Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/03b7c0-d1fd-4281-a9ce-b2edcd3d61e6/1/0jYWAW5P6vVGHkCeVhTvGd8BX6w.mft
File: 0jYWAW5P6vVGHkCeVhTvGd8BX6w.mft (raw, json)
Hash identifier: ZKi0tJqr4Xd31h9saTa4WNiKVcjzea9OszJjYyG6N58=
Subject key identifier: 96:69:47:C7:67:E3:7C:02:37:5A:00:BC:8A:7C:13:5F:90:58:D2:92
Authority key identifier: D2:36:16:01:6E:4F:EA:F5:46:1E:40:9E:56:14:EF:19:DF:01:5F:AC
Certificate issuer: /CN=d23616016e4feaf5461e409e5614ef19df015fac
Certificate serial: 0194BBCF01559C358DCB0731052AD5BF3B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jYWAW5P6vVGHkCeVhTvGd8BX6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/03b7c0-d1fd-4281-a9ce-b2edcd3d61e6/1/0jYWAW5P6vVGHkCeVhTvGd8BX6w.mft
Manifest number: 0994
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: 0jYWAW5P6vVGHkCeVhTvGd8BX6w.crl (hash: cyEskCr/vCexHos85Qd/t8LoindQm4BkduCNBVw0qhc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:01:55:9c:35:8d:cb:07:31:05:2a:d5:bf:3b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23616016e4feaf5461e409e5614ef19df015fac
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=966947c767e37c02375a00bc8a7c135f9058d292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:90:8b:b4:5e:35:29:28:14:07:de:58:46:
56:b6:39:0f:70:3e:ce:5d:d2:09:70:86:cd:2e:b9:
37:00:a9:74:c7:80:fe:a7:19:0b:fc:70:67:00:01:
27:13:53:e5:13:7e:b2:0e:d6:76:75:11:63:6e:bf:
b3:0d:ae:11:03:cc:36:3a:07:30:a7:2a:06:33:b3:
d9:16:88:2a:f1:82:f0:7e:c8:24:de:42:39:a9:b9:
52:ef:95:da:ad:a3:2b:7c:43:d0:52:14:7a:4d:11:
fc:31:d3:85:45:99:ba:07:00:e3:1a:09:87:c0:cd:
b5:33:4a:8d:ec:eb:c1:ff:38:ae:e8:f5:ca:3a:4a:
f9:d6:72:3d:4c:89:ed:6d:26:cc:9b:78:2e:05:46:
79:de:86:af:ee:db:4d:44:13:8a:99:fd:47:a8:3c:
ca:b1:dc:76:7c:ae:09:a6:c5:32:94:bf:5a:36:f5:
23:82:c0:ba:c0:c6:4f:51:50:1e:a7:c3:c2:ba:0f:
0e:a2:73:0a:a2:5f:6e:cc:48:6c:9b:63:2e:d3:fa:
55:29:86:56:3b:08:a1:e5:78:27:d0:d7:24:e5:39:
22:f5:54:be:10:07:6b:4a:39:9f:bc:fe:41:81:51:
ce:9c:60:61:54:27:22:40:ba:1e:bc:aa:b3:9a:60:
7d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:69:47:C7:67:E3:7C:02:37:5A:00:BC:8A:7C:13:5F:90:58:D2:92
X509v3 Authority Key Identifier:
keyid:D2:36:16:01:6E:4F:EA:F5:46:1E:40:9E:56:14:EF:19:DF:01:5F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jYWAW5P6vVGHkCeVhTvGd8BX6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/03b7c0-d1fd-4281-a9ce-b2edcd3d61e6/1/0jYWAW5P6vVGHkCeVhTvGd8BX6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/03b7c0-d1fd-4281-a9ce-b2edcd3d61e6/1/0jYWAW5P6vVGHkCeVhTvGd8BX6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:fd:7e:33:ca:35:6d:f7:d3:aa:bf:c7:e5:f8:dc:e7:d9:94:
30:a8:37:d9:5d:72:05:b1:5b:f4:71:39:66:17:b3:dd:23:b2:
62:26:38:07:c4:99:44:c2:b0:0e:d8:3e:ef:4b:d4:f5:58:80:
aa:1e:0c:e8:b7:69:8c:fd:a4:0a:75:6f:af:57:f0:62:1a:91:
71:61:e0:99:8f:1b:71:62:f0:ba:7b:7f:7d:41:17:f5:b7:16:
6f:42:0f:14:06:fa:c3:58:b0:11:ac:bc:0a:a0:93:62:27:b4:
98:fb:fa:94:91:13:48:8d:66:f7:a0:7a:95:20:2d:cc:a8:ad:
0b:82:e5:e2:8c:f5:74:10:50:26:a9:4d:77:ad:91:f4:98:57:
7a:28:d5:27:75:0b:b4:5f:c7:3a:3c:48:6e:dd:6e:70:bd:67:
e2:b1:d2:7c:e3:5a:ee:ed:b8:33:f0:16:64:9e:08:4d:39:e7:
63:11:8c:8a:62:a6:c3:0f:f2:2e:f9:25:b0:af:c7:2d:6d:f1:
98:99:9c:48:03:c1:3c:b7:4c:f3:72:87:d2:bb:10:fa:99:3e:
3d:97:47:63:b6:b6:f5:93:1d:06:60:50:20:38:90:4b:15:e6:
aa:6c:b6:47:bd:92:71:54:48:47:92:88:4c:7c:b5:b6:cb:3e:
f3:18:88:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:41:01 2025 by rpki-client