Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
File: rTaQk6MtG34Ou-MkRRxY10iuzUI.mft (raw, json)
Hash identifier: dedLZjWceGWXwfMvV45ilntMuytgbIGIP1PeAnzDqBc=
Subject key identifier: 91:6F:B0:EB:12:17:B9:95:5A:74:67:09:A7:29:AA:67:75:EB:5A:36
Authority key identifier: AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42
Certificate issuer: /CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
Certificate serial: 0194BCAA065E819F3921261750ED10AE1ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
Manifest number: 0340
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: rTaQk6MtG34Ou-MkRRxY10iuzUI.crl (hash: D730D9jqHzr+g9HFjbpPUtuNGRp2kpRimHY3y7mpngg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:06:5e:81:9f:39:21:26:17:50:ed:10:ae:1a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=916fb0eb1217b9955a746709a729aa6775eb5a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:44:12:19:db:d7:1c:07:3e:57:c7:d0:50:
f1:f3:80:09:2d:2d:5d:03:a4:3c:3f:19:87:a8:4e:
81:e8:38:ba:44:49:38:36:2e:cf:47:11:3f:7b:58:
5f:02:d3:9a:b0:65:ad:fc:13:46:d8:f8:21:68:5a:
30:eb:89:d3:23:5a:1c:71:40:52:35:85:9e:66:d0:
bc:b2:f6:06:46:e4:c3:5f:a3:af:6d:62:44:df:b8:
46:d4:19:e5:00:71:11:9c:4b:f6:1c:8f:b3:c9:d6:
12:a6:05:16:00:7c:c3:64:c4:a6:7a:83:00:4c:27:
f1:35:0b:7e:90:0d:ed:64:61:82:c5:d1:f4:b5:8f:
55:00:0d:05:b1:52:96:22:fb:47:73:1b:99:52:74:
c6:d2:17:b1:4c:04:53:f9:a4:1e:a6:70:c3:9d:58:
b9:50:c6:cf:a9:10:58:f7:35:2d:a0:f8:1c:15:b4:
c5:11:3b:ff:91:c0:83:94:d4:00:bc:5f:80:58:97:
b4:e3:e0:eb:68:fa:49:02:09:ed:a6:a8:c1:65:c2:
ed:e5:64:32:7a:d5:27:82:77:37:21:f3:37:fa:5e:
ed:19:e0:ad:68:26:b0:49:5d:72:cf:3a:25:a2:42:
08:e0:31:ef:7f:15:c4:9c:8f:e5:15:b0:f4:d2:03:
24:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6F:B0:EB:12:17:B9:95:5A:74:67:09:A7:29:AA:67:75:EB:5A:36
X509v3 Authority Key Identifier:
keyid:AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:85:eb:7a:38:24:9f:ba:5a:81:a7:f4:7d:5e:89:fe:60:12:
2a:6c:32:10:9e:20:fb:31:ae:0a:df:7b:93:2c:f5:74:12:97:
cc:f1:ba:f3:6e:1b:60:71:85:89:ca:a0:39:aa:c3:db:11:75:
5f:ae:6b:cd:29:f2:e4:f2:07:74:19:b7:e9:45:02:9f:ad:cb:
f1:1a:be:de:7a:f0:9a:9c:ac:d4:c9:14:11:a1:25:ad:53:23:
b1:fa:f0:27:27:be:b9:6f:7f:5b:63:b1:d5:01:e6:cd:1e:25:
36:a2:70:9e:7b:76:24:0f:cc:f2:9e:03:69:88:f8:10:62:0b:
75:82:a2:d3:09:12:8f:2d:92:b8:9e:de:0c:ef:75:7b:93:58:
a7:23:82:49:da:d6:aa:62:13:cd:a6:77:51:37:cd:0e:16:05:
01:2e:7c:99:7c:5d:83:cb:45:07:04:ba:f2:54:6c:32:b8:34:
ea:d4:13:42:99:98:89:02:ec:7a:8b:b1:a0:c1:cf:9a:c2:6b:
a8:82:0c:af:29:ae:86:63:41:3f:6d:7f:b5:2e:af:06:d2:7b:
3e:d2:5e:69:45:ce:23:d1:23:5c:93:11:a5:f8:f7:39:ad:2e:
e2:5a:3e:23:71:5f:12:13:6d:0e:5c:0b:94:57:9f:9a:7f:61:
db:d4:9e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:20 2025 by rpki-client