Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
File: 0c0c1HQkGQk2se35qYScPjBYfzo.mft (raw, json)
Hash identifier: hq7XXxoatsaCzJBfbFqezjdp/5x3Z8M0bF1QyXX9f+4=
Subject key identifier: 6C:E4:FC:B4:E7:60:CF:3B:AF:DB:18:4D:6B:02:BE:05:D1:8F:94:58
Authority key identifier: D1:CD:1C:D4:74:24:19:09:36:B1:ED:F9:A9:84:9C:3E:30:58:7F:3A
Certificate issuer: /CN=d1cd1cd47424190936b1edf9a9849c3e30587f3a
Certificate serial: 0194BBCE7BD470D21384B212C95BCA553190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
Manifest number: 0B8A
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: 0c0c1HQkGQk2se35qYScPjBYfzo.crl (hash: azVWpdKvDI0PxSTJ39MtCyYtT8RsIvCgihwIBIlSbto=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7b:d4:70:d2:13:84:b2:12:c9:5b:ca:55:31:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1cd1cd47424190936b1edf9a9849c3e30587f3a
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=6ce4fcb4e760cf3bafdb184d6b02be05d18f9458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:23:8e:c9:ce:d1:84:14:ab:52:ad:9e:c4:
b6:eb:5c:96:99:96:16:ac:43:ba:03:29:79:ae:26:
8d:b5:33:7e:fe:d3:8a:fe:fc:bc:a2:c7:bf:34:f5:
65:a4:ab:4f:eb:99:61:c6:b0:ab:d8:6d:ca:98:ef:
01:be:29:01:62:98:0b:fb:e5:c3:de:b9:b2:3d:2a:
ba:9e:31:9c:91:68:87:14:a6:dd:09:c3:f1:70:28:
94:09:db:08:03:12:1d:af:f4:6f:2b:6f:04:26:cc:
62:7a:78:b9:03:02:f8:a4:6d:21:d8:b1:00:50:ac:
45:df:fc:b0:c0:b4:98:4b:f4:a1:d8:e7:ec:67:21:
71:26:22:91:79:7c:b3:ed:16:15:69:3e:e6:5d:6a:
bc:1e:45:82:c5:6d:39:14:94:bb:50:fd:4c:a7:c1:
3c:9f:70:da:08:20:d2:d2:7a:92:0a:19:02:1c:07:
43:13:cf:dc:e4:33:f1:a6:ab:4d:d0:2f:ba:29:7c:
4d:a1:cf:91:2d:3a:e5:29:a5:9b:17:08:fd:2c:ad:
c8:b6:fb:fe:a3:90:1f:4f:74:e6:4e:0a:17:14:b0:
66:4f:5a:e6:63:32:2c:72:bc:3a:98:2d:32:13:50:
1d:ec:d5:6f:78:de:fb:54:55:3a:83:3d:19:06:82:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E4:FC:B4:E7:60:CF:3B:AF:DB:18:4D:6B:02:BE:05:D1:8F:94:58
X509v3 Authority Key Identifier:
keyid:D1:CD:1C:D4:74:24:19:09:36:B1:ED:F9:A9:84:9C:3E:30:58:7F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:16:20:f4:89:8c:24:13:89:c2:da:d3:7a:ac:7e:64:58:d3:
e0:22:09:d0:02:85:ab:f2:f3:4e:15:a0:00:ef:13:a8:77:95:
84:56:5f:be:bd:5b:55:39:93:b8:52:18:95:0c:90:e0:1d:2f:
e8:56:31:e2:fa:2b:4f:63:6e:6e:55:a7:3d:c4:f9:02:69:c4:
7e:54:32:8c:f4:5a:2a:6a:de:b6:b5:f8:10:7a:84:45:7b:bd:
85:63:68:ed:4e:b2:63:28:2d:90:dc:75:ae:80:ab:6d:06:97:
bb:80:61:53:a6:02:35:a6:b8:1d:0d:b8:59:1c:ad:f3:1e:b6:
ea:4b:5c:2c:bc:67:dd:6a:98:3f:08:e3:4e:da:31:1e:66:e7:
ac:21:68:23:76:41:30:d6:9d:ef:f4:19:76:39:2a:1c:5e:66:
b3:66:fd:b5:3f:10:a8:8e:ac:16:f1:e9:43:a3:ac:76:cc:73:
f9:16:94:bf:1c:56:12:6e:66:4e:e4:c6:12:24:57:fb:b8:9e:
3d:f3:ac:74:63:24:08:79:8d:75:cf:24:aa:96:32:00:74:e4:
be:4f:d6:d3:fc:60:03:1a:74:d8:87:b5:aa:71:24:20:a6:45:
f2:53:a6:01:fb:7d:98:cd:5e:47:74:10:d4:4a:5d:e3:41:1b:
98:35:a9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:28:54 2025 by rpki-client