Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
File: j3JEfEHiXE71t4N1UhxOl-katcA.mft (raw, json)
Hash identifier: h29iuZI7tfvR0Gc017Ic/xhOszhhPp6J2SEhsqmvSyU=
Subject key identifier: 63:6D:AF:B1:E7:0E:58:53:5C:C3:01:BD:EA:97:F9:B4:D1:00:95:0C
Authority key identifier: 8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
Certificate issuer: /CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Certificate serial: 0194BBCE4AB03888EB7CA4CB0D915A6497E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
Manifest number: 0676
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: j3JEfEHiXE71t4N1UhxOl-katcA.crl (hash: o6m8KGnE6tX1JUwVqXqIlmXh6X73V+N14wL8MQ8LAl4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4a:b0:38:88:eb:7c:a4:cb:0d:91:5a:64:97:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=636dafb1e70e58535cc301bdea97f9b4d100950c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:ab:fc:c2:30:f2:08:1a:9c:af:33:6a:91:
06:6e:42:f0:f5:49:62:b8:19:17:0c:e7:b8:cd:c7:
d3:5b:a0:e9:9c:3b:8d:42:30:61:4f:2c:26:ec:ba:
b6:aa:24:8a:7d:8e:7f:20:cb:a1:22:84:e5:63:e7:
c5:63:cb:3b:c6:65:c7:97:e0:bf:09:cf:ea:02:5f:
97:87:c6:2f:52:f3:41:d4:5f:8c:89:84:92:e0:23:
a7:8a:f0:fc:8b:3c:37:a5:2e:a0:36:bf:fb:16:d7:
8f:c8:f0:18:6e:16:9b:22:9d:5d:db:2c:59:68:91:
a9:2f:69:88:37:12:1a:8b:16:aa:23:12:12:58:af:
45:59:5a:a3:77:a9:eb:be:74:36:01:87:e3:5b:26:
d7:3b:aa:95:83:20:83:3b:8e:e7:7f:6f:97:4e:20:
ad:89:be:40:0f:91:e4:22:87:25:ce:4a:92:cb:a9:
2e:09:31:eb:e0:13:af:6f:6d:e9:0b:60:53:f8:c5:
45:d5:ae:c8:b2:cf:db:ac:d4:2e:49:d3:f2:38:a6:
3a:bc:95:e3:1f:92:9b:de:f4:b4:e8:b5:ae:59:67:
72:bd:9c:49:5d:47:bf:d4:45:1d:d8:09:2b:60:97:
c1:7f:a9:f4:f9:af:75:59:c1:48:e9:6e:ab:cc:9a:
b6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6D:AF:B1:E7:0E:58:53:5C:C3:01:BD:EA:97:F9:B4:D1:00:95:0C
X509v3 Authority Key Identifier:
keyid:8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:61:fa:73:24:7a:32:d6:b4:e6:45:5a:37:a7:ab:0f:61:3e:
18:0e:3c:42:c1:b9:c0:0a:07:cf:a2:95:14:2e:1e:6b:0a:68:
04:68:96:8f:9f:5f:f9:5c:94:b0:47:62:89:b0:21:37:ed:ce:
fc:03:54:2d:1e:3f:98:e5:3b:4f:fe:2a:5b:fe:25:a8:ee:3e:
6b:44:ed:55:bf:23:95:90:01:26:92:04:34:cd:52:8d:42:16:
d1:7d:94:91:d4:e4:40:cb:4a:31:6f:2f:c2:2a:97:0e:49:90:
7e:30:e8:e0:20:c7:ec:9e:95:c7:0d:8a:fe:72:ae:26:2c:e7:
d6:d3:d9:f5:80:6f:97:1d:5f:1f:11:78:2a:32:14:44:9d:21:
8e:fa:fa:ed:21:d0:c3:0b:1f:26:19:b6:64:4e:9c:8d:e7:aa:
00:e2:8e:de:35:df:46:fd:2f:eb:83:37:52:72:1d:b3:3b:f0:
dd:d9:ea:77:3e:6d:f0:93:c9:41:ac:c6:34:0b:c9:98:a6:d4:
55:c0:42:a4:f1:99:5a:28:1b:0c:0f:8b:33:11:9f:f2:9e:97:
12:81:b7:ec:24:fd:22:78:76:65:ce:21:dd:e0:14:17:3b:b4:
ea:2f:ec:c6:71:6e:10:4a:c5:37:f2:09:ab:c9:57:bd:09:24:
c6:b3:63:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:35 2025 by rpki-client