Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
File: ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft (raw, json)
Hash identifier: VldeegNM9a/7UFoyKazFxmvaO3OQuIyZf662XSIxakI=
Subject key identifier: 8E:92:E7:CF:CB:65:17:36:46:48:FB:2B:00:7B:98:41:2C:9D:B3:6A
Authority key identifier: 00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04
Certificate issuer: /CN=0018a3328c44f08f65243c61e064fefed6413c04
Certificate serial: 0194BBCE400299B569F10D51DD6CE74BC54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl (hash: y2pXgqpxl2MnafOk9d7NVOFZeyRchEZcFNMWurzJ/Nk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:40:02:99:b5:69:f1:0d:51:dd:6c:e7:4b:c5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0018a3328c44f08f65243c61e064fefed6413c04
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=8e92e7cfcb6517364648fb2b007b98412c9db36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:da:00:2e:1c:b1:ab:e8:33:ca:9d:43:61:
cc:b0:05:63:92:cf:d4:98:53:46:ad:42:d5:49:56:
52:c0:57:08:ef:35:99:c8:c7:71:d7:4a:b6:0d:31:
5e:8d:38:7a:fe:13:3a:e2:5b:ca:29:11:38:ca:13:
a0:a7:4c:d2:e2:d1:f8:0f:a2:0a:d8:a9:24:fd:e9:
f2:e8:92:aa:68:2c:91:61:d4:ef:35:e1:ef:29:5e:
c6:e4:05:be:93:04:6a:4d:90:c0:cc:68:e5:bb:bc:
08:9a:eb:fa:8e:28:19:60:f2:28:12:d8:f8:4b:90:
03:26:fa:b4:09:1d:d4:91:8d:d6:47:42:e6:3d:82:
6d:c0:29:31:c4:18:e3:63:69:47:78:6e:e9:b8:89:
b4:31:78:0c:f4:5c:58:50:2a:64:ae:b8:e5:0d:a5:
e2:bf:f7:6c:58:47:e1:f5:04:c0:9b:29:16:91:a9:
6c:2a:43:0f:f2:17:2a:1e:b3:42:a4:96:c1:8d:a9:
c2:0a:ef:b5:5d:c1:0b:88:93:11:ff:ab:5d:91:e8:
1c:d2:4b:6e:f0:ad:02:61:48:1d:12:c9:65:bf:9e:
d5:19:6e:de:eb:43:d5:e8:4b:27:28:c6:d0:bd:2f:
be:44:18:3c:cb:a8:3b:d8:ad:aa:4c:f9:b4:1e:cd:
5e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:92:E7:CF:CB:65:17:36:46:48:FB:2B:00:7B:98:41:2C:9D:B3:6A
X509v3 Authority Key Identifier:
keyid:00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a9:33:b8:07:9f:dc:63:d3:25:f8:60:08:f9:85:18:09:97:
75:62:c7:ca:85:a1:09:d7:d1:63:f5:6c:7f:71:57:29:46:60:
a0:0c:90:d9:13:bc:1b:bb:df:b8:82:29:49:0d:8b:78:ba:60:
f2:e1:c2:c2:b2:99:54:8e:be:1a:bb:f6:ef:4e:20:d6:e0:39:
e7:23:81:1c:02:9d:d3:73:d9:61:d5:3b:cb:de:75:1c:97:0a:
aa:a0:22:34:02:60:bb:45:f1:ca:b2:79:80:d4:39:65:8a:52:
f4:f8:a7:f8:ab:70:5f:e8:84:c7:52:80:4a:48:47:8e:67:6d:
aa:7d:89:ca:67:ac:63:52:63:45:4b:eb:cc:ee:7e:05:83:e5:
27:da:bd:0b:76:da:0e:3d:b3:1f:dc:b1:01:aa:64:e1:4d:b5:
3d:6a:f3:27:c4:10:cd:19:67:38:97:60:13:28:ab:71:a1:94:
9a:1c:64:e4:2e:e8:c2:13:ce:ff:cb:e1:2d:4c:b9:36:01:e0:
6e:c9:30:5a:3e:ee:6e:6b:02:db:64:a5:d3:c6:0d:91:4c:68:
e5:09:40:39:69:5e:ef:9a:55:c0:f2:8d:84:10:ed:83:51:1b:
c5:00:bc:18:4f:bc:f8:f6:0e:7d:da:3a:f9:64:41:54:a9:97:
c8:5f:cf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:15 2025 by rpki-client