Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
File: 54z133frZmwE77frs8o0BK3sNPs.mft (raw, json)
Hash identifier: o6Q3QoUOP5in1Bv/FP+J92vFQpBVCn3Gru6J3C7nAMM=
Subject key identifier: 9D:9E:C4:A2:20:C5:15:A5:5B:2A:31:57:FE:F5:C8:39:54:47:47:A4
Authority key identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
Certificate issuer: /CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Certificate serial: 0194BCA9953794DC49D0287FA43A466C29A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
Manifest number: 0B0A
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: 54z133frZmwE77frs8o0BK3sNPs.crl (hash: lEh2Dpi+ZBN3viUDQpYHumvTGevCyezfCd/jyMEfvuQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:95:37:94:dc:49:d0:28:7f:a4:3a:46:6c:29:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=9d9ec4a220c515a55b2a3157fef5c839544747a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9e:93:0e:83:17:6f:bf:05:43:96:2a:3b:f5:
2d:a2:2a:a9:3e:86:0d:07:64:5e:06:29:c1:e3:db:
4c:e0:10:bf:97:b2:75:14:f2:57:8f:a8:e5:6d:b1:
6f:3a:ab:ca:ee:be:76:d3:94:bb:0c:b9:6f:4c:ad:
62:5e:cf:77:47:5f:75:43:cc:be:c0:58:ad:42:88:
91:3d:2a:11:37:aa:db:c0:4d:21:1f:8a:17:0c:3e:
ce:0a:b2:d9:2c:d4:49:81:ec:66:7a:36:cf:01:40:
a9:2f:3b:0e:3a:13:de:c5:53:b2:05:c7:8d:ee:5b:
db:4b:07:cb:83:5e:17:83:66:b5:44:ef:99:d6:05:
ce:47:be:b0:e8:11:aa:ad:2b:db:b5:c7:59:70:62:
c6:20:68:cd:a7:d2:a9:ea:50:12:e6:96:ef:9d:4b:
42:45:16:e9:5e:91:b4:97:9c:81:ef:e1:69:7b:ad:
69:e1:ef:b4:9a:fa:5d:86:38:5f:90:03:83:7e:30:
5e:d8:ab:39:5a:1a:e7:c4:42:72:35:d9:ad:81:aa:
eb:5d:e7:2b:0d:8b:89:92:6d:d9:ae:e1:7a:f6:a3:
d6:69:b4:23:40:f9:e2:20:11:86:3f:a8:ea:ea:37:
76:82:d2:e9:7a:5e:ef:eb:f0:e0:71:e1:de:20:09:
0b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9E:C4:A2:20:C5:15:A5:5B:2A:31:57:FE:F5:C8:39:54:47:47:A4
X509v3 Authority Key Identifier:
keyid:E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2e:7b:e7:19:ad:b1:f3:ea:00:71:4f:ec:d5:c6:aa:73:35:
8c:43:9d:66:ef:ad:e9:e7:bb:f2:98:bb:0c:1f:ec:bc:03:23:
44:9d:85:1c:5f:b6:ee:57:13:c2:c9:78:4a:cb:db:51:95:38:
e8:8b:e9:44:6f:4e:fa:76:8d:53:52:65:73:05:f2:4f:fe:b5:
ff:64:98:d3:4c:9d:3e:7e:31:ce:5b:67:1d:8a:23:5b:1d:25:
16:ae:45:15:01:c6:db:26:56:94:86:14:d0:99:75:8e:75:4e:
cc:f4:eb:00:1a:33:56:ab:ae:e7:d0:e5:dc:24:16:ef:10:08:
1c:3f:0f:1c:d9:c3:7b:fd:8b:f1:77:9c:10:ad:b5:a3:e0:47:
b1:58:3a:f3:b4:86:0d:e3:6e:c3:e2:7e:91:cf:4a:76:4b:99:
89:32:06:0f:b8:c6:01:2b:f8:87:08:b9:59:e4:09:cf:0d:54:
9b:0b:ae:bf:d3:1c:df:1e:a2:52:84:8f:ba:2d:7b:90:ec:36:
5d:1d:db:44:88:89:ce:d6:b0:8d:4d:66:9c:72:1c:b8:62:c8:
10:42:b1:dc:d8:e9:6d:34:9b:4b:a9:9f:f8:99:70:9f:73:e4:
24:57:31:ac:c6:c4:c7:0d:1f:dc:23:b4:59:a7:6a:fa:1a:dc:
34:ab:51:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:58 2025 by rpki-client