Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/84e1d9-9407-424a-a60d-63b0a6bc2cc6/1/8usr6H0DSgjaVyJZ3C303iqsySw.mft
File: 8usr6H0DSgjaVyJZ3C303iqsySw.mft (raw, json)
Hash identifier: jB5umY4h87Ao+yIr8ypf9hG+kD45E6SpXOh3UQdaSvM=
Subject key identifier: F9:5F:DB:EA:B6:B1:83:67:85:2F:D1:D7:A3:76:C1:A2:86:15:6D:0A
Authority key identifier: F2:EB:2B:E8:7D:03:4A:08:DA:57:22:59:DC:2D:F4:DE:2A:AC:C9:2C
Certificate issuer: /CN=f2eb2be87d034a08da572259dc2df4de2aacc92c
Certificate serial: 0194BBCEAEC1E77F2D6A56A9FAAA264B8AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8usr6H0DSgjaVyJZ3C303iqsySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/84e1d9-9407-424a-a60d-63b0a6bc2cc6/1/8usr6H0DSgjaVyJZ3C303iqsySw.mft
Manifest number: 047C
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: 8usr6H0DSgjaVyJZ3C303iqsySw.crl (hash: SH91vIiQYgSke9LTA/jl099kGal8GpMYAqQCyCNTbKA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ae:c1:e7:7f:2d:6a:56:a9:fa:aa:26:4b:8a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2eb2be87d034a08da572259dc2df4de2aacc92c
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=f95fdbeab6b18367852fd1d7a376c1a286156d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:f2:90:f6:5f:7a:27:c9:a1:dc:23:7d:b0:
bc:e8:ad:cc:fd:9c:23:2e:01:14:7f:b9:c5:27:49:
83:83:b6:0a:e5:2b:3b:9a:58:23:68:87:bb:28:d5:
ac:e6:23:ff:94:cd:eb:62:45:f3:ce:25:bc:08:3c:
6e:84:fa:54:d8:69:45:2f:ff:b2:10:37:6c:b2:b1:
0a:6a:ef:86:5a:d8:38:94:e4:8d:6e:2c:14:c8:cc:
de:a3:7e:da:b3:68:98:46:fd:c8:5f:96:14:38:f8:
ca:15:19:7a:42:6d:a0:3a:8a:3d:c5:19:d8:eb:5a:
6b:d1:a2:af:e6:a3:fb:8f:fe:56:e4:95:6e:8a:12:
77:52:2a:d2:a9:c5:8b:e3:88:6c:13:0e:b3:b6:76:
a9:c3:02:21:9d:87:87:f0:99:37:1a:58:89:13:8a:
24:9b:84:41:a0:d0:5b:e3:08:dc:cf:af:ea:d9:d3:
9f:dc:34:7d:d6:14:83:4c:05:c6:c1:f4:89:cb:7c:
48:f3:dc:1d:e0:0f:42:17:82:48:97:e8:db:91:d2:
19:77:54:dd:fe:39:52:3d:85:95:be:d6:12:91:c7:
58:4b:ab:2a:fd:49:75:15:96:dd:ce:47:c5:20:f4:
86:fc:6e:af:54:88:63:b0:ca:22:70:f6:1d:76:21:
cb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5F:DB:EA:B6:B1:83:67:85:2F:D1:D7:A3:76:C1:A2:86:15:6D:0A
X509v3 Authority Key Identifier:
keyid:F2:EB:2B:E8:7D:03:4A:08:DA:57:22:59:DC:2D:F4:DE:2A:AC:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8usr6H0DSgjaVyJZ3C303iqsySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/84e1d9-9407-424a-a60d-63b0a6bc2cc6/1/8usr6H0DSgjaVyJZ3C303iqsySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/84e1d9-9407-424a-a60d-63b0a6bc2cc6/1/8usr6H0DSgjaVyJZ3C303iqsySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8f:a6:20:0c:07:45:c5:01:bd:c2:aa:6a:91:11:e7:66:52:
a5:7a:f1:ac:73:9f:06:22:0e:2a:c1:a6:71:7d:29:9b:54:22:
0d:75:de:a7:61:de:12:28:6a:a5:96:23:c2:ad:40:03:95:ae:
dd:b6:24:4a:ef:51:3b:69:c9:51:97:e5:7f:e4:5a:44:b4:19:
ab:47:70:9c:ac:e8:51:3f:03:00:1a:c0:fa:14:0d:96:24:55:
c7:e1:fe:9f:de:af:28:4e:b9:33:bc:17:c5:ae:64:a9:2b:f1:
cd:b2:63:75:d0:3b:57:2c:1f:43:8a:fc:be:d4:16:15:b6:f7:
ac:5a:b1:14:71:3b:2b:c8:83:e9:6d:a3:9d:9d:3f:fe:1f:4e:
13:9c:d2:5b:18:c4:b8:eb:7d:00:89:7b:23:0e:bb:6b:92:ea:
7c:6a:48:5b:43:48:65:ab:56:47:a8:bd:08:7d:24:c4:e3:3e:
55:37:37:5a:5b:5d:0c:0b:eb:5b:67:5f:44:c7:85:1c:58:ef:
63:08:18:71:e7:3c:c8:1c:2d:25:7b:d8:d2:10:d2:4c:06:f9:
6e:a0:93:a6:c3:ee:9a:39:57:68:61:a7:fb:11:0a:57:53:a6:
88:2d:1a:4b:ea:23:57:ea:7a:b5:03:46:5b:71:55:af:4f:f3:
cf:07:8a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:40 2025 by rpki-client