Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File: 9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier: mwZtV5l6JQhK6yeB8zC/Tjdy7BJ5+hf/zxYnarysCog=
Subject key identifier: F4:62:72:60:C0:44:37:24:CF:12:DC:78:E6:A5:E4:C7:19:2F:A8:C6
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer: /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial: 0194BCA999564D77FEAB05FDE17FE3AEEE67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number: 090D
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: s/j855jhjIEd0gHEMXMxrlMLWKLTjoevlAPiCX3xjOk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:99:56:4d:77:fe:ab:05:fd:e1:7f:e3:ae:ee:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=f4627260c0443724cf12dc78e6a5e4c7192fa8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:f5:d9:44:b6:fe:a8:c5:45:16:72:52:9e:
35:28:61:b5:82:6b:4f:b2:e3:a3:3b:5b:32:97:94:
91:33:cc:25:40:68:aa:83:b6:68:f7:67:1b:20:e4:
63:af:71:18:6c:6a:c7:a7:0b:8c:3f:f8:28:86:5d:
38:c9:73:56:47:89:83:7c:74:49:6f:17:d2:95:cb:
18:72:7b:a2:60:f9:97:d6:cd:22:86:a7:5e:44:cc:
7f:53:17:33:5f:2e:23:88:d6:ed:cc:83:f1:50:6a:
9c:ec:be:a2:ef:cd:07:fb:91:17:97:aa:1f:36:90:
42:f7:77:79:56:33:21:fa:ef:ea:f8:5d:cb:7d:a6:
f1:5c:4c:0c:b6:1f:61:14:f9:bd:d1:41:54:59:5b:
ad:7a:82:57:94:84:8c:9f:68:58:65:75:c1:8e:2a:
d8:df:64:c4:40:82:b5:33:58:60:ad:a3:d7:84:47:
f3:06:7f:4d:fe:8e:de:05:53:f0:a3:30:85:78:8f:
aa:0e:75:dd:56:a3:51:38:08:09:5c:e9:ea:d4:fd:
55:bf:82:53:97:3f:a6:5b:a8:56:64:7a:d3:d4:20:
56:1d:03:44:d8:dd:bb:96:24:d8:ae:e4:a2:fa:a8:
9d:93:71:19:a3:f2:19:9c:72:e0:a5:71:41:3e:dc:
41:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:62:72:60:C0:44:37:24:CF:12:DC:78:E6:A5:E4:C7:19:2F:A8:C6
X509v3 Authority Key Identifier:
keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b2:95:cc:c5:20:78:9b:6c:e3:75:1d:22:a5:5e:4f:c7:25:
97:a6:90:af:e4:ea:b4:ae:ab:01:2e:56:24:01:f7:46:61:6a:
d9:06:9d:43:46:f1:50:0b:f3:2a:5c:06:22:39:7d:7d:a1:3f:
5c:e0:d2:ad:88:34:13:3c:b7:f7:d2:92:b2:99:b5:37:c2:35:
60:61:a8:f6:f7:95:e3:68:d4:7b:cb:d8:18:ea:ad:bc:fe:9b:
94:a0:6f:f1:b7:13:40:4c:2d:e4:e6:f3:e1:c6:b8:0c:5b:00:
c5:90:c2:85:13:82:d3:e6:f1:8d:02:be:13:b8:ae:9a:e3:59:
7a:ec:c2:8a:00:c9:be:52:6d:72:a1:4d:13:ab:76:bc:6a:82:
7c:2d:95:02:c2:ff:5a:91:7b:c9:9a:2e:1f:18:e3:c1:3a:c1:
2e:eb:6f:b4:39:54:45:d7:8b:24:9b:60:ed:8d:10:a6:a2:ac:
58:94:cf:8d:ee:5f:f6:28:29:00:63:d8:94:3e:6e:29:80:4f:
b4:78:a8:e6:ee:5e:c5:07:cb:0d:3c:ec:54:fa:3a:7f:28:82:
82:27:4e:29:64:d4:23:51:0a:73:eb:22:ce:b9:48:f8:5b:e7:
04:61:87:cc:c9:d2:70:b3:97:dc:5c:19:09:28:85:44:a8:2d:
44:dd:4f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:42 2025 by rpki-client