Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/93256b-c913-495a-a7f9-67fc8d2065b1/1/hD524S0l3izPRxnfAlToU5UO7rk.mft
File: hD524S0l3izPRxnfAlToU5UO7rk.mft (raw, json)
Hash identifier: +BVAPF3+/v7WU6MDQRyWsbBFIOmGJobpecP/uuLR7Cc=
Subject key identifier: 06:B4:7D:B2:45:45:D5:C9:A4:B3:2E:6E:0C:24:9E:C8:25:20:FC:01
Authority key identifier: 84:3E:76:E1:2D:25:DE:2C:CF:47:19:DF:02:54:E8:53:95:0E:EE:B9
Certificate issuer: /CN=843e76e12d25de2ccf4719df0254e853950eeeb9
Certificate serial: 0194BBCDFDDEFC177F7DBB28C078558D78B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD524S0l3izPRxnfAlToU5UO7rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/93256b-c913-495a-a7f9-67fc8d2065b1/1/hD524S0l3izPRxnfAlToU5UO7rk.mft
Manifest number: 0A7F
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: hD524S0l3izPRxnfAlToU5UO7rk.crl (hash: ZqGJ7YpkjcOe3nAE8tk59DtRKw2ucxJfVgVb7yloLmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fd:de:fc:17:7f:7d:bb:28:c0:78:55:8d:78:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843e76e12d25de2ccf4719df0254e853950eeeb9
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=06b47db24545d5c9a4b32e6e0c249ec82520fc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:40:dd:7b:38:ec:6d:1f:6c:a7:82:af:54:
c3:26:f5:cd:20:df:f2:aa:42:b2:e2:74:98:8e:4d:
e5:f9:ce:3f:bc:5b:24:c7:5c:4b:40:1b:10:5a:7c:
9b:bb:46:11:fa:5e:e8:80:d0:2c:a4:1b:dd:77:85:
cc:2c:a1:1a:00:35:4f:a2:3a:68:00:44:42:c1:34:
76:f4:63:02:34:3a:60:9a:57:6c:43:56:a6:37:9f:
5a:b2:d1:74:4e:b7:de:fa:15:01:e0:b9:29:10:a9:
d1:e5:70:46:b8:83:e4:f7:56:59:b4:41:fd:54:c7:
6d:ca:f2:be:4b:09:bc:03:5a:60:f1:ef:30:be:9d:
02:a6:7f:d1:cc:ce:98:6d:ca:05:34:68:3f:2e:77:
e0:f9:83:76:d4:b3:84:fb:65:9a:10:1a:e8:41:ec:
20:4a:3e:0f:6e:dc:1f:d7:57:20:c8:6a:1e:74:68:
d1:0f:29:9f:7a:c9:5c:ae:51:83:0b:fb:4e:22:dc:
ec:c0:71:fd:78:c1:d3:b6:5c:2d:05:45:83:d0:44:
fa:51:83:99:ec:4c:dd:4f:7c:45:f3:4e:2b:5f:6f:
3d:4f:29:93:8a:db:70:de:a0:38:86:e3:bb:63:84:
03:f4:71:0b:39:3c:5c:3d:48:59:d3:e2:14:93:7c:
2c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B4:7D:B2:45:45:D5:C9:A4:B3:2E:6E:0C:24:9E:C8:25:20:FC:01
X509v3 Authority Key Identifier:
keyid:84:3E:76:E1:2D:25:DE:2C:CF:47:19:DF:02:54:E8:53:95:0E:EE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD524S0l3izPRxnfAlToU5UO7rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/93256b-c913-495a-a7f9-67fc8d2065b1/1/hD524S0l3izPRxnfAlToU5UO7rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/93256b-c913-495a-a7f9-67fc8d2065b1/1/hD524S0l3izPRxnfAlToU5UO7rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d3:10:07:4d:bb:86:4a:f1:4c:bf:14:3d:71:16:61:da:36:
8c:4e:1b:ab:b2:e1:c6:47:8b:2c:4f:ad:cd:c3:7d:66:d0:2c:
ae:11:b5:10:f4:a0:d6:48:f7:df:ee:e2:6d:37:df:50:f5:a8:
40:04:21:de:a4:78:52:e7:74:93:aa:eb:14:6e:b2:32:c8:11:
fc:ff:39:9a:ca:89:53:83:0a:04:d4:d8:ae:2b:5a:7b:bf:d9:
47:05:68:ee:33:9c:2b:9b:46:39:98:c0:26:5d:39:14:51:07:
21:99:4a:c6:f5:56:20:37:8e:77:0c:65:66:2d:ac:f3:db:b9:
4d:02:6c:42:50:10:18:7c:5d:89:b2:2a:af:b6:51:83:77:94:
7e:83:f1:40:6b:a1:32:51:ce:2e:48:82:88:97:61:2d:90:e4:
65:9a:52:a6:60:15:ba:98:1f:d6:79:89:90:9a:92:0c:ec:27:
17:3b:14:a7:2a:78:e2:57:14:e8:5f:43:2f:5a:a1:bd:02:14:
0b:49:68:34:c9:cb:8e:f0:be:41:8a:9f:4d:00:b6:44:cd:da:
81:d1:5f:84:d5:16:1a:e1:06:f4:a1:e5:5c:7f:1a:db:e7:10:
18:36:41:20:27:dd:9d:f6:ec:42:f1:10:b6:ac:5a:e4:2e:22:
85:82:72:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:25 2025 by rpki-client