Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
File: I8cVVBujctWQ1odn14zmmEABMFk.mft (raw, json)
Hash identifier: EPO/6tSphv7HWm20oRYU77stcVYJr9ehtOjPToyzBw0=
Subject key identifier: AC:62:37:8C:D4:E9:FA:5A:81:B2:E0:BE:51:4F:0C:3E:0D:77:C7:E5
Authority key identifier: 23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
Certificate issuer: /CN=23c715541ba372d590d68767d78ce69840013059
Certificate serial: 0194BBCE1AA5ACDB725EACCD6F9AF9C036C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: I8cVVBujctWQ1odn14zmmEABMFk.crl (hash: No5Axctbh1R7BWY1sJJYX7hYnleXCnVqfR2DLRO4+Cs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1a:a5:ac:db:72:5e:ac:cd:6f:9a:f9:c0:36:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c715541ba372d590d68767d78ce69840013059
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=ac62378cd4e9fa5a81b2e0be514f0c3e0d77c7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:d2:e9:ff:b9:01:91:32:10:6c:2c:d7:cd:
c5:a7:13:a2:08:86:85:c6:a2:78:70:e1:ec:8e:79:
35:ee:8f:ce:53:32:c2:95:84:9e:cc:7b:95:a4:c2:
7b:c0:3e:e5:1e:6d:92:92:8f:10:83:4c:cb:c5:18:
44:98:57:64:f0:f4:a6:f2:a6:21:ba:d8:b9:c3:dc:
30:f9:68:48:f9:80:80:bf:11:f7:23:6a:a3:f6:4e:
88:e7:a7:58:4b:b0:af:b9:2c:74:49:d5:d0:8d:7c:
94:b7:29:f1:30:07:2b:f0:65:77:5e:b9:b7:b3:fc:
7f:bd:df:0d:55:87:78:71:1a:51:ec:1d:10:65:94:
f9:82:e4:2c:7c:ac:a1:ea:dd:f5:9b:f4:c8:f0:0c:
d7:3b:da:f9:7e:26:b9:85:31:d0:9c:a4:2b:be:11:
b9:8c:78:8d:b4:f0:64:6e:28:4e:06:6e:5d:d7:a7:
6c:66:a5:58:eb:9d:73:fc:60:cf:ac:93:99:e4:d1:
34:fb:fd:d1:d7:57:7f:67:fe:54:2c:d9:84:f5:44:
50:78:cd:80:12:4f:d0:8f:f2:b8:05:42:5f:24:73:
71:8a:6e:f7:6d:fa:c4:77:50:48:4b:fb:6e:60:a0:
ac:c3:b0:6a:f8:48:f4:86:39:c7:a8:81:e9:07:95:
69:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:62:37:8C:D4:E9:FA:5A:81:B2:E0:BE:51:4F:0C:3E:0D:77:C7:E5
X509v3 Authority Key Identifier:
keyid:23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6a:4a:cc:1c:c4:23:4b:a0:a2:21:46:fe:ba:27:5b:ae:b6:
91:05:5a:dc:ba:ef:ef:13:b9:42:16:e4:28:63:6e:f6:ea:c2:
4c:c2:92:bd:71:f5:7f:9f:6d:bc:44:a1:9e:60:79:6b:71:53:
2d:f5:d4:cb:33:12:a8:57:20:6b:52:88:2e:fe:25:88:e0:27:
80:10:09:26:0c:80:fd:c0:ca:39:ab:3f:54:d6:77:99:ea:e9:
26:46:a0:1c:86:25:45:fe:f2:0e:97:f1:63:8c:67:e8:77:57:
0f:9d:fa:51:02:8e:7a:b9:6a:79:85:c9:53:f0:4d:7d:c6:6a:
86:09:31:f8:16:fa:02:93:df:87:f9:5c:89:d3:e2:0a:47:10:
e5:18:5c:ec:63:53:8d:67:db:4b:6d:ef:7a:41:64:e2:19:b0:
91:ec:cd:92:30:6c:8e:79:93:3f:4f:47:e4:4a:56:a7:ce:f9:
ea:79:6d:f1:73:ea:9f:33:bf:31:a5:42:3a:82:08:65:df:23:
39:53:23:69:51:4d:73:5e:eb:6e:1f:9a:d0:63:02:e9:da:50:
80:92:58:6f:7b:d8:8c:3f:a4:25:0b:9e:f6:40:b5:13:9e:32:
d4:55:8a:2d:e9:5f:0b:11:28:71:50:4b:cb:cf:e7:91:d6:dd:
cb:43:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:35 2025 by rpki-client