Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/817ecd-ed5d-4ef2-afce-694016809fdc/1/mAIRdoBqZpOzecvaxP8d_MIJbFo.mft
File: mAIRdoBqZpOzecvaxP8d_MIJbFo.mft (raw, json)
Hash identifier: RUA4+kJ9dR0yni/wXLCWfhzk6DruAxzDirh5zMAgrkY=
Subject key identifier: 6B:C2:5E:95:92:F6:4A:E6:16:F5:E6:FB:99:03:B3:57:76:77:19:B0
Authority key identifier: 98:02:11:76:80:6A:66:93:B3:79:CB:DA:C4:FF:1D:FC:C2:09:6C:5A
Certificate issuer: /CN=98021176806a6693b379cbdac4ff1dfcc2096c5a
Certificate serial: 0194BC3C4B2C8F29CDA09A804852ED99B3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAIRdoBqZpOzecvaxP8d_MIJbFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/817ecd-ed5d-4ef2-afce-694016809fdc/1/mAIRdoBqZpOzecvaxP8d_MIJbFo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: mAIRdoBqZpOzecvaxP8d_MIJbFo.crl (hash: zq0FcJk4Vvy4BGFg8Neh2LLtnPn9GKOkw7b+eIV0e40=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4b:2c:8f:29:cd:a0:9a:80:48:52:ed:99:b3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98021176806a6693b379cbdac4ff1dfcc2096c5a
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=6bc25e9592f64ae616f5e6fb9903b357767719b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:e2:0b:bb:d4:15:df:75:aa:7e:b8:04:94:
9d:fc:13:5a:1c:7b:30:a6:0f:79:03:fc:39:6c:52:
78:3d:11:92:38:2a:65:b8:0a:ef:9f:7e:39:f4:97:
8b:56:f0:fc:83:85:48:36:d2:96:f6:e8:d2:9a:f3:
d7:ee:19:73:71:e4:96:c6:78:c3:be:ff:28:b1:6e:
45:a6:a3:71:78:f1:d9:2d:d6:45:64:c6:f6:56:af:
0e:4e:3e:f9:c5:ef:be:3a:88:59:ae:ab:ab:13:79:
3d:0a:f2:fd:9f:60:7b:63:b3:58:d1:69:ee:7c:5c:
ac:28:89:ec:9d:6c:d9:9f:30:57:b6:b5:05:ca:e5:
42:ae:3c:c1:98:e6:61:41:da:79:e2:0c:c9:a1:a3:
1f:5a:59:2f:fb:5b:73:52:30:71:4f:6d:44:f1:d9:
b1:84:9e:32:58:13:60:ed:5e:06:60:87:0e:ed:4c:
0c:4d:d2:9f:3d:8b:3d:9f:d2:de:7b:e3:52:19:cc:
1a:2b:de:93:dd:c4:c4:16:86:1a:2d:71:a9:39:0a:
cb:26:38:f8:22:60:04:0e:53:3f:e7:ed:48:09:57:
82:34:05:1a:89:8a:00:9d:e0:c3:bb:e0:85:e4:b0:
ff:48:cf:4a:a8:2c:58:75:34:03:60:9d:e7:09:c5:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C2:5E:95:92:F6:4A:E6:16:F5:E6:FB:99:03:B3:57:76:77:19:B0
X509v3 Authority Key Identifier:
keyid:98:02:11:76:80:6A:66:93:B3:79:CB:DA:C4:FF:1D:FC:C2:09:6C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAIRdoBqZpOzecvaxP8d_MIJbFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/817ecd-ed5d-4ef2-afce-694016809fdc/1/mAIRdoBqZpOzecvaxP8d_MIJbFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/817ecd-ed5d-4ef2-afce-694016809fdc/1/mAIRdoBqZpOzecvaxP8d_MIJbFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a6:a6:f2:b3:cd:a4:52:b8:3e:48:c8:57:35:e1:32:95:c5:
17:0b:af:d8:05:7d:b3:9a:4e:be:7b:94:fa:bb:50:f6:a8:91:
66:ab:f6:a2:ea:bd:d3:7c:5e:46:ff:13:c9:be:bd:4a:fc:8d:
68:5e:70:e5:2a:1f:7e:5a:2a:96:80:e7:ef:d2:d3:18:75:50:
d4:48:d6:34:a1:b5:a0:cf:26:0e:ea:e7:4b:be:78:60:a3:b6:
b1:25:ed:60:95:3f:f8:f1:ed:10:d6:94:41:39:2e:c5:ef:1b:
88:ec:39:ed:f3:cb:43:78:ee:87:ab:65:ce:1b:05:f9:4a:ab:
47:4a:71:f4:f3:82:ab:30:f8:91:ad:19:b3:c8:2d:d2:45:26:
da:d4:99:85:85:e6:37:d9:b6:b5:e8:94:67:58:7b:ef:17:e9:
e2:af:5d:78:69:17:93:8c:60:7c:34:7c:59:5b:83:b3:d5:1b:
63:2d:86:c6:49:bc:3d:2c:04:b2:18:52:36:35:55:79:28:56:
70:30:66:33:fe:52:38:47:d9:5d:27:e1:36:8a:36:a4:9b:7e:
6a:c8:71:99:bc:64:59:99:0c:38:6d:b8:40:db:3d:42:1f:21:
45:48:39:13:0a:5e:4c:a7:4c:8d:f9:bf:02:ae:30:a2:b6:b7:
c1:70:96:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:30 2025 by rpki-client