Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
File: IsOFEHH5YIjHtxGcteFGPLq5jFk.mft (raw, json)
Hash identifier: haFAT6d7BzM7TUXOoHW4rhpZn3J78VoIqBZvfVzeY5A=
Subject key identifier: B9:00:11:6B:3A:4A:F3:1A:4C:9B:5B:B1:B6:DB:10:08:E4:5C:C7:4D
Authority key identifier: 22:C3:85:10:71:F9:60:88:C7:B7:11:9C:B5:E1:46:3C:BA:B9:8C:59
Certificate issuer: /CN=22c3851071f96088c7b7119cb5e1463cbab98c59
Certificate serial: 0194BBCE02C5B78B280735733DF54A185991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
Manifest number: 0E77
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: IsOFEHH5YIjHtxGcteFGPLq5jFk.crl (hash: HILpLSbnTvk0XOjjvFT+fOlOsCQd+3yQ/r8wYOS8YBk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:02:c5:b7:8b:28:07:35:73:3d:f5:4a:18:59:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c3851071f96088c7b7119cb5e1463cbab98c59
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=b900116b3a4af31a4c9b5bb1b6db1008e45cc74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:73:a0:c0:64:c2:1e:f2:da:38:49:84:99:
1b:ca:c9:b1:ad:90:ed:6e:80:52:56:01:d7:15:39:
1a:4a:3f:b0:4e:ef:64:83:f3:f8:94:6a:99:6d:ad:
ef:7b:53:c3:07:86:42:9c:0a:0d:b4:af:50:b8:5c:
fa:b0:c5:97:e8:19:b7:98:9e:a7:41:a3:49:e7:48:
f9:68:23:80:b5:b0:76:f4:42:3e:63:b6:12:63:79:
20:51:5a:ea:bd:ab:7b:cc:59:9c:0e:ea:6d:f9:7a:
40:28:12:99:47:eb:ea:13:40:8c:ab:c7:4b:2e:e9:
26:a9:72:64:8e:d4:3b:72:21:58:b5:1a:91:6b:65:
e6:61:5b:90:8a:a0:cf:62:20:4e:27:bf:6b:b2:8b:
db:9b:d9:81:54:39:5b:f8:74:6d:18:b3:bb:d9:9a:
8e:10:8c:9a:75:3f:82:b4:20:bf:94:15:22:8a:88:
af:4c:01:50:d1:be:67:78:f0:63:50:fe:3b:c0:49:
65:2f:fe:9a:7f:7b:31:5c:79:4f:7a:0d:0e:c9:b8:
11:6d:aa:f2:6a:71:fe:5f:ae:65:24:b8:30:7d:e4:
75:cd:3a:b8:b3:25:f9:3b:a2:ce:bd:bc:d1:d6:43:
59:3a:9b:48:99:c7:a4:63:bc:82:0a:30:e8:57:1a:
d5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:00:11:6B:3A:4A:F3:1A:4C:9B:5B:B1:B6:DB:10:08:E4:5C:C7:4D
X509v3 Authority Key Identifier:
keyid:22:C3:85:10:71:F9:60:88:C7:B7:11:9C:B5:E1:46:3C:BA:B9:8C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:79:5f:99:13:bf:ca:90:8e:00:e5:1d:46:ef:87:98:36:eb:
e4:3f:ce:ae:34:42:c9:c9:52:84:62:da:f9:24:b6:a7:43:34:
cd:92:cb:33:cc:7b:1b:ef:22:13:90:9f:b4:9d:38:d5:5e:69:
b7:d6:15:4f:25:19:68:3c:3f:8c:1f:8f:5c:b9:2f:5f:70:27:
7c:b7:bb:60:10:30:c8:d8:23:7d:99:61:97:69:f4:6e:a5:6a:
95:c3:25:f0:50:40:c3:61:72:e9:35:02:c9:e1:ce:a1:5b:b7:
ff:3f:15:c3:2c:b0:b7:af:6f:6b:00:f9:ce:56:b2:ed:a7:cc:
75:c7:87:83:45:8a:ec:c6:70:29:0c:17:42:9b:2b:fa:e0:a1:
78:ea:bc:9d:4a:6a:d6:18:aa:8b:e0:ff:4e:f1:b4:21:e9:3a:
1b:77:49:00:2f:bb:4b:c0:77:89:21:2a:aa:55:4b:19:a2:a4:
0e:e7:76:9f:04:73:8a:da:82:06:f6:d1:e7:3a:57:24:81:95:
fd:c8:9c:b9:bc:4d:c4:0a:40:cb:7a:c0:5d:5a:f6:7a:2a:b2:
a7:d3:39:e0:31:fa:70:38:f1:c9:45:b3:3f:eb:bf:c5:5d:e6:
08:31:d7:ff:7e:3f:53:87:15:95:fd:fb:ea:c8:54:0c:11:28:
dc:04:63:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:37 2025 by rpki-client