Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
File: tRu6i9P6566CScnEYWi6kAI9sZQ.mft (raw, json)
Hash identifier: 7IPugsPtsNPaEBA+QRmrQdkEh70zwQ2Fy06LflRF2qw=
Subject key identifier: C2:75:70:E0:09:35:2E:B8:94:EF:5A:58:29:88:AA:EC:06:87:BC:29
Authority key identifier: B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
Certificate issuer: /CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Certificate serial: 0194BC3C00BE26DC0659097A9F5F2ED0321E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: tRu6i9P6566CScnEYWi6kAI9sZQ.crl (hash: AQVOrRy0JNzYH+etL6CBUDQqYkIpJw0zGeooWy/oRKE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:00:be:26:dc:06:59:09:7a:9f:5f:2e:d0:32:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=c27570e009352eb894ef5a582988aaec0687bc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:91:27:bc:d3:7a:57:a8:86:32:9a:4a:28:
3d:13:ce:39:1b:c7:04:64:15:de:c3:85:e5:a5:1e:
b9:aa:e9:ed:89:e6:0b:0d:53:73:d6:9d:18:6a:ec:
99:de:ee:c6:d4:4f:72:b7:76:dc:9d:e2:93:73:8b:
10:4e:85:c5:af:77:0b:94:8c:6a:df:96:fb:ea:61:
95:58:e0:4b:e5:8d:2f:a0:a4:54:fe:61:a5:92:fd:
46:b1:6e:bc:ce:80:27:47:d3:72:ec:b2:7d:f0:84:
09:d3:6a:0b:af:89:0e:7f:44:ad:6c:ed:0c:a9:c5:
3c:6c:79:46:a8:4d:27:ff:75:9b:5a:01:64:33:0e:
a3:9b:f1:56:5a:22:36:cd:ab:bd:6e:d0:b7:2d:78:
92:b6:df:81:3a:71:aa:06:49:94:ee:0b:c2:d5:77:
f5:34:bc:ce:de:ba:dc:d7:79:5c:b0:d6:60:96:82:
a2:0b:05:d9:ef:25:13:a6:1d:62:d8:73:45:bd:c1:
3b:bf:f7:68:fe:32:ea:17:0c:77:cc:51:d5:0c:d4:
9a:2d:8e:63:34:bf:f5:fb:df:31:89:ec:32:c9:f7:
be:51:f3:1c:de:bc:f7:8d:5e:d7:c1:0c:5b:56:84:
2e:0a:57:cd:88:a4:06:48:01:3e:5a:ed:c9:70:d3:
4b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:75:70:E0:09:35:2E:B8:94:EF:5A:58:29:88:AA:EC:06:87:BC:29
X509v3 Authority Key Identifier:
keyid:B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c2:fa:a7:72:4d:44:27:ff:09:b2:57:60:a8:7b:9f:25:53:
34:01:8a:cb:0d:9d:57:0d:ef:22:66:60:ee:b4:be:22:bb:de:
11:7b:f9:25:8e:43:ec:ec:59:89:5f:17:4a:19:ed:08:9a:82:
69:fb:de:55:d9:dd:4b:b2:6b:02:bb:a6:83:11:2d:d8:50:06:
e5:a9:fc:3d:bd:c2:03:8d:7d:24:93:80:b8:35:a2:48:7d:a5:
35:5d:38:2c:36:22:92:4c:89:a4:1c:39:95:81:ef:cd:b4:8b:
c6:42:a0:f3:b7:68:e3:4a:22:1c:2e:85:5f:0d:51:89:92:75:
ed:a8:24:8d:61:cc:8b:bd:ab:0a:1c:6a:d9:e5:88:ec:14:21:
83:fd:0a:6a:99:ab:19:23:ab:6e:a5:5f:51:d5:36:ad:42:3d:
01:0a:88:47:ca:9b:8c:5f:71:39:7e:ec:a5:6b:d3:70:e1:a3:
de:86:29:b3:bf:a7:36:3b:e0:df:49:ba:e8:81:00:70:14:ab:
6e:a8:9c:e0:aa:1d:e2:8d:63:84:b5:22:f0:f1:a2:54:98:b1:
da:63:7d:93:f1:07:cc:81:b8:24:04:e5:35:fa:ea:10:27:e0:
26:e3:7b:aa:b4:e0:4d:1f:d3:9e:45:3d:24:7e:6d:5e:7b:e4:
45:47:87:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:07 2025 by rpki-client