Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
File: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft (raw, json)
Hash identifier: 9dPRn4s7c+rPt3H4U83KHKlrs8OdDFJrdrj0Y84CTlE=
Subject key identifier: 07:5B:20:ED:8C:3A:39:92:86:DF:B2:64:02:E0:76:4C:8B:57:DE:04
Authority key identifier: D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
Certificate issuer: /CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Certificate serial: 0194BBCEB5192AEB39C2C4AE2CDECFA09C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl (hash: IdVzrqXUpcOK3OPGEMMG9orelbGyjuMShwtUx1M3BaE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b5:19:2a:eb:39:c2:c4:ae:2c:de:cf:a0:9c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=075b20ed8c3a399286dfb26402e0764c8b57de04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:13:27:fd:45:d3:61:67:d3:8f:df:b1:5e:2d:
e6:1e:7f:59:54:13:4e:d5:ff:9b:aa:87:4a:1b:10:
4b:c5:47:f0:60:9a:6c:3f:5c:7c:8d:99:bc:9a:1b:
32:76:ae:24:b2:b8:86:45:74:9d:8e:61:0c:81:f3:
e1:19:8f:fd:09:82:88:cd:1d:c9:25:af:d2:e3:e5:
e4:75:a7:a4:68:b2:5c:d4:4a:30:70:00:27:78:a0:
39:2d:18:c0:a6:78:00:b0:81:36:e1:7a:95:ed:f4:
ff:36:93:02:dd:ee:53:0b:28:d7:fa:37:99:21:f2:
b2:b6:c7:b1:01:65:c0:ae:c3:87:64:d9:7c:bd:5c:
f0:47:50:cb:04:29:f6:e5:aa:34:55:02:43:28:94:
7e:97:11:16:d1:61:96:f7:18:c0:95:92:18:1d:10:
6b:24:a7:bc:9d:f2:23:66:a3:80:58:e9:bc:57:30:
3d:55:3a:bc:e0:6f:fb:0e:4e:16:b8:44:2a:33:ab:
be:81:23:d4:f2:9c:3b:34:ac:e6:ec:3d:68:b1:e3:
2c:22:b3:f7:b0:fc:ad:e6:e2:b3:8f:55:86:e2:83:
27:38:d7:44:69:15:b0:89:83:cc:8d:37:b8:83:0b:
ed:c3:36:53:78:97:60:6e:76:ec:11:5e:2e:57:b0:
4e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5B:20:ED:8C:3A:39:92:86:DF:B2:64:02:E0:76:4C:8B:57:DE:04
X509v3 Authority Key Identifier:
keyid:D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:97:29:39:63:58:22:ee:42:df:44:85:6a:59:c0:e0:79:d4:
27:d9:c0:66:ac:22:44:19:c3:77:ee:ea:0b:0c:34:73:d5:36:
0d:10:18:45:fb:a6:6d:f5:4d:c1:aa:ec:5c:42:a4:bc:97:8b:
53:50:de:f4:cc:d6:6d:f7:21:d5:57:c8:ee:33:2c:4b:93:e5:
2f:a5:96:2e:1d:56:9a:10:af:ca:f7:26:e0:4d:fe:2b:9d:f5:
c0:9d:e4:49:6e:3c:3a:18:31:30:d1:da:07:fd:78:49:27:fa:
1b:ff:c0:cf:84:b3:1a:0e:ab:50:7d:39:c8:14:a6:dc:59:38:
7b:81:25:a7:a9:c1:12:bd:10:a9:a2:4d:89:61:76:3a:39:d3:
6a:44:8a:c0:20:f6:d7:c6:79:69:0a:0b:0e:ad:d4:a5:4e:8d:
a0:ed:cc:1b:e3:37:78:e4:8a:1f:80:a8:e4:be:d3:d9:42:4f:
03:a6:ea:89:03:e2:cd:a4:5a:f3:8a:fb:70:ff:99:65:c0:3c:
4a:3e:a1:85:c6:e1:f2:64:6c:f7:ed:66:8e:0a:a4:7a:dc:d9:
9f:d0:d3:4d:dc:1f:4c:fd:29:be:0b:33:b6:94:c8:3c:bc:2e:
03:b6:02:fe:f1:02:33:33:8d:41:92:a1:0a:1f:35:4f:40:57:
42:2d:bd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:45:19 2025 by rpki-client