Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
File: 9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json)
Hash identifier: eDePITN6x3eyAnvN+s2LxCr/5SZw4fZFqMYDOy0spjM=
Subject key identifier: 1D:72:E5:5A:78:AF:63:EF:91:7E:19:E0:8A:0D:8A:DB:4E:95:D1:BB
Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
Certificate issuer: /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Certificate serial: 0194BD17EED904D5A29A849F6355479647C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
Manifest number: 0B08
Signing time: Fri 31 Jan 2025 16:00:49 +0000
Manifest this update: Fri 31 Jan 2025 16:00:49 +0000
Manifest next update: Sat 01 Feb 2025 16:00:49 +0000
Files and hashes: 1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: pXtri2nvfAOBNhztA+A25n/2cJD76xYCyqZuoLbQfm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ee:d9:04:d5:a2:9a:84:9f:63:55:47:96:47:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Validity
Not Before: Jan 31 16:00:49 2025 GMT
Not After : Feb 1 16:00:49 2025 GMT
Subject: CN=1d72e55a78af63ef917e19e08a0d8adb4e95d1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e3:d3:c3:0c:a6:cb:fb:16:6d:e4:91:e1:5d:
62:85:a5:69:3a:1a:1c:e1:82:5c:63:45:91:e8:92:
23:ac:c2:e1:15:14:cd:bd:67:46:f6:76:e1:92:d1:
1c:d8:12:c3:1f:38:24:c9:6c:27:b8:ba:29:b4:16:
f7:27:3a:2a:72:c6:80:7f:9f:ab:d8:02:9d:5e:f3:
6d:ab:6c:94:e1:d5:41:ca:f1:ed:9a:6e:9f:03:39:
f5:50:07:ee:92:c6:71:52:36:04:30:9f:65:55:0a:
96:82:62:be:38:2a:15:e2:92:88:3e:7f:36:b6:79:
37:f8:eb:fb:70:63:78:4c:fe:b7:b6:93:f3:ce:a6:
a0:5f:8d:c4:81:17:a2:bf:59:25:1f:3c:2b:e6:52:
f4:cd:61:ca:ad:4f:ad:86:0c:7e:f1:1f:2e:90:c5:
a7:18:0f:88:e3:d6:01:eb:04:6c:24:61:ff:0c:e6:
d5:a2:5c:96:62:cc:7f:cc:b9:f9:1e:a3:92:a8:53:
99:43:76:b2:10:1a:bf:20:4a:d8:25:a2:ba:57:6d:
c0:49:0d:47:f0:19:8b:f4:70:9f:e8:a0:f7:0c:88:
de:ca:00:01:88:91:db:1f:3f:02:fb:27:eb:2d:b8:
39:ae:c6:c1:96:d4:e5:48:b6:c1:c7:e8:aa:44:b5:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:72:E5:5A:78:AF:63:EF:91:7E:19:E0:8A:0D:8A:DB:4E:95:D1:BB
X509v3 Authority Key Identifier:
keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5d:40:d0:13:45:2b:97:47:07:5d:1d:0c:03:3a:3a:be:d7:
ce:8f:91:77:c2:bd:2f:f9:08:4c:ff:c6:fb:8d:b8:2e:4b:a9:
f7:0a:ae:ee:54:a5:36:e2:35:fe:4d:7c:19:26:5b:24:92:57:
2a:09:1c:64:06:0f:7e:46:05:71:df:07:83:6e:97:d8:e3:5d:
c8:e3:17:4c:10:be:a8:cb:67:55:1e:38:76:72:78:21:20:fc:
71:61:fd:79:12:88:ce:a5:7d:f6:1a:f6:6f:40:c1:42:b8:7a:
a5:54:f8:78:ec:63:4d:06:12:08:60:82:ed:e0:64:96:4d:40:
b0:ed:1a:8c:6f:df:11:56:26:ce:0d:13:26:ab:65:00:cd:ea:
52:4f:44:90:07:5f:e1:61:48:7b:38:29:62:0f:b0:72:e2:3d:
19:26:ef:5e:bc:63:1e:29:7a:e3:b6:dd:8e:84:86:4a:28:d7:
1b:40:95:d8:2d:38:1f:a0:7f:6c:cf:15:95:86:d1:0f:15:bd:
12:81:79:2f:6c:19:0f:96:ea:02:a6:ed:69:9d:23:8c:8f:f9:
9c:c9:ae:06:91:4e:93:b2:96:1f:21:a3:00:bc:3d:b2:ac:92:
03:98:b4:69:57:c5:f5:8f:17:b3:a5:db:13:85:d6:01:b1:12:
b1:23:0c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:40 2025 by rpki-client