Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
File: 6kHoOY_3zvtSIWNusighJuv-O3g.mft (raw, json)
Hash identifier: 46yfUmysCyz70goZHilG1pTUrJYKbdhhXLeYg0XQdq8=
Subject key identifier: 26:07:57:97:F3:EE:43:B4:05:CC:6D:F2:DC:2D:BE:7F:1D:8B:DB:8C
Authority key identifier: EA:41:E8:39:8F:F7:CE:FB:52:21:63:6E:B2:28:21:26:EB:FE:3B:78
Certificate issuer: /CN=ea41e8398ff7cefb5221636eb2282126ebfe3b78
Certificate serial: 0194BBCEDD2CFCB52D4E06D755BB3BF4FEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kHoOY_3zvtSIWNusighJuv-O3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
Manifest number: 79
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: 6kHoOY_3zvtSIWNusighJuv-O3g.crl (hash: HQzG6rqA/U8Sr7zubene3Mqgf+7JJAxbMiiYPOk9SJc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:dd:2c:fc:b5:2d:4e:06:d7:55:bb:3b:f4:fe:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea41e8398ff7cefb5221636eb2282126ebfe3b78
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=26075797f3ee43b405cc6df2dc2dbe7f1d8bdb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:56:9c:dc:fe:37:11:f1:b6:f5:5b:73:d7:7d:
fd:4d:4d:9c:5c:58:d0:d5:7a:16:ca:68:71:67:53:
ad:a0:f1:0c:46:ab:d1:59:8e:9c:de:38:29:0c:26:
f1:03:2f:9e:ed:2e:ff:31:46:1d:5a:94:79:c0:7d:
b7:ce:38:68:36:73:f6:e8:5e:11:ab:f9:4d:51:f0:
87:78:f7:8c:9e:38:f1:34:e2:09:a9:33:e8:dd:20:
4e:38:72:7f:af:73:ec:65:0a:b2:81:ca:12:4e:7b:
cf:11:44:59:a5:91:06:05:ec:bc:db:05:b5:e9:97:
f8:5a:ee:26:14:fe:ac:2e:63:b3:86:26:af:12:e0:
0c:d9:5d:c9:e8:a3:c2:a7:71:f2:6f:13:67:74:09:
ac:9d:6e:43:a8:48:9f:6d:90:da:08:64:9e:3c:ee:
47:c5:45:72:85:8e:77:16:73:fa:06:7a:79:50:68:
3f:b6:0e:a8:e1:c9:b5:a8:f8:40:1f:2b:c6:69:e4:
a5:32:99:eb:a2:74:50:1d:c2:70:68:80:09:33:f5:
07:69:d5:5b:45:84:3f:d1:c3:3c:84:08:c3:95:ea:
98:b7:3d:bc:37:af:b4:45:0f:13:5c:e1:0a:cb:ed:
d1:72:78:6a:bb:bf:e5:12:f2:f4:d7:dd:0f:f4:eb:
9f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:07:57:97:F3:EE:43:B4:05:CC:6D:F2:DC:2D:BE:7F:1D:8B:DB:8C
X509v3 Authority Key Identifier:
keyid:EA:41:E8:39:8F:F7:CE:FB:52:21:63:6E:B2:28:21:26:EB:FE:3B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kHoOY_3zvtSIWNusighJuv-O3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b4:16:fb:b7:5a:99:2d:01:70:39:78:89:a7:6e:3b:7e:fa:
e4:74:4f:26:c2:3c:f1:a6:0f:1a:57:6d:2f:53:6a:2e:35:82:
20:c0:b3:8e:05:23:20:28:6d:40:52:41:6e:f4:72:21:ac:33:
b2:0b:32:d9:d6:ed:44:ba:04:e1:e9:1c:54:cd:9d:b9:3f:ef:
7a:af:3b:f1:0d:65:f7:4e:be:2a:2f:b5:68:ca:65:be:b3:de:
ad:f8:ad:c1:e4:11:b8:58:19:c0:bc:bb:87:4a:7e:d8:99:ef:
58:55:3d:78:d4:1f:03:63:de:bc:f0:0b:d0:d8:46:4f:93:d1:
ce:b9:4b:4d:21:d1:19:ee:2c:8c:10:a4:0f:e2:bf:cb:04:ab:
a6:e6:d9:a1:17:33:6b:41:a3:2c:60:57:8e:c2:0c:7c:68:85:
32:ce:9d:dc:66:04:b5:7a:13:67:c2:10:08:95:5a:ef:69:a7:
c5:b8:1f:32:c4:14:05:95:ef:6f:e2:7b:fa:f3:bb:92:de:51:
3e:93:2e:1a:9c:27:98:3e:fb:25:e5:a0:5d:76:7b:a5:3c:cd:
a1:15:12:27:49:d1:67:a2:b0:23:af:71:96:3c:5e:fb:3d:94:
d9:95:93:3c:1d:52:76:59:ac:7b:10:fe:35:ee:7f:19:fb:8d:
6a:1b:d6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:10:46 2025 by rpki-client