Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
File: odFVKaRRyVzNk0rFbsCdUYdQZss.mft (raw, json)
Hash identifier: doA4u7yYyYBbObI3Z4On6FmgkmRL2CnpenhF/w0v0TQ=
Subject key identifier: C0:6A:4E:83:84:E6:49:95:B1:33:F0:18:FF:F6:82:62:F8:58:13:CC
Authority key identifier: A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
Certificate issuer: /CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Certificate serial: 0194BC7286AC1383277A2CBC79EE586C6765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
Manifest number: 09
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: odFVKaRRyVzNk0rFbsCdUYdQZss.crl (hash: fiwfbfppeUFYNI6P7LL7eX0AZ8BfzDO5TKKtNXGee+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:86:ac:13:83:27:7a:2c:bc:79:ee:58:6c:67:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=c06a4e8384e64995b133f018fff68262f85813cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:20:d8:87:9f:9d:d9:25:0f:09:22:31:8f:3e:
f9:e5:d7:79:56:65:37:a0:2b:87:03:3a:d9:e1:f4:
78:ae:a3:c4:0f:04:4e:e7:38:80:e2:6a:22:4f:77:
ec:d2:7c:8c:5d:52:68:cc:7b:e0:a1:05:d2:ad:94:
d0:06:11:18:9b:e2:4f:f6:f2:0a:83:c4:88:5b:93:
d2:e6:07:a9:84:f0:10:d0:3e:20:0b:94:97:0e:72:
bf:53:53:87:7e:d9:60:06:b8:1a:10:e5:87:44:72:
fe:d6:6b:df:dd:8b:61:3f:51:c0:88:3a:54:6b:e2:
8e:6e:a1:45:25:da:ff:c7:39:0f:08:9f:54:49:01:
ba:e9:9a:f5:d5:06:6b:db:f3:31:11:3b:70:97:4b:
46:40:a0:1c:f4:e6:ee:e6:32:9b:5d:77:46:cc:1d:
fc:29:93:01:6f:3f:c6:5e:6a:46:82:a7:53:11:8d:
38:ce:96:c3:68:7b:5e:bb:6f:0f:87:ea:03:79:8c:
25:05:fc:78:8a:ce:6b:0f:92:70:1a:b1:d9:3a:33:
28:bc:17:38:30:6b:8c:78:e4:79:43:fd:c7:97:af:
8e:a6:69:5a:98:68:3f:78:2a:42:41:37:a6:6a:90:
e3:91:39:0c:51:64:ee:34:84:5e:ff:77:90:06:3e:
84:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6A:4E:83:84:E6:49:95:B1:33:F0:18:FF:F6:82:62:F8:58:13:CC
X509v3 Authority Key Identifier:
keyid:A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:06:17:07:49:67:c6:94:0e:48:d2:a1:49:5e:3c:d0:81:92:
14:f7:73:be:39:1f:5e:7e:28:43:11:4b:93:69:3e:02:4f:e3:
c2:76:49:e2:30:1f:05:9a:c5:25:ca:80:44:ec:91:58:d3:ab:
37:98:1d:25:14:77:51:5f:0a:c3:14:25:0d:38:2f:a7:3b:38:
58:e5:e3:fa:34:b2:f2:fd:12:49:4c:b5:16:f9:fe:ab:7e:94:
81:f6:d7:c7:95:b0:b6:72:4a:e3:4f:8d:da:96:e4:2f:a9:ba:
94:39:12:1d:84:14:cd:6b:b0:5e:ab:54:28:f9:cc:8b:5e:09:
74:bb:90:12:a8:f5:da:a7:56:a5:ed:19:3b:83:85:86:fc:a5:
b0:80:a2:6d:49:33:be:7d:9a:c9:c3:f2:11:2a:c7:8c:8f:7f:
c8:72:32:22:c1:d9:7a:3e:bb:8b:c7:39:81:e2:58:4c:e1:81:
3b:30:08:cd:18:f9:b6:42:52:14:93:79:dc:c2:5c:35:af:6e:
4a:8c:3e:4a:2e:d5:fb:78:d0:06:b2:79:6a:2a:62:32:0a:d8:
a8:15:46:ff:ff:59:bb:87:f4:e2:68:fe:62:dd:89:f3:ba:f2:
68:13:bc:72:f5:d3:95:b6:f8:2b:a7:e4:2f:64:f3:ef:67:86:
d7:a2:0a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:11 2025 by rpki-client