Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
File: dC44IKB42kewo3Ti06ZtYmPB4j8.mft (raw, json)
Hash identifier: UkJMXGBlQRgCVT2Vz0k4JUdDO7kRG/giuRJBMMKVmuE=
Subject key identifier: 50:7A:59:24:78:0E:A9:34:94:48:9F:A1:90:27:FE:42:80:34:B4:E7
Authority key identifier: 74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
Certificate issuer: /CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Certificate serial: 0194BBCE569D3F2714B9CB108A59CAF7D6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
Manifest number: 0CFA
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: dC44IKB42kewo3Ti06ZtYmPB4j8.crl (hash: Zu4GBM5YwF3YecDfMzGQXiwDVEHY1mE4JlI+P0PwVyc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:56:9d:3f:27:14:b9:cb:10:8a:59:ca:f7:d6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=507a5924780ea93494489fa19027fe428034b4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:2c:82:ae:35:70:bb:60:e6:6e:0f:d8:d3:
46:7c:c5:bb:76:cf:0b:78:47:e0:06:0a:e5:fb:39:
23:cd:b4:a5:5f:3b:fa:3e:ec:91:fe:5d:7d:dc:64:
18:83:3d:05:da:5e:65:50:34:57:2b:25:9c:bb:aa:
54:1b:69:ba:95:17:31:f7:32:f9:e3:c5:9d:72:27:
44:5a:5c:11:f7:8d:1a:ee:65:d1:55:3c:dc:42:83:
9d:78:9a:cb:d0:dd:2c:de:80:a7:55:11:36:df:05:
4b:e1:11:d1:27:75:0a:6a:87:f7:7e:26:00:b7:0c:
70:66:32:f3:23:1a:5d:bd:ad:58:18:5e:a4:c4:02:
a8:d7:55:8e:cd:37:97:d6:d9:28:00:c7:5c:a1:03:
6d:66:97:57:10:69:01:c8:e6:fb:26:05:e5:cc:f2:
85:92:f6:d9:56:f4:8d:a8:a2:6e:35:f7:8d:52:5d:
f2:de:86:fb:13:9a:4b:59:04:b9:61:4a:b0:9d:17:
a3:0d:6f:a2:22:99:0a:b6:b3:87:55:50:07:b2:f1:
cc:5b:26:98:fb:af:ed:31:ef:3b:f6:c5:a7:af:10:
ce:ee:03:76:a1:8d:f7:89:5f:6e:31:eb:d0:4f:83:
ae:23:d4:83:b5:97:5e:c3:bf:14:cc:57:1b:b5:bd:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7A:59:24:78:0E:A9:34:94:48:9F:A1:90:27:FE:42:80:34:B4:E7
X509v3 Authority Key Identifier:
keyid:74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:de:94:91:e4:a4:cc:5c:8a:8a:79:17:20:3e:1d:bd:90:9e:
b2:6c:ca:44:6a:f6:58:35:ac:be:3d:96:c8:26:d0:94:f1:83:
2e:ae:b2:4a:3f:38:b9:5c:b6:93:28:99:25:47:84:3a:e6:87:
59:05:03:2e:2c:94:28:9c:44:68:45:27:2c:4e:de:3e:4a:c0:
80:61:11:e2:3a:b7:2d:fd:90:a0:72:a5:00:3f:5d:59:03:22:
e3:4b:5c:e8:8a:22:ab:59:91:17:af:29:79:7b:53:a7:8b:77:
4a:70:55:c8:72:18:9d:ba:aa:34:00:c4:8c:24:c6:e1:1c:f8:
06:6f:c9:d2:8f:15:52:2a:c9:b1:8e:35:64:54:27:70:65:3f:
c1:99:6a:2c:97:b7:93:24:79:4c:41:fd:e4:43:5b:99:3f:7e:
f0:e0:60:97:2f:11:86:49:d2:df:7d:e5:37:87:93:65:9d:1c:
5f:3b:09:25:bf:de:77:b9:10:62:11:ac:e5:3e:0b:7b:36:08:
12:3b:66:f0:a8:a1:be:86:60:25:1d:13:d4:f5:e8:ff:76:72:
14:23:4d:7d:c1:bb:3f:26:c4:7c:cd:01:ba:91:c8:56:85:af:
45:62:9e:a1:3a:1f:ee:ea:e7:66:1c:d4:1b:48:a7:e7:43:86:
a8:f8:73:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:13 2025 by rpki-client