Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
File: iDyv-AezKVLWjHGq8BuRmErR6gg.mft (raw, json)
Hash identifier: gN5hmgTYh/4TVlzdDHawMMpDhFBCqWa6WgUSp5iukz0=
Subject key identifier: 24:19:23:68:67:C8:3D:1C:9D:AE:69:9E:78:6A:B8:78:13:F4:FF:FB
Authority key identifier: 88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
Certificate issuer: /CN=883caff807b32952d68c71aaf01b91984ad1ea08
Certificate serial: 0194BC050423811ECB634AA86EED9AD0268D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
Manifest number: 0213
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: iDyv-AezKVLWjHGq8BuRmErR6gg.crl (hash: +CLqtFKrmZIc4RbyZK3XNRXZ9Fpdh3fr5gpKsE0jpKk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:04:23:81:1e:cb:63:4a:a8:6e:ed:9a:d0:26:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883caff807b32952d68c71aaf01b91984ad1ea08
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=2419236867c83d1c9dae699e786ab87813f4fffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:d7:48:93:f6:ca:5a:71:22:8c:34:89:f4:
d0:93:c0:5f:14:e2:10:1d:a0:31:88:09:15:3f:14:
b9:7b:10:d1:27:db:2f:ea:5d:1e:0b:6b:ff:29:a8:
43:b1:35:ed:9c:e1:e6:e8:a1:a2:9e:6f:33:85:07:
23:fa:8b:bd:dd:c0:d5:90:4d:ce:89:04:d6:a4:2f:
27:9e:58:b4:cc:63:1e:8b:27:c9:1b:48:ad:84:39:
b5:65:e9:1c:1c:e7:1d:64:06:3c:25:ce:2a:22:85:
93:84:c8:0d:64:8f:3f:80:4f:66:39:c2:25:32:0e:
41:16:3a:34:18:9d:16:8c:ca:66:e8:b9:72:5e:d8:
cd:02:f6:c6:b9:3c:df:34:c5:1f:00:41:6e:65:72:
3b:7b:da:cc:be:f7:0e:65:83:e1:10:1f:15:b5:2e:
e8:90:ac:cf:5d:39:ec:f8:ff:99:7e:f2:87:39:f0:
1c:eb:d7:3f:87:fc:e2:e8:a6:f2:70:2d:99:53:d3:
71:b4:d8:f4:f2:1d:2b:84:5e:d0:da:de:03:ec:59:
5d:a9:01:18:6a:81:5c:49:24:75:fe:18:3a:02:93:
b5:5d:e7:54:75:26:5b:53:19:4f:5c:e5:7c:e6:d4:
f8:8b:2d:51:23:2f:44:4f:82:ff:97:97:c6:34:b9:
6f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:19:23:68:67:C8:3D:1C:9D:AE:69:9E:78:6A:B8:78:13:F4:FF:FB
X509v3 Authority Key Identifier:
keyid:88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a3:e2:99:de:dc:15:45:ca:15:85:f7:19:05:88:6c:98:68:
16:3e:8d:e9:52:86:b6:c3:25:16:9d:91:0f:7d:2a:c0:cc:fa:
90:0a:5b:6d:f5:a2:ae:b4:d6:1a:62:eb:02:e2:45:2e:c3:8c:
dc:63:b4:7b:b6:d8:3e:5e:80:41:18:03:9c:a9:2b:4d:83:0f:
3e:ef:91:6f:3e:d0:c9:ef:f3:7a:04:2a:bc:5a:6e:1d:d9:bc:
c4:2c:ce:97:34:98:f2:a4:6a:c7:8c:6f:41:36:dd:92:78:4d:
51:94:46:ae:02:e1:0d:07:da:3f:82:56:86:2d:36:bb:f4:95:
4a:9d:ee:bb:e0:c7:44:29:16:d1:1a:2e:27:04:81:0c:ae:08:
5b:96:7c:9f:aa:f6:b6:0c:d6:bf:5e:0f:96:11:cc:2a:62:fe:
70:f9:db:a6:28:73:ca:e0:1d:8c:a8:a3:ce:fe:80:b5:b1:48:
5d:51:33:b3:90:d7:80:bc:33:19:b8:9c:f7:ba:6b:42:40:c5:
5f:c1:75:18:a0:e2:a5:ec:38:ad:2b:ee:9b:d4:34:69:46:50:
be:58:32:0c:0f:25:7c:78:9b:4b:04:77:c8:62:17:05:80:89:
c0:f3:6c:d5:d1:70:c3:f9:b6:0e:7e:e7:6c:22:35:f3:b5:5e:
2d:cd:6d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:10:40 2025 by rpki-client