
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
File: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft (raw, json)
Hash identifier: sLTtrF46kzUgN16ILdYm6MSo+waVtSzhuO9fh9gzhI8=
Subject key identifier: 66:0E:4F:2F:91:EF:FD:08:B7:8B:48:FE:D2:56:9B:85:42:16:5F:E9
Authority key identifier: A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
Certificate issuer: /CN=a4c9f067007684facca9be8ce02da4676c09972a
Certificate serial: 0194BC3C3C5FCCC33C2257EE7672B62E2769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
Manifest number: 0461
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl (hash: +9dmw5R0srw+UDPWV158izb9D+c8N8T6OB5XAWZBB0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3c:5f:cc:c3:3c:22:57:ee:76:72:b6:2e:27:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c9f067007684facca9be8ce02da4676c09972a
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=660e4f2f91effd08b78b48fed2569b8542165fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:df:33:68:33:42:89:79:bd:c3:ab:80:e1:d7:
ca:2a:33:69:77:38:97:b4:ab:0c:da:2d:56:d3:66:
ee:a4:d1:53:34:81:ef:46:f3:f9:b9:b2:0f:c4:47:
9a:be:6b:76:bc:a1:2a:4e:bd:89:5f:6b:c1:2b:f6:
28:82:da:ea:f2:9a:a7:31:e5:52:1e:5b:26:1d:25:
27:19:3c:9e:8f:a8:f9:a5:cd:60:eb:b0:ca:39:b0:
99:1c:af:43:b7:ab:69:f2:74:a3:6d:ce:dd:15:70:
2d:37:41:df:f2:95:2f:13:91:1e:79:e9:47:0f:90:
9e:ac:a2:16:aa:20:73:75:53:4e:0d:8c:1b:ab:c5:
e6:67:e6:5a:d9:cd:a9:5f:af:35:df:cf:c5:ce:a3:
f7:48:2b:ee:7f:7c:33:cb:21:2e:d4:5d:96:8c:92:
a7:fa:8d:ea:aa:d1:62:18:5f:a2:a5:ea:1e:45:f6:
44:8f:c9:00:5c:98:4b:5b:5f:b7:9f:40:5a:48:f9:
57:cd:33:3f:8f:46:69:a9:f4:d6:f1:89:b5:39:0f:
53:39:42:3c:7d:30:2e:23:bc:66:a1:a5:fd:34:33:
e5:9e:38:7a:8c:a4:52:aa:a9:5c:8b:f2:6f:fc:18:
9d:17:95:05:fe:c6:29:02:46:da:a3:45:84:0a:9e:
ef:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0E:4F:2F:91:EF:FD:08:B7:8B:48:FE:D2:56:9B:85:42:16:5F:E9
X509v3 Authority Key Identifier:
keyid:A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:17:3e:15:72:66:2c:69:0a:c0:70:c7:e8:14:05:97:d6:a2:
bc:92:83:14:29:b9:66:18:f1:4a:29:55:d3:9d:44:61:85:1b:
63:a0:28:55:4a:18:c3:0e:8f:14:93:aa:6a:54:31:23:1a:4b:
5d:95:df:23:a0:09:ae:da:a0:b5:5d:26:93:cd:d9:17:6d:bd:
37:5a:fc:f0:2d:88:61:0e:20:ef:c9:aa:63:5d:b4:ce:74:91:
e7:67:3a:d7:20:22:86:0d:55:2d:3a:e4:f9:8b:26:04:7d:d5:
48:d6:1d:3b:d4:6b:f5:18:1e:65:02:a8:e5:a1:11:57:89:d5:
ac:3d:88:72:2b:e5:b4:f7:76:d7:0a:30:4a:a6:a5:46:c3:3c:
c8:43:64:2e:fc:c4:ad:04:c4:6d:2a:da:b5:94:95:a6:b7:d6:
8e:c0:10:76:1d:5d:c8:e6:6b:4c:21:64:4c:24:78:d6:10:3c:
dc:72:e3:35:1d:19:43:0a:36:71:23:d7:22:82:6b:59:07:57:
0c:09:db:41:54:a9:bd:d5:82:55:28:a8:12:9b:12:40:8f:0a:
78:cc:2d:a5:ef:1b:8a:8b:14:12:64:51:3c:cf:5f:9e:72:04:
f5:3d:47:29:ad:58:57:f1:b9:d8:81:6f:d4:9c:04:2a:ac:99:
eb:1e:8e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:16 2025 by rpki-client