Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
File: 0NxXC8HJZLq37VbGc6pAUY-FRXg.mft (raw, json)
Hash identifier: Vlxm2dvP3d0+xxC2x1xU4jdcJ1xzXoKAU87Qq3eJqtQ=
Subject key identifier: 54:6A:04:3B:E4:14:FB:9E:B5:2F:78:25:ED:5C:52:92:B7:4B:1B:1F
Authority key identifier: D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
Certificate issuer: /CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Certificate serial: 0194BBCE3978F02F50348DD6285C69A309C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: 0NxXC8HJZLq37VbGc6pAUY-FRXg.crl (hash: lC+PEF7+A7Pnb6hC5SXH7uxhsJEzsLOwMFW5lWlO0eM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:39:78:f0:2f:50:34:8d:d6:28:5c:69:a3:09:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=546a043be414fb9eb52f7825ed5c5292b74b1b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:ad:ef:af:0a:cb:69:bd:00:95:5b:db:6e:
9d:77:55:0b:60:32:5a:0b:65:e5:1c:12:40:9a:c7:
ac:b3:90:98:ce:dc:bc:f0:fa:ca:9e:df:56:c1:5d:
18:d5:50:ff:81:ec:fa:a3:8a:bd:0f:c4:9f:a8:28:
44:f8:9d:97:5a:ab:a8:eb:10:bd:5f:d5:b9:f0:47:
96:ce:2e:d1:04:64:a5:a0:35:79:00:a9:af:90:3d:
f7:ca:71:bd:d6:0d:5d:39:4b:44:58:75:2d:26:62:
57:c2:d0:f8:15:7b:5e:7e:8f:15:95:b6:ce:9f:fe:
89:94:17:4d:69:e3:57:bc:e2:cd:44:4e:4e:e2:af:
a1:1b:1d:97:18:38:8d:d6:05:85:4c:06:25:04:fc:
36:12:4f:7b:83:a1:eb:64:94:05:a0:fd:59:8b:23:
bc:e5:f2:02:09:30:08:44:04:aa:54:95:ab:5c:15:
07:c6:b7:26:1a:d2:c0:6c:4b:fa:a8:52:bf:66:aa:
fe:99:d5:88:e7:6b:c7:b4:92:f0:49:f0:f4:b5:86:
e5:46:1f:6a:c7:22:5f:66:46:a3:da:47:e3:90:fa:
06:c3:96:a8:d4:18:27:17:a5:24:a8:d3:a3:50:1c:
d6:69:1f:8e:1a:be:d0:13:6b:c0:98:fc:fc:d0:b9:
92:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6A:04:3B:E4:14:FB:9E:B5:2F:78:25:ED:5C:52:92:B7:4B:1B:1F
X509v3 Authority Key Identifier:
keyid:D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:68:ba:d1:e2:54:51:c7:92:ba:91:99:cb:4f:f9:29:9c:22:
68:8b:fe:2b:84:5e:a9:c0:aa:6e:2f:a7:f3:3a:cd:f8:fc:66:
c8:c3:e9:74:ea:40:f6:4c:e8:f4:2f:52:7a:d1:20:72:07:c7:
bf:74:80:79:0e:89:76:a8:d1:65:af:e1:f4:31:3e:25:23:1f:
82:f7:7f:d9:93:e1:5f:93:92:b3:e3:20:1c:c2:3a:19:88:27:
09:96:11:38:2b:7f:54:0f:a6:56:00:a6:a1:49:03:e7:c5:3e:
15:e1:cb:27:3b:6d:7e:84:16:dd:66:66:f8:8f:1b:b7:b9:95:
0e:02:24:9a:77:08:b4:09:aa:05:86:0b:62:d1:61:6b:97:67:
00:17:98:32:c5:c6:9d:40:39:e1:21:7f:8f:39:96:37:8e:9d:
ee:ba:89:c7:71:c0:b8:82:fe:17:bd:2e:e9:c9:af:7e:fe:08:
8f:49:58:91:8f:6f:a8:76:bc:ee:97:e4:c3:4c:d0:bb:2c:77:
48:51:46:6d:ec:ee:8d:6d:80:23:fc:bb:e4:5a:5b:e6:94:f5:
b3:55:fe:8c:b5:71:a4:8f:79:ac:16:9d:83:62:ba:2c:d1:50:
e8:18:b9:73:91:7f:cf:68:2f:69:d8:b6:14:fe:39:d9:e4:d4:
4d:a7:63:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:15 2025 by rpki-client