Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
File: c0YEYfnEnrkXwZEVgLoORDLBJVc.mft (raw, json)
Hash identifier: Nw1pGB+YRogZ6+h/n37iM8/TkmtCuUhV614gN0J+AAQ=
Subject key identifier: 77:18:C5:7B:9F:D2:34:11:84:A4:D1:A8:1D:4C:3F:24:11:D7:75:E1
Authority key identifier: 73:46:04:61:F9:C4:9E:B9:17:C1:91:15:80:BA:0E:44:32:C1:25:57
Certificate issuer: /CN=73460461f9c49eb917c1911580ba0e4432c12557
Certificate serial: 0194BBCE9E08AB71B54147BCB75A32272B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
Manifest number: 04C8
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: c0YEYfnEnrkXwZEVgLoORDLBJVc.crl (hash: tTSfzfzomzEr8/+egA6dsCl/AF7isZxaoHy7ej/1b0I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9e:08:ab:71:b5:41:47:bc:b7:5a:32:27:2b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73460461f9c49eb917c1911580ba0e4432c12557
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=7718c57b9fd2341184a4d1a81d4c3f2411d775e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:62:b1:d9:57:48:dd:f3:e3:24:f8:05:64:63:
f2:75:19:0a:cb:bd:17:13:6c:6e:07:37:c4:12:4d:
1c:64:15:e7:85:11:86:92:46:69:95:11:36:04:3c:
f6:c3:7c:3a:cd:be:81:67:0a:e4:82:b9:95:42:42:
7c:18:0d:5c:7a:b2:71:44:c4:28:8b:31:ca:48:19:
77:81:cf:9c:6d:21:74:8e:19:4c:ad:0a:a7:92:bc:
06:8f:6b:cb:f8:06:54:f7:c0:21:d0:1c:c8:9a:b0:
f1:be:3b:eb:cf:94:a0:97:82:47:84:d3:50:45:21:
d3:45:bc:f0:df:92:14:ec:87:76:de:02:df:8e:d7:
40:69:24:c5:7b:42:79:dd:ae:e5:78:a7:49:83:b1:
21:65:74:32:b6:7f:06:47:53:30:ab:99:66:53:a7:
ed:cc:a4:3f:8d:0d:ef:ff:b6:d7:a3:2c:e8:b6:e8:
d6:dc:8c:e0:af:36:7e:d3:3b:ca:c5:f5:0e:bf:25:
4d:5a:9c:3f:be:d9:ad:99:14:77:65:bb:f2:19:a8:
ee:43:03:5e:8c:b8:b9:ab:3d:f7:2c:7b:5b:1e:28:
20:55:90:8d:6a:01:93:78:5f:22:96:88:7b:74:5e:
c0:40:53:78:c1:bc:b1:46:ea:a3:8f:14:9e:81:5d:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:18:C5:7B:9F:D2:34:11:84:A4:D1:A8:1D:4C:3F:24:11:D7:75:E1
X509v3 Authority Key Identifier:
keyid:73:46:04:61:F9:C4:9E:B9:17:C1:91:15:80:BA:0E:44:32:C1:25:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:90:2e:ae:5e:c1:22:51:94:ce:27:2b:89:14:5e:bd:77:7f:
c9:77:e8:d3:7d:89:71:73:87:81:6a:54:e7:78:af:37:6c:76:
f7:49:de:75:ed:af:98:0a:05:f6:a2:ff:35:85:38:da:64:7b:
83:1e:2d:c0:e5:ca:c8:cb:4f:6a:47:e7:b4:02:22:92:ad:b3:
c4:f8:87:f5:44:67:72:c9:9c:49:2e:04:e5:4a:f6:6a:8c:b2:
72:db:78:bb:a6:8e:c1:0b:a3:90:26:81:53:1e:96:46:4b:ca:
7d:87:92:4b:ae:fd:18:1a:35:5d:30:ce:0e:44:fe:42:b7:c4:
42:c9:b9:59:a4:25:38:a9:7e:32:35:a2:18:e9:b8:e1:88:7b:
16:62:39:aa:31:11:f1:ff:7d:ac:02:f3:dd:e8:27:60:c2:bb:
1e:bb:dd:e0:49:be:60:b3:0b:18:b5:16:0d:74:78:b8:01:ee:
65:c7:d6:90:53:04:41:76:0e:2f:84:0f:92:89:fb:e2:0d:b4:
36:7a:49:1e:f8:81:1f:6f:4f:9d:cb:c5:d0:43:d8:a6:18:f0:
1b:a3:0b:5c:cc:ed:a8:fb:09:23:91:30:c8:5b:5d:cb:ba:ce:
cd:64:c9:32:e3:68:09:8c:2f:24:8c:a2:eb:1a:1a:a7:85:a9:
bb:95:a2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:38:23 2025 by rpki-client