Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
File: AOezY1s9V4VgNwpYMDz81c2SkQU.mft (raw, json)
Hash identifier: hTvhLMRzzyxNJZIN60IRL+cSgvnRtSs9zZXdAMyXhBY=
Subject key identifier: FF:45:A3:20:FF:F4:96:D5:18:80:D1:C4:CC:3D:93:7C:C8:33:6A:9C
Authority key identifier: 00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
Certificate issuer: /CN=00e7b3635b3d578560370a58303cfcd5cd929105
Certificate serial: 0194BBCE51CEE2F3AD9273AFD212C49D2096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
Manifest number: 0B3C
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: AOezY1s9V4VgNwpYMDz81c2SkQU.crl (hash: Qcv4DQzbKQ/rHZ4ItPgUJrWFkWJQk+zPljgLbQKVWpY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:51:ce:e2:f3:ad:92:73:af:d2:12:c4:9d:20:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e7b3635b3d578560370a58303cfcd5cd929105
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=ff45a320fff496d51880d1c4cc3d937cc8336a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:db:3f:f4:02:ca:1b:4c:5d:4e:26:19:61:
f1:69:68:56:f2:17:db:5b:78:5b:ef:ae:7c:44:0b:
73:4a:d2:b2:b4:28:34:f1:f6:20:13:af:bb:d5:cb:
5c:e2:61:e3:5b:2e:13:cb:0c:05:0b:04:78:6c:1b:
12:f8:46:ff:c0:05:33:f1:d5:f9:1d:b6:e5:b7:01:
c9:54:c4:b3:19:9f:e2:b4:b3:23:02:4c:81:cb:17:
39:53:47:40:25:e0:ed:7e:fe:e2:6d:4e:06:c9:42:
7a:ac:b6:92:0a:25:02:38:b7:bc:73:11:b8:97:b8:
cf:2f:c8:74:15:3e:d6:be:ca:77:a8:bc:66:a6:39:
8a:d9:08:b1:55:3b:59:52:e5:c4:b9:32:c6:64:23:
54:aa:2b:58:56:b5:1c:94:5c:f4:fa:f1:cb:a0:45:
62:13:e5:e4:55:d3:57:0f:7c:14:04:9d:1c:ea:9e:
d7:9f:0f:37:77:a6:b2:c6:70:0b:86:a2:ec:b3:34:
01:b3:28:f9:ad:98:c6:75:c4:f1:c7:e3:6d:6d:ae:
64:c0:a9:78:de:cf:94:a9:06:2c:8c:a0:39:a0:e7:
e0:7d:80:ac:00:3f:b7:b5:02:68:d4:16:56:49:d6:
1e:b3:c6:03:fe:f9:25:f6:23:70:35:08:45:c3:03:
18:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:45:A3:20:FF:F4:96:D5:18:80:D1:C4:CC:3D:93:7C:C8:33:6A:9C
X509v3 Authority Key Identifier:
keyid:00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5d:ff:15:09:82:b1:cb:56:c5:5b:2e:b1:2e:ee:93:6f:24:
d1:d4:94:9a:5b:5f:3e:4c:18:58:e6:4a:46:56:07:17:28:7f:
74:37:a7:76:58:45:5d:50:66:d7:7f:2a:63:22:c5:75:4b:e6:
3c:1e:2f:66:70:23:22:f7:ef:8a:23:ec:03:c9:00:cc:80:47:
d7:8e:47:bd:4f:02:eb:94:19:51:c0:f1:33:22:e4:e7:9f:3f:
43:36:05:86:2d:67:e3:ce:7c:96:ad:2e:44:d0:d5:3f:06:c5:
16:d1:35:44:0c:8f:bd:d8:41:bc:f5:5e:b0:be:ab:7b:49:85:
51:6d:c0:71:dd:f5:e4:be:15:e9:b5:ec:e0:1e:80:0b:b3:27:
91:fe:37:50:cf:34:0f:f9:93:ec:83:9e:d0:60:cd:9d:35:2b:
f7:44:a5:5f:b4:58:d0:93:d9:46:2a:2f:49:5e:9b:26:06:d4:
ee:cb:d7:bc:8d:c3:b7:43:cf:9c:9c:f6:99:24:58:56:c8:1e:
49:2c:fa:11:f1:9f:aa:de:ce:eb:98:40:33:40:d8:f4:e7:70:
36:c0:61:fe:e9:7a:5d:6a:e3:c8:98:87:37:2d:3d:04:6d:56:
02:1f:ed:13:e4:ae:f7:b0:f6:70:df:b2:5a:94:25:17:38:78:
3c:a2:6c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:51 2025 by rpki-client