Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.mft
File: 2dybKOREONnQi9VZl59J47v6Yiw.mft (raw, json)
Hash identifier: UNnoQigeLs/WOfRPa5k5YHAm0tXasqJLb0R4IAA7nUk=
Subject key identifier: 6B:54:56:AF:CB:F6:1E:19:92:59:AB:44:DA:A5:06:89:31:AE:07:C0
Authority key identifier: D9:DC:9B:28:E4:44:38:D9:D0:8B:D5:59:97:9F:49:E3:BB:FA:62:2C
Certificate issuer: /CN=d9dc9b28e44438d9d08bd559979f49e3bbfa622c
Certificate serial: 0194BBCF01CC6DD19A529B4F1C5902139C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dybKOREONnQi9VZl59J47v6Yiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.mft
Manifest number: 0468
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: 2dybKOREONnQi9VZl59J47v6Yiw.crl (hash: 9R6QxzKqXokFwExRnyoPQYl6JbwcM9XYuq1GfqB9UFs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:01:cc:6d:d1:9a:52:9b:4f:1c:59:02:13:9c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9dc9b28e44438d9d08bd559979f49e3bbfa622c
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=6b5456afcbf61e199259ab44daa5068931ae07c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:6e:99:6c:73:b7:8e:bc:b5:5d:fd:2d:de:
fe:98:dd:0c:4b:fe:b7:2b:22:6f:8a:10:cc:bb:e1:
95:f7:72:2f:fa:bf:18:5c:49:bd:a0:ee:60:cd:4a:
7d:54:81:9d:11:ab:76:9f:8f:3c:13:1d:b9:09:f7:
15:de:21:9b:01:43:7b:c2:33:79:fd:7c:6a:75:df:
91:2d:68:a6:71:6a:f4:8d:bb:69:e5:e3:6e:d6:82:
00:81:94:4e:06:bb:ef:b5:5e:eb:1f:8c:c0:5d:4e:
2c:dc:24:a2:5e:e5:eb:69:71:7f:a7:ea:1b:7c:77:
ad:7b:63:8f:b6:7e:5c:8b:a3:1d:e5:f9:72:bf:7e:
39:39:0f:01:b9:f4:2e:1c:ed:39:1f:be:26:61:55:
99:e3:b1:85:5f:fc:55:35:6d:bb:38:b3:d7:28:0c:
1b:f7:f4:a7:16:68:4d:e6:ea:16:09:b7:94:54:99:
d5:4f:de:61:20:8d:b4:96:ef:b7:37:a4:a5:ef:49:
6e:c8:b5:fb:57:d3:c7:8e:0b:5e:ab:be:56:8b:ee:
40:22:2f:d8:e8:15:91:a8:1a:3e:25:95:2b:75:0f:
02:ae:b8:f1:1f:a2:17:47:db:58:ab:47:8c:18:00:
af:64:72:e6:ba:26:ba:0f:14:ae:aa:70:d5:a2:65:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:54:56:AF:CB:F6:1E:19:92:59:AB:44:DA:A5:06:89:31:AE:07:C0
X509v3 Authority Key Identifier:
keyid:D9:DC:9B:28:E4:44:38:D9:D0:8B:D5:59:97:9F:49:E3:BB:FA:62:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dybKOREONnQi9VZl59J47v6Yiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:de:d2:7c:10:5e:24:a0:ec:15:c5:06:64:53:0f:12:c4:54:
af:63:87:64:28:81:24:34:b9:6b:11:b7:03:ea:71:75:da:c6:
2d:27:9a:27:b8:18:71:29:46:59:c5:c6:43:5b:53:ed:66:b6:
4c:62:32:df:96:bf:f9:11:a1:35:17:ac:2b:8e:28:f3:3a:f9:
7d:ea:17:86:26:aa:b5:31:f3:d6:42:ab:74:97:4f:22:9e:42:
d7:f9:da:b8:d7:81:18:99:df:de:6c:40:12:81:32:c1:f5:81:
58:23:6d:f7:63:f7:b6:99:d8:c5:6f:a0:28:26:53:bf:04:93:
92:dd:4a:48:2d:7d:03:cd:70:98:87:99:c0:80:0f:2c:67:73:
bb:9c:ba:bf:5c:62:e9:6e:d4:48:29:ad:f9:6e:8d:26:93:23:
b6:4f:92:ff:d8:e1:94:80:5a:d6:90:6c:8a:51:46:e9:b0:1e:
70:9e:8a:d7:ac:0e:cb:34:3d:ad:8c:2e:7d:d2:49:0f:af:2a:
2d:ed:34:52:1c:4f:69:bf:f9:c8:f4:aa:85:d3:0b:56:e7:81:
3c:1f:d6:ab:12:9e:bf:6f:00:6a:9c:cb:97:95:0a:a4:d3:2b:
51:5d:e3:43:84:32:43:08:8e:3d:50:b7:9c:93:88:48:a1:4e:
02:d6:76:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:07 2025 by rpki-client