Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
File: cD94XhQ0CsaoQEhj1796-U5aubU.mft (raw, json)
Hash identifier: yv5ZwzO2CZVEfC2Up6jf+NLGqOKtCwYJujz7WJNRkwY=
Subject key identifier: 77:78:DB:2B:71:CB:47:DB:C4:8F:A4:37:21:55:E6:22:45:13:C0:0A
Authority key identifier: 70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
Certificate issuer: /CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Certificate serial: 0194BBCDE9C87E81A90153BDD30C7B3D84C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
Manifest number: 0DA5
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: cD94XhQ0CsaoQEhj1796-U5aubU.crl (hash: Zv+6IyN2OIhtu6xpCU/sgZTjMWj00F1fzDsSrBB8v+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e9:c8:7e:81:a9:01:53:bd:d3:0c:7b:3d:84:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=7778db2b71cb47dbc48fa4372155e6224513c00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e6:16:81:4a:4c:f5:e6:4e:3b:41:75:0a:ca:
12:d6:3f:a7:96:bd:a8:91:ba:39:b9:e9:a6:92:fa:
9a:42:f9:b3:f9:3a:15:06:52:06:6b:c8:33:3b:41:
9b:16:0b:76:06:c4:59:4a:e6:08:f7:c5:61:ef:49:
2d:c4:cf:c2:ef:66:f5:d4:7b:8b:42:08:da:30:fb:
41:08:ee:62:03:dc:e8:89:16:14:f2:82:af:52:ce:
bb:21:cf:80:d3:69:95:4b:23:10:3c:fc:18:fa:19:
26:54:85:45:c6:c8:31:52:18:8a:15:32:12:eb:86:
89:97:72:1b:ee:9d:af:e4:60:23:b6:42:a5:cb:03:
b0:57:54:79:c4:5e:e6:00:48:4e:83:1a:ba:e8:7a:
5c:21:97:cb:e4:18:c7:fb:c1:16:09:48:23:ff:f6:
b7:c1:fb:51:98:ed:06:06:91:16:03:e8:94:d3:ad:
de:ef:40:f9:2e:34:18:20:64:45:28:c4:5b:7a:62:
db:c8:77:04:4e:37:bf:09:2f:bf:aa:50:24:f9:cc:
5d:1b:22:e8:22:95:02:1b:01:c4:1b:af:c3:59:7e:
e4:88:f7:27:7c:fd:c2:b9:59:83:97:c2:cd:5c:e0:
0d:b4:fb:61:b0:d8:88:75:1f:91:53:ab:bb:f2:7c:
c9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:78:DB:2B:71:CB:47:DB:C4:8F:A4:37:21:55:E6:22:45:13:C0:0A
X509v3 Authority Key Identifier:
keyid:70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:69:6b:5f:06:59:b2:99:2c:4c:51:28:43:02:54:de:cb:bc:
18:2f:3e:6d:71:27:df:37:32:54:24:dd:58:4a:92:23:3a:61:
85:e2:7c:e9:af:05:86:3c:0a:45:b3:e1:56:b2:3a:be:ba:fd:
68:33:a1:18:49:e9:50:31:a1:e1:f8:0b:8e:06:ca:57:29:91:
eb:83:f7:be:14:3a:a2:ed:9a:45:af:58:ca:7b:b1:50:41:0e:
56:ec:10:44:82:ba:2a:c5:04:1d:60:4d:23:ab:e5:3a:8e:1f:
13:bb:d9:cc:6f:21:ee:a0:1c:ab:e7:07:ef:62:f3:60:89:b7:
7b:cb:cf:68:12:af:51:2f:73:95:47:6e:46:05:fa:16:d6:d3:
76:54:99:fd:4a:72:0d:97:16:09:2a:aa:cf:2c:e3:21:ab:97:
e2:e6:90:15:37:19:19:db:43:39:de:19:40:0a:5b:d2:6a:fa:
fd:20:2a:b5:57:fb:cf:f6:e0:d3:f5:20:3c:18:e6:02:4f:3c:
10:28:e9:32:42:29:00:bd:7c:40:8c:b4:4d:20:51:0b:bc:0f:
25:6d:35:b9:10:25:f4:c3:22:88:6d:d2:ce:f1:90:1b:b6:db:
49:b3:7d:c0:f3:f7:d6:81:04:9c:bb:e2:ea:cc:b6:8b:fd:88:
49:d2:5b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:35 2025 by rpki-client