Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
File: dYib2lT4hX2kKQxnebwAYR5z4hI.mft (raw, json)
Hash identifier: LpeSPAsZ+9DWM7B9iqOVpF9p+X7qOd+9o+bB6Jk5s9s=
Subject key identifier: AF:64:7D:2B:AD:A2:5E:0E:2D:77:6E:5D:F6:96:F8:49:EA:08:BD:1E
Authority key identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
Certificate issuer: /CN=75889bda54f8857da4290c6779bc00611e73e212
Certificate serial: 0194BD174BBAA41CA37916981D587D183D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: dYib2lT4hX2kKQxnebwAYR5z4hI.crl (hash: a7T2tsg0YgQ0YVr9IWNxRkIUN/S4Vl0G0JF8tT5l/80=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4b:ba:a4:1c:a3:79:16:98:1d:58:7d:18:3d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75889bda54f8857da4290c6779bc00611e73e212
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=af647d2bada25e0e2d776e5df696f849ea08bd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:37:84:9c:7a:69:fb:8b:38:e1:de:31:16:97:
7c:77:fd:54:55:f3:8e:ac:de:59:cf:ed:48:52:21:
61:4c:25:17:33:e0:79:36:35:6f:f7:4c:c6:bf:c7:
f6:f4:99:0a:16:02:4a:13:fe:ed:b7:db:e5:90:41:
fa:ca:9c:2c:87:f7:3b:7e:bb:f6:25:75:5d:33:5f:
f8:60:f6:ca:9a:3b:42:7e:a1:84:a8:56:aa:05:16:
50:7a:a8:6f:ca:cc:78:10:f0:4a:19:18:57:d9:ef:
ad:13:3f:62:f3:b3:3f:bc:b6:38:f4:8b:75:39:37:
d7:fa:d1:f3:01:d7:32:95:5a:9c:3a:24:81:57:7a:
3b:eb:31:a4:ef:af:43:9d:8b:d4:7f:a1:b2:8d:45:
56:c3:de:93:1b:26:d5:a9:c9:55:e5:c0:d6:5c:f3:
9a:f5:dd:22:e9:6a:b1:a8:15:ce:15:8a:6b:fa:33:
17:ed:3d:72:2c:19:c2:88:0a:0d:3f:6a:9b:a5:46:
34:8d:48:6c:54:88:7f:48:ba:7e:ee:c2:24:b8:84:
50:e1:3f:11:fa:ac:12:53:72:4c:ed:5b:76:a7:3e:
5b:f4:f6:95:87:9e:fb:6c:33:e9:65:47:c9:1b:e9:
b2:d5:e8:8a:32:0f:11:bb:da:6e:08:bd:0f:4b:40:
a1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:64:7D:2B:AD:A2:5E:0E:2D:77:6E:5D:F6:96:F8:49:EA:08:BD:1E
X509v3 Authority Key Identifier:
keyid:75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:66:54:7a:da:79:98:6c:9f:a2:96:72:20:ab:8a:53:9f:18:
77:8a:fd:a7:c3:52:f1:d4:9a:84:ce:8b:da:ff:f2:b5:f2:c3:
1c:c9:83:f5:b0:6d:26:b7:b9:bb:42:35:3b:77:1e:58:2b:67:
a2:31:36:39:f4:04:ef:f1:7d:47:3b:7b:03:f4:f0:e3:8e:b4:
3a:ad:c5:17:c9:7c:49:06:58:80:90:a5:21:9b:77:73:2f:38:
be:0b:5f:4a:2d:3b:e7:e5:3d:45:75:ef:c6:04:ad:8e:a0:a8:
eb:9e:46:40:c1:31:84:7c:a0:19:1c:f4:62:2b:1e:9e:73:12:
97:8b:b9:3d:62:f4:83:de:8e:a2:cc:33:8e:c6:29:4a:1f:cc:
da:58:09:78:bc:79:dc:eb:1d:44:a0:45:13:bf:34:32:c1:68:
29:fd:5c:0c:85:ec:ac:4a:30:50:6c:90:9b:d8:62:da:3e:d8:
74:05:d4:8e:bc:6b:83:6a:3d:75:91:ff:2c:e7:d8:12:a0:f7:
4e:c8:e0:31:bd:68:12:8d:2d:91:31:fe:d6:3e:94:00:3e:b7:
42:0a:d3:35:f4:53:32:50:06:0f:eb:56:18:ac:94:02:0c:e4:
e5:cc:96:32:74:07:b3:81:91:a8:39:69:d4:9d:e6:b7:f5:b5:
17:20:59:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:13 2025 by rpki-client