Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
File: 2u6A610wBIVU0K79Q7zu0z791Kk.mft (raw, json)
Hash identifier: uKMemEqWrNOxlI5dCocRO3mfKW52/TiIylWIkOL4MN0=
Subject key identifier: 9C:F3:3A:62:B8:E4:E0:15:8B:7B:F1:3A:58:D2:B1:97:69:82:8F:37
Authority key identifier: DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9
Certificate issuer: /CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
Certificate serial: 0194BBCE2793C13D9B0B0A8E77ADD4EB6965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
Manifest number: 10B9
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: 2u6A610wBIVU0K79Q7zu0z791Kk.crl (hash: fMQrXfBJJjcNB1/Wi+NKwJSwxNMNDohtG2Br2F9z0Ds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:27:93:c1:3d:9b:0b:0a:8e:77:ad:d4:eb:69:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=9cf33a62b8e4e0158b7bf13a58d2b19769828f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:cb:4a:e3:29:30:e6:22:18:38:55:0b:80:
17:11:e6:d0:d9:2b:73:36:c4:ea:d5:74:b5:ac:d8:
d0:3b:b1:cd:9c:36:5c:c0:53:ac:dd:b0:76:a1:85:
c7:4d:26:b5:b3:77:d9:04:9a:35:a1:dc:77:29:1c:
96:6e:3f:fd:5b:c8:77:ae:00:1a:da:af:66:70:44:
6b:c4:c5:e1:77:c4:a3:66:0d:62:6b:1f:27:1b:27:
92:76:a8:ea:2d:fa:95:55:86:d5:00:64:d8:e6:10:
8e:4a:4a:bb:56:5d:12:09:e9:bd:de:9a:a1:44:7a:
43:ab:27:2a:54:87:fd:4c:2b:7f:c6:9c:27:96:f4:
59:7a:d9:67:63:53:2c:05:eb:b5:66:bb:66:34:ae:
56:f6:59:71:16:78:4a:84:cb:3a:f2:c5:05:48:5f:
e7:59:e2:d9:a2:44:b2:ce:d4:b0:f7:6e:4d:7c:19:
76:16:7e:01:cb:d8:b6:74:f9:d7:38:e5:6f:3a:7c:
03:d9:5c:a8:57:d1:32:aa:00:87:c9:a7:33:7e:5a:
2e:47:0a:09:3a:d9:f5:97:18:83:9d:50:bd:34:dd:
71:ba:08:1e:4c:8c:89:d3:16:0b:ec:15:56:1a:8c:
f3:02:b0:a1:5e:a5:f5:1e:f6:a4:33:ed:10:a4:42:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F3:3A:62:B8:E4:E0:15:8B:7B:F1:3A:58:D2:B1:97:69:82:8F:37
X509v3 Authority Key Identifier:
keyid:DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:02:d1:51:4d:8b:65:95:d4:50:be:9c:2a:f6:07:9a:63:ce:
21:9c:9c:e2:a6:c9:8d:b5:30:40:09:de:e0:0e:4d:19:d0:a8:
12:7f:a9:41:b7:f9:f6:7c:ee:44:19:69:f4:dc:49:bc:f0:1b:
dd:b9:0d:f4:1e:e2:a7:52:9b:1f:a3:7f:78:6f:e1:1c:ec:8f:
e0:38:43:07:c5:b4:c4:98:13:80:2d:38:9a:61:cb:0c:2a:7e:
47:8a:f3:1a:08:14:c6:ee:ef:53:44:dc:f9:35:a9:2d:53:45:
b4:77:13:4f:a3:84:8c:68:b3:80:9b:cb:88:16:5c:29:b5:63:
0e:9b:0b:77:25:1d:5c:f9:1d:48:ec:e2:b0:0d:1a:44:d9:05:
94:a3:f9:35:c7:ab:85:13:d2:a2:c8:65:fb:19:31:86:34:00:
54:1f:7f:0e:33:e9:2c:f0:6e:91:8f:61:9b:f3:72:26:61:01:
32:1a:61:26:b8:61:be:ad:da:5b:46:73:e7:b8:69:ce:21:d3:
11:32:83:f6:ae:8c:df:9e:ce:1b:e8:de:20:25:67:8c:af:f2:
e3:d4:72:7d:1b:19:5b:e4:cb:db:22:72:af:20:8d:4a:ca:f3:
e4:7e:92:a7:e8:8f:b7:a4:3b:5d:17:1e:19:c1:0d:ab:52:4c:
2e:ed:99:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:46 2025 by rpki-client