Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
File: SdWTfY5gK0jLL_UXFtmV0jofPho.mft (raw, json)
Hash identifier: RonVrVaQg+iK+UwXn/fB3mVNvcEYQNJq6T7QEc7/MyI=
Subject key identifier: 99:62:64:6B:27:C3:24:E8:2F:FD:4E:9C:73:E3:0F:99:CF:76:9F:2C
Authority key identifier: 49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
Certificate issuer: /CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Certificate serial: 0194BBCDD20A043F8A37A1983D46CD666EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
Manifest number: 0CED
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: SdWTfY5gK0jLL_UXFtmV0jofPho.crl (hash: HPdyz3xYWnDPa28uZXU3Aj8AZMJMc98TBtodV59KBMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d2:0a:04:3f:8a:37:a1:98:3d:46:cd:66:6e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=9962646b27c324e82ffd4e9c73e30f99cf769f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:e7:44:7e:49:f7:73:b2:0e:4e:4d:a7:9c:
af:c1:d7:6b:94:17:9b:35:57:d7:de:71:8d:a9:9f:
e0:57:40:e0:b4:aa:b5:d2:f7:10:b9:58:ca:58:d4:
69:ac:37:25:e2:84:9f:a6:1b:f6:dd:1a:fc:f7:53:
70:d0:07:f1:e5:3c:5b:4e:23:91:11:de:33:44:ca:
62:25:8e:07:ad:57:9d:fc:db:fc:fc:5d:06:66:9d:
21:18:6c:0d:a2:9d:63:7e:56:93:bb:4a:8a:30:8b:
b2:d6:1e:f3:be:98:3d:00:7c:50:35:a3:66:7c:5e:
8f:68:fd:60:79:9d:35:34:4a:5e:d5:e6:5f:82:2c:
6e:1b:99:19:a2:95:20:ce:ed:e3:f7:7d:82:ed:9e:
67:21:e7:d6:8a:9e:c4:78:30:b9:ee:77:d7:1e:a8:
27:3f:04:c8:2f:c5:7e:59:25:35:91:f6:68:5d:d4:
36:ee:a0:58:a2:df:38:d5:ed:5b:9d:a8:a2:0a:96:
d3:c2:a5:a7:31:88:f3:c3:5c:d5:2a:14:18:c7:71:
4a:49:74:99:87:e6:ba:79:c4:29:69:c6:36:32:8a:
e2:83:3c:80:03:e4:be:5c:43:79:f2:c2:53:90:28:
44:dd:55:7c:7f:60:08:ec:58:04:98:1b:a0:f3:5a:
2f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:62:64:6B:27:C3:24:E8:2F:FD:4E:9C:73:E3:0F:99:CF:76:9F:2C
X509v3 Authority Key Identifier:
keyid:49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:72:e3:a0:67:53:18:bf:99:ed:f6:f1:ba:40:5d:00:63:4c:
f7:0e:be:58:6e:48:3f:44:5b:53:68:51:a5:a6:35:34:60:ee:
78:55:45:c3:1e:c4:bd:a3:4f:c7:e6:f4:2f:7e:ea:75:f9:19:
90:0c:45:c6:db:84:c6:0b:d7:db:01:42:56:4d:67:0f:4a:da:
7c:2b:88:4d:7a:5b:e5:1c:9d:2d:1c:25:fa:50:2f:d9:8c:ec:
92:e9:b9:cf:72:94:0e:3d:92:71:ad:d1:f3:dc:44:d0:fd:0e:
59:19:3e:7a:15:16:94:96:c2:5a:9a:3e:75:b8:14:87:7d:1f:
e5:59:bb:8e:96:91:b5:11:74:1e:b1:4e:84:f3:c8:be:47:7f:
fd:21:e5:6c:c9:15:64:c3:2b:6b:df:0b:03:63:8c:22:26:42:
61:bb:92:c4:7f:68:bf:1e:73:aa:c8:60:fd:65:6d:a7:c8:83:
7a:b6:15:bd:10:2c:c3:8d:dc:bf:25:6b:46:64:53:c8:7b:93:
54:b6:ca:ef:53:e2:4d:b2:b3:ea:33:ad:14:18:65:07:ab:cc:
9e:0e:fc:01:a2:71:4d:6a:5f:e8:1a:b0:a6:3b:ab:42:32:25:
4b:cc:da:ff:c7:5f:20:a8:84:9f:cf:a4:80:09:16:e6:eb:1d:
4a:c6:dc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:40:48 2025 by rpki-client