Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
File: 9IOBPbTT97DwLDH4W1JDww9F4lI.mft (raw, json)
Hash identifier: PbK3r6wfqGo24WFDrsIJJUtHi4ShAjICqjI2dSE+Yg0=
Subject key identifier: 05:70:E9:DB:55:07:D3:6C:A6:2C:2B:10:09:E4:C5:64:65:73:28:72
Authority key identifier: F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
Certificate issuer: /CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Certificate serial: 0194BBCEFDFEBAE53D1EEB332CF243CF1C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: 9IOBPbTT97DwLDH4W1JDww9F4lI.crl (hash: jw9mCBlQ3qwouduVLEbqOQ7npG2EfCcb3MXfcUOzCVk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fd:fe:ba:e5:3d:1e:eb:33:2c:f2:43:cf:1c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=0570e9db5507d36ca62c2b1009e4c56465732872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3d:6b:d1:d8:88:b1:d1:9e:e0:b5:0a:e8:f1:
1a:ee:d7:38:bb:42:85:41:4f:86:2e:54:67:56:99:
da:ea:b6:21:a9:26:e5:0c:9e:bd:d8:65:34:9b:d1:
00:d2:4b:08:41:69:82:c6:60:e4:c7:a0:9e:62:43:
db:80:bd:6f:ab:2d:61:f6:87:c4:77:a2:2d:0f:8d:
b3:22:00:aa:25:40:ab:83:c8:47:48:d2:92:18:e3:
45:78:b9:10:a4:aa:9e:b5:dc:6f:4a:6c:c4:7c:7d:
47:5a:b9:7e:94:97:5c:23:24:0d:a9:94:ad:ce:82:
79:c4:4a:81:4e:0a:e0:e5:8e:3e:9c:38:69:9c:46:
cd:66:ad:ec:42:42:8a:f4:5a:61:91:c2:56:8b:af:
42:36:49:6f:11:d6:24:cf:0d:9b:72:4f:37:f9:62:
6f:e4:32:bb:26:15:27:e9:0b:90:49:c0:01:f7:c2:
19:4e:b8:c7:47:d0:1d:0f:6f:70:07:2d:84:83:10:
30:0c:f1:1d:b2:09:4b:7e:fa:63:5d:70:89:a3:2b:
8c:bf:04:b2:5f:a3:01:50:4f:ea:83:87:ac:e7:66:
c2:e8:df:cd:47:67:d6:e8:72:00:4f:4e:4f:d7:b3:
bc:6f:4d:3a:8e:b7:e1:bd:8d:8d:01:84:b1:a1:90:
cd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:70:E9:DB:55:07:D3:6C:A6:2C:2B:10:09:E4:C5:64:65:73:28:72
X509v3 Authority Key Identifier:
keyid:F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:99:16:15:6d:6c:26:9b:9b:63:11:bb:47:63:a1:eb:62:06:
8b:cb:ad:f3:d3:ea:67:df:b9:f3:fd:e8:a5:b2:ff:6e:4b:99:
ef:b2:cf:31:94:e7:ba:1f:fc:14:92:f6:71:f5:76:3b:cb:7b:
8d:96:1b:97:d5:4b:88:67:de:47:eb:d8:64:49:ff:40:88:40:
ff:dc:4e:aa:fa:b7:41:3c:fb:84:49:de:5d:6d:98:99:33:5e:
fe:d1:ee:76:5a:e6:71:9f:72:0f:c9:f4:93:7a:05:ae:63:ce:
f0:3e:db:e8:31:b4:eb:f4:0b:1b:0f:1d:90:30:60:59:c0:8b:
1a:d9:76:2b:20:2e:b3:41:3a:27:18:d5:33:2b:46:86:b4:69:
f1:fa:bd:99:5d:49:88:18:e7:5c:04:ae:ab:c4:1c:bd:a3:59:
c7:00:95:f9:98:71:86:db:5f:ea:c5:44:6a:10:56:5e:48:05:
09:ed:1e:18:8d:57:25:7c:3f:90:12:94:d5:da:22:9c:d6:c2:
70:21:42:13:fd:b1:97:b8:30:f6:94:95:7e:42:6f:24:2c:38:
dd:a1:60:39:76:4c:7c:58:25:3d:04:92:c5:83:09:1d:99:a7:
68:b8:a3:44:c0:0b:70:f7:61:7e:af:37:c8:b9:f1:3c:d6:9a:
d3:7d:07:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:59 2025 by rpki-client