Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier: FALUyHda8rCbUOLreUivd4vGA+9zKUq7q+s5k4j9zuU=
Subject key identifier: 45:3E:3A:A9:C4:28:3E:F1:63:09:BA:40:E1:12:74:F3:03:78:EF:CE
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial: 0194BBCEEFB6457878A7957C7304A6107010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number: 0786
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: /PA86RRgkZlVi2JSjaGX0rMkW6aB91u2j2S218gxExg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ef:b6:45:78:78:a7:95:7c:73:04:a6:10:70:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=453e3aa9c4283ef16309ba40e11274f30378efce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:09:01:d1:e6:8f:7c:cb:2c:37:4f:fc:0d:
f3:7f:d0:76:85:e8:59:e6:0c:65:53:91:9a:5a:1a:
dd:94:e3:b7:c7:56:0c:fe:25:83:06:61:ff:d8:a2:
18:15:08:27:12:bc:72:c2:32:ef:43:0d:c0:de:b0:
05:ae:b8:96:cc:26:0b:d8:fd:0a:37:f6:2e:31:09:
c5:61:75:ed:de:88:4d:30:46:da:d2:65:90:93:fe:
e6:86:35:4b:03:04:08:7b:53:b1:8b:e4:e7:93:bb:
23:9d:83:7d:c7:d1:e9:73:13:9f:32:8c:2e:eb:b2:
7a:8a:4e:de:db:75:7e:0e:ea:43:0c:0e:08:8c:3f:
1d:b6:46:3c:d2:9a:7f:e0:6a:cd:a3:0c:eb:73:07:
04:c8:ba:d7:0d:7b:92:b7:83:f7:0f:0d:e4:28:2c:
43:4d:5e:47:de:6b:2c:4b:6f:31:25:e3:26:a2:ed:
53:c9:12:0b:71:b2:61:93:7a:41:75:aa:6a:18:6b:
d1:3f:e3:fc:7e:e5:fc:fa:44:05:fe:b4:d4:ec:13:
96:ed:6e:b3:5f:7f:b3:bd:d2:2b:43:94:70:48:cd:
04:28:c7:46:a8:1f:8c:21:07:2e:48:8d:ef:c6:98:
d0:2d:b8:32:5b:20:ee:61:ff:81:24:52:ff:19:28:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3E:3A:A9:C4:28:3E:F1:63:09:BA:40:E1:12:74:F3:03:78:EF:CE
X509v3 Authority Key Identifier:
keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:24:5b:97:eb:5b:60:64:37:fd:22:d0:30:c3:6b:7e:9c:3c:
19:bc:30:9d:a2:13:f4:79:d3:f0:cf:2d:ff:02:9c:d6:82:75:
8f:10:34:bf:b3:33:e6:1a:c6:7b:66:91:85:ea:be:8c:04:75:
67:73:bb:d9:8f:bf:7d:ca:7f:e1:81:de:ae:86:8d:d9:0e:f5:
24:18:7e:89:d2:6e:d7:29:11:f3:03:15:df:00:8d:fa:6e:6a:
1d:1c:64:9b:56:3a:d0:25:59:aa:68:e9:62:96:07:3a:d8:93:
23:09:ec:26:d2:7e:95:1b:94:ea:c7:67:13:64:bb:47:26:b0:
d8:e6:fb:3a:27:75:51:04:58:40:1b:c4:cd:35:f3:37:5f:7e:
a2:a1:f4:ca:f2:52:ff:d4:43:b9:78:cb:fe:40:ee:21:37:ae:
e8:15:46:bb:08:7c:7b:86:4c:49:38:d0:5c:a7:77:87:9a:ba:
de:32:1d:65:c8:64:49:01:42:84:5e:34:3d:7a:f4:5a:ee:29:
a8:17:5e:5a:b6:63:6e:fe:9c:db:ce:26:c1:27:a7:6a:d2:4b:
a8:9e:22:cb:53:af:dd:06:61:f9:d4:34:01:27:70:5c:4f:4d:
5f:c0:71:4a:57:c4:f2:ed:f0:bb:7e:cf:05:a1:46:a9:1d:16:
58:2c:a1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:04 2025 by rpki-client