Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
File: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft (raw, json)
Hash identifier: WNcrEElYIxsTn0K4fjQOOjY4X6HqNAr7QB8zJbAf8g0=
Subject key identifier: 13:7F:20:0E:A5:91:D9:5F:28:4C:76:43:69:1E:D1:35:8F:FD:3D:95
Authority key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
Certificate issuer: /CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Certificate serial: 0194BD179550E2834B7AD9EB521D3368812C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
Manifest number: 02D1
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl (hash: vFUb0JcKg0zRjyEi30nQqnz0GUDxW8xt0rC/aS+yJ1w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:95:50:e2:83:4b:7a:d9:eb:52:1d:33:68:81:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=137f200ea591d95f284c7643691ed1358ffd3d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:9c:af:3e:90:61:4b:70:43:16:c8:41:b5:
d4:7e:a3:0e:0c:0f:73:60:ff:67:6b:2a:d1:10:79:
2f:19:f4:33:7c:a6:0e:35:34:3a:8a:d7:4f:5e:45:
b2:7d:fd:24:49:e1:0b:ce:6c:73:1f:49:ab:70:25:
c2:9b:60:a6:bb:6a:03:9e:9d:83:82:2f:92:30:d4:
35:c5:3c:91:07:d3:54:03:8b:8e:18:2a:e7:e5:c9:
0c:70:ad:12:4d:b3:57:e7:8f:58:19:17:94:32:3b:
b9:1d:db:b5:f3:1f:03:a4:85:98:c5:05:10:54:68:
58:ac:6d:71:66:f0:51:82:7a:b5:4d:f2:af:cb:f6:
58:f9:0e:a8:0d:26:79:8e:8b:56:a0:20:17:03:d1:
b8:20:85:0f:93:fb:c8:fd:d7:d3:2c:be:48:b0:f6:
a7:ec:83:8b:5d:79:f4:0a:17:34:7d:9a:02:fa:5f:
df:a4:3c:af:d1:0a:99:44:12:c3:7c:aa:68:01:80:
eb:95:a7:99:88:61:02:b4:25:fe:9b:2d:60:66:d0:
7e:24:f7:cc:89:67:8b:25:77:7f:89:a2:76:4e:ec:
a7:1a:84:c7:42:8e:0b:5e:9d:3b:32:41:41:c3:6a:
31:71:f5:56:26:bf:da:ee:4f:70:2e:43:d3:33:62:
65:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7F:20:0E:A5:91:D9:5F:28:4C:76:43:69:1E:D1:35:8F:FD:3D:95
X509v3 Authority Key Identifier:
keyid:9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9d:23:64:e6:86:5a:41:ff:48:b3:42:d1:97:ac:21:a3:50:
a6:ee:80:05:16:25:28:92:f2:d7:95:e8:f7:84:57:a2:02:0d:
6a:ef:9a:ef:96:46:55:3f:40:bc:7e:7b:b6:1f:f8:2d:a3:bc:
a4:2f:a3:97:2b:07:d1:fb:82:4a:85:cb:b6:8d:83:94:98:6e:
d2:87:eb:8b:b8:0b:ca:6d:38:d5:06:c6:47:72:28:ab:f9:44:
8d:01:fb:43:e4:d9:5a:e8:b8:a5:6b:9c:c7:3e:80:36:bf:77:
38:29:0b:24:d0:59:b3:30:a9:4e:ea:ce:d0:d1:87:8d:29:d5:
55:7e:dd:b2:4d:41:58:0f:a9:e1:24:94:7b:b4:4f:0c:34:3b:
01:84:b0:89:1b:00:e2:b7:86:a8:a3:4e:a9:7f:93:ef:c5:85:
44:9d:27:dd:9a:06:35:e4:52:32:1c:72:21:a4:ab:11:1c:21:
04:61:ce:cd:b7:b9:64:2c:d7:65:6a:18:52:a8:14:11:92:a1:
bc:ed:3c:aa:71:38:90:ce:b1:ce:b5:01:4a:c7:d5:83:05:b3:
f1:13:f4:ee:89:56:b2:49:e6:31:1d:63:39:6f:03:a8:17:e9:
fd:1b:14:7a:85:5c:bd:d1:63:1f:ad:92:71:56:bd:49:47:7f:
b8:43:de:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:29 2025 by rpki-client