Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
File: 9bdVrRo8ekUCu8PqNMdba85hyUw.mft (raw, json)
Hash identifier: 9YZs2nq8xK2R91mz6O3jEMz10YB8+onjT1JSYM+ZM80=
Subject key identifier: 78:96:BE:94:BF:AF:06:8F:70:CC:E6:88:1B:21:D6:9D:56:1A:03:E4
Authority key identifier: F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
Certificate issuer: /CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Certificate serial: 0194BCA9DA2F7736C1271AFA5E832B34474B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: 9bdVrRo8ekUCu8PqNMdba85hyUw.crl (hash: /EShGlmOOr0vF6Uui0hHsYAxMOyOcGDgSN7AGtVF7WU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:da:2f:77:36:c1:27:1a:fa:5e:83:2b:34:47:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=7896be94bfaf068f70cce6881b21d69d561a03e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:6a:71:19:58:45:5f:c0:1c:eb:d2:c6:18:
a0:82:72:0a:e7:9c:d3:8b:e4:43:ae:64:28:9f:88:
8f:72:38:d6:9e:b1:80:3f:27:8d:e9:2e:20:f6:7e:
cc:46:32:7f:c2:b1:65:77:b9:de:18:29:99:a0:17:
74:85:9e:be:1f:ac:95:02:93:db:6f:8b:08:b9:06:
71:f9:47:d9:12:c4:e3:8e:89:3d:a5:db:13:2b:c9:
9f:4a:81:d5:05:a9:ab:3f:f3:22:c1:c3:83:a8:82:
6c:a7:3d:af:55:9e:d2:1c:2a:01:1f:cd:69:95:e8:
ae:b4:75:26:e6:d0:0b:2a:fd:92:38:7a:ee:45:dd:
d9:d4:66:66:c8:29:59:91:17:30:99:d6:74:04:06:
14:ca:0f:77:c9:70:cf:95:37:f1:33:26:01:8f:8c:
0a:91:b7:68:f5:04:bd:79:18:a4:39:a8:e4:30:b7:
8b:48:d4:25:0d:d3:c6:8b:49:74:ae:57:a1:db:25:
8d:c7:fb:9a:15:2a:cd:45:74:10:05:ed:b3:ca:ea:
c3:f6:dd:3f:70:c8:36:6e:87:68:f5:14:35:c5:00:
bc:e4:7d:e8:67:5b:ad:73:77:41:67:04:ba:b6:ed:
61:62:bd:c9:40:dd:8f:94:ea:67:a3:8f:f9:70:8e:
8b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:96:BE:94:BF:AF:06:8F:70:CC:E6:88:1B:21:D6:9D:56:1A:03:E4
X509v3 Authority Key Identifier:
keyid:F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a5:42:c8:34:c7:57:01:8e:63:7f:5e:2a:ea:7b:fc:67:a2:
1c:8e:42:99:fc:88:29:73:c9:96:e6:8a:5c:0b:13:51:d3:93:
2c:fa:ec:1c:63:43:e1:2c:4d:95:b8:2a:49:16:63:55:85:cd:
e7:cd:36:e5:12:7e:25:6c:c5:8a:99:56:63:4e:da:3b:e4:fd:
bb:20:51:83:dc:e9:da:73:77:ed:e7:c8:41:31:96:2b:72:84:
94:ed:a4:33:61:f7:e5:47:5c:47:0f:93:46:a0:77:e6:63:62:
6f:c2:9d:8d:5b:14:6e:c0:d2:d2:7c:cf:8b:88:a0:f0:d4:9c:
86:a5:30:63:2a:de:7f:9b:81:b5:2f:13:85:1d:76:dd:68:b8:
63:3b:ea:50:c7:78:c5:63:2f:da:89:22:1b:5f:e1:99:3c:f4:
63:94:75:b2:45:4d:2a:38:28:21:95:66:55:cb:e9:ec:62:63:
d1:bf:07:60:97:b1:b7:0c:ee:7f:cf:81:ef:4f:66:0a:88:0a:
dd:d4:b9:c7:da:d3:2d:b8:a6:73:c0:32:4b:26:11:89:3f:7d:
7d:85:dc:37:6e:f5:e9:a2:2f:2b:cb:e1:22:74:e8:fc:2d:08:
75:83:ed:3e:c3:ec:4b:a8:a9:5d:85:80:d9:04:8f:a5:b4:03:
a4:cc:e8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:22 2025 by rpki-client