Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
File: k6Ip4mayVYiZ81R-5j2E7WWUdos.mft (raw, json)
Hash identifier: 18H7C9SlRpNkdHhCbYwaHJUIcw9ZD6Vvj2BI3SkoLE8=
Subject key identifier: 40:D1:37:1F:E5:45:DA:80:2C:0C:66:44:BA:A3:3A:C4:39:A8:BF:F7
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Certificate issuer: /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial: 0194BCA97D2B47915C1B0BA60AB71180BFB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
Manifest number: 143C
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: k6Ip4mayVYiZ81R-5j2E7WWUdos.crl (hash: qrRJAHoCkl9byDF9BfpATXT61aRFx+le9eRZ5/Zff74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7d:2b:47:91:5c:1b:0b:a6:0a:b7:11:80:bf:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=40d1371fe545da802c0c6644baa33ac439a8bff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9d:7e:cc:47:79:3c:16:3a:39:27:fe:ee:70:
7b:20:3d:2e:b2:8a:ae:f3:e7:25:fe:54:c2:61:a1:
5f:1f:69:47:be:de:48:22:74:ea:a6:2e:01:8c:ae:
ff:36:44:f1:fa:d5:8f:89:5f:15:40:24:98:b3:23:
06:7a:79:20:1f:a8:c0:74:22:bc:20:e0:f7:4a:ac:
37:db:1a:a6:85:df:2a:4b:75:3d:35:25:e7:38:fb:
d8:2e:72:6e:f2:aa:03:02:cd:09:cb:6e:db:b5:d0:
e8:75:34:1a:19:b6:50:7d:58:5a:b3:2b:5e:58:be:
5f:59:4e:7f:42:5d:4a:17:da:59:fd:c5:d3:d8:31:
9c:c5:9c:57:7d:50:0d:07:8f:be:a5:7d:4a:17:5b:
a8:71:3f:17:f4:38:f4:54:aa:e0:c3:b2:6a:d4:29:
3b:3a:4c:d2:94:4b:3d:57:82:1d:12:ef:be:d8:ed:
41:02:c2:65:1b:06:20:92:bd:ff:61:70:e2:73:01:
8c:6b:2a:10:f2:4a:95:71:1f:fa:7a:09:09:1f:45:
60:c3:36:2c:33:9e:9e:26:9f:d3:76:52:f9:1e:2b:
4f:44:f6:fa:ed:b7:6a:11:28:5d:60:b8:7d:a4:f2:
6a:5a:5a:a4:03:59:68:27:78:f2:17:46:68:43:f1:
b3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D1:37:1F:E5:45:DA:80:2C:0C:66:44:BA:A3:3A:C4:39:A8:BF:F7
X509v3 Authority Key Identifier:
keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:08:5c:96:33:ca:21:96:92:5c:23:4b:19:f5:3f:52:49:11:
52:a3:b6:79:1a:17:ba:18:bc:99:f5:6e:90:97:4e:a6:15:8b:
08:70:aa:6b:a2:c1:88:41:ff:36:c1:68:a4:52:ab:f5:cd:e0:
01:aa:cf:7f:2a:c2:6a:1b:07:5e:d7:d8:69:fc:5b:6b:c0:6d:
36:43:05:20:39:ec:53:eb:71:a6:5a:99:7a:0b:ba:83:c1:44:
04:6c:07:a6:ef:c8:6d:a3:26:49:a7:10:27:b1:1e:2f:ca:3a:
c6:d6:c4:80:ee:49:0c:b4:0a:63:50:ce:74:44:b3:8f:40:e7:
0c:31:00:84:5a:35:1b:0f:08:d5:6f:d4:4d:85:d7:6e:00:43:
d5:33:89:6d:be:d8:4c:9a:c5:9a:00:71:6c:fe:ec:d7:f7:02:
5a:95:fc:99:c1:d3:d0:95:f8:16:43:0a:c2:2a:ee:0f:cf:2a:
73:5f:23:b4:ef:ae:97:8a:ce:2b:5a:a7:7b:e4:15:cd:89:04:
7d:a4:46:ac:ae:54:8e:2f:d6:4c:3a:37:78:90:89:9f:6a:aa:
dc:40:7e:63:0e:2d:fb:58:0c:bb:ec:15:5f:80:1b:a9:9b:4f:
51:64:af:56:29:65:f9:24:90:23:15:db:4c:b0:84:c6:be:02:
75:a1:ea:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:36 2025 by rpki-client