Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft
File: V9mi-itxfqefxbJ5LV9VvW7qKQY.mft (raw, json)
Hash identifier: v3rimCpVxhe/rYQcPcrhTY3+4GWc1sfFvwu4aG/uncU=
Subject key identifier: 14:5A:F4:E6:D3:31:5B:CE:20:5D:52:44:A3:B1:14:75:9F:0E:C1:1F
Authority key identifier: 57:D9:A2:FA:2B:71:7E:A7:9F:C5:B2:79:2D:5F:55:BD:6E:EA:29:06
Certificate issuer: /CN=57d9a2fa2b717ea79fc5b2792d5f55bd6eea2906
Certificate serial: 0194BD4E8735323265ECBCEAB6C5892AEEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9mi-itxfqefxbJ5LV9VvW7qKQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft
Manifest number: 02D1
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: V9mi-itxfqefxbJ5LV9VvW7qKQY.crl (hash: GLnNTLbzbmwniAGdgneBwvKr4leOUGtQ0MjjSLIeqW0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:87:35:32:32:65:ec:bc:ea:b6:c5:89:2a:ee:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d9a2fa2b717ea79fc5b2792d5f55bd6eea2906
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=145af4e6d3315bce205d5244a3b114759f0ec11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:81:38:01:6e:2c:7a:bc:99:3a:bd:95:01:30:
ad:bf:fd:52:9b:8b:9f:58:24:f6:a7:36:e5:7f:f5:
a8:83:bd:12:df:ba:b4:90:c1:c8:fd:1d:0d:39:25:
07:55:6a:3f:61:6c:58:df:4f:41:16:a3:71:39:9b:
73:8e:3a:55:35:3d:1b:62:54:95:d0:92:ee:6c:31:
75:98:2b:17:7e:fe:1e:77:61:62:85:f8:4d:0b:1d:
ea:17:67:c0:eb:91:18:43:67:01:5e:69:c2:d8:79:
c8:9b:3d:52:de:f0:ec:0e:32:3d:7b:6e:01:78:c9:
8f:83:b5:10:21:06:82:2f:50:4d:9e:65:7f:bd:53:
fb:6b:c3:75:a9:55:8f:26:f6:fe:98:2e:d3:f4:6d:
a5:07:ee:dc:74:09:db:17:2f:8a:2e:fe:41:e7:cc:
01:24:fb:bf:2b:43:a6:85:02:b2:23:6e:a2:78:24:
88:0c:9d:da:e7:50:83:eb:01:06:02:55:cc:9b:34:
e8:68:b4:1b:ba:41:75:fe:c2:9a:54:ae:a6:c3:a4:
16:61:b6:50:20:1d:16:18:f0:d3:72:f5:9f:e0:9e:
a3:3a:b6:3c:9e:78:87:08:0a:05:06:04:a1:c9:85:
17:ff:33:94:a8:d0:39:b0:79:14:3a:d2:0c:5a:6a:
28:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5A:F4:E6:D3:31:5B:CE:20:5D:52:44:A3:B1:14:75:9F:0E:C1:1F
X509v3 Authority Key Identifier:
keyid:57:D9:A2:FA:2B:71:7E:A7:9F:C5:B2:79:2D:5F:55:BD:6E:EA:29:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mi-itxfqefxbJ5LV9VvW7qKQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:94:c8:e5:20:b0:21:3e:9c:66:a9:7c:78:a8:59:f9:53:cd:
6c:27:3f:29:11:e7:cb:96:b4:4b:1d:30:72:e1:11:3c:5b:b8:
46:bf:c0:65:9b:de:b8:b3:30:75:d9:0f:34:d2:b4:08:f6:ce:
dd:92:d7:06:e4:53:c5:3b:20:d8:5d:6c:b3:b6:b1:cd:fd:f8:
90:59:6f:56:75:2a:14:cd:cd:ff:ed:2b:35:6c:6b:95:b1:c4:
af:bb:ff:0d:70:d5:3f:38:6f:b1:91:3f:32:fe:5d:9f:0d:45:
20:b3:11:c4:c0:e9:ab:cc:b2:4a:22:9d:3b:02:35:95:b4:88:
8b:a2:90:d9:40:03:6b:1a:da:9f:c6:a2:38:ff:75:b0:8a:bf:
7e:ff:54:74:34:1e:3f:82:b7:16:ba:53:10:cf:ae:7e:db:f6:
63:1b:b5:5c:13:01:c6:ad:36:3e:86:41:38:3e:6f:21:5e:0e:
7c:49:a4:ae:93:91:1e:ad:69:c1:55:02:86:fb:4a:10:76:3c:
d2:94:af:94:54:5a:9a:89:95:49:11:35:c8:ab:b6:08:ad:0f:
fe:43:6e:64:bd:46:af:97:47:90:68:cf:7d:d2:f8:c4:4d:1d:
6b:48:f3:a5:b1:a8:ce:e7:f8:42:38:da:6f:ee:7b:e1:4b:de:
30:2e:07:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:57 2025 by rpki-client