Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: G41nW4ORNxPJwav4ocEcRc9cSyZ/7WP6GVu22aftqYk=
Subject key identifier: 91:D8:56:22:64:A4:61:7F:FD:75:44:05:FE:88:E1:B4:CA:7E:2C:F6
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 0194BD4E56712F71E88F0D39E61386BCE5D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 0D91
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: g7c9GuJWJfaj8lRgrhAFte+knceywKUTFPToU4swAPU=)
2: ZPNM7KgQKfcGyvV7_2daewtnAlI.roa (hash: gCwHJt9KCFIRPasHifDhV1IvkNRzDs0fMniT9GCnavA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:56:71:2f:71:e8:8f:0d:39:e6:13:86:bc:e5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=91d8562264a4617ffd754405fe88e1b4ca7e2cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8c:52:23:05:74:b1:fe:4b:4d:14:0c:3c:04:
72:2f:62:a5:b9:d8:5b:ba:68:9d:9a:6d:4a:ec:19:
27:21:0c:78:4e:1b:fa:8e:b5:93:b5:97:55:da:45:
19:e0:2a:03:87:ad:20:76:50:fe:8b:7f:b2:b5:3f:
97:09:06:99:58:7b:45:1d:b8:bc:25:55:6e:ae:6b:
93:5c:f1:98:34:32:56:c4:4d:7c:e7:ed:0d:5c:72:
a0:a9:f4:85:63:75:9b:94:55:58:fa:17:19:6f:f3:
0b:d9:64:2d:46:12:28:35:cf:1c:f0:99:6c:37:7f:
64:43:87:0b:e6:44:92:54:2c:aa:aa:92:81:21:6e:
57:bb:e0:f8:e1:3a:00:65:4a:dc:82:2b:c6:bf:ed:
82:2e:3d:0f:51:05:72:03:8b:71:a2:c3:ae:77:d3:
f1:e4:a5:8c:be:0a:8e:d1:4c:0e:df:a9:3c:45:d7:
a2:17:43:54:9b:6d:e6:59:3f:04:be:3d:b8:72:94:
ad:de:44:a0:39:78:98:ab:e7:76:cb:a0:e4:10:c8:
60:1e:e2:79:45:6c:58:e2:33:c0:78:91:64:15:fc:
e8:27:de:8d:80:2c:97:dc:65:23:3b:52:5d:e9:51:
c2:4d:11:3e:f3:fa:2d:4d:03:34:e5:89:56:a1:e5:
56:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D8:56:22:64:A4:61:7F:FD:75:44:05:FE:88:E1:B4:CA:7E:2C:F6
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b8:a9:7d:e3:02:24:84:1c:16:a6:7c:36:0b:04:0d:b8:30:
51:a8:4b:6f:0d:e1:f6:24:24:25:8d:69:d8:6d:be:ee:9b:3c:
07:18:e3:56:d3:12:65:9d:c3:11:3d:32:dd:5c:c0:ae:e2:50:
f6:0a:0c:53:2b:ad:3a:9b:82:e0:db:43:61:07:4d:5c:e8:83:
0d:0f:76:df:d2:f2:e6:17:fa:94:04:36:0f:9c:52:b0:6f:6e:
f1:17:2c:80:45:72:12:92:df:a2:37:e7:ba:81:62:19:1e:88:
b8:fe:5f:10:96:bb:07:63:b9:44:4f:e9:d7:80:a1:73:8e:cb:
9d:e3:86:c3:20:7e:46:ab:67:2c:09:f7:8d:30:e1:92:0d:b3:
2e:1c:d2:40:67:fe:eb:b8:a5:0b:e0:4c:bc:78:cd:55:25:35:
dd:02:16:76:9a:73:b0:0d:cb:96:b1:01:25:bd:9d:33:1b:6f:
3f:23:2d:89:9f:79:87:a2:85:55:6c:db:86:cc:2f:13:a9:47:
a3:41:26:86:80:28:8f:16:09:7d:86:10:99:e4:e6:de:2c:b9:
ef:96:04:4f:82:a5:eb:a2:20:cb:7a:32:05:30:cd:4f:53:8a:
77:19:25:dd:47:61:41:30:44:7e:37:e6:97:7b:b9:c5:90:28:
73:5d:57:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:40:03 2025 by rpki-client