Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
File: k0F7oKbrs_OxuCr3UPviioakGzU.mft (raw, json)
Hash identifier: rMxRg0VrmogfCq3NryARfOtnJ3V3rbZdQqCeOR5W0ws=
Subject key identifier: 41:CB:1E:A4:CD:87:E9:8C:C8:49:B6:90:05:F8:E8:68:4B:9E:1B:EE
Authority key identifier: 93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35
Certificate issuer: /CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35
Certificate serial: 0194BBCE995CCF5E2FE4C86A8CF82B6EC7DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
Manifest number: 074B
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: k0F7oKbrs_OxuCr3UPviioakGzU.crl (hash: y1yqGwZMVCO+3+LBkI+Cd3hFPHhBfb1diUN5pvajFSM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:99:5c:cf:5e:2f:e4:c8:6a:8c:f8:2b:6e:c7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=41cb1ea4cd87e98cc849b69005f8e8684b9e1bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:17:56:75:e1:16:41:35:50:95:b8:00:a9:0b:
f5:4d:3a:4a:7a:a8:9d:1c:34:39:c5:21:ea:01:a7:
3d:c8:6e:01:f8:01:fe:b1:f3:1c:be:17:1b:42:ca:
09:38:fc:04:03:38:30:8b:7e:08:db:75:5d:b2:a5:
b8:13:6f:13:87:68:19:31:60:19:a1:d6:dd:af:6e:
cb:35:36:36:54:32:7e:ab:cf:a7:ab:d5:53:3b:97:
38:6d:a3:53:1e:09:a7:7f:10:b1:fc:99:36:31:27:
e9:de:f6:3f:0f:42:94:f0:f9:da:3e:7a:4f:4a:a8:
46:c4:5c:f9:87:8c:1f:97:ff:93:c4:4f:e6:4f:58:
e2:f0:a9:2f:f4:74:09:69:04:ea:c1:e2:b6:00:be:
10:c4:2e:ad:1d:aa:19:d7:c5:2e:d9:0c:78:53:89:
7f:92:59:d1:14:71:51:a5:d3:d3:fb:c2:81:c0:24:
36:9c:8f:02:4d:30:63:7a:a4:89:d3:b7:e5:9f:e0:
fd:e9:fb:ea:59:83:6d:6d:14:56:d3:6d:db:d7:e3:
2f:db:d6:a5:a9:6f:55:55:ea:92:93:c8:71:a2:38:
65:3d:bb:d2:b8:50:49:01:7a:ff:41:30:cc:36:a1:
77:f8:6d:85:23:ed:34:3c:8a:cd:08:46:37:c5:49:
43:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CB:1E:A4:CD:87:E9:8C:C8:49:B6:90:05:F8:E8:68:4B:9E:1B:EE
X509v3 Authority Key Identifier:
keyid:93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ac:a3:b8:57:a4:3e:39:23:5d:31:a9:a7:9b:ff:87:70:c6:
95:ad:41:66:4a:d6:05:06:3c:4e:6f:69:f3:d4:d5:4a:9c:10:
9d:22:78:6c:8a:31:23:91:97:af:d6:49:9e:3c:45:c7:e8:48:
4b:8d:55:d3:9d:5d:89:6f:c1:6e:6b:71:f4:e0:8f:49:f9:ed:
03:06:ab:dc:e0:93:91:d6:5a:cf:42:dd:b3:d6:34:78:99:db:
21:34:b7:a4:0b:7c:b2:d1:27:80:92:8d:99:76:4d:10:10:5c:
a6:c2:51:2e:e3:95:26:2d:23:12:5e:dd:8b:7e:18:0b:56:44:
1c:47:85:2d:3c:cf:55:60:59:2d:f6:76:1b:69:88:99:a7:25:
94:85:10:eb:98:e5:27:c0:03:df:39:8c:d3:e7:c5:6a:36:18:
e1:b5:d0:a8:53:a9:77:2d:a7:d4:53:f9:71:ad:3d:e2:b1:97:
db:0c:11:c1:83:30:e1:21:62:0b:08:dc:4c:c1:8f:7d:16:19:
39:da:3c:88:90:68:2e:e5:8d:22:fc:16:7e:50:75:6e:f8:4c:
a8:db:1e:04:ec:ce:52:80:6e:98:00:e9:83:59:79:ed:c6:0b:
c0:4b:b7:d7:fd:dd:39:f6:07:2c:ce:8c:6f:a5:97:fd:c9:34:
dc:b5:59:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:18 2025 by rpki-client