Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
File: meKI93yZhWTyY056Lh0AnfLviH8.mft (raw, json)
Hash identifier: efdEkmu7pV8hO9MYhJCY5m8mLC9yZUEXTXAlm7rEWbc=
Subject key identifier: 3C:67:95:48:25:95:39:E5:9D:80:A2:1E:43:D0:53:2E:17:7D:D1:7C
Authority key identifier: 99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
Certificate issuer: /CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Certificate serial: 0194BBCF04497084723EB86A9BC3BA9C2746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
Manifest number: 0C6C
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: meKI93yZhWTyY056Lh0AnfLviH8.crl (hash: iE6ifb+oQIZV/nYs1FW8uqBn6u5a/kma3vNIw76byZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:04:49:70:84:72:3e:b8:6a:9b:c3:ba:9c:27:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=3c679548259539e59d80a21e43d0532e177dd17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:9a:98:1b:11:32:9e:37:77:02:12:77:63:
b4:1d:a6:ad:d1:5e:a9:ba:f8:da:d7:b2:f9:e7:fb:
1b:d6:91:09:06:bc:ae:01:bb:54:f0:85:88:f3:01:
35:19:a0:0a:f9:0b:32:e5:1c:80:3d:38:e4:7f:55:
06:41:d2:f9:02:ee:88:c6:ee:9e:af:4a:3c:52:92:
d4:b8:8f:14:49:f9:af:de:75:03:ac:a6:8b:db:f9:
9b:00:bc:f6:f1:2c:a7:68:96:ba:a5:89:c1:e9:71:
54:02:ff:4c:6d:d2:8d:5b:64:50:20:54:1d:2a:75:
62:64:83:c1:d6:4a:e0:a8:d4:05:73:72:8c:8d:8d:
c4:e0:c7:38:88:f3:94:a5:34:75:79:5b:80:c2:21:
84:51:7f:31:ed:88:80:f2:54:21:f5:a0:d9:51:fb:
2d:f4:71:37:83:0f:47:d0:87:64:45:e8:e3:60:4b:
72:70:ea:1a:e7:ef:aa:9b:6d:be:73:f8:7a:c1:15:
3e:2b:20:94:3d:27:77:3a:27:4f:be:40:da:1b:9d:
7a:05:2e:f7:f1:1e:87:cb:bd:cb:ee:93:9f:c8:d8:
87:f8:69:82:22:a2:0a:6f:1b:fc:c9:70:8e:96:43:
bc:b0:f8:0b:31:09:3e:31:a9:04:e3:89:09:05:61:
a0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:67:95:48:25:95:39:E5:9D:80:A2:1E:43:D0:53:2E:17:7D:D1:7C
X509v3 Authority Key Identifier:
keyid:99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e2:3c:6f:ee:75:2d:00:dc:12:47:4e:0c:e7:52:15:90:95:
6e:cc:2e:a6:33:6c:a8:c2:79:8f:32:c7:d1:8e:5a:31:dc:a0:
90:88:78:53:a1:c2:dd:1b:c8:ba:3a:ec:d2:1b:50:a2:fd:a7:
80:2f:d6:24:1d:97:be:69:a6:04:ab:7c:bc:37:6e:92:b2:2f:
02:8f:2d:d1:70:89:e5:63:3c:12:6e:43:81:97:be:23:74:20:
8a:41:66:d9:56:75:fa:f0:4a:8c:54:88:de:eb:30:19:f0:ac:
b2:fd:05:49:da:35:0c:90:2c:a6:19:7b:12:8c:cd:2b:0c:4c:
cf:f7:9f:3a:1d:4a:29:6d:0f:31:58:56:0a:62:62:ec:a8:eb:
05:ce:9e:0b:4b:af:57:57:e1:18:6f:df:92:31:9c:5e:93:f3:
4d:ba:bc:35:85:94:8f:22:52:0d:30:47:c3:0d:4c:be:02:fb:
03:ff:5a:00:06:d0:8a:57:8d:5e:c1:06:e3:75:8e:db:c3:31:
de:78:c6:ee:5c:1f:3e:5a:40:cf:10:52:c8:6e:c6:f1:f6:e7:
82:a9:40:8c:8a:ac:be:6d:6f:9c:df:3d:76:bf:27:7a:ac:b8:
48:00:a7:1c:ee:48:1e:8d:1b:7f:b6:b4:31:2d:be:30:50:ec:
91:da:e8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:46 2025 by rpki-client