Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: XJc7o/hWd+dSXMsZQH/3gaWXEfOsD5+syEsTZ0L6wvw=
Subject key identifier: 1E:20:97:8C:FA:6F:43:03:BD:48:12:86:CA:F2:EE:AA:E0:1A:39:D4
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 0194BCA977F3BF1D85F564682AD1EECCDDD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: X+LgyN6v4dRk8YNdPzLw812aZ428sn7mDTdkiz4EgAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:77:f3:bf:1d:85:f5:64:68:2a:d1:ee:cc:dd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=1e20978cfa6f4303bd481286caf2eeaae01a39d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:34:92:fe:24:dd:8a:76:6e:57:94:5e:a9:
6a:d1:68:12:d0:fa:f4:f8:b9:3c:34:34:9f:89:c1:
0a:7d:5b:b4:12:64:53:a2:0e:13:ce:cd:3a:42:0a:
49:da:37:5a:c2:18:d9:b9:23:f2:80:65:b9:aa:d8:
90:5c:96:6d:ee:a3:7a:2d:c0:d3:82:b2:5c:9d:73:
53:3b:d1:47:39:6c:03:19:b7:82:cd:92:77:a0:f8:
39:a9:a4:74:8c:e0:ca:8b:1f:0f:79:80:c5:53:78:
87:d3:14:99:87:4b:65:f5:1b:27:bd:1b:b3:ca:e1:
ac:87:a7:6d:da:c0:fd:ce:6c:32:a7:85:5c:90:61:
bc:6f:4f:fb:61:8c:43:00:db:12:46:35:8d:4e:37:
14:27:46:ec:48:7f:c0:32:fc:a6:25:bd:a7:f6:ee:
75:f1:98:5f:b3:90:11:0b:2c:25:81:78:d2:18:19:
60:e4:85:11:37:eb:64:b5:63:03:cc:7d:e8:00:e8:
06:36:10:72:46:f7:c5:f0:2a:d6:27:92:26:29:e0:
49:66:0b:38:b3:5d:a5:32:42:4f:70:30:b1:9e:95:
a2:91:ce:6e:9a:a1:64:d8:2c:d2:23:1f:cb:af:ad:
0c:3d:8d:d3:4d:92:9b:58:fd:ba:95:17:6f:13:69:
5a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:20:97:8C:FA:6F:43:03:BD:48:12:86:CA:F2:EE:AA:E0:1A:39:D4
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b2:ae:ed:5a:4e:8b:b9:9b:61:6e:23:ee:82:08:98:52:2c:
31:c2:d3:52:a5:2d:42:f0:9f:15:65:da:5d:6f:02:3c:6f:af:
4d:eb:b2:35:4c:88:28:9f:42:38:56:5f:9b:b6:db:c0:a5:b6:
a5:e7:49:dd:e5:29:04:d2:41:4a:25:c6:d0:f6:28:cd:25:f2:
9b:e0:c6:fa:61:78:dc:de:32:a2:1b:6a:5e:59:6c:8c:49:9b:
84:ae:07:7a:16:de:a1:f5:fa:59:23:be:95:3b:11:7d:b5:1e:
5c:e3:84:43:5b:03:54:0c:21:06:1c:5d:74:5b:9b:9d:25:3a:
ec:56:1f:00:5d:96:f7:ee:f5:90:27:fd:34:0d:c2:41:46:46:
18:36:ea:f3:e6:54:47:19:d1:5c:a2:ca:eb:d8:06:a1:3b:e2:
7a:ca:fd:d4:11:80:23:b3:f2:36:66:87:be:71:67:99:2f:f1:
f2:bb:10:d7:bd:42:0f:71:41:4a:aa:c2:c0:6c:91:e9:b8:8f:
ef:9e:08:99:ba:bc:86:2f:00:ab:4e:2d:3c:09:f5:a8:a9:d1:
c3:79:c3:d5:41:cb:56:44:45:0b:d5:7e:39:4d:b9:b9:e9:45:
d6:a0:63:ae:b4:c8:60:10:93:5c:e5:62:18:4c:ce:80:44:51:
f9:34:95:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:17 2025 by rpki-client