Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
File: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json)
Hash identifier: AJj7Vsx3Rt8LQtpe6GzpGGBLwhddGTPBPcCKTVGZsc0=
Subject key identifier: 61:BA:17:C2:33:2E:3C:D3:C3:3C:7C:12:D8:15:BA:ED:2F:DC:AD:1F
Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
Certificate issuer: /CN=e385733213b34236019a140ff19c5398ed71730e
Certificate serial: 0194BCA9FF8BB781E45FAB0D9246CDAECA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
Manifest number: 0AFC
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: 4i6Z08L+E2z15uN4/LtEAQsaX2YPYSSTeRTkBvM1Izk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ff:8b:b7:81:e4:5f:ab:0d:92:46:cd:ae:ca:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e385733213b34236019a140ff19c5398ed71730e
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=61ba17c2332e3cd3c33c7c12d815baed2fdcad1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:87:64:40:f9:d6:cd:10:33:4b:5f:c4:cd:
34:08:01:99:92:a0:1e:23:b6:8e:f6:0d:ce:ff:72:
13:ba:5c:70:67:cb:19:f3:22:79:fd:62:dd:16:6b:
f1:62:63:a6:14:11:0d:4d:33:78:d9:c9:ad:67:4e:
41:b7:01:7d:ea:f7:53:8c:2e:45:31:e4:be:a6:cb:
a2:ba:bf:3e:b2:bd:9e:c0:a9:f7:ec:d7:fd:41:b3:
40:88:f1:4e:72:36:3a:16:cf:60:26:e5:c1:05:a1:
17:0f:f0:07:06:52:63:9b:3a:e0:f3:21:30:3f:34:
90:11:e2:dd:d9:40:a8:9f:a7:64:43:e0:10:fb:f3:
20:bb:d5:47:ce:ac:16:c6:98:f8:dc:27:e3:04:2f:
5c:f2:f3:e1:e5:6d:1e:74:e4:36:ab:6d:63:ad:a5:
5b:9e:35:f3:40:c2:88:44:75:95:ee:f9:c0:d8:30:
79:bb:1b:61:54:93:af:cc:d3:f2:e7:4f:03:4a:83:
5e:f4:6d:f5:4b:2f:bd:35:52:96:ee:b8:d5:0f:79:
45:b6:c7:de:be:8a:09:1d:b2:5e:84:ed:f4:19:a7:
77:10:f3:e0:a2:e0:f6:0a:0d:d3:d3:34:4c:3f:8e:
0d:af:d6:3a:af:28:e8:19:ca:4f:9f:6f:92:6f:31:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BA:17:C2:33:2E:3C:D3:C3:3C:7C:12:D8:15:BA:ED:2F:DC:AD:1F
X509v3 Authority Key Identifier:
keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f4:b8:38:9b:c6:da:ae:c1:6a:a6:c6:ee:2f:de:70:24:e8:
97:61:44:df:42:26:bf:90:42:10:5b:c4:0b:f1:67:19:37:d1:
d8:d1:5b:2b:7a:76:51:4d:40:5b:3c:f1:a0:0b:de:3b:26:9b:
a9:d6:1d:98:e9:65:b4:2c:c4:60:fd:af:5c:39:f3:65:80:83:
91:db:39:72:ee:3f:6c:80:0c:0e:b0:63:41:ac:3c:a0:df:e7:
83:5a:91:50:09:9b:08:bf:63:53:b0:32:6e:9f:08:c5:b3:19:
49:0c:d8:92:59:79:eb:3b:a3:25:5c:5d:6a:ed:c2:5c:1d:b0:
17:b7:e2:ff:38:8f:dd:19:f6:13:99:c6:50:46:3c:32:54:7c:
64:c2:b5:ad:fe:db:85:9d:14:21:2f:bc:49:fb:f2:d0:c5:8f:
4a:dc:7c:f5:ce:a2:bf:55:fd:52:0a:d2:78:f1:ba:69:af:f1:
7b:44:11:08:df:d4:ce:5a:9a:f3:e3:cb:5b:38:85:8e:cc:f5:
d0:3b:23:3b:c1:96:75:b2:e7:8f:88:06:31:8d:ea:6f:f3:7d:
65:d6:7f:c4:29:4c:cb:a0:61:ed:c7:94:ae:e1:d5:b3:b7:ec:
96:d3:6a:bd:f1:fc:23:0f:56:c4:0a:77:52:5e:be:3a:fb:96:
75:3d:cc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:13 2025 by rpki-client