Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/ijBK9VNTwDFG9_OmDGq1gE3aXOE.mft
File: ijBK9VNTwDFG9_OmDGq1gE3aXOE.mft (raw, json)
Hash identifier: TT04jSl6WfUsmjRo4DjsUf/DEhpz9YyV6Zvuz+iOpB4=
Subject key identifier: 62:F3:85:B8:9E:05:2E:20:3A:B2:B1:E3:44:7F:8C:E2:5B:D9:63:F3
Authority key identifier: 8A:30:4A:F5:53:53:C0:31:46:F7:F3:A6:0C:6A:B5:80:4D:DA:5C:E1
Certificate issuer: /CN=8a304af55353c03146f7f3a60c6ab5804dda5ce1
Certificate serial: 0194BD4E36BF47AD1E09E7492695FF2CB0A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijBK9VNTwDFG9_OmDGq1gE3aXOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/ijBK9VNTwDFG9_OmDGq1gE3aXOE.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: ijBK9VNTwDFG9_OmDGq1gE3aXOE.crl (hash: mNSacGHOPgGZ1R1W3yJUZlgJkBWEQaYHfa1sgQUh6Hg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:36:bf:47:ad:1e:09:e7:49:26:95:ff:2c:b0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a304af55353c03146f7f3a60c6ab5804dda5ce1
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=62f385b89e052e203ab2b1e3447f8ce25bd963f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:3a:22:df:c1:8d:5a:12:d0:13:d6:fb:f6:
6e:1e:39:a5:0f:2b:dc:c5:ef:fd:38:eb:79:ae:3f:
3d:cd:77:d1:9a:78:e5:fb:cc:83:e9:1a:83:4b:44:
d9:fb:1b:c7:5f:14:f8:b6:83:ce:f1:33:67:0e:d0:
fc:e9:30:48:8e:ee:a0:57:f8:62:95:2a:4b:32:8f:
2b:0a:d1:4c:d9:72:5a:56:e8:c2:80:66:39:07:50:
86:f7:74:e1:54:b4:f3:d9:0c:26:b8:8d:ca:77:ee:
2e:51:e2:00:36:94:ea:54:1a:2c:d3:fd:f7:b9:b2:
62:c5:16:ad:fa:d5:f1:96:9b:8a:46:d5:d7:41:6f:
6b:0b:35:d9:98:0a:1a:98:16:6b:1f:5a:d2:9d:17:
20:db:7f:7e:a9:25:40:5c:34:c9:18:b5:a1:a2:cd:
99:7a:68:03:98:08:cd:af:2c:9d:6a:06:7c:ee:8a:
12:6e:33:c1:ad:e8:ca:de:a8:77:29:a1:81:c7:d8:
e9:33:9e:70:bf:ff:56:39:6f:63:c8:e4:8b:15:a0:
95:64:c9:13:98:06:47:49:b2:60:c4:7a:52:bb:45:
33:55:97:08:24:68:ed:e2:1b:4f:91:d8:c5:60:f3:
ed:60:95:ec:ea:86:e1:d2:d6:1e:34:c4:99:1e:5e:
8d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F3:85:B8:9E:05:2E:20:3A:B2:B1:E3:44:7F:8C:E2:5B:D9:63:F3
X509v3 Authority Key Identifier:
keyid:8A:30:4A:F5:53:53:C0:31:46:F7:F3:A6:0C:6A:B5:80:4D:DA:5C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijBK9VNTwDFG9_OmDGq1gE3aXOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/ijBK9VNTwDFG9_OmDGq1gE3aXOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/ijBK9VNTwDFG9_OmDGq1gE3aXOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5d:ab:21:00:23:c4:df:c7:6a:fb:a0:40:1a:b5:56:1b:2c:
a8:37:6b:64:18:da:b5:de:9d:6d:f8:15:88:a8:e8:26:6f:84:
5d:87:b3:45:17:b6:f7:e4:10:e7:04:c7:4e:7f:d8:04:78:73:
1c:a6:26:72:82:2d:8b:b8:eb:25:8b:5f:84:ab:a7:02:13:89:
77:a1:26:4b:20:06:e2:3b:0b:53:b8:a4:09:35:e2:e3:a4:df:
c3:22:b8:75:80:58:67:9e:d6:38:75:a3:1f:af:d2:fd:9c:f3:
c9:f7:ce:a4:9f:15:5f:f6:3c:46:38:66:d5:87:96:a4:7c:93:
c2:48:33:6c:bb:08:0e:8c:99:73:0f:48:56:d9:b5:0d:8b:e3:
b1:ab:18:8b:0d:ea:df:24:a6:47:7f:80:46:5a:70:66:33:5f:
43:e4:1f:75:75:30:d1:37:f5:ff:2a:68:0c:70:85:6a:b8:50:
b3:9b:18:a6:a6:e2:a7:5c:af:36:ae:eb:48:30:ff:2f:4b:40:
3a:83:8b:63:ae:ac:bd:f6:e8:86:64:dd:d4:ec:25:b1:19:7f:
06:44:33:5e:ae:96:ca:bf:f2:92:a8:7b:f9:0e:5c:cc:03:d7:
84:7b:33:58:df:97:4d:f7:7a:60:fd:1f:f8:a0:68:90:41:20:
72:aa:40:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:56 2025 by rpki-client