Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
File: 4xubYpkE1DhFESeFW1L4guvhYqo.mft (raw, json)
Hash identifier: i+83kSSGl3W+fJ8UJS6zaDOPKxSkC8k6AGpfMhNlGpw=
Subject key identifier: EE:84:B3:D8:77:44:8E:CD:9C:10:05:1B:40:9F:AA:86:F7:30:64:BD
Authority key identifier: E3:1B:9B:62:99:04:D4:38:45:11:27:85:5B:52:F8:82:EB:E1:62:AA
Certificate issuer: /CN=e31b9b629904d438451127855b52f882ebe162aa
Certificate serial: 0194BD17DB91B1BA90D0E797340C1A675D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
Manifest number: 0D5C
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: 4xubYpkE1DhFESeFW1L4guvhYqo.crl (hash: XGG3ggSZyzOvR2JP77LI+Xjq9acxX+Ps/TTif1RcwFg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:db:91:b1:ba:90:d0:e7:97:34:0c:1a:67:5d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31b9b629904d438451127855b52f882ebe162aa
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=ee84b3d877448ecd9c10051b409faa86f73064bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:1f:3a:c7:33:bb:ce:43:83:69:b5:38:b9:
dd:22:fa:5d:ed:02:f9:a5:f7:f7:e9:4e:07:e3:4b:
d8:ca:90:bc:51:3f:33:8b:cc:27:f6:69:70:cb:ff:
26:b4:a1:7d:29:b6:52:e5:b6:da:c1:45:bb:ce:cd:
a3:85:44:37:7d:a9:3f:62:f8:21:69:47:23:12:04:
12:e1:b4:87:04:b1:e3:23:e2:fd:7d:9b:52:5e:ca:
6a:29:60:d7:4b:bb:9c:e0:31:f1:32:8f:62:89:aa:
3c:32:78:1f:e5:3f:9b:a8:bd:42:59:ac:16:ca:5e:
54:6f:74:da:c1:0c:e0:ea:ec:21:09:7d:eb:5d:c5:
7d:5f:ac:a2:d7:ea:c6:33:ec:5d:82:e7:cb:99:15:
b6:85:1c:26:88:aa:6f:eb:86:c3:6a:8b:02:2e:78:
8e:20:ee:b1:60:ca:c6:29:ea:46:90:db:bf:fc:3d:
81:1c:c6:1a:77:09:3a:a7:94:55:d7:51:f4:b9:ca:
2e:90:fe:40:ac:88:5f:e2:47:40:40:9d:51:2a:77:
ab:c4:33:a8:1a:e7:5a:86:95:46:14:1a:42:84:8a:
ca:f5:ed:2b:74:a1:e7:1f:a5:42:e9:8f:fc:69:67:
85:87:17:f3:1b:20:48:e8:40:63:1f:85:ec:4a:a1:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:84:B3:D8:77:44:8E:CD:9C:10:05:1B:40:9F:AA:86:F7:30:64:BD
X509v3 Authority Key Identifier:
keyid:E3:1B:9B:62:99:04:D4:38:45:11:27:85:5B:52:F8:82:EB:E1:62:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:72:24:1b:b7:d7:d5:94:47:33:b7:6b:b5:31:0e:5a:be:0f:
31:70:20:95:22:ed:d3:35:8d:64:63:ce:77:df:fd:c3:32:13:
8e:11:ef:9b:ea:ad:d8:e5:28:4e:45:e2:a9:70:db:8b:24:26:
6d:a6:48:6a:48:9e:b3:2a:6b:48:3c:44:b6:41:4f:83:f4:db:
1b:d6:35:b1:50:de:27:de:c3:97:97:59:24:1a:1d:fe:6a:41:
6c:1b:4e:0a:62:3f:ef:c4:9f:95:fc:5d:49:7d:8c:90:69:af:
07:08:ad:c8:36:0c:f2:cb:29:7a:18:69:78:29:f1:4e:57:89:
7f:68:2d:06:c7:ee:4b:b3:78:b5:99:29:f4:08:38:d2:b8:47:
d5:e3:7d:21:58:f5:2d:f3:41:0c:96:dc:ab:a4:8e:d5:8b:66:
9d:6f:45:e8:34:ce:3b:e4:ca:08:28:59:66:12:da:f4:53:ce:
19:c4:65:e5:01:a4:bc:25:02:b4:c9:7f:da:ea:44:56:85:3c:
d3:a4:81:58:d0:11:e4:99:63:78:72:44:37:6c:79:34:b6:ae:
5b:a7:49:ae:69:57:ca:85:7e:06:60:eb:ac:19:e0:69:97:75:
b3:81:1d:9b:97:0b:bb:08:62:f5:1d:46:90:66:b6:01:a4:56:
ab:8b:42:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:39:41 2025 by rpki-client