Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
File: rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft (raw, json)
Hash identifier: R5NDxzR3M8w6QIjCMaTydO/t0YM7hsWq4yCzDOZWCJo=
Subject key identifier: 6D:32:CA:54:C9:9A:B6:BA:BC:F4:8E:07:46:F4:D1:DC:12:4C:5D:63
Authority key identifier: AD:30:FB:43:88:EE:67:14:4A:E0:4D:DC:86:81:2D:63:E0:28:F4:78
Certificate issuer: /CN=ad30fb4388ee67144ae04ddc86812d63e028f478
Certificate serial: 0194BBCE519F3C25C7743DD245462322CD27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl (hash: SOSUbcQPZY0RZIF3kVffiwvwTx7sBE2gANqDoZihJ8U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:51:9f:3c:25:c7:74:3d:d2:45:46:23:22:cd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad30fb4388ee67144ae04ddc86812d63e028f478
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=6d32ca54c99ab6babcf48e0746f4d1dc124c5d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a6:3d:56:e4:c0:09:ff:88:e1:69:cc:e9:f6:
e9:45:70:d7:5f:5c:a4:00:3c:3e:02:31:f2:4f:99:
ea:75:a0:48:70:b6:89:18:ab:1e:96:f5:ea:13:cd:
b1:ed:2f:2d:b2:57:55:2f:3a:cb:f7:07:8e:94:0a:
fc:ee:1f:07:bf:36:0e:51:53:88:05:eb:a5:fd:3e:
c6:16:00:f8:b6:05:90:81:3b:1f:44:9f:53:22:f6:
b0:d8:15:46:cc:5c:1a:2d:a1:de:21:c0:76:35:fb:
b0:4e:16:5f:e6:dd:07:49:5b:03:80:b4:c4:4d:f5:
f0:c9:0f:8f:50:60:5a:7e:cc:19:1f:a8:98:39:2e:
67:19:cc:2a:22:d1:18:9e:d2:c1:a4:1d:75:04:ea:
5e:35:29:01:f2:28:ec:db:75:a0:8e:60:db:2a:28:
1f:68:22:09:04:68:7b:2e:9f:37:a7:ff:3d:ea:2d:
87:e1:45:09:52:ea:41:0b:62:88:dd:8c:70:4f:1a:
00:79:5c:7a:05:dd:bd:31:c7:c4:33:42:38:f5:00:
b7:ce:6f:5e:22:d3:49:44:55:bf:10:7c:42:c4:fe:
9f:97:3c:3a:d6:1e:31:9b:c4:90:01:6b:7c:77:a2:
98:41:0f:bc:84:dc:ea:33:6f:f4:27:30:24:eb:5f:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:32:CA:54:C9:9A:B6:BA:BC:F4:8E:07:46:F4:D1:DC:12:4C:5D:63
X509v3 Authority Key Identifier:
keyid:AD:30:FB:43:88:EE:67:14:4A:E0:4D:DC:86:81:2D:63:E0:28:F4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fc:43:e4:c4:f9:a5:05:5e:29:a2:5d:dc:6e:fa:9f:6a:f5:
cc:95:41:07:dc:29:ab:d1:a2:11:6a:43:b1:98:66:3a:cd:a8:
3c:3c:ec:0a:77:fc:ba:0f:48:1e:74:ed:7b:4c:b1:2f:bb:10:
19:aa:2d:e0:21:d1:5e:05:84:6b:dc:ab:71:52:98:6e:12:c7:
da:90:2d:ba:61:b8:57:48:38:e8:83:e0:54:5e:f8:cc:de:f8:
61:c8:50:98:6d:42:3e:fa:2a:c9:13:7f:7f:98:b8:03:28:ca:
f8:fd:f4:ab:36:87:ca:05:02:64:2a:9d:61:13:b7:d9:b1:b4:
c1:84:61:80:54:4a:aa:21:1e:0c:70:43:b2:15:bd:4c:2c:5c:
97:cb:bc:6b:4d:15:87:09:92:de:62:b4:ed:f8:fa:1e:39:b9:
fe:aa:c8:07:e0:36:7a:db:89:58:0e:dd:17:70:03:e5:50:b6:
a4:97:87:08:f3:cf:e7:c4:53:3f:34:04:66:5f:ce:bf:2f:c2:
3c:8e:07:16:47:c7:0f:65:11:f6:2b:17:d4:60:b7:93:36:b2:
a4:0c:b9:e1:44:02:28:7d:5a:2c:7e:da:cd:e2:1a:c1:e0:6f:
55:22:e6:33:c9:b0:3a:fc:5c:eb:23:cc:be:9a:7a:4e:ec:9a:
b0:48:80:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:43:27 2025 by rpki-client