Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.mft
File: _drec0yM3oXb9k0PdWr955y8gCM.mft (raw, json)
Hash identifier: IsZj6jR7shbNNR+FQeADmGH6eF70y71ZWeYmkv7zZ3c=
Subject key identifier: B7:C8:6F:60:DA:0B:59:BB:D7:A9:6F:53:6B:F7:B9:4A:34:BA:B7:D3
Authority key identifier: FD:DA:DE:73:4C:8C:DE:85:DB:F6:4D:0F:75:6A:FD:E7:9C:BC:80:23
Certificate issuer: /CN=fddade734c8cde85dbf64d0f756afde79cbc8023
Certificate serial: 0194BBCDFD17D87238726DCD688FE22429FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_drec0yM3oXb9k0PdWr955y8gCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.mft
Manifest number: 0AF9
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: _drec0yM3oXb9k0PdWr955y8gCM.crl (hash: Oj/iEolMXGa+PZys+91ZH/g/DRh8nOR6J4jqaPtjIWs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fd:17:d8:72:38:72:6d:cd:68:8f:e2:24:29:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fddade734c8cde85dbf64d0f756afde79cbc8023
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=b7c86f60da0b59bbd7a96f536bf7b94a34bab7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:cf:9c:d9:a6:cc:72:f2:14:a7:b2:9a:f6:
05:15:02:9b:fd:c2:8a:61:6f:7b:c3:56:6b:85:9a:
a6:e5:a6:63:0b:b1:bb:23:56:a5:fd:18:27:01:4c:
5f:f1:5c:cb:75:aa:23:de:dd:b6:5e:28:e0:72:ae:
23:e4:f9:87:e8:91:41:18:c7:82:3e:b9:c9:0a:fb:
d3:c0:10:f3:41:38:ac:47:8e:d0:33:05:87:b6:6e:
2f:c7:1f:72:e4:82:aa:45:72:19:ab:9f:b6:27:99:
2d:42:c4:e1:85:f1:a7:bd:4c:5d:fc:04:b9:84:11:
70:8a:2c:62:3d:19:a5:ac:ad:fc:86:17:2d:1b:a1:
63:af:77:ae:3c:00:53:c3:1a:cb:f0:47:09:68:5f:
23:36:7e:3a:32:c4:e4:d2:3b:aa:95:63:8b:84:e4:
09:ca:f2:c6:ed:97:47:3b:90:26:06:c2:dd:cf:8b:
c1:dc:07:2e:a8:16:4b:2b:b7:ba:dd:d4:04:3c:97:
ee:e7:22:4c:c1:9a:98:89:61:18:a7:22:75:30:23:
9d:f9:bd:7f:09:78:db:7e:df:88:92:00:01:7f:64:
ce:13:d8:36:57:de:3c:cb:11:9f:0b:ee:c3:9a:8b:
d3:c8:5f:5c:47:05:49:cf:8a:c6:a1:a4:2f:94:ad:
c4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C8:6F:60:DA:0B:59:BB:D7:A9:6F:53:6B:F7:B9:4A:34:BA:B7:D3
X509v3 Authority Key Identifier:
keyid:FD:DA:DE:73:4C:8C:DE:85:DB:F6:4D:0F:75:6A:FD:E7:9C:BC:80:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_drec0yM3oXb9k0PdWr955y8gCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:68:43:dc:d6:bf:6d:55:78:6e:43:1d:ce:b1:10:53:7b:a2:
87:c5:32:35:49:cb:39:a2:d7:d2:d5:2a:98:96:bb:ec:e8:8a:
5a:34:86:8d:89:82:ae:18:6d:bd:13:d6:5f:d9:93:88:86:47:
97:d7:10:e0:2a:4e:ee:8f:f8:bf:93:fd:f0:34:2f:6e:ab:e5:
96:7c:ef:f7:ca:77:44:66:dd:77:03:6e:60:ca:34:70:3a:d4:
e0:77:72:23:6f:87:70:1d:12:8a:1a:cd:e3:b8:99:1e:66:51:
c6:27:e9:c2:01:fa:05:b3:58:c1:d1:91:06:58:4e:e7:31:c5:
0f:13:68:d2:a3:42:42:96:c9:25:07:1d:aa:dd:2d:14:c7:ce:
1b:cd:da:a4:dd:6b:0c:c0:73:b5:c4:3a:cd:7f:a1:af:60:f9:
54:fc:39:15:c9:9d:47:3b:98:72:e5:6b:9e:9d:43:1d:a5:fe:
e6:10:ab:db:e8:07:fc:b2:d9:b3:23:57:bf:5e:c0:c3:37:88:
ba:96:45:60:b1:c4:fa:e6:25:5f:fb:f9:22:47:18:40:5b:77:
c6:ca:28:e3:4e:2a:82:96:83:ee:30:b0:59:b3:65:0f:eb:05:
d7:b9:76:95:64:b4:e0:ae:6d:5f:68:68:a9:0c:8a:4d:88:b5:
b9:87:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:58:04 2025 by rpki-client