Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
File: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft (raw, json)
Hash identifier: l3/N4hcmVEtKOBX/ZaxSRPWKIrXAAEGRj6lglUFfYIQ=
Subject key identifier: FC:99:5A:31:E8:70:B7:16:89:93:D2:7E:1C:71:D9:DA:46:46:37:BD
Authority key identifier: D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
Certificate issuer: /CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Certificate serial: 0194BC3C4FFCD2AC884EFDD4306DB3893967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
Manifest number: 1161
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl (hash: EbuyeJEy+80Tzg15zZC/SSmH+dJb6qeDxKcfzOOzlYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4f:fc:d2:ac:88:4e:fd:d4:30:6d:b3:89:39:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=fc995a31e870b7168993d27e1c71d9da464637bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a5:28:ba:7c:82:10:7b:3e:a9:52:13:da:46:
84:84:57:be:16:4a:73:57:17:e1:39:12:d6:cd:ae:
f7:ad:68:fc:cf:a0:f8:75:86:74:58:9f:c1:75:a3:
7f:f6:4d:d0:f4:30:ef:0e:d8:1f:dc:f3:fe:50:21:
6f:6a:21:1a:18:d8:3d:00:1a:2c:ca:2a:94:20:b3:
66:c5:d5:83:92:c1:47:e5:51:70:f2:da:09:63:de:
0d:77:53:f8:fb:9f:57:91:0a:1d:f4:09:8f:80:14:
b4:54:17:ef:d6:e6:3e:be:28:36:54:44:c9:bf:fc:
01:56:17:dd:29:17:49:b8:c8:9e:f7:5a:bb:02:8d:
1a:48:77:88:65:55:09:aa:d5:f4:6d:d2:a5:4d:c7:
3f:90:0d:10:83:2d:d8:04:a0:da:10:5b:54:43:89:
dc:57:05:41:7c:70:11:9f:e7:70:a7:64:20:7e:19:
dc:c4:07:c4:8f:83:2e:30:52:6e:37:06:16:81:a0:
1c:7c:5a:b9:78:1a:8b:4a:31:b3:b7:7f:67:6c:18:
f9:9e:76:e8:11:15:5a:62:f5:1f:d5:a8:29:4f:2c:
ed:87:46:4f:7c:ba:71:bd:24:4a:28:2d:b5:a9:0a:
c4:43:09:3b:80:ae:9b:b3:bb:7f:9c:43:da:4f:1a:
02:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:99:5A:31:E8:70:B7:16:89:93:D2:7E:1C:71:D9:DA:46:46:37:BD
X509v3 Authority Key Identifier:
keyid:D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c4:9f:35:7c:78:29:22:ed:90:25:1f:25:5b:f4:d2:b7:6f:
c5:cb:e8:3a:70:36:d9:78:f3:e8:d5:7a:1a:6c:6c:7c:e4:06:
fc:d2:d1:c9:93:70:66:2c:f2:bb:4d:ba:f8:6e:a9:3c:d5:03:
94:6b:1a:8e:6c:e7:c9:b9:da:08:ca:e9:0a:01:ad:3a:0b:fb:
c7:65:04:7d:af:c8:24:9f:25:d9:9e:57:43:73:2d:f7:0d:b1:
9e:25:6e:10:4f:57:f4:3f:b7:9a:b1:8c:9f:1d:c4:a3:a2:17:
2a:d7:f8:63:a9:34:0f:ca:5a:1a:4d:59:c2:60:1f:f9:d7:81:
c2:8c:ae:3f:34:5f:67:15:8d:dd:a1:c9:5d:ec:52:ea:db:3d:
fb:2b:48:b6:aa:98:f6:15:ea:2d:cd:9c:5c:11:e1:ae:30:2a:
aa:02:6a:9f:72:4a:7d:d2:f4:48:ff:27:33:37:ee:7c:2c:53:
8d:d8:55:e0:48:53:c4:91:3c:67:c3:17:6d:e1:17:7a:94:12:
1a:ab:36:a7:b6:9e:99:9a:18:8e:d0:12:9c:b3:ff:24:00:3e:
bd:ee:4b:7d:54:c5:08:d2:52:bf:f3:2a:9f:c9:a9:6c:28:37:
35:36:19:d5:d5:82:f9:e3:30:8b:ee:c7:ac:25:3d:4f:6b:62:
d9:10:32:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:40 2025 by rpki-client