Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
File: esMB9rptscwntFS8szI5rh1kGrs.mft (raw, json)
Hash identifier: fv9LgxeJXGCkaoxtmWodDOtznEn9pT4RW3gxAWXUWoA=
Subject key identifier: A9:55:FA:22:AA:7E:C7:D2:CF:0F:09:6F:B8:61:58:6C:1A:DB:4E:32
Authority key identifier: 7A:C3:01:F6:BA:6D:B1:CC:27:B4:54:BC:B3:32:39:AE:1D:64:1A:BB
Certificate issuer: /CN=7ac301f6ba6db1cc27b454bcb33239ae1d641abb
Certificate serial: 0194BD4E62034BEA2DC7CB8F44470EDE7288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
Manifest number: 04
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: esMB9rptscwntFS8szI5rh1kGrs.crl (hash: F9BhUlOSfAMjBhpw8EaZiQpWX+vAOBQVAnjEeQtI//M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:62:03:4b:ea:2d:c7:cb:8f:44:47:0e:de:72:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ac301f6ba6db1cc27b454bcb33239ae1d641abb
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=a955fa22aa7ec7d2cf0f096fb861586c1adb4e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:ff:af:85:dd:75:db:46:fa:b0:ac:53:4e:
57:0c:65:e7:08:fe:95:16:89:ac:a0:1a:5f:3a:81:
fb:98:01:d6:bc:42:65:6e:c8:db:d3:1e:17:fd:0d:
63:ec:53:7f:18:c5:ce:6a:57:8d:25:af:ef:c8:4f:
62:98:55:c5:d7:4f:4f:82:f5:27:2e:e4:b1:3c:18:
07:f2:c2:f5:d7:a5:ba:ad:e0:96:1a:aa:d7:c2:b6:
3d:a3:4a:93:9f:5f:76:42:65:c8:7e:3c:2c:68:98:
b2:d4:da:79:63:b4:41:ec:e8:28:81:b0:bc:15:a4:
3e:b6:02:72:db:f6:4d:84:c0:10:08:b8:83:af:61:
77:a6:49:15:20:ec:73:5a:1f:04:cb:46:07:e8:8e:
e5:85:ad:17:c8:13:80:18:12:39:47:87:ed:7e:57:
22:96:60:70:6d:cc:ae:d5:1e:5f:6a:d9:c5:19:c3:
1f:02:07:b0:19:ea:9a:24:55:89:94:16:ff:e4:af:
78:4d:94:cd:e7:c8:73:cc:51:a4:fc:c0:c0:b1:69:
e8:3b:1d:2b:d8:85:13:86:8e:f6:0d:2a:7f:05:8d:
7c:94:f4:0b:f0:c2:17:70:26:1a:fb:9d:c9:8d:7a:
ed:bd:b5:05:4e:3b:d9:25:90:43:8b:50:b1:a4:2b:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:55:FA:22:AA:7E:C7:D2:CF:0F:09:6F:B8:61:58:6C:1A:DB:4E:32
X509v3 Authority Key Identifier:
keyid:7A:C3:01:F6:BA:6D:B1:CC:27:B4:54:BC:B3:32:39:AE:1D:64:1A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b0:c0:86:76:6d:99:02:94:3f:a9:a5:86:d7:7d:fc:86:bc:
b6:27:40:cf:5b:c7:98:f3:49:8c:b5:8d:1b:16:fd:f2:e4:f5:
4b:dc:ae:b7:18:a6:2a:15:e2:2a:9a:16:d7:d9:9b:9f:61:4a:
8e:db:f4:ae:31:0a:12:86:85:54:9a:78:01:52:b9:cd:b7:82:
e0:67:6d:4b:d5:35:c0:a2:56:86:8b:2e:25:b1:ae:d7:6f:0a:
0c:e1:f1:54:9e:33:7d:3b:09:8e:19:31:48:f2:89:03:18:a0:
ca:de:ad:55:1a:aa:80:42:88:e4:5c:46:93:d2:91:7f:11:0c:
d4:b9:f1:af:48:a0:09:33:53:30:b9:92:30:97:93:a9:93:2e:
4a:7f:6c:e9:6e:3b:8f:fb:fa:81:1a:55:0b:47:90:bd:20:d1:
a6:d9:b4:d0:f9:2b:cc:63:f5:b7:c7:89:96:b7:92:34:13:eb:
4c:e2:37:54:de:c2:86:34:c4:c4:a1:56:70:c7:c2:40:b3:53:
ea:69:04:08:05:91:d0:d9:8e:59:38:39:aa:b1:ac:83:44:9e:
13:56:8c:27:11:fa:13:03:18:6e:c1:dc:10:5c:c0:ce:1d:fe:
36:c6:09:d6:54:f9:7a:c8:6c:f6:5e:4e:7e:ec:90:11:ce:c1:
74:dd:48:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:16 2025 by rpki-client