Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
File: Dj8xyerObwpezNuN8rAcc1FWhoY.mft (raw, json)
Hash identifier: GfhumOa4kHNOUc9yEVJaOjqS8Hofttl0Nvem9m30a7A=
Subject key identifier: EF:58:C9:96:C7:83:28:2B:86:27:C2:54:BF:05:4A:EB:C0:0A:34:53
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 0194BBCF06E68F25EA0DF9F513AC8694E4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
Manifest number: 13E4
Signing time: Fri 31 Jan 2025 10:01:34 +0000
Manifest this update: Fri 31 Jan 2025 10:01:34 +0000
Manifest next update: Sat 01 Feb 2025 10:01:34 +0000
Files and hashes: 1: Dj8xyerObwpezNuN8rAcc1FWhoY.crl (hash: U1MhyUNDVR8yviXbuJATvL2FE3sjzRDY/MLytxYtP78=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:06:e6:8f:25:ea:0d:f9:f5:13:ac:86:94:e4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Jan 31 10:01:34 2025 GMT
Not After : Feb 1 10:01:34 2025 GMT
Subject: CN=ef58c996c783282b8627c254bf054aebc00a3453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f2:68:10:b1:6d:c0:95:be:81:1c:e2:34:34:
e2:61:b4:73:7a:27:8d:11:df:36:99:31:f0:f9:67:
26:06:3a:45:37:c2:e9:11:40:7a:0a:4d:e9:47:b9:
1f:79:b7:7e:f7:65:d1:4b:59:5b:99:7c:38:69:46:
49:11:25:f9:62:41:4c:f6:66:b1:39:57:4f:2b:02:
e2:24:9f:d4:5a:a3:35:78:f0:71:d1:01:bb:52:9f:
93:a5:26:70:cf:79:2f:34:ff:84:d3:33:3a:18:1d:
a2:ec:fc:05:11:9e:37:24:a1:57:fe:a4:77:73:a2:
8a:6d:38:97:b0:7c:f9:fb:47:ba:1f:85:44:1f:6c:
7a:92:a5:4b:39:32:9e:da:f1:a3:26:37:a3:0f:c5:
d5:20:49:25:5a:f1:d7:5c:d2:5f:16:fc:f6:55:0f:
87:60:1b:a1:cc:fa:f6:39:64:45:2b:4a:8a:55:1b:
d5:b2:b8:d5:31:54:40:77:3a:82:99:6e:74:52:2e:
c6:14:49:0b:8c:5d:0c:cf:4e:86:fc:c5:c6:8b:a0:
0e:f3:6e:2d:e5:8e:6c:70:c8:33:ba:e8:a6:10:07:
72:67:2c:c5:71:b7:d0:de:cf:67:a0:55:29:c2:5f:
53:7f:43:20:79:71:9d:fd:d5:79:43:81:9c:7c:99:
ad:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:58:C9:96:C7:83:28:2B:86:27:C2:54:BF:05:4A:EB:C0:0A:34:53
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:03:ec:77:35:67:e0:69:11:b6:63:ff:e7:d6:3c:93:8d:a2:
63:cd:f5:5c:a1:57:56:84:09:f9:39:92:57:e9:54:a2:67:67:
62:79:57:c9:d6:aa:4d:0a:45:fb:bd:44:7a:05:53:8a:dc:39:
11:35:fa:f0:01:16:13:50:8d:56:29:d4:91:85:f3:1a:cf:f3:
9f:40:b5:ca:ce:7b:87:c1:cc:4a:6c:64:c8:48:24:92:76:50:
39:7d:4b:59:71:0a:dd:85:e7:e4:25:50:4e:8c:19:1f:3f:c4:
76:46:e7:21:bb:1d:3d:a3:94:d1:2e:d3:f0:45:42:fc:5a:96:
1f:5c:78:69:cc:06:6f:fe:e2:3b:bc:dc:ba:45:a9:e0:32:a6:
fd:89:5d:9d:ca:00:c5:78:af:f4:f1:7d:7f:62:27:58:e5:fb:
44:70:fd:c5:df:68:24:97:82:00:08:33:c9:48:9f:6f:a6:a3:
79:aa:2a:0a:d0:cb:44:fd:a6:86:92:80:61:12:b7:9f:1a:5a:
69:6d:3a:12:2f:7e:e5:64:17:12:36:3a:d1:b1:c8:49:c1:28:
a2:6b:61:8b:ff:d6:12:28:27:5a:fa:10:9e:05:ee:e7:34:9a:
c8:a6:f6:c6:b8:46:70:bc:00:23:eb:1f:0d:ab:95:c1:98:d8:
58:a9:70:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:51 2025 by rpki-client