Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
File: 13j4yccHK3MEiPnjISjdiVveMtM.mft (raw, json)
Hash identifier: +nqm7vepuNOD+y4zzcXks2vS2TYtGoGuQ4XszaGI9us=
Subject key identifier: 49:88:98:3D:AA:40:DF:A1:FD:E9:DB:30:81:7B:37:86:7C:66:F6:08
Authority key identifier: D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
Certificate issuer: /CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Certificate serial: 0194BCE0CC91110984ED988417DCE2000087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
Manifest number: 0444
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: 13j4yccHK3MEiPnjISjdiVveMtM.crl (hash: e5ckIpgeSs4zhA/8lJfH2yIiuimJYk/wuZos+VE1hlk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cc:91:11:09:84:ed:98:84:17:dc:e2:00:00:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=4988983daa40dfa1fde9db30817b37867c66f608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:71:96:5f:62:08:e8:fd:1b:9a:00:19:48:
6a:19:26:76:fe:91:dd:a5:d3:29:4e:23:c5:41:47:
c8:27:89:03:e9:7c:d9:f4:00:dd:5b:5c:b4:c6:7d:
a7:2b:ca:82:31:70:9e:4e:bb:bc:d0:67:ca:2d:2a:
84:c3:be:ea:52:0b:8c:90:99:1e:23:ae:77:fa:a0:
07:34:c0:09:3d:ab:9e:23:6e:a4:9e:30:18:60:48:
7d:2b:a7:89:96:a6:8c:d0:3f:01:cc:66:2a:0e:13:
ab:d8:18:06:1f:e1:9c:2f:e5:f3:9f:b2:3d:76:9b:
d6:32:00:32:40:23:c6:5e:5d:94:e2:0c:65:8f:0f:
5d:4a:5d:33:08:50:b6:52:d1:04:77:96:30:d7:c5:
8f:b9:4f:dd:1f:b4:93:17:4c:03:87:c4:3c:37:f5:
37:00:99:87:ca:32:15:87:bf:74:a7:c5:f7:df:a3:
ab:90:7e:29:a5:94:17:15:e7:d1:56:41:bc:10:4f:
1f:f9:a8:94:4b:fc:ab:60:c1:f9:fd:6e:cc:75:2d:
0c:be:a4:b6:36:81:f6:0f:6e:2e:b6:7e:72:47:fe:
4f:23:9b:c3:fb:7e:b9:c3:ce:ef:01:2f:92:e0:cd:
77:bf:8a:06:b9:33:35:1d:df:77:02:f0:74:a5:a6:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:88:98:3D:AA:40:DF:A1:FD:E9:DB:30:81:7B:37:86:7C:66:F6:08
X509v3 Authority Key Identifier:
keyid:D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e0:df:b3:df:0e:bc:20:f0:3d:47:29:3f:5e:76:7e:1b:ed:
55:a3:a3:e2:4e:3b:77:88:97:d9:21:22:93:40:82:c5:eb:da:
a3:ce:5b:c2:1d:0c:42:4f:ee:81:d6:45:3c:d8:0d:39:6b:fa:
43:48:8b:a7:79:76:73:2f:3d:08:5c:27:5a:33:73:f6:2c:db:
c2:43:ad:28:45:31:81:33:3b:90:f2:29:44:bf:48:63:5c:76:
b6:26:f9:d8:51:c3:a8:b3:b7:3f:b9:ce:35:c9:bd:07:c6:48:
00:66:b5:63:53:f9:69:67:c0:0d:39:7f:f9:18:a7:51:f4:ff:
d6:0c:e7:94:d0:e3:d1:5e:24:b0:cd:57:92:b0:9c:7a:a6:79:
c1:b1:58:20:08:07:aa:8e:2a:c1:63:f7:ef:f4:c5:27:01:6f:
6a:33:d2:bc:11:3b:75:ef:bf:6f:79:82:02:50:50:85:8e:80:
12:66:7c:14:c1:50:18:59:1e:6f:51:dd:2c:0e:e1:76:61:41:
4a:33:02:9b:62:81:3d:36:ef:cb:09:0d:b1:fb:ec:88:e9:88:
5a:a2:ad:76:59:5b:b2:aa:a0:93:4b:34:53:27:42:88:5c:d3:
9d:b0:c5:03:23:79:a0:4d:1e:fc:f1:b7:f5:5d:95:0e:e4:54:
54:f9:2f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:02 2025 by rpki-client