Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
File: 9TK715EK8VrXBk20ptO9ZKfoJ8E.mft (raw, json)
Hash identifier: sVafgifVtpeJPqqnrmSJA/XJc6lrdP7jGiLl40Iqq1o=
Subject key identifier: 2A:49:18:27:BA:0B:6C:11:41:79:EE:81:B3:E1:97:93:F0:A4:2F:89
Authority key identifier: F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1
Certificate issuer: /CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1
Certificate serial: 0194BC72801AA503D7D6BC1CAD6596A70406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
Manifest number: 02B2
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: 9TK715EK8VrXBk20ptO9ZKfoJ8E.crl (hash: apl1EYf8n8XAzGTI+mY/zVENK2DkF41Spd2qBciC7V4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:80:1a:a5:03:d7:d6:bc:1c:ad:65:96:a7:04:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=2a491827ba0b6c114179ee81b3e19793f0a42f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:63:b7:85:77:b0:92:b8:9b:76:e6:70:ed:
c3:47:ec:71:c8:2f:46:8c:70:25:33:a9:49:1e:be:
fc:63:9f:7a:e3:1f:ce:ec:5c:d0:5c:35:5a:33:83:
70:25:8f:b1:4d:ae:8c:49:5b:d6:14:f0:cc:08:93:
6d:e3:a9:75:13:a5:f1:4a:a4:3d:4d:7a:e7:40:f3:
ea:22:48:b2:e7:09:af:e8:25:2a:ef:60:e3:8e:e4:
f9:35:68:96:49:c1:97:76:b5:27:21:fc:94:19:3a:
b6:c8:0d:81:33:df:1a:cc:cc:46:6a:dd:7a:d4:c4:
6a:13:60:c7:be:21:fc:8c:2e:16:09:b4:69:08:99:
2f:35:47:94:e4:d3:b8:ce:a2:eb:05:9d:11:d7:f8:
f9:cf:c3:fc:ae:41:b7:aa:d7:3d:70:df:6d:4b:0b:
72:4c:83:79:97:d6:d1:b1:32:33:87:c8:4b:17:ac:
03:cb:48:ce:57:75:cb:01:76:d6:ca:09:66:65:81:
91:7f:ba:d1:38:a5:a1:46:6f:cd:97:79:f2:1b:4c:
46:ee:ec:62:b8:67:98:52:a4:c8:ca:87:39:69:d7:
90:02:60:6a:df:dd:58:78:e6:2c:85:c7:c9:56:61:
70:c3:fa:2b:43:13:f3:cc:e1:a6:6f:fe:99:2d:dc:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:49:18:27:BA:0B:6C:11:41:79:EE:81:B3:E1:97:93:F0:A4:2F:89
X509v3 Authority Key Identifier:
keyid:F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7a:49:97:d5:00:37:25:9f:d4:54:2a:74:fe:fc:84:67:4b:
3c:7d:ad:4d:60:88:80:b3:fd:e3:da:d3:d3:39:df:7a:71:41:
21:f7:86:ea:e6:22:02:2a:30:3d:e4:80:a8:62:3b:c8:34:5a:
e2:9c:73:d8:76:16:c6:ca:17:3b:e0:da:b2:67:e5:3d:c4:a8:
fb:e9:1a:34:ed:69:c5:58:00:32:be:45:c1:7d:a0:7e:5f:d7:
1e:18:49:93:9d:1b:b9:08:08:e2:31:97:32:b3:c9:be:f9:f5:
11:f1:fc:96:ea:30:7b:40:26:e6:fa:8e:68:0c:1d:65:7e:1c:
34:33:9b:6f:5f:63:27:55:7b:b0:b6:da:21:bf:e2:6f:3d:29:
9b:f6:be:b8:b4:2b:d5:cc:e6:5f:64:32:d4:2e:a2:35:5c:56:
ab:22:98:31:ff:45:38:38:39:01:a4:2f:82:0c:b7:53:ce:f6:
43:ea:60:5a:40:95:f4:db:ef:7b:91:4b:ba:ac:bd:ae:48:bd:
81:60:b0:11:b5:26:68:68:19:0e:dc:f3:3a:66:bd:75:f2:07:
c6:ff:92:1d:5d:b0:2c:86:6c:03:55:8e:20:d2:1b:d3:eb:11:
40:45:49:39:18:e0:e0:40:3b:b7:9d:b5:68:d9:42:76:ab:6a:
7a:bd:f9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:17:49 2025 by rpki-client