Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
File: cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json)
Hash identifier: XEI8fMXmWvXL3OY2mrmiwF8FUSj6ARKA22ZegOOUfZo=
Subject key identifier: 8B:A5:10:E8:1B:3F:44:1F:59:BD:FB:40:C3:64:B7:8F:FD:7D:8F:5A
Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
Certificate issuer: /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Certificate serial: 0194BC7290B5FC41A360B12DECD09FFE0D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
Manifest number: 079A
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: 4M6ehXl4ODFTT2Z6/zgSgg3kU0daHCxEnMDr70IgbvA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:90:b5:fc:41:a3:60:b1:2d:ec:d0:9f:fe:0d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=8ba510e81b3f441f59bdfb40c364b78ffd7d8f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:e6:94:ba:19:cd:af:50:49:b1:2e:a1:af:
32:c1:a5:5b:c5:28:e9:4e:1b:5a:30:0b:c7:aa:03:
67:5a:42:6d:bc:75:a6:58:be:9c:87:e5:8f:70:68:
f1:b9:cd:a9:39:39:39:e4:59:45:db:95:39:2e:e6:
9f:96:c6:d2:57:4c:18:e2:61:de:95:cc:3b:63:0e:
da:de:22:93:17:2b:9a:02:cc:3e:09:f9:80:44:09:
6a:b3:fb:d2:3f:48:2a:7b:e0:a7:4f:dd:46:6e:6e:
00:c1:ed:1b:f0:3a:58:eb:34:ee:d4:67:96:c4:14:
9e:94:20:15:e6:7c:af:78:6d:7b:8c:38:04:96:fb:
66:6b:ba:e0:cb:5f:64:4c:ca:12:40:65:d1:c8:a4:
1d:94:41:5f:2f:75:f2:1a:6f:e0:0a:0a:2f:b7:93:
ed:f0:b7:d2:aa:0f:0f:08:ef:4f:96:67:24:b2:b7:
a6:f5:a0:19:46:3b:ca:c2:dd:91:23:81:3c:b7:94:
4a:13:94:60:57:c6:30:ce:a0:81:72:3f:43:83:72:
14:b9:a6:30:7e:01:56:b6:7d:36:66:71:e5:f3:27:
e1:f3:24:57:ef:38:e1:9b:ea:96:60:ac:96:9f:63:
e4:2a:fb:83:55:22:f0:33:85:de:06:b0:09:05:4e:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A5:10:E8:1B:3F:44:1F:59:BD:FB:40:C3:64:B7:8F:FD:7D:8F:5A
X509v3 Authority Key Identifier:
keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:60:61:8c:22:e5:68:75:b0:ce:32:62:2c:c9:4b:14:d0:70:
ed:14:b8:e4:fb:e9:96:5c:85:21:d9:49:0c:f2:e6:8d:55:7f:
e2:68:34:9b:8c:3c:53:31:bf:76:e4:ec:1f:ad:97:4a:e0:e6:
c7:72:a7:06:88:4f:c5:42:0d:40:37:94:13:78:46:23:e8:50:
6f:0f:b9:52:2a:ff:6a:78:c2:6b:a3:f8:a1:cf:bd:60:cc:b1:
0d:54:ae:1e:ab:89:f9:34:ca:18:a7:b9:64:66:1d:ae:69:ef:
19:c3:57:5f:25:05:53:61:77:6e:8c:81:6e:38:2d:25:2c:e4:
2e:a9:6b:5f:e2:aa:a7:0e:97:9a:63:9e:76:c9:eb:56:e0:c9:
02:74:23:3f:d5:7e:f4:93:5b:d4:18:ec:ac:ae:7a:b9:39:e6:
c6:68:17:dd:cb:6e:30:14:0f:c7:72:45:67:28:09:71:da:32:
02:30:17:2c:3d:08:3b:c7:5c:9e:87:57:e1:49:99:cb:84:1a:
b1:b6:24:c2:f6:ba:7d:c9:58:89:b2:25:e7:f1:01:1a:9d:51:
95:6e:66:ef:5b:36:63:0c:ab:dc:02:84:18:d3:2b:df:66:43:
dc:83:c9:c3:a2:86:ed:db:8b:39:80:94:f8:40:76:d7:03:34:
ed:09:28:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:52 2025 by rpki-client