Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft
File: orLY2dCvlBb6vW8gNfpyiO-XyME.mft (raw, json)
Hash identifier: xz0jOTT+z1XOhhKZCaHLwaFAoFsh/tO8fpyTYwuq+lo=
Subject key identifier: A9:CB:F8:5C:20:24:6D:E4:43:A9:34:1B:43:DD:E2:6B:2D:CD:06:61
Authority key identifier: A2:B2:D8:D9:D0:AF:94:16:FA:BD:6F:20:35:FA:72:88:EF:97:C8:C1
Certificate issuer: /CN=a2b2d8d9d0af9416fabd6f2035fa7288ef97c8c1
Certificate serial: 0194BC3C1A14E9CD608DD37FC419984A831C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orLY2dCvlBb6vW8gNfpyiO-XyME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft
Manifest number: 0470
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: orLY2dCvlBb6vW8gNfpyiO-XyME.crl (hash: J5vUTBh3fIwvo65b1twr4cFBidTH6PBchCTKgabBE+g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1a:14:e9:cd:60:8d:d3:7f:c4:19:98:4a:83:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b2d8d9d0af9416fabd6f2035fa7288ef97c8c1
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=a9cbf85c20246de443a9341b43dde26b2dcd0661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7e:69:21:04:a7:a0:cc:53:45:30:ca:7f:79:
83:95:5e:92:8d:ac:75:d5:1e:65:ff:8b:60:38:47:
17:2b:5a:35:f3:59:77:8b:ad:0b:7b:b9:bb:93:92:
9c:9a:c1:ba:8d:d6:47:9d:b4:b1:76:47:c7:96:8a:
c3:e1:b1:0d:5b:67:d9:80:40:60:8e:97:ab:3c:5e:
db:e2:02:d8:7f:74:4f:cb:69:c3:4d:90:ac:84:97:
bb:e8:49:61:54:3a:84:c0:55:41:80:cc:6a:13:09:
bb:c9:3a:33:0b:90:3d:b7:7b:c1:8d:c1:66:c4:63:
4b:72:f7:1c:55:e0:f3:21:de:9d:7b:2c:9f:51:de:
5b:2b:3e:b2:79:bf:a1:64:8b:7f:ac:1d:46:6e:b0:
0b:9b:b6:72:8b:dc:6e:85:2f:0e:25:ad:0f:91:46:
dd:81:9f:1a:aa:d9:43:02:5a:04:e4:cc:de:23:d8:
70:e9:bf:6a:a4:d1:a7:80:0a:17:0d:eb:85:06:ae:
9b:e6:c2:5d:91:6b:5e:d0:ff:ea:8b:5d:d3:60:47:
4e:e5:59:b9:5c:68:c0:7b:3f:e0:68:7e:46:c1:86:
9f:a1:63:14:f5:b7:b4:15:a8:ff:d1:8c:c7:1c:2f:
6d:63:9e:4d:4d:ea:f8:85:37:fa:85:89:15:17:91:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CB:F8:5C:20:24:6D:E4:43:A9:34:1B:43:DD:E2:6B:2D:CD:06:61
X509v3 Authority Key Identifier:
keyid:A2:B2:D8:D9:D0:AF:94:16:FA:BD:6F:20:35:FA:72:88:EF:97:C8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orLY2dCvlBb6vW8gNfpyiO-XyME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:30:bf:62:c3:e3:7a:69:52:ec:ff:db:6d:95:76:4a:a1:c3:
74:96:4d:47:ba:11:6d:d1:4f:80:b6:ae:d0:0e:fb:72:27:21:
a3:2c:80:fe:fd:35:17:19:16:96:f9:a7:a3:df:a0:42:fd:30:
96:40:d3:5d:d6:71:bb:86:93:65:43:f9:8a:64:91:27:4d:3d:
52:8a:f0:e3:8d:05:c6:4f:97:75:1d:0d:96:dc:2e:ad:48:66:
d4:8e:b5:74:82:d9:cb:d6:8d:e2:02:d4:75:92:3b:c5:e5:30:
a0:dc:fa:95:81:cf:0b:62:2b:4b:35:69:b3:24:5b:06:55:a8:
3c:9e:fc:6c:bc:a6:0f:95:df:12:85:77:e4:69:21:d5:a6:bc:
c6:2c:48:fa:cf:99:9f:6c:9d:fa:5a:eb:bd:d3:84:10:7c:df:
f6:95:06:36:7d:d1:08:41:d7:70:fb:24:d3:7a:b2:1e:d0:f1:
f2:eb:e9:84:7f:0a:17:38:50:81:b5:fe:82:94:92:84:4d:fd:
00:7f:3c:15:e8:b6:0a:e4:60:9f:0c:bb:a7:b9:2c:a9:1b:0e:
db:f9:30:9e:1c:51:09:78:01:bc:f5:d4:98:cf:8a:7f:8b:5c:
53:20:4f:99:dd:db:87:f1:98:18:ef:cc:2a:f7:32:11:ef:bf:
f6:07:be:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:27 2025 by rpki-client