Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
File: Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft (raw, json)
Hash identifier: ZEYGhVjXCqTKcCpHeoJlOQhl6mNPYyBHEnaDdRLObIc=
Subject key identifier: 58:8F:90:BE:B0:7E:5B:3B:E1:18:EF:1C:BB:D8:97:AA:8D:A6:5D:0B
Authority key identifier: 46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
Certificate issuer: /CN=468f8ae4a267c812f242bf02c064eb9287c35155
Certificate serial: 0194BC3C1077CD5FACABBB987F13FD3A4C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
Manifest number: 0B21
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl (hash: ANM2Y7ah3MyhHvrLxB4v8c8UYPpXeMUuZyf9SyvCX/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:10:77:cd:5f:ac:ab:bb:98:7f:13:fd:3a:4c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468f8ae4a267c812f242bf02c064eb9287c35155
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=588f90beb07e5b3be118ef1cbbd897aa8da65d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:19:55:4c:6e:8d:25:f7:45:58:7d:96:ba:
e5:fb:e3:ea:9a:c8:a4:1b:69:c5:46:84:cc:81:9f:
ba:19:6a:de:94:1d:54:42:d6:eb:96:db:ad:6a:fa:
2b:21:d5:ae:2a:0d:38:20:e1:61:1d:8e:55:ef:87:
4d:2a:c2:5b:80:d7:fe:25:0c:6e:ab:23:50:89:e2:
fa:d1:17:8a:e9:c8:35:70:6d:fa:a6:66:34:73:ea:
71:6d:a5:ad:13:ab:63:85:1b:84:69:82:6f:99:17:
9e:ca:ba:19:47:2b:9c:cb:6a:a3:d1:c8:b2:67:65:
ff:ab:5b:12:ed:91:11:3a:91:d6:d0:c8:a7:e2:5e:
be:5c:71:cb:ee:9b:32:a5:97:e8:9e:ef:da:6e:64:
f0:db:fb:e8:27:ca:b0:3f:f3:25:12:ce:83:03:af:
a0:52:85:3b:fd:e3:3f:80:de:58:b3:9c:0e:cf:13:
82:01:2a:ae:dc:ec:00:73:92:2f:34:1a:82:43:13:
75:91:bf:2f:b0:c2:c5:3a:de:33:e1:e7:8f:1b:89:
9f:59:3d:03:c2:21:7f:86:77:d3:71:b8:6e:8c:ae:
f4:a1:84:c8:dc:27:c0:bf:d6:61:a3:b9:9b:cb:7b:
54:5e:1c:d5:5e:1d:3d:21:fc:c1:78:a5:c1:e1:03:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8F:90:BE:B0:7E:5B:3B:E1:18:EF:1C:BB:D8:97:AA:8D:A6:5D:0B
X509v3 Authority Key Identifier:
keyid:46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a1:bd:70:00:d9:c6:89:fd:e7:d5:7e:0d:27:26:a6:6d:5c:
72:a5:98:1e:04:20:9f:4f:ab:4d:30:c8:01:c5:48:12:86:a4:
d8:d0:33:aa:d3:00:02:52:e2:dc:a7:c7:a8:7d:b5:dc:22:24:
48:a2:73:2b:f2:83:65:31:79:c8:ea:f7:f8:cc:f9:30:d4:09:
00:a5:41:c2:83:85:65:cd:a2:d8:ad:8c:87:e5:3f:1e:b1:dd:
28:de:fb:a6:86:a5:70:cb:c0:3b:bc:4c:79:e0:2d:45:7a:24:
10:ae:52:4a:fd:ee:0b:bb:83:39:ed:8f:24:8d:f0:ce:c8:92:
b7:97:cf:8e:f2:91:3a:34:6d:9a:ea:61:89:db:61:91:7d:6f:
06:55:90:49:b5:be:a1:1a:61:8d:de:ea:9e:99:2c:b6:3f:90:
a4:59:fa:ac:0f:9e:9f:67:82:8a:5c:0f:53:7e:1a:14:5d:e9:
f2:bd:8d:3c:4f:ee:df:65:f9:00:63:68:0c:c3:ed:9b:c1:9c:
af:ff:af:52:ab:af:69:77:d1:34:ff:b6:11:df:c5:13:18:f5:
d4:1f:b0:1b:91:5a:44:6e:74:cb:95:55:30:0e:6b:16:f0:8e:
b6:72:19:03:cb:ea:25:3b:5a:c2:1a:be:e3:9f:e3:02:41:00:
98:4c:1e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:50 2025 by rpki-client