Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
File: r4yBlkcmb7yxOeZyqPuaV89Ysog.mft (raw, json)
Hash identifier: eMS8tDaFqyF7aGWZUJxG9tlSHZFRcW8kt9MX3oPhR4E=
Subject key identifier: 6A:B2:B7:1B:62:4E:BB:69:57:BD:D5:26:DB:95:C9:2A:03:F9:B7:7F
Authority key identifier: AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88
Certificate issuer: /CN=af8c819647266fbcb139e672a8fb9a57cf58b288
Certificate serial: 0194BC729021C651613C060AC5F7CEFC2811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
Manifest number: 023C
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: r4yBlkcmb7yxOeZyqPuaV89Ysog.crl (hash: dOFq0dUFrMwYV0gxH3BJ9/rFcQIR6BRIh6JqRiGJ1X8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:90:21:c6:51:61:3c:06:0a:c5:f7:ce:fc:28:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af8c819647266fbcb139e672a8fb9a57cf58b288
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=6ab2b71b624ebb6957bdd526db95c92a03f9b77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:89:46:01:e7:2c:f8:49:9a:35:55:0f:c3:
cd:0a:86:0d:b9:b8:c9:b3:98:fb:e6:37:b4:da:a3:
ff:3a:e6:45:d2:22:2c:70:dd:5b:21:b3:35:15:1b:
1a:92:b3:48:1c:34:e9:ab:57:00:28:be:66:55:f1:
b4:cc:0e:ba:b2:ad:84:8f:da:50:48:b7:22:3c:30:
42:77:74:81:c8:a3:39:37:98:7e:81:63:93:3c:39:
5f:60:7c:78:c2:da:83:ff:68:40:74:21:e1:3d:af:
c5:96:f3:54:5c:42:da:89:ee:0e:de:2a:38:dd:e5:
ae:7c:b1:91:77:38:15:6a:c2:70:69:87:50:b2:eb:
3b:f0:48:61:47:7c:6a:00:86:17:d0:32:42:38:29:
9f:ae:08:01:12:e4:9e:ca:7b:78:aa:bf:62:f2:fe:
f9:de:a0:4e:f0:20:08:03:99:c8:ef:b0:f4:28:83:
b6:15:95:14:b7:94:03:6e:44:98:a1:2a:35:be:22:
04:2d:88:16:fd:9e:9e:3c:c4:c4:25:05:c0:7b:44:
94:9d:37:41:19:80:8f:82:54:cf:41:30:89:bf:32:
6c:b8:ed:3f:77:5b:b6:06:ff:68:04:b4:e5:91:d5:
2b:c5:ef:db:27:8c:d4:03:57:8f:7a:c8:3b:a2:36:
ba:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B2:B7:1B:62:4E:BB:69:57:BD:D5:26:DB:95:C9:2A:03:F9:B7:7F
X509v3 Authority Key Identifier:
keyid:AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:28:e4:2d:63:38:0f:06:ee:b0:43:98:00:aa:2a:ec:01:0f:
71:25:4b:41:1f:be:d5:e2:ff:27:d3:0f:ae:36:15:b4:b0:37:
17:d3:d5:8d:81:09:e9:3c:c7:24:f4:4c:c3:01:c1:ee:d0:bd:
83:5d:c2:92:24:0f:8a:8b:87:6b:f1:7d:c3:ec:ee:4b:d7:77:
7d:7b:a7:92:e1:8b:e6:0e:b0:da:68:59:82:3d:f9:8f:60:f9:
28:2c:80:0b:90:eb:42:a0:63:60:25:fd:5e:5e:9a:ae:9f:b6:
35:c4:88:d2:2f:a5:31:0c:6f:a3:a4:d3:91:c5:57:10:6d:8e:
6f:32:9a:5d:fc:f1:f0:71:79:38:d6:16:56:d8:e4:c9:d5:5d:
d5:fb:8f:2c:f4:f0:ef:83:ff:b6:84:d8:f7:3c:70:63:fd:75:
99:b9:da:8d:80:a3:18:bc:92:07:33:cd:a3:a5:fa:a0:82:5c:
a5:57:af:83:a0:f8:13:25:a0:ea:6d:43:63:10:fe:a6:06:c4:
21:3e:4c:42:f8:a2:f0:81:09:d1:4a:2f:1e:2c:49:53:bd:86:
4f:0e:f4:17:9d:f2:0e:6a:d5:ca:31:d7:b2:ca:cd:5e:39:b4:
71:68:34:cf:6c:e5:15:c1:39:8c:d9:67:36:bd:15:bc:3f:55:
93:3a:2c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:48 2025 by rpki-client