc:fd:3b:80:f3:5f:cd:c1:17:39:87:92:a9:79:59:
e7:05:6a:48:1b:bd:d8:78:c7:0b:62:07:64:0e:c5:cb:62:69:
8d:f6:d3:fb:d7:6c:1c:ed:a9:0d:7d:1c:f9:2b:b2:25:f7:c5:
10:89:4e:64:12:e8:29:35:f7:63:e0:16:dc:b6:e5:6d:21:4e:
26:e2:08:41:f7:2b:23:d7:de:26:fc:de:63:10:2b:68:d9:90:
0f:c1:44:23:a3:28:a8:b7:d7:74:2d:d0:ea:d9:74:09:21:1c:
ba:58:bf:19:c4:eb:d0:9c:fe:19:46:c0:f4:f7:8c:44:b8:a4:
f9:cd:7f:74:1b:38:35:06:45:58:a6:9c:36:55:d4:db:f7:72:
a8:87:62:dc:9a:79:af:c9:89:dd:be:d5:42:3b:a2:d7:0d:9b:
cb:c1:84:e6:de:c8:83:ed:1b:67:49:16:99:6f:ff:4d:8b:4a:
4a:55:40:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:40 2025 by rpki-client