Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
File: h3YEKrfwcZWY6znlPvkuCsz6T6M.mft (raw, json)
Hash identifier: AKWShxskuNy7v7JBD79uwtaNTSnsLY+F2e937IhZ76s=
Subject key identifier: 81:B0:2D:6E:F5:4A:0C:24:23:B4:A2:38:60:A0:14:36:25:5C:2F:55
Authority key identifier: 87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
Certificate issuer: /CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Certificate serial: 0194BBCECB330531F806894837301D943376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
Manifest number: 082B
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: h3YEKrfwcZWY6znlPvkuCsz6T6M.crl (hash: qJ6N13Oj3ZljCri+vdprUOgwAI4z0A0QAUoZadopB80=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cb:33:05:31:f8:06:89:48:37:30:1d:94:33:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=81b02d6ef54a0c2423b4a23860a01436255c2f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:33:59:91:17:74:d7:2d:40:3e:86:a1:6c:
1a:fb:76:7f:68:64:86:45:7e:2d:f6:8b:ba:ff:b9:
a2:97:75:b1:03:55:53:13:cc:08:17:3e:9c:b8:20:
a1:4a:24:09:2d:8e:53:ed:7e:da:db:6b:b0:d9:80:
b6:e8:c7:59:1d:1a:55:41:6b:37:81:3e:b8:fb:38:
e1:36:24:f6:ed:38:8e:5d:54:38:f9:f5:65:c5:47:
91:7c:44:bf:6b:45:12:0f:b3:1b:52:cd:2d:56:15:
4e:16:d7:a8:e2:fc:03:8d:3f:4e:53:11:2a:ea:ec:
fd:bc:be:3c:e5:e1:68:6e:db:c3:03:df:51:d9:87:
66:86:bf:8c:ce:8c:db:43:16:19:4f:3f:ff:eb:60:
59:02:a6:fd:e3:59:f8:73:94:6d:cb:ac:0b:6f:72:
1f:13:c0:a6:b0:41:84:a1:e2:0f:ac:97:87:ae:f3:
02:16:6d:a8:fd:62:b7:90:93:bc:8c:e0:05:2e:08:
9e:b3:35:7e:22:1f:45:1c:15:4c:64:18:24:02:04:
bc:a6:4b:22:51:8e:62:43:eb:af:a1:0e:11:12:b2:
73:1d:56:ba:be:26:8b:40:95:22:fb:e1:51:ca:44:
eb:c3:2d:c6:f8:5d:7b:77:60:1d:e3:b9:e3:8d:ec:
5f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B0:2D:6E:F5:4A:0C:24:23:B4:A2:38:60:A0:14:36:25:5C:2F:55
X509v3 Authority Key Identifier:
keyid:87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f6:0f:76:79:f1:3b:81:b1:43:98:c5:46:a1:b1:e2:bb:67:
be:42:28:ea:5f:3c:02:7c:47:cd:e1:22:50:f3:87:3b:71:f0:
2f:87:b1:15:f5:61:a6:ef:10:5f:8d:b7:0a:66:90:64:60:82:
b4:01:82:77:ef:e3:b2:f0:ff:63:91:80:08:e1:7c:32:12:ac:
12:36:0d:44:2a:5e:69:4a:65:07:d8:ce:5d:4a:7b:02:34:77:
23:34:2c:e2:53:1f:c1:e8:ac:25:d7:78:3f:2f:5d:4c:49:04:
8b:f6:0b:3a:70:95:8b:4b:e6:a3:60:70:bc:14:7a:95:5f:99:
e0:6d:38:8b:fe:10:b8:e1:6c:f4:40:d0:0d:a1:b0:64:21:e8:
c5:71:3b:78:d7:1c:47:c0:e2:52:a6:c6:30:d8:30:b3:4b:11:
5f:a0:8b:af:c6:b5:c4:c3:fc:8a:7b:53:a0:5b:01:e5:3a:45:
72:f3:bc:67:a1:8a:ec:95:5d:92:ef:b4:d4:eb:a6:cf:18:92:
59:a3:2c:b7:fb:67:ef:ca:21:89:bb:20:24:b8:1f:34:d9:02:
6d:fb:0b:77:32:6e:4c:d1:fd:33:b8:4f:05:ba:48:ab:54:ef:
c1:e0:81:ec:df:fc:ef:4b:6a:90:94:0a:e2:cd:31:f7:7e:09:
7a:2b:43:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:05 2025 by rpki-client