Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
File: V9minRgOgZpHgvtsbqFtOn0ykQA.mft (raw, json)
Hash identifier: IK5edOfhgsZ7S5+mfeKwcx1M+gbUICe+cRuKKv+L2ME=
Subject key identifier: 09:03:16:93:DD:50:61:DA:74:C3:97:81:3C:79:6F:61:4B:66:0A:83
Authority key identifier: 57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
Certificate issuer: /CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Certificate serial: 0194BBCE1F663CC5E21DEC930E25B0499B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
Manifest number: 063F
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: V9minRgOgZpHgvtsbqFtOn0ykQA.crl (hash: WD3bubPs+w9tB/aaUM6QrsnCOoMJ/bRyVIkvTSkTw+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1f:66:3c:c5:e2:1d:ec:93:0e:25:b0:49:9b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=09031693dd5061da74c397813c796f614b660a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:19:be:67:9b:77:95:09:b9:c6:2f:fa:50:
61:f9:83:bd:17:25:ed:7b:95:73:9b:6e:01:9f:bc:
5c:2f:99:67:52:bc:54:92:3f:ab:57:24:0d:07:0e:
ed:90:2e:df:66:f3:7f:a9:82:2b:38:12:bc:f0:43:
bb:8c:63:42:8b:c0:8d:7b:01:52:29:ef:4e:55:8a:
56:51:1f:ab:13:8d:52:82:e5:7d:29:94:3e:4c:27:
ed:37:07:c0:b2:81:f7:ad:ce:ff:46:ad:48:65:0d:
73:50:fc:bc:35:71:8e:4f:ae:24:83:4e:f8:0e:31:
d3:fc:b2:33:d8:e4:2a:0f:69:7c:86:5f:a9:24:45:
2b:23:e4:a1:fa:84:15:9d:2f:04:30:67:1a:4a:eb:
29:18:4f:95:f1:2a:0c:52:cd:33:5a:ec:65:fd:8c:
bb:11:b2:16:14:61:eb:d5:18:e8:4f:8e:c6:20:ca:
aa:d6:a6:c7:00:b8:95:6c:0e:b3:78:f1:80:01:d1:
59:ad:46:0a:dd:f4:49:26:9c:6d:f0:fd:f1:02:b0:
dd:5d:5d:cd:9e:86:1b:55:57:fc:d8:0f:d4:1f:fd:
7a:0d:9b:5b:15:07:a6:4e:c3:96:36:01:5d:ce:07:
42:b1:f9:40:e9:f7:0b:00:73:c0:26:dd:97:7e:35:
62:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:03:16:93:DD:50:61:DA:74:C3:97:81:3C:79:6F:61:4B:66:0A:83
X509v3 Authority Key Identifier:
keyid:57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:70:e6:95:57:2e:42:21:c0:5f:5b:3c:51:25:89:3b:d5:a2:
73:9d:ce:ac:ec:56:11:9a:f5:ec:84:ed:b2:a5:4d:aa:a8:84:
94:c9:a2:9b:80:95:8c:4b:f7:27:b8:cc:ae:9a:90:b4:03:49:
d1:a6:0e:26:a3:ef:7d:be:3b:2d:83:66:a0:ed:cb:53:04:e8:
d4:66:2a:f5:b0:88:d8:cc:57:1f:09:c8:f9:d0:4f:6c:bb:69:
0c:ec:dc:15:0d:8e:80:17:41:40:db:8c:db:ea:2d:41:30:ff:
ca:a2:2e:54:4c:0a:65:87:e0:c0:fd:33:83:7b:ac:ec:11:78:
94:fa:66:a8:f6:b6:4a:b2:69:a9:3a:81:c4:bc:1c:22:c9:b0:
c4:6b:4b:75:ed:a1:fe:ef:d7:b2:43:e5:6f:e4:3b:3a:1e:e5:
0c:fd:15:e4:10:43:7e:a7:c7:d2:f7:78:8a:a9:44:61:75:8d:
1f:3b:bf:72:82:c8:23:c0:a2:a8:28:e2:16:31:a3:d0:d3:79:
d8:6f:9e:80:24:26:df:7f:c5:9b:80:5b:91:da:7c:9c:f2:52:
c7:6c:ea:3e:af:85:cd:2c:0c:5e:54:e0:5f:79:74:4f:c7:a2:
5c:9a:19:85:ec:4e:5a:7c:4f:3f:4b:a0:5a:1f:c2:fb:1d:18:
4f:a1:1f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:18:05 2025 by rpki-client