Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
File: ERRf3gGvgQdg7mG881TPlirEYNk.mft (raw, json)
Hash identifier: 4zFdct4gxpn+Bl/k59ZaIM/ql6sUPT2JfGEcYMVbzLY=
Subject key identifier: A6:0F:9D:26:67:CE:CE:24:52:E6:F0:37:23:B3:33:CA:41:F2:CF:0A
Authority key identifier: 11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
Certificate issuer: /CN=11145fde01af810760ee61bcf354cf962ac460d9
Certificate serial: 0194BBCE75222FBBDC40321A0EB169A0D29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
Manifest number: 0C90
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: ERRf3gGvgQdg7mG881TPlirEYNk.crl (hash: cK6HcEqcqsfCy4AbWD5x48wRuMpleiUt+tjDAkbmHGg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:75:22:2f:bb:dc:40:32:1a:0e:b1:69:a0:d2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11145fde01af810760ee61bcf354cf962ac460d9
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=a60f9d2667cece2452e6f03723b333ca41f2cf0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:d7:54:ce:03:68:28:2b:36:c5:c0:bd:ff:
1b:f0:f3:eb:db:d5:54:54:9c:31:ea:ed:4b:08:94:
53:26:3e:ed:d5:e0:ae:e4:ca:12:32:42:c3:7d:9a:
a0:6a:02:4d:70:e0:05:3b:d2:60:f2:33:6f:b7:9b:
42:11:3f:71:cb:f3:95:d8:73:a0:fd:03:6a:44:91:
ec:c4:49:2a:6d:95:25:3d:7f:70:e8:f3:e5:d1:22:
da:39:dc:55:b7:ca:d8:b5:31:ae:9b:fd:3f:28:36:
1e:74:2a:dc:e9:8a:0b:1e:38:e2:84:96:93:ac:42:
a6:42:62:a5:ac:f6:0a:1d:42:c7:5b:5a:22:bc:40:
83:81:1a:83:55:fc:b1:de:12:15:d8:24:45:fb:38:
b9:b7:52:cb:ac:f9:dd:bc:ae:f0:28:f2:69:2e:10:
b5:6e:fc:9b:7c:fc:ed:fa:c4:90:14:30:ce:aa:dd:
ed:42:67:2a:a5:24:23:c6:6d:fe:ad:23:af:56:de:
e0:98:e5:03:47:05:bd:b0:52:59:2a:df:75:e4:3b:
87:09:ab:c3:30:46:a5:95:05:89:60:57:21:80:6d:
98:99:a6:8c:a6:0a:47:c8:3a:d3:7b:86:5e:9d:0f:
f6:d5:19:06:b2:a5:3a:13:a3:23:34:0d:a5:93:81:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0F:9D:26:67:CE:CE:24:52:E6:F0:37:23:B3:33:CA:41:F2:CF:0A
X509v3 Authority Key Identifier:
keyid:11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:52:f7:6a:96:21:8d:35:6b:58:1a:f9:72:c5:1c:40:91:7a:
77:bd:fd:29:8d:1a:9c:b9:6d:cd:8d:c8:cd:6d:7a:74:75:63:
fb:2b:a9:6f:9f:10:59:af:19:38:c3:86:1f:92:7c:39:5f:a9:
d4:69:90:95:72:fe:a0:cf:04:dc:ce:bf:89:d4:2a:81:b9:fc:
7c:fd:b5:2f:d1:b1:fd:82:c3:76:2a:6c:0e:66:a9:bf:67:bb:
fd:15:5e:00:52:28:75:f1:df:45:e4:b8:a7:bc:95:54:7c:c6:
55:76:a1:f9:e1:fd:f5:ce:c5:95:90:18:fc:e0:09:9a:51:8c:
23:79:a2:fb:b2:35:35:99:5d:13:f4:99:20:43:68:9e:19:9a:
10:5a:30:ab:f9:bd:bc:05:df:72:53:9a:45:69:fa:96:a6:35:
c1:1d:18:6d:e3:e4:8b:7f:6b:e9:1b:f2:dc:d5:6d:8e:47:32:
b6:3b:5c:68:0b:c2:01:ab:12:b0:c9:1c:5b:4c:88:4f:cf:ab:
71:21:eb:7e:4c:d4:d9:33:29:c5:64:c4:f2:17:4c:ef:79:2e:
55:f5:55:2a:87:7c:8d:d3:37:e3:9c:96:76:ac:34:50:c2:cf:
78:d0:38:86:09:9d:4b:9e:cd:19:8b:98:8b:69:9b:6a:91:12:
68:a1:37:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:19 2025 by rpki-client