Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
File: mXZKyKibCft4hQ10xo4dqo8-KvE.mft (raw, json)
Hash identifier: NQfZO2pWc0uKtvk4LJEyVwSmUE1WckajSL7I4zFYu88=
Subject key identifier: F0:57:B4:02:57:FC:E1:0D:44:F7:7D:5D:6E:1D:A0:86:47:97:CD:19
Authority key identifier: 99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1
Certificate issuer: /CN=99764ac8a89b09fb78850d74c68e1daa8f3e2af1
Certificate serial: 0194BC3C5479A34692239307A8CA2FDD5736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
Manifest number: 063D
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: mXZKyKibCft4hQ10xo4dqo8-KvE.crl (hash: oPfMSdCg3LyNnNgM4RPMpvy9u92U1K1xs5D6PUQ74ns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:54:79:a3:46:92:23:93:07:a8:ca:2f:dd:57:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99764ac8a89b09fb78850d74c68e1daa8f3e2af1
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=f057b40257fce10d44f77d5d6e1da0864797cd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7d:62:5a:f7:6d:ec:2f:4e:3f:3c:2d:80:48:
4a:d5:85:18:0c:5c:28:7c:32:90:af:21:b1:5e:aa:
66:97:c0:22:4c:e7:5f:53:95:82:f5:a4:b6:50:41:
6e:74:7d:6a:fe:63:c8:fb:c0:9b:30:01:8b:ee:97:
b2:a1:08:67:cb:8f:13:79:be:bc:86:16:62:a2:82:
44:3e:cd:bf:f7:54:37:76:ac:3b:ba:0e:bb:40:f3:
dc:64:42:d4:39:dd:3f:e4:67:de:ff:16:47:66:e8:
e6:d6:4d:ae:88:ee:1b:b2:84:cf:f5:4d:e4:77:cb:
8a:72:18:ed:ef:49:34:a9:3e:cf:b9:b0:49:80:50:
1f:16:6f:7b:a0:e1:60:94:6b:a2:9f:9e:4d:f0:53:
94:78:25:14:51:90:f6:1c:56:78:9e:e8:48:30:d8:
5c:e0:51:8b:f7:ca:f6:ae:1e:b3:60:ed:b8:47:1d:
62:07:62:40:2d:45:75:d3:f6:3a:0d:91:97:01:54:
78:5a:26:6c:de:9b:e7:73:d6:c0:43:f0:84:77:3a:
fa:bb:99:fc:cc:4b:56:c4:b6:b9:a7:17:04:ee:b8:
1f:f2:84:65:ca:d2:f3:86:13:0c:84:f1:da:fd:28:
91:cf:a9:22:ce:db:4f:65:e6:72:6b:09:58:88:38:
aa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:57:B4:02:57:FC:E1:0D:44:F7:7D:5D:6E:1D:A0:86:47:97:CD:19
X509v3 Authority Key Identifier:
keyid:99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:93:e0:f5:fa:57:f6:d0:77:4d:03:4a:85:e5:55:e3:eb:ff:
71:39:74:2c:5a:59:8f:d5:a0:6f:fa:85:81:fa:69:c1:e9:de:
75:1e:15:24:cd:19:cf:b2:4f:d4:b6:55:69:ee:a0:bf:f2:d9:
44:67:9d:c1:db:c8:c5:af:25:c4:30:93:d5:74:e4:e6:db:b7:
d1:cb:02:c4:ed:76:44:a8:c4:99:82:47:71:c8:08:08:31:64:
a9:f8:e1:9b:28:ac:48:88:e0:99:38:16:fc:53:59:88:41:6e:
97:6d:0b:cf:d6:12:b7:0f:e0:dd:d8:f8:0c:b8:00:4b:ea:c8:
98:07:c3:16:39:12:e7:86:19:98:be:c2:1e:d7:d1:c1:ee:3c:
45:18:b0:35:ec:ae:f4:c3:f0:83:70:af:99:77:86:ed:9b:e3:
ce:70:ea:9a:06:54:35:38:2f:82:70:6e:44:d1:de:a1:c4:c5:
57:58:d2:ac:16:30:ff:c9:9c:d2:96:24:da:5e:ad:9d:60:a7:
99:63:b7:91:2d:8f:78:98:a4:81:e8:46:51:9d:d0:84:05:73:
dd:24:1b:2b:d7:e1:a4:b0:ba:76:c2:64:17:66:68:bd:7f:a8:
18:3b:ec:47:48:0b:a4:41:3f:2d:ee:04:b5:25:39:8b:28:91:
fd:b2:87:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:07:17 2025 by rpki-client