Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
File: 5DWo9PNqSBGpLRlhc-HEmarMd9U.mft (raw, json)
Hash identifier: lSaA8qGxkJ6QI+DYs+vTjcvbM0GKsUx3UXTl54Vc/Ko=
Subject key identifier: EB:DC:65:66:09:24:51:F5:2E:C0:DE:6C:EE:46:63:B0:08:5F:73:C9
Authority key identifier: E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5
Certificate issuer: /CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
Certificate serial: 0194BD174BB49E01BA73CBD6D438DD931386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
Manifest number: 0B08
Signing time: Fri 31 Jan 2025 16:00:07 +0000
Manifest this update: Fri 31 Jan 2025 16:00:07 +0000
Manifest next update: Sat 01 Feb 2025 16:00:07 +0000
Files and hashes: 1: 5DWo9PNqSBGpLRlhc-HEmarMd9U.crl (hash: 9QsJcyqfOgeJ5qiKiTDFn+1L3incVezFtwBjCcuY3zM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4b:b4:9e:01:ba:73:cb:d6:d4:38:dd:93:13:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
Validity
Not Before: Jan 31 16:00:07 2025 GMT
Not After : Feb 1 16:00:07 2025 GMT
Subject: CN=ebdc6566092451f52ec0de6cee4663b0085f73c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:55:b4:ca:30:ec:f0:48:f7:60:d1:1a:11:44:
83:a4:5c:71:23:3b:b2:e9:40:1c:be:46:ec:36:b9:
f7:f7:89:b2:19:57:5a:5b:4d:8a:ab:1f:20:cb:fc:
c6:55:63:9b:ce:e2:7c:a1:83:d5:32:ab:88:88:9a:
1d:83:b0:15:e7:86:52:1b:1d:62:80:fd:40:4e:56:
d9:64:36:47:d5:e8:77:8c:50:48:8a:45:0d:15:a6:
d4:19:5d:0f:c0:ce:91:46:74:4a:56:2c:3d:e8:d6:
6f:b2:d5:40:75:7f:6b:d2:f5:85:32:34:5a:61:4d:
bc:14:45:53:31:15:ef:53:79:aa:bd:c7:98:1e:91:
60:b4:e5:29:8e:d3:25:4d:88:31:55:fd:16:98:e4:
23:12:78:9c:e2:e2:42:55:33:28:6b:44:17:1a:2c:
e5:3b:cf:51:92:ca:ec:f9:ea:69:5d:6c:c3:30:78:
8d:62:2c:b1:2a:77:e6:fe:f9:56:b9:2e:6d:11:dd:
92:3a:9b:72:0f:61:d3:fc:ad:ca:6f:d1:a2:49:db:
ca:52:61:e4:2f:dd:d8:fb:0d:fe:e7:80:cc:02:14:
91:18:36:93:39:d9:b6:11:c0:7b:56:3a:b1:00:a0:
a1:97:ca:8d:69:a4:35:9a:81:45:0f:07:5a:82:3d:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DC:65:66:09:24:51:F5:2E:C0:DE:6C:EE:46:63:B0:08:5F:73:C9
X509v3 Authority Key Identifier:
keyid:E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d4:e5:67:6e:64:92:ea:b4:0c:0e:72:24:3a:7a:a6:df:1d:
9f:ab:87:2b:0c:3c:5c:69:36:02:f5:80:52:0a:51:d9:20:97:
ad:64:b2:4a:a5:ba:cb:b2:f5:a6:35:d5:29:45:1a:24:21:4f:
23:7f:1d:0b:c1:de:c8:85:ea:b8:bd:09:ee:bf:bb:0e:f3:df:
01:e4:f8:c8:f7:4c:e4:4e:08:3d:2e:e6:1c:da:9c:09:74:19:
2d:38:f7:a0:9f:1b:8a:0a:92:d0:ed:73:a9:02:ee:74:1e:a1:
34:10:2d:44:fe:f3:75:8b:d6:5f:99:e2:87:08:a8:cc:bf:ab:
9e:c2:ab:01:5b:e9:53:ba:ba:90:ef:3c:8a:b5:e5:98:e5:29:
2a:80:a2:bf:d2:59:63:fe:90:89:a9:72:73:d0:95:ab:9b:76:
44:df:04:e4:c9:de:99:ef:ed:c9:7a:07:ed:45:60:1b:ec:fd:
47:97:13:85:fd:80:35:43:b1:e5:cd:b7:47:c9:86:3f:fb:f7:
f9:41:e7:a1:52:c0:eb:1c:98:91:2c:43:f3:da:6c:21:e6:c8:
92:8d:d2:a9:ae:b6:74:68:33:31:f4:4a:de:88:c6:15:9a:43:
9c:1b:ae:47:81:65:53:cd:a1:5c:f4:52:d5:d9:6c:f9:5e:c0:
fd:77:41:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:57 2025 by rpki-client