Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
File: 9QVtq7mkcBDNG07ydLw9L0pZ6To.mft (raw, json)
Hash identifier: 7ldRg1xaQF4dtiLNI55cCdP1cdnE9N9qvsXI2tq8XXQ=
Subject key identifier: FF:9B:47:FF:A1:DE:F9:C0:36:93:CE:B1:9D:2B:18:A4:24:CD:70:CF
Authority key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
Certificate issuer: /CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Certificate serial: 0194BBCEF465D58BC6A36FF514A6A46A62B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: 9QVtq7mkcBDNG07ydLw9L0pZ6To.crl (hash: SJJOb+FmVMyjoYAHAETcwoFY3IotGl3kw7dYAP6MlzM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f4:65:d5:8b:c6:a3:6f:f5:14:a6:a4:6a:62:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=ff9b47ffa1def9c03693ceb19d2b18a424cd70cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:63:38:d8:cd:54:56:80:ed:a3:2f:05:16:d3:
89:ff:36:e2:ec:9c:58:c1:e6:6b:c3:a3:b1:79:66:
1b:fd:de:34:a7:f4:8e:21:9e:bb:b8:ca:d0:9e:70:
bc:fd:41:10:49:62:1c:dd:ee:99:70:2f:d3:a4:1c:
da:f3:1c:b8:59:51:18:1d:51:2b:4d:0a:59:8e:39:
bc:67:3a:4c:0a:8b:4f:0b:49:8b:13:cb:16:d5:7b:
13:d0:31:9d:67:05:11:6d:f6:15:77:c0:fd:5c:1d:
12:4e:41:56:6a:b6:01:8c:1f:0c:bb:fd:0f:ba:4e:
b3:9a:70:99:e6:c5:84:bb:d4:31:33:95:a4:9f:fa:
75:d0:1a:f6:b3:02:ef:94:2a:ec:ea:f6:61:e2:f0:
65:98:3c:3b:0e:e9:3c:ae:76:34:75:de:05:4f:0f:
75:03:3e:d4:8b:03:63:d3:f8:b5:5d:4c:0e:bd:a8:
fc:38:66:c0:66:49:34:e7:aa:4c:0d:7f:cb:09:11:
0f:e2:67:df:2d:f2:f7:9d:c5:28:c1:12:2f:d3:09:
66:33:fb:c3:5b:20:d9:d9:67:24:eb:c8:f1:7a:ae:
f2:66:08:e9:17:03:5b:d8:27:b5:d0:c7:57:46:b4:
17:97:00:f8:71:c0:db:a3:81:cf:c6:1c:b1:96:4d:
c0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9B:47:FF:A1:DE:F9:C0:36:93:CE:B1:9D:2B:18:A4:24:CD:70:CF
X509v3 Authority Key Identifier:
keyid:F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c1:08:3d:e0:86:8a:64:60:a3:ec:97:c5:52:12:31:e6:7b:
7a:18:ed:18:ff:6c:90:f1:bd:b0:55:6d:25:d0:c7:b9:23:ab:
07:39:ed:95:4a:05:2b:64:a2:f4:5f:2c:f9:68:b3:d5:98:84:
43:19:84:0a:59:5c:7f:7b:d2:eb:b8:7e:4c:89:46:3f:77:73:
0b:fd:4d:5a:67:4f:fc:c0:69:f3:48:0a:45:f0:d4:41:40:dc:
1c:00:d4:82:6d:91:97:f4:52:9f:cc:92:90:b1:9d:5f:4f:b7:
e8:72:da:37:b3:6d:3c:63:24:03:3b:52:f3:5b:e2:a3:2b:26:
38:4e:af:a1:22:ff:a8:53:83:b5:86:f4:45:14:81:52:c0:d4:
01:56:0f:0f:30:43:2c:14:62:c0:ef:88:b2:43:fa:af:eb:4f:
70:9b:66:40:b5:6a:f3:85:cc:bb:52:32:8f:89:05:ff:9e:d5:
13:f8:d2:24:61:6b:45:35:4a:f7:57:6e:6a:fd:8e:d0:86:1d:
31:98:65:c4:fb:a2:df:7c:c5:20:a7:56:3c:bd:69:f7:1d:af:
93:c4:1b:6d:10:0b:3b:5c:dc:a6:8e:6f:a8:cd:b1:f2:3e:85:
92:3e:53:12:7a:9e:ad:00:36:b1:a6:ef:4d:c7:ee:cf:60:94:
8e:75:df:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:50:25 2025 by rpki-client