Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
File: 9E8rYv2EXJFI4OImQldIw8bpdTk.mft (raw, json)
Hash identifier: PKJvhFWVca8qSYXbrYM9mTrbj4ukcW8QcOSGGnk8g2Y=
Subject key identifier: 53:2D:E2:01:C7:54:41:08:98:53:91:C2:A2:E8:E0:EA:4C:70:C8:A4
Authority key identifier: F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
Certificate issuer: /CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Certificate serial: 0194BCE0B73A507EFDDD9FD888B9BB826E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
Manifest number: 03AC
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: 9E8rYv2EXJFI4OImQldIw8bpdTk.crl (hash: m6udzdzDbiGyqVzqvcnXOPsnnlM2wZWaj/klejKMWgk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b7:3a:50:7e:fd:dd:9f:d8:88:b9:bb:82:6e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=532de201c7544108985391c2a2e8e0ea4c70c8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:71:d5:8c:b4:f2:80:a7:8b:1a:23:4c:99:
d1:c2:bc:c5:51:8c:86:e8:0f:24:c7:dd:d2:3a:86:
df:29:1a:4c:8d:a4:43:ac:6f:2a:d9:7d:8d:21:19:
32:63:17:2a:3f:fa:64:2b:91:ee:6c:a5:04:24:d9:
7e:2c:3e:f6:ab:ef:e1:89:8f:33:53:e9:dd:0c:45:
df:dd:44:c5:a6:6e:18:1c:4e:d2:a4:7c:2c:8a:ac:
3f:e2:dc:c7:25:10:18:99:62:07:84:ef:5e:ab:1f:
e7:d6:62:35:54:56:0e:e5:72:00:93:10:c4:54:f4:
32:02:91:68:ea:de:cb:93:c7:d0:52:11:59:e9:74:
bc:6c:e7:38:f9:9b:90:5c:52:86:e3:e1:a5:6e:20:
34:b8:77:5a:4b:c3:83:e9:71:59:92:d9:b3:96:24:
32:66:47:03:d4:5e:3b:02:b3:6f:61:1a:27:8c:0e:
f3:01:f9:ed:92:77:34:79:2f:04:9c:37:dc:e1:3f:
3d:ac:e8:84:03:7c:24:94:d5:68:62:e3:49:1f:11:
7b:bc:a8:30:6d:ae:28:c2:fb:f9:e8:58:23:46:82:
51:4c:98:75:3f:7b:27:fe:22:28:09:50:a6:27:87:
01:00:62:a0:ae:c9:8e:0b:b0:34:96:24:f4:85:55:
8f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2D:E2:01:C7:54:41:08:98:53:91:C2:A2:E8:E0:EA:4C:70:C8:A4
X509v3 Authority Key Identifier:
keyid:F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:53:79:f2:79:b5:6b:08:be:be:24:43:3c:62:69:29:eb:e2:
d3:5c:2b:ee:be:a5:e2:d8:a9:cd:60:31:48:c9:49:48:22:0c:
10:34:00:37:23:65:da:9a:d9:c6:28:00:bc:da:3d:5c:a7:d1:
4e:8d:31:c2:20:36:61:b6:31:a2:89:bc:6a:cd:7a:23:16:8b:
28:fa:50:04:ee:69:d5:cb:29:95:b1:d6:c5:dd:e1:b7:49:61:
75:9f:b4:81:c0:68:41:56:e2:cc:e9:a8:f2:5c:b7:f4:9a:63:
3f:4b:6b:1f:0f:7c:a0:64:70:71:19:b4:1c:8e:4c:57:98:d5:
68:dd:67:9f:04:7e:14:bf:ae:d4:9a:86:07:ee:65:83:0a:73:
22:88:b2:ef:42:70:18:52:a4:82:87:96:0a:5c:ad:00:e6:76:
31:50:ba:ef:11:51:1f:72:8b:e8:80:4a:0e:7a:10:37:01:23:
88:bd:21:93:fc:02:20:a9:3f:70:cc:17:b0:46:ac:69:20:26:
f8:db:f7:18:57:f4:fd:9a:b6:d1:2d:bc:18:df:3f:e9:d5:e0:
f8:ae:eb:21:81:84:ee:77:26:93:cf:8e:bc:2c:97:ca:f7:3d:
45:b7:ca:61:42:37:c8:41:4c:4f:55:8c:a0:3d:c2:9d:3a:4b:
e6:e8:83:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:43:41 2025 by rpki-client