Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File: t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier: qHZPyjnaKg9ivURoSPxntDQxSCp+ecT8mw1zmqtgXFw=
Subject key identifier: 9F:74:60:9D:82:45:18:28:CC:BE:B2:79:76:D3:1C:DA:EF:6C:CA:8D
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial: 0194BC732227D03C4FF950A1A3F5E93AF216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number: 0CAD
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: jeNuRpO8k6Q6fEzhkl7LZT8mHXK3Iux7+15bdxSUZk0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:22:27:d0:3c:4f:f9:50:a1:a3:f5:e9:3a:f2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=9f74609d82451828ccbeb27976d31cdaef6cca8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bd:d0:c0:37:04:ef:d9:b6:f1:b2:85:4c:a5:
0a:2b:b0:35:79:02:9a:98:2a:8e:18:90:d3:d2:37:
3c:09:3d:70:8b:bd:4a:ca:e2:ec:2d:29:1a:30:4c:
2e:47:4a:2d:da:4b:16:3b:cc:71:f4:a2:1c:3f:1f:
d9:21:ab:b5:29:c2:f7:96:b0:7c:24:5f:bb:ee:1e:
ef:a7:bf:82:6f:76:44:9d:87:2a:4c:02:c9:15:47:
83:c6:b3:a7:90:31:4f:55:0b:c5:3d:68:94:13:e6:
5a:61:59:87:a2:1d:86:94:2a:9e:2e:21:fa:29:00:
0f:c2:b6:b9:35:28:20:48:d7:26:d6:6a:99:77:2b:
ab:57:20:53:57:07:34:0a:0a:86:fc:d7:e4:8e:d9:
46:00:b8:e3:3c:93:67:22:ed:5c:b5:d2:98:3b:00:
7f:3b:85:cd:8d:24:e7:00:8f:dc:99:b7:f5:84:ce:
14:aa:b7:80:22:21:72:7e:7b:d6:27:4a:4e:cf:61:
2b:2d:1b:6c:5b:b4:0e:0a:dc:e6:47:42:98:c2:27:
b2:68:a6:56:46:a7:50:a2:3e:00:67:92:06:64:13:
51:83:5f:35:2a:51:d4:d9:96:19:3d:b2:81:99:9d:
2d:ca:7c:6a:62:81:58:84:4d:19:09:29:fd:11:24:
13:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:74:60:9D:82:45:18:28:CC:BE:B2:79:76:D3:1C:DA:EF:6C:CA:8D
X509v3 Authority Key Identifier:
keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:15:b3:9d:ae:82:78:90:d3:39:30:c9:b7:d9:d0:e0:d7:f2:
ef:79:ca:d8:7f:d7:1d:41:c9:28:7d:b9:0a:cf:f4:d9:9f:bc:
d0:79:a9:40:ce:ea:ae:04:20:58:b4:13:6e:7c:e7:ec:1c:d4:
b9:d1:26:50:6f:2c:07:3e:28:68:e3:24:c8:5a:7b:54:11:85:
d8:41:9b:4c:4e:43:00:6c:85:c5:44:37:d6:a8:5f:3b:9f:bf:
d2:56:78:c0:06:46:20:4e:c2:2e:86:e0:77:44:c1:04:7d:e0:
f5:d6:33:14:bc:6b:17:4a:fa:bf:91:7c:d5:bd:f0:75:01:ec:
91:e4:2c:1e:2d:16:73:71:b1:d6:b1:a5:a3:90:86:c4:01:47:
c8:19:b0:4c:6b:6c:f0:a4:2f:fc:c3:0d:93:0f:e4:bc:49:6a:
56:44:96:ab:4a:c9:c2:cb:8e:21:66:b6:8b:e3:e8:df:1a:94:
ce:cf:68:16:cb:bd:ed:4b:04:db:44:ea:28:9a:12:b6:c2:9b:
e0:33:ff:8f:7b:d8:b3:ae:db:9f:1b:67:03:b1:79:5d:8f:2f:
ac:2b:89:65:94:72:01:05:67:33:83:83:32:65:2a:e9:cf:17:
d0:b8:30:49:bc:cc:4b:2c:f2:94:e1:17:82:a0:59:b9:2a:22:
26:1f:dc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:35 2025 by rpki-client