Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
File: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft (raw, json)
Hash identifier: aOFDm6sKsEwzNuSbNmdnUNj6oVew5qiGNtynuZMgGZk=
Subject key identifier: 8C:B3:3C:F7:F5:5B:F5:85:94:66:EA:0F:92:7F:DD:DC:58:C8:98:E4
Authority key identifier: E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
Certificate issuer: /CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Certificate serial: 0194BCE06802720E85A5E2C74F6620E80F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
Manifest number: A9
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl (hash: PWYoEz57UOsasDmSNmPDCbthBt8siR4qyejz7drNx2I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:68:02:72:0e:85:a5:e2:c7:4f:66:20:e8:0f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=8cb33cf7f55bf5859466ea0f927fdddc58c898e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:42:48:6c:26:de:a1:53:21:77:ec:68:80:
69:5e:1d:f2:cc:66:6b:32:5c:c3:86:9c:2a:ea:17:
5a:b8:4f:2b:e4:c8:75:88:f3:35:a5:a3:09:50:cc:
60:09:e7:5a:3a:94:65:2b:7b:c3:ad:72:d9:13:7f:
60:5f:cd:6d:c9:e4:68:3a:6f:bc:13:3f:bd:e9:c3:
c1:49:85:91:a7:c5:59:b1:07:e6:32:5e:ef:b9:fc:
dc:b0:98:68:05:6e:d5:a7:9b:0b:ae:51:1b:88:10:
98:8c:fe:7c:2d:af:47:31:61:ad:7d:81:20:21:05:
53:c7:32:23:38:b4:5e:67:2a:81:e5:c7:6a:8f:9f:
3c:e5:8c:ae:f2:66:02:35:59:70:14:cc:3f:dd:91:
87:35:5a:e2:f3:0f:0a:60:39:7e:96:7e:11:a6:1f:
70:bc:5b:07:90:c6:94:ce:38:36:3a:fa:af:23:09:
d4:b9:cc:19:ce:a7:81:b1:4f:e9:5d:3a:e4:02:ac:
07:39:87:15:eb:03:e3:11:93:1e:83:3d:86:21:3e:
31:85:f9:2f:e1:17:2a:65:c7:29:f8:db:aa:30:01:
57:58:88:62:a6:c3:18:2e:71:63:dc:be:ba:6e:67:
69:dc:70:3d:88:8e:57:f3:81:d1:11:3e:12:da:5c:
85:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B3:3C:F7:F5:5B:F5:85:94:66:EA:0F:92:7F:DD:DC:58:C8:98:E4
X509v3 Authority Key Identifier:
keyid:E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a2:77:73:0a:a0:76:2b:84:3e:a0:55:99:5b:ed:85:e4:e6:
8f:30:86:ad:c1:29:6e:01:31:c7:2f:a9:c5:9f:7c:09:4a:de:
3e:b6:92:65:f0:1b:3e:7e:16:52:28:6b:71:67:46:2f:a1:eb:
b6:a1:4f:83:33:a1:a9:e0:7b:d7:f4:c7:20:fe:6a:23:1a:c3:
97:b6:08:12:d0:a0:7a:49:1c:68:65:e9:34:3d:d2:a3:56:38:
3a:1f:4a:8b:9e:4e:8b:c0:1a:31:4f:51:64:92:de:44:28:37:
df:fa:95:84:02:8d:66:d6:cf:5c:da:cf:e6:dc:26:dc:b3:37:
bc:a6:59:cb:bb:d1:42:21:2f:8e:2d:54:6d:f2:7c:2a:12:5f:
50:85:23:a1:b7:a9:ad:17:3a:1b:3a:d3:e8:6e:61:72:88:5b:
2e:22:85:0c:0e:3d:5d:5e:0d:7c:2c:0a:d0:af:00:11:88:03:
fa:b3:d9:4e:0d:2f:aa:97:64:58:52:bd:67:96:7f:94:7e:69:
95:0f:11:80:b4:d8:a6:6f:1d:4c:7e:9d:f4:5a:c1:d7:b6:a2:
11:f1:0d:ff:44:92:86:7c:e2:d6:08:45:b1:02:74:b7:28:5d:
eb:29:a4:97:74:d7:79:49:16:09:51:42:e6:5d:8a:5f:d0:43:
36:c0:34:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:54 2025 by rpki-client