Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
File: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft (raw, json)
Hash identifier: 9eb3NVx3JIc4NBozGTlhVDaAXYhLp1hEHyVi5XKhJXM=
Subject key identifier: AB:F4:CE:1D:12:AD:72:01:53:EC:05:E8:FD:3C:05:06:6E:98:14:3A
Authority key identifier: D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
Certificate issuer: /CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Certificate serial: 0194BBCECDFD82BCDDE7848DD8629E3F7CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl (hash: NYg7DGixgz7TRlDuw2lUr1TgrpKeE+NXldokIwKwi98=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cd:fd:82:bc:dd:e7:84:8d:d8:62:9e:3f:7c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=abf4ce1d12ad720153ec05e8fd3c05066e98143a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:b3:c6:dd:b9:53:4f:cf:c0:c1:a2:28:b3:
e6:7e:a3:11:27:77:54:e6:64:37:08:6c:6b:f3:33:
87:6a:50:da:2b:f6:fa:b6:55:94:c5:16:c3:1a:99:
50:46:bc:00:00:18:e2:0b:84:a1:f0:2b:2c:08:0d:
4e:7d:00:ec:ef:0c:a1:ae:9d:75:7b:b5:59:d1:47:
b3:d0:cf:49:ea:37:07:f0:b0:7d:11:0a:db:49:6c:
0f:4a:aa:e4:b0:a2:08:2c:09:cd:9f:6a:dd:45:64:
73:ea:c7:3d:8b:6f:77:c4:b4:b5:11:74:76:bd:8f:
54:7f:a9:f7:cf:ac:20:2e:84:c1:9c:c2:49:1f:29:
cb:b0:8b:8e:e5:e3:25:b9:19:de:a2:8a:1e:e9:2c:
df:1b:c1:33:39:a1:21:cf:a1:57:7a:ba:ba:69:59:
bb:60:f9:34:b5:6b:cd:6a:0a:e0:52:a6:e1:ec:de:
cd:55:96:c5:24:06:cb:6c:86:05:6a:22:0a:16:71:
17:5e:2c:0b:9f:5f:5d:74:d2:ff:96:61:79:80:f8:
16:1a:45:05:ba:fc:e9:42:58:bf:e1:34:be:79:d0:
5e:75:28:b9:3b:5d:1b:17:15:a3:d4:7a:95:5b:65:
2b:37:f9:d2:cf:24:c4:6d:d5:80:b7:2a:45:80:56:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F4:CE:1D:12:AD:72:01:53:EC:05:E8:FD:3C:05:06:6E:98:14:3A
X509v3 Authority Key Identifier:
keyid:D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3e:63:c5:77:01:2b:c8:a2:1a:21:8a:80:d4:61:28:a5:77:
e0:b3:95:7f:c3:af:d0:bb:de:e3:0d:03:bc:88:8c:33:d2:db:
3e:45:00:14:9e:dd:a8:70:a8:fc:dd:d8:17:2d:1a:8c:97:87:
6a:5c:c9:59:cc:fe:98:67:38:54:71:2c:fb:b3:e5:0d:77:e5:
9b:9c:42:a0:e8:a8:0e:b6:65:86:59:83:9e:1a:be:92:f2:2d:
27:47:df:12:90:cd:49:21:01:68:43:47:f4:7f:d7:d2:37:e5:
73:6a:b5:dd:20:54:5b:51:98:c2:17:1d:ee:0e:3f:99:92:88:
ec:31:71:c1:c7:9b:fc:03:ba:5d:dc:74:67:27:71:44:85:b0:
16:15:05:72:86:a0:b5:8d:d1:a7:6b:8a:d4:77:13:83:69:f9:
3e:ca:09:cb:8f:49:b3:05:07:23:ec:3a:61:1b:d1:21:50:48:
ec:a2:6b:93:77:e8:aa:91:1d:49:af:54:f1:26:b9:9e:26:c1:
ef:04:fc:38:60:47:9f:ee:85:f5:58:77:42:8e:63:13:eb:a2:
c7:04:d3:03:89:f6:27:a5:c8:1e:f0:fd:69:24:e7:44:87:de:
5f:97:23:d9:1a:5d:eb:85:92:e4:21:db:dc:43:63:f1:e9:bc:
9e:fc:1c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:02 2025 by rpki-client