Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
File: eNiveOb7rS7n4tDOuGuji_pUjhs.mft (raw, json)
Hash identifier: UgNns7o1yZ+K91mqce4REzGX52kSEr2OhBM0xYMdSz4=
Subject key identifier: D1:31:4B:88:B3:BA:2E:8F:34:AD:F2:37:55:9B:A2:41:35:23:E5:8A
Authority key identifier: 78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
Certificate issuer: /CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Certificate serial: 0194BD1792526E9C20ACEE05031F5B3D8935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
Manifest number: 14
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: eNiveOb7rS7n4tDOuGuji_pUjhs.crl (hash: 3a0psGiNeT2dNXWmHFcF3SNMyG7yPH6eJmWKu+ECGeU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:92:52:6e:9c:20:ac:ee:05:03:1f:5b:3d:89:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=d1314b88b3ba2e8f34adf237559ba2413523e58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:43:d6:29:b7:87:c6:9f:62:60:40:a5:68:
f2:f9:d0:36:43:2d:1b:7c:c6:1e:f5:42:35:7c:29:
50:97:ad:3b:c8:31:c5:a8:8a:21:a1:2f:c7:e6:79:
a7:f0:3f:af:02:b1:d7:50:14:56:51:bb:3f:9f:9a:
d0:5c:ed:3e:c1:a9:26:6b:85:a3:b1:da:43:de:05:
17:35:55:f7:14:02:55:75:84:84:47:27:71:19:e3:
ad:d0:68:3d:60:a1:08:9c:56:f1:18:f1:ce:ea:4a:
89:69:1a:9f:2e:99:4c:6d:ea:44:bc:53:fd:0b:54:
f2:d0:98:95:67:b9:f6:18:12:24:0f:e7:63:7a:2d:
59:41:0d:29:9a:4b:ea:dd:0a:c1:70:fb:c8:7a:fb:
6e:12:4e:6b:ac:07:f5:d0:8c:a0:3c:b8:31:f7:9c:
e2:b2:e7:9f:88:bc:33:1f:3c:cd:38:f7:09:3b:6e:
0f:87:ba:73:f4:d2:ce:85:04:d9:df:a4:82:4f:f2:
65:71:c1:d1:b0:6a:e6:60:55:1b:5b:05:4c:db:31:
01:91:2c:3e:99:63:01:28:5b:d1:2d:ce:57:fc:7b:
34:ae:11:bb:ba:eb:24:b0:fe:03:94:93:fb:56:c9:
62:43:5a:15:24:3d:f5:03:9c:9e:41:26:db:0f:48:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:4B:88:B3:BA:2E:8F:34:AD:F2:37:55:9B:A2:41:35:23:E5:8A
X509v3 Authority Key Identifier:
keyid:78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:43:03:57:bf:0e:09:ab:c6:1e:b2:69:d0:41:7e:3a:d4:3c:
92:4d:97:84:32:6c:68:ca:12:cc:22:8e:03:c7:1e:ba:72:3e:
6b:ba:4c:ab:d9:4a:a6:ae:31:62:f5:f3:bf:29:30:57:42:ec:
b5:61:76:18:8c:0e:b2:8b:59:3c:70:f4:59:86:c8:17:8e:37:
8c:c2:95:f4:5c:22:e3:82:e2:a9:40:7c:04:75:52:8d:6c:3e:
a0:2a:50:a6:47:be:7c:81:e0:4c:58:fb:be:cc:43:1c:49:7b:
32:aa:70:94:88:52:ff:ad:05:3b:5b:63:7a:08:53:6a:2f:2e:
58:32:17:62:20:1f:35:d9:b1:65:d4:e3:1b:b0:f1:da:d3:61:
3e:64:74:5a:8d:5d:40:d0:25:1c:5a:78:fe:66:09:79:a4:c8:
be:61:87:5b:d6:94:e7:df:d7:20:8c:05:3a:cb:c4:83:29:1d:
db:54:13:f9:42:39:30:36:4c:8a:3d:36:92:f4:ca:73:bf:e9:
12:b5:c2:45:14:cb:b7:87:2f:98:4b:0e:d8:87:d8:d9:88:a1:
3e:91:66:d0:bd:a9:b1:cb:cc:85:da:cb:da:5f:12:5d:d6:1f:
78:fe:e7:18:7b:d9:e4:1b:02:e5:e6:b8:16:f7:33:57:09:ce:
9d:36:09:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:40 2025 by rpki-client