Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
File: U-r4Oizdyf0L4onM-vMrMjMEz04.mft (raw, json)
Hash identifier: RldFWRoQ7ISJKFXuPiFo3GACgZXGTUlCJphlrJpeNBo=
Subject key identifier: 0A:69:39:BB:1E:9D:05:9A:BB:10:6C:C3:4C:1B:23:3A:E9:C9:BF:08
Authority key identifier: 53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
Certificate issuer: /CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Certificate serial: 0194BC72CD31577E1D6A7408B97F4A7F6657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
Manifest number: 0AF8
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: U-r4Oizdyf0L4onM-vMrMjMEz04.crl (hash: nlT+Mf+yFT4FJZaFiQmPw0v3WoyIKjoOw7h+C8kjM/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cd:31:57:7e:1d:6a:74:08:b9:7f:4a:7f:66:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=0a6939bb1e9d059abb106cc34c1b233ae9c9bf08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:35:cf:ec:38:63:3e:e1:a4:31:59:c8:6a:
a1:c4:d6:8b:37:f5:9d:7a:72:57:d4:90:18:27:1c:
ab:30:4d:ce:ad:13:4c:78:ed:36:dc:11:a7:66:f2:
34:89:9f:20:b4:d5:1e:5a:2e:19:2e:e5:98:e4:10:
3e:d4:59:d5:f7:fb:7e:ee:43:4b:69:c0:f1:03:c2:
b2:2c:95:8c:6f:b6:cc:a4:f3:fb:20:e7:a4:ce:42:
cc:6c:b4:1d:1a:35:43:63:19:96:6c:c9:fc:50:d9:
be:1a:19:48:ef:e8:ae:81:ca:ab:69:8c:b1:55:17:
96:62:2a:0f:fe:f3:2b:4b:e0:40:7f:1b:e7:96:c5:
ab:8e:49:fd:fd:86:44:20:08:2f:f8:af:60:08:92:
f8:48:ac:9b:0f:7b:5b:a0:9c:dc:ae:a7:db:5c:fe:
a9:29:e8:3c:82:06:dc:00:cc:df:75:fa:ec:a1:90:
45:bc:97:1a:b6:79:7f:dd:33:c7:ab:58:4e:98:cd:
db:2a:6c:d5:be:38:5e:ec:e9:7f:02:9e:5f:47:db:
c8:d2:7b:99:6e:c7:8e:15:bb:0d:af:81:c3:38:b3:
38:f1:d4:73:9b:3c:5a:82:04:30:26:69:a5:a0:e2:
12:26:ee:95:50:30:15:9f:a2:22:90:d8:b2:b3:e5:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:69:39:BB:1E:9D:05:9A:BB:10:6C:C3:4C:1B:23:3A:E9:C9:BF:08
X509v3 Authority Key Identifier:
keyid:53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e7:8d:26:55:15:1b:00:55:7b:70:8c:3d:68:d4:84:4c:75:
84:1e:b6:85:32:d3:ed:d2:b7:01:aa:53:18:30:70:90:47:c6:
9a:42:67:33:b1:ad:7f:ee:66:55:15:77:70:f6:36:db:c1:06:
e3:a2:a6:91:2d:5c:08:e1:65:39:04:ea:4a:60:2c:33:8d:3e:
59:be:36:2d:61:e3:0b:41:67:2b:d7:e3:4a:4c:87:9c:b1:c4:
b7:e2:33:67:1f:ed:c5:7c:e9:6f:f6:88:e1:2c:a1:ed:49:a8:
00:d9:b9:7d:a7:11:51:1e:ed:cb:9e:5b:89:65:8a:c0:d5:63:
26:97:95:da:12:63:6b:ff:60:69:f8:df:06:5d:98:4b:49:e0:
9f:7d:a2:3f:b3:e5:67:5b:31:11:03:13:93:51:4d:5c:4a:e8:
79:76:51:d3:67:73:e8:a2:40:5e:63:4a:cc:ab:d3:b4:02:f7:
6c:7e:f8:b9:93:ea:6a:63:c1:af:a7:7a:c7:ed:96:03:8c:9b:
c4:50:59:df:2d:2c:13:37:3b:88:82:4e:6c:04:bf:ea:95:ef:
8d:45:a1:4d:11:7f:77:b6:ae:ff:57:ee:0b:ff:05:97:cd:d8:
5f:a9:27:c8:a4:9c:8e:4c:cd:be:73:8b:d1:bd:10:1c:37:59:
c6:6d:ef:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:26 2025 by rpki-client