Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier: fx2ANX23jKUqFr3kkAZPVpc18CJKRSUH0XODx0KDA8o=
Subject key identifier: B3:52:95:0D:43:D8:93:C8:79:5E:13:F0:F3:94:EF:B2:78:C4:6F:A6
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial: 0194BC3C1887B421515A72D4881D2915F8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number: 0A2A
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: ifKeeU6NZoHciR1db1WvmXFbo99HYw+H1IrGa6mtMtw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:18:87:b4:21:51:5a:72:d4:88:1d:29:15:f8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=b352950d43d893c8795e13f0f394efb278c46fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d0:c6:2a:4a:4d:28:7e:8a:f6:63:45:f2:68:
60:d4:09:be:df:dc:19:a4:3a:b5:e9:ac:12:4e:e1:
89:00:43:88:76:2e:7e:33:a5:e7:83:0d:37:6c:d5:
7f:ae:59:b2:96:ca:a5:42:7c:48:9f:8f:28:42:02:
a8:18:d3:3e:62:ad:8a:43:12:a5:ee:65:e5:dd:0e:
6f:50:de:3e:be:37:19:0a:a1:a9:a1:b1:f8:5b:fa:
4b:3a:eb:33:ad:21:0e:bf:c1:15:30:de:67:5a:74:
ae:18:a8:fd:fd:8a:1f:43:1c:80:92:eb:d1:8e:f5:
51:6a:b4:d8:70:36:04:16:66:7b:ba:37:15:1a:1c:
66:aa:85:ef:b2:eb:dd:72:05:c3:0c:4c:4d:cd:73:
e8:01:34:55:a9:65:ae:9e:e0:0f:24:4a:1a:af:f6:
6b:70:4d:3e:3f:96:b7:48:42:55:60:68:81:cf:ed:
ba:9f:bb:a6:6d:06:98:8a:7e:a2:6b:e4:af:b6:ae:
12:d5:80:63:27:0d:05:64:02:23:9f:7f:be:75:86:
c6:42:f3:92:97:39:8e:71:11:c3:e0:fe:37:a2:56:
0e:6d:f4:20:a2:f5:21:3d:da:f8:ba:bb:9f:71:24:
e9:b2:40:56:c0:f9:ad:8e:7d:e9:27:28:5a:d7:4b:
ff:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:52:95:0D:43:D8:93:C8:79:5E:13:F0:F3:94:EF:B2:78:C4:6F:A6
X509v3 Authority Key Identifier:
keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:31:b9:ac:37:ad:87:fc:47:7b:52:62:d6:20:ad:42:94:ec:
ef:95:7a:1f:e6:ed:f5:1b:e4:fa:41:70:49:78:1f:8f:92:a0:
f8:2f:09:2c:f5:5c:ee:92:33:0b:ed:34:5a:7a:c8:7b:16:5a:
d8:ce:69:95:e0:61:72:ca:06:b6:8b:3d:9c:81:14:f3:70:af:
07:c4:8f:40:bb:dc:64:61:6f:49:cc:2b:b1:a4:1d:d9:a4:3b:
bb:16:00:d7:33:1f:cc:e3:3d:e2:bc:36:56:7b:2d:a4:ad:14:
83:fa:40:b7:41:bf:34:b6:48:0d:1b:af:07:a9:0e:71:06:01:
6a:d7:43:2c:a5:ed:ea:49:7b:3f:f8:35:f2:a9:4e:25:10:47:
d8:a5:5c:9b:fc:78:7b:c4:82:23:55:00:d6:3d:a9:e1:6d:9b:
1f:77:1a:93:fb:1e:dd:1f:34:9e:7b:7d:da:c8:73:31:44:53:
17:4e:1a:df:f0:85:f5:21:80:2f:f1:67:79:e6:dd:7f:a8:72:
6e:4f:c1:f1:ce:e6:c0:1d:27:d5:d5:51:65:1a:98:25:d8:81:
0e:6b:75:2d:a1:bf:7a:2d:24:9e:4a:a5:1e:a9:97:ea:49:15:
7d:85:3d:d6:8c:f5:2c:7f:aa:5b:d0:e4:1f:8b:8c:49:38:25:
13:6e:34:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:30 2025 by rpki-client