Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
File: D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json)
Hash identifier: eYfQfX+65utsnHmKqUMe+bf2+ut+JimW7cOu++Ajv34=
Subject key identifier: 0D:87:1A:34:E0:C4:45:87:95:5F:6D:44:DF:D5:9D:1B:C9:2E:5A:75
Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
Certificate issuer: /CN=0f79760520b7c15c2e4260308272b849f88ed677
Certificate serial: 0194BC3C1ADC070925AE76DF9777F90E7F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: 7V0wlnBKirJHLuyG7gSMOBq6welP5Icky4cV/L+sv74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1a:dc:07:09:25:ae:76:df:97:77:f9:0e:7f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=0d871a34e0c44587955f6d44dfd59d1bc92e5a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:49:05:ed:2a:85:ba:a3:10:a0:28:82:ee:
bd:8f:12:f2:00:f7:04:cc:f5:39:1e:44:0d:48:4b:
12:ef:e9:bd:29:5e:93:fc:bb:18:17:6b:84:8d:a8:
09:87:e6:57:85:5d:69:29:c2:36:3d:72:0b:3a:f5:
33:5f:b3:55:41:26:53:b5:74:f6:80:6b:5b:b5:28:
92:12:4c:49:04:89:2c:db:35:e1:23:8f:f9:1a:58:
9f:96:be:cf:08:0a:11:c6:fa:40:69:54:40:3a:2e:
30:a0:b9:b0:d5:fb:f6:a1:d4:d8:15:5a:65:e5:26:
5a:11:10:c7:10:fe:6e:dc:0d:c5:20:e0:2c:85:07:
cd:d9:b6:4f:cf:c8:de:8d:46:04:6a:08:5c:37:bf:
23:6f:29:3b:9a:34:aa:9e:71:a2:19:a2:81:97:5a:
26:de:05:e2:3c:0e:82:55:af:0d:b7:46:82:cb:98:
d6:50:04:2b:7f:e6:d3:ca:f2:f9:78:4a:4b:c6:7f:
e7:e9:45:af:39:84:1f:60:17:5d:f1:85:33:46:98:
6b:e2:74:a7:9f:1f:b6:e5:db:02:ab:bb:f4:65:e6:
c6:44:84:47:5d:56:e0:38:0d:ab:ae:bf:37:f4:86:
87:09:94:b6:46:81:a6:0a:29:b1:d6:af:08:77:33:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:87:1A:34:E0:C4:45:87:95:5F:6D:44:DF:D5:9D:1B:C9:2E:5A:75
X509v3 Authority Key Identifier:
keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:15:36:15:b4:26:48:96:bd:17:38:62:db:ec:66:2e:b3:0e:
8f:2d:58:05:2a:a4:94:a0:d4:cf:07:88:ea:f8:4e:8e:b0:6a:
0e:a4:a8:c7:8d:36:ac:6f:83:b5:70:bf:61:4a:bb:dc:40:3e:
13:cf:fb:fe:7e:7d:1d:16:41:d1:a4:a4:95:b1:3d:bb:f0:36:
9e:dd:b5:83:6b:5c:d7:67:1c:1a:5b:8a:00:6e:a1:eb:1c:b6:
fd:8a:66:d3:e8:ad:1f:b9:3f:2f:a5:94:4b:48:b7:66:16:87:
1c:8c:d5:7c:43:5a:33:8e:bf:74:27:78:e4:35:80:43:77:24:
50:ac:10:7a:56:b2:49:23:80:6e:ea:5c:a7:18:c0:f0:c9:bd:
32:0b:97:59:bf:6c:7a:77:14:97:f1:13:cc:e5:92:9e:d6:37:
80:c8:d9:2b:d4:33:ba:92:42:85:d6:7b:66:fd:c4:0f:f0:39:
64:11:09:2f:02:dd:d5:ab:63:7c:47:8f:e3:db:c2:f3:5f:b4:
5c:ff:c0:60:41:34:81:d9:e1:86:ea:3f:93:32:a7:6e:95:bc:
b7:7f:c8:51:7d:32:a6:57:74:30:aa:6b:9f:07:60:16:96:f9:
8a:79:4d:ef:ab:95:62:11:2f:8b:5c:f3:1d:3d:15:c7:0a:52:
7e:7e:ea:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:29 2025 by rpki-client