Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
File: rWbePns_OvDgZAZ70c52RUNYL18.mft (raw, json)
Hash identifier: xoOlSMmKopwqi9LOe0quJXWlYSR5tlEvv4bvMlZJDKA=
Subject key identifier: A4:0D:3A:11:54:8A:71:21:BA:88:68:03:E1:BC:13:34:FF:BD:B7:7C
Authority key identifier: AD:66:DE:3E:7B:3F:3A:F0:E0:64:06:7B:D1:CE:76:45:43:58:2F:5F
Certificate issuer: /CN=ad66de3e7b3f3af0e064067bd1ce764543582f5f
Certificate serial: 0194BBCEE4CDDC29FB63C28DB71F0000393B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
Manifest number: 10DB
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: rWbePns_OvDgZAZ70c52RUNYL18.crl (hash: H55BSQq+dZYxCZEnTtqplBkVD8IWW8m0P/4HQ3a9778=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e4:cd:dc:29:fb:63:c2:8d:b7:1f:00:00:39:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad66de3e7b3f3af0e064067bd1ce764543582f5f
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=a40d3a11548a7121ba886803e1bc1334ffbdb77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:5d:14:83:a1:88:64:4a:ac:e1:60:26:90:
97:a5:d7:ed:b7:89:fc:36:c0:3c:cc:10:27:aa:ad:
97:22:3e:08:f3:e3:7f:0e:b3:f1:fc:df:01:d3:0e:
b1:d6:24:8b:51:31:91:ce:b7:89:ec:c2:d7:85:21:
a4:0b:c9:18:60:27:90:ad:ba:7a:98:e4:6c:a1:2c:
a2:24:86:19:fb:9a:74:fa:f4:ea:c9:28:cc:cb:89:
19:27:4e:64:7d:fc:03:f6:f2:7b:9c:12:fb:80:5b:
90:68:6e:bc:b2:e1:44:86:c7:df:fc:fc:3d:bb:45:
09:ff:93:77:1b:90:ac:c1:8f:b3:87:7e:a1:eb:bc:
1f:e7:25:e1:12:ff:d4:25:00:f6:bb:52:08:7e:f1:
70:0e:17:06:7a:4a:52:3e:a9:3a:4b:56:d2:2c:1d:
48:7e:d8:46:6b:f4:e5:10:3e:8f:18:95:0d:84:df:
ff:d2:95:d4:cb:19:40:2a:60:cd:e6:28:e3:89:52:
47:c9:69:ec:d2:23:48:d9:6e:3f:1f:3c:7a:82:c6:
39:56:d9:2f:6a:5d:73:b2:52:20:74:74:fd:b4:49:
c1:dd:ff:5c:3e:e5:97:55:c7:1b:bb:03:49:f9:d1:
a1:52:4c:96:8c:18:dd:b1:90:39:f6:2b:28:ff:fd:
65:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0D:3A:11:54:8A:71:21:BA:88:68:03:E1:BC:13:34:FF:BD:B7:7C
X509v3 Authority Key Identifier:
keyid:AD:66:DE:3E:7B:3F:3A:F0:E0:64:06:7B:D1:CE:76:45:43:58:2F:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:bd:b1:aa:73:dd:0c:b9:8f:c2:5a:de:10:8d:f5:10:6e:13:
e0:49:f9:35:8d:ad:ba:16:9e:73:10:e3:1a:99:f9:c7:6c:e3:
54:e9:31:8b:af:cc:2b:20:a8:8f:fd:ed:0a:4e:20:1c:08:06:
62:a4:4c:d9:46:5d:a9:4f:44:6c:00:4e:ef:29:8a:77:52:4a:
4a:89:8f:24:5c:6d:08:18:96:60:e2:15:bd:bb:16:3e:de:45:
9d:66:fa:7d:cc:e4:49:49:92:6e:ff:6b:24:6f:7f:de:b0:a2:
ff:1e:37:c9:f4:47:79:c5:78:58:19:3b:e2:a0:83:bd:f5:81:
71:34:5b:a3:43:93:10:77:6a:d4:94:8a:f5:cb:4d:3f:4b:56:
9b:88:84:fe:33:f9:98:8a:2e:55:01:1c:f9:ab:84:fe:de:6f:
d0:a3:a0:ed:13:13:9d:b3:84:3d:40:8a:71:93:e8:0a:2b:66:
c7:3d:b6:df:d8:c9:e8:82:aa:f1:03:1a:d4:1b:6e:2b:d8:c9:
0b:72:64:f9:aa:46:cd:40:b9:d1:7c:e5:0b:7c:eb:70:7e:52:
ae:31:b5:f5:cc:97:bf:0b:c6:a1:5d:39:2e:08:c6:3f:2d:07:
7d:8c:4a:86:d5:67:01:17:74:f1:05:4c:c3:c2:41:d2:af:d2:
c0:ea:c9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:43 2025 by rpki-client