Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
File: d7AlLypnrNQplw-mSmQXd29y2NY.mft (raw, json)
Hash identifier: j7p5rY9XDdKxOqzOE+VRPc9odURkZyo2NYHC/bq9Na0=
Subject key identifier: E1:FF:72:9B:56:64:D7:6B:D2:E5:5B:B8:DD:AE:FC:AF:AA:92:F7:3B
Authority key identifier: 77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6
Certificate issuer: /CN=77b0252f2a67acd429970fa64a6417776f72d8d6
Certificate serial: 0194BC72F90E898AF701A7AA26394EDEF38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
Manifest number: 0306
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: d7AlLypnrNQplw-mSmQXd29y2NY.crl (hash: CxmscODdYW9lkYz6CS41jfMXjNBkfbSAsmn32jbRoGo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f9:0e:89:8a:f7:01:a7:aa:26:39:4e:de:f3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b0252f2a67acd429970fa64a6417776f72d8d6
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=e1ff729b5664d76bd2e55bb8ddaefcafaa92f73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:1b:72:c5:b8:0a:13:27:65:e6:83:98:47:
a2:84:99:64:d7:ff:7d:73:7c:2e:fc:46:88:90:7c:
08:1e:82:b0:2c:9b:1c:f5:ed:80:71:0e:dc:ca:d1:
96:4a:c5:d7:4c:4e:a0:88:1c:22:28:93:69:5b:87:
fd:fb:f1:74:5e:e1:7a:74:06:19:77:3c:95:81:a6:
fa:21:90:45:1c:01:18:87:21:db:56:ae:5f:16:0c:
8d:4a:e7:d4:cf:2e:29:86:5c:c1:85:a8:ae:30:0d:
ae:8c:34:55:b5:cf:cc:4d:98:e8:29:bc:f8:13:24:
cc:2c:59:01:13:0a:67:ed:4c:70:f9:0c:44:66:77:
d5:3d:46:10:ef:88:e5:77:ca:6d:63:05:73:b4:7b:
32:1e:2f:09:3e:db:19:ab:8a:85:ac:43:30:56:4c:
2f:f4:16:80:45:50:4b:90:a0:83:13:91:29:0b:89:
40:d8:5b:10:a0:ba:9f:98:73:50:eb:b7:b7:c0:92:
db:89:b2:b4:67:7e:4f:3c:55:3f:43:39:23:20:7a:
a1:a5:1b:27:28:c1:7a:4a:d9:1d:cb:50:2e:5b:d8:
28:c0:83:cc:2d:05:61:3a:01:1d:53:00:d3:dd:aa:
69:84:84:40:9b:e5:01:6d:2e:f9:f0:41:d0:ff:6c:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FF:72:9B:56:64:D7:6B:D2:E5:5B:B8:DD:AE:FC:AF:AA:92:F7:3B
X509v3 Authority Key Identifier:
keyid:77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1e:dc:f6:54:1b:6f:ba:59:81:cc:04:1e:67:7d:db:4e:ff:
c0:8a:49:a9:4b:14:18:1b:67:0e:04:51:08:78:43:70:5b:8b:
27:df:a9:2c:ad:f7:6b:47:bc:25:a7:24:9a:12:4e:46:9f:0a:
89:2d:54:42:94:be:eb:e7:aa:05:40:56:97:65:69:ec:b8:50:
4e:ef:0b:51:14:2a:32:53:e2:9c:6d:3c:a6:f1:52:9a:a4:fc:
a9:82:b6:b3:38:2c:55:3e:52:fc:d8:67:39:c5:2e:3e:66:5d:
7c:5a:9c:25:fd:de:15:24:44:fa:dc:c9:10:da:86:0b:0e:f6:
0b:26:50:b8:cc:3e:ec:04:ff:47:de:1e:1a:2e:44:fb:5a:72:
8b:a1:47:ad:fc:ed:fe:0d:a0:14:6d:e9:c7:5c:b1:bc:65:b2:
47:4a:00:79:78:1d:7e:e0:35:cb:db:1c:58:1b:97:9a:9f:77:
f5:38:35:aa:a4:3f:5f:2d:d9:b0:7e:da:3d:92:bf:c7:92:99:
9f:48:e3:c7:5c:be:66:ef:af:d0:3f:38:87:72:f5:c4:f6:34:
e1:b1:97:a2:65:6a:fd:87:5a:90:d4:f5:d1:72:86:5e:ef:e1:
3c:26:89:7e:6f:39:d2:70:9f:24:c9:74:73:65:b5:8d:77:77:
f9:7f:a5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:32 2025 by rpki-client