Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
File: Rji3uq3cnWWuMsgX_meX7zeZaaM.mft (raw, json)
Hash identifier: m/m+6dOluXYGHEVt242+xMlyCDP+DtTMFz7aQFEg2tM=
Subject key identifier: 56:67:5E:1D:B0:D4:2A:C5:BF:53:75:BE:A8:35:A3:E5:76:9B:EA:AF
Authority key identifier: 46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
Certificate issuer: /CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Certificate serial: 0194BD17C334B852D2EE42327020FA425453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
Manifest number: 12FD
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: Rji3uq3cnWWuMsgX_meX7zeZaaM.crl (hash: yvTd61rePIFLJEDQOPqzFC1CkQEUl2PItSb2zP9Dgsk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c3:34:b8:52:d2:ee:42:32:70:20:fa:42:54:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=56675e1db0d42ac5bf5375bea835a3e5769beaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:c0:51:1c:60:72:99:6a:5b:99:d8:90:b6:
b4:38:38:ad:e7:56:5a:ad:3b:94:af:f0:fb:90:7b:
77:7a:a6:bd:8d:d6:8f:e5:a2:10:55:19:75:b5:12:
2e:b9:ce:2a:99:33:15:1d:39:78:25:82:68:25:c1:
29:20:9c:60:b0:04:15:90:2a:f6:cc:63:75:d8:31:
24:d2:0b:17:0d:c4:81:36:7b:77:44:65:9c:42:a6:
b5:07:04:d8:bf:a8:3d:41:a3:30:cf:f5:fe:4e:c1:
db:a1:2a:7e:e9:1b:78:25:81:39:e9:4a:98:6f:3d:
74:4b:88:b9:d0:c5:ae:d2:f2:df:60:15:fa:72:1c:
f5:a4:2e:a5:c3:b2:e6:52:b9:09:10:6a:83:4b:65:
f3:72:7a:ba:1e:bf:82:ca:3e:27:50:a1:b5:91:8b:
28:11:af:4a:24:94:e9:ec:7c:24:59:65:db:05:1f:
58:ae:47:b4:b7:d5:50:5c:30:cf:6a:cd:d1:93:f8:
48:1c:4c:89:d8:0d:91:b8:22:fb:03:de:3e:0f:47:
2f:ca:b3:78:24:d3:6c:7c:14:1a:ee:38:d1:3d:a7:
e1:06:8b:6c:3d:df:d0:22:59:c3:d1:e9:23:fb:3a:
90:40:ba:2e:de:a1:d0:81:1d:ea:d9:c4:89:b6:4d:
c0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:67:5E:1D:B0:D4:2A:C5:BF:53:75:BE:A8:35:A3:E5:76:9B:EA:AF
X509v3 Authority Key Identifier:
keyid:46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c7:cd:81:ec:e8:fe:de:4f:33:fa:72:03:c6:27:d2:23:95:
eb:00:57:7e:67:09:95:f8:20:8f:92:f9:4a:a7:f0:41:cc:07:
92:59:04:05:fa:5e:2b:72:65:e5:d4:80:84:bd:44:21:4c:2c:
ff:c0:4e:1d:96:49:4f:b6:8c:6d:31:61:6d:8f:37:33:1b:2f:
57:43:27:b6:ed:fb:62:9d:45:ec:71:99:af:84:3a:d4:e5:29:
43:46:67:5c:05:b4:e1:dd:ff:f1:5c:99:63:99:da:5e:bc:fe:
d4:41:6c:34:d5:75:06:d6:4b:6c:b5:ed:bc:3e:06:e7:5f:63:
54:68:64:da:bb:c6:88:56:e4:b0:a3:f3:63:bf:ff:da:a2:a7:
44:f2:34:54:2f:75:ee:5f:f1:16:c8:15:f7:95:98:ea:89:50:
7a:4f:48:2c:cd:eb:69:13:5b:ef:f2:86:03:75:0f:50:e5:f0:
67:a1:df:ba:c0:ea:c7:57:cd:67:5d:04:e9:1d:59:0e:3f:f3:
7a:76:96:99:19:1f:fa:85:fd:8c:98:45:c5:d3:a9:92:51:28:
30:7a:dd:00:9e:1f:93:1e:13:04:20:24:65:92:6c:b6:59:3d:
3b:e0:dc:0f:09:ce:42:99:1c:b9:9f:ff:48:3b:0b:5d:c3:22:
ef:87:23:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:54 2025 by rpki-client