Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft
File: dt0D59chnX68HyMPcGMtyRNvNBM.mft (raw, json)
Hash identifier: bPOerJt7wboCFb0xQO4yYomuaNNssQfAp2nzIWQDBPE=
Subject key identifier: 65:4D:B8:59:AC:49:FF:69:7A:90:90:D9:8C:41:23:AE:6A:95:DE:B2
Authority key identifier: 76:DD:03:E7:D7:21:9D:7E:BC:1F:23:0F:70:63:2D:C9:13:6F:34:13
Certificate issuer: /CN=76dd03e7d7219d7ebc1f230f70632dc9136f3413
Certificate serial: 0194BC72B7817D9502A6DBCE566C87FF8AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dt0D59chnX68HyMPcGMtyRNvNBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft
Manifest number: 0336
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: dt0D59chnX68HyMPcGMtyRNvNBM.crl (hash: 8qo6L57I249TKqar2K2Cq/SBYVsYW4a1bMtrIRZv6Yo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b7:81:7d:95:02:a6:db:ce:56:6c:87:ff:8a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76dd03e7d7219d7ebc1f230f70632dc9136f3413
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=654db859ac49ff697a9090d98c4123ae6a95deb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:b8:09:98:a9:ee:67:27:b6:d0:36:11:75:
73:99:be:3c:34:13:ef:02:0c:9e:2c:e3:e7:2f:e1:
8b:f6:87:76:86:42:9b:31:1b:04:bb:c6:54:a2:da:
14:e4:29:e4:1d:41:b2:f2:f5:72:f5:71:d9:75:ad:
05:09:74:d2:3a:b4:b3:ba:32:6a:a1:2b:0d:62:0e:
64:17:82:94:6a:3a:b5:e7:c5:b4:36:f7:9d:94:dd:
67:d8:5c:36:09:27:e9:4d:c8:e2:24:f9:a0:65:b1:
60:ea:b9:8d:6c:d4:96:ea:33:54:3c:f0:04:e1:6d:
64:8c:eb:5b:63:17:4c:c7:03:e0:e2:dc:a1:b6:6b:
e9:73:f2:46:c6:98:4f:86:01:11:58:20:b4:d0:a9:
9c:98:7a:b7:0c:90:07:53:d7:59:56:6f:ba:8a:e6:
75:56:79:5d:74:56:af:a3:30:20:1a:8c:c5:bc:e9:
44:0f:e0:98:ef:6f:ec:65:f6:65:47:02:d9:23:7a:
02:ae:f8:0a:ab:43:82:ec:ff:18:f0:6f:92:05:8c:
85:7a:61:11:e3:fa:34:dc:82:b8:ab:0b:70:b9:da:
7b:19:76:f1:98:91:10:7c:7f:b2:44:c1:24:73:92:
da:16:20:49:bc:a7:77:c4:4c:8d:30:4e:52:02:d3:
07:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4D:B8:59:AC:49:FF:69:7A:90:90:D9:8C:41:23:AE:6A:95:DE:B2
X509v3 Authority Key Identifier:
keyid:76:DD:03:E7:D7:21:9D:7E:BC:1F:23:0F:70:63:2D:C9:13:6F:34:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dt0D59chnX68HyMPcGMtyRNvNBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:11:4c:a5:89:8f:d9:36:40:e9:8f:c8:ce:7f:c8:e5:64:a8:
a3:d6:ba:3f:5a:c1:bf:15:3f:ba:ee:fc:df:9e:30:b6:f1:40:
31:1a:a8:43:ce:44:9d:19:4f:fb:03:51:83:46:b4:69:d0:6d:
11:89:16:e5:9f:64:6f:a6:6d:99:b7:a7:f7:34:52:ae:2d:45:
f2:a6:e4:57:c1:53:54:f7:fa:85:18:32:95:8b:31:e8:e4:14:
75:4f:27:31:01:ec:e7:09:cc:19:c7:06:e4:4d:3e:e0:f8:19:
34:96:ca:a4:4b:d1:03:54:5b:af:06:80:91:1c:b5:0b:4a:0e:
8d:96:c5:c5:ec:42:af:fd:68:90:f5:0d:f6:0f:48:7c:94:16:
f0:e9:6d:d9:42:51:10:24:85:80:58:c6:b9:c7:b4:87:bd:43:
b8:e9:70:04:12:16:0a:d9:01:f0:3e:61:2f:d1:56:54:8f:a5:
db:23:44:00:f1:6c:28:4e:b3:18:01:db:d2:83:b7:eb:71:75:
82:60:88:96:cb:e1:66:d4:bc:04:a5:f2:68:5d:75:0b:5f:80:
69:d5:8b:40:6a:8d:86:0f:84:05:ea:e3:f5:cc:04:a7:ef:d0:
7f:a4:06:9b:4d:4a:18:02:a7:88:0e:9d:94:02:c4:50:d1:84:
00:27:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:02 2025 by rpki-client