Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
File: 9jOGnDZCtefqAii_DgspXO_MTd8.mft (raw, json)
Hash identifier: KsOdc5h7ZgAC0nEdpzVXSoCLNWL4K30KdFMmyNX64MI=
Subject key identifier: A1:A4:46:50:92:7B:3B:FA:70:BC:E8:D4:8A:56:F4:B8:29:29:37:68
Authority key identifier: F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
Certificate issuer: /CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Certificate serial: 0194BC72E5470F32154D87C49F0358AC88D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
Manifest number: 0EA0
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: 9jOGnDZCtefqAii_DgspXO_MTd8.crl (hash: t/+nm2VFM1UnpiD63Q5r56cJ9ZbDRvcx7JvArUvdRsQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e5:47:0f:32:15:4d:87:c4:9f:03:58:ac:88:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=a1a44650927b3bfa70bce8d48a56f4b829293768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:88:67:3d:39:78:9a:8b:15:2e:cc:4a:8a:80:
aa:e8:8a:d0:77:cf:76:d7:88:87:bd:74:1f:3b:d5:
6b:6f:bb:34:e1:23:ba:4e:78:c6:9e:c4:1d:e1:c4:
23:08:86:aa:7b:66:b5:d4:7b:65:5e:2b:a4:3e:41:
3a:f5:e0:25:cb:96:57:08:ad:54:91:7f:96:16:e2:
7a:c8:0e:17:42:fc:1a:37:bf:33:be:30:97:59:ca:
f0:6f:ca:a9:91:b9:32:1d:7a:0b:01:eb:ff:36:d4:
1d:42:93:33:e8:77:f2:50:6b:6d:0d:48:01:69:82:
02:0a:81:f8:bb:1e:4a:04:00:43:76:58:9b:42:05:
7c:fc:1b:e5:d7:c5:44:ac:44:57:ca:73:89:bb:43:
7f:3e:23:e5:10:74:41:91:b5:9d:3f:1c:cd:45:1d:
91:32:75:2f:28:01:68:7c:e0:39:49:58:2c:99:34:
f4:df:38:0f:bc:ba:03:b5:46:32:30:de:fa:06:0c:
11:8a:de:b7:3a:4f:35:4c:1b:34:75:4d:7c:9d:25:
fc:10:0d:68:b3:bf:48:22:39:ec:84:ed:48:f4:23:
70:d9:04:6c:f3:db:48:3b:e4:e9:ca:a9:ea:1e:7c:
e2:22:4d:75:f6:3b:0d:fb:c7:8a:33:7b:18:e5:b2:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A4:46:50:92:7B:3B:FA:70:BC:E8:D4:8A:56:F4:B8:29:29:37:68
X509v3 Authority Key Identifier:
keyid:F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9c:43:8f:3d:ef:7c:e7:d7:d8:b7:ce:5c:cf:0b:b2:84:c4:
6c:d9:50:5d:99:11:ca:b9:5f:a5:10:95:50:5d:2d:75:48:fa:
aa:92:09:cd:6b:f1:ec:a7:f9:76:71:eb:0a:72:ad:3b:da:84:
a3:86:9d:96:6b:ec:b3:6a:32:6a:8b:aa:5d:16:89:52:7d:e7:
4d:f0:c5:45:c3:6a:b1:2d:c4:89:0d:91:fb:52:dd:73:a5:d7:
5e:7a:3d:7d:e1:cf:69:e7:16:99:4f:ce:c3:2e:0d:42:49:66:
10:76:8e:58:19:4e:be:00:02:c3:ce:d0:b7:dc:3d:8e:38:19:
4b:0c:be:a7:8b:2b:57:fe:97:88:9c:9e:6d:a7:41:b5:29:38:
76:f7:6b:8a:8e:b4:28:39:26:84:32:97:2c:77:ae:0e:d7:9a:
e5:a5:65:2b:53:87:28:6d:ee:23:36:e6:78:64:52:48:c4:22:
64:ef:f7:99:ac:23:5c:44:c7:58:85:a6:49:7c:26:dd:60:88:
d7:9d:a1:aa:39:73:45:1d:0b:a5:2a:52:66:54:06:74:1a:64:
ac:3a:da:84:22:89:50:5a:2f:86:1a:97:61:bd:e9:06:8d:f8:
a4:9c:35:45:49:72:f8:fd:92:9c:ed:55:76:b8:b6:7e:c7:70:
e5:3a:20:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:57 2025 by rpki-client