Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4615a1-9052-40c6-a18d-a0d79924db6c/1/sCnHJ8biLu2PvNHot2k5V40Nygo.mft
File: sCnHJ8biLu2PvNHot2k5V40Nygo.mft (raw, json)
Hash identifier: pRA5NRGaVyMNvC3TI/6CefuiuMRHKpC53LHyWuaDgs0=
Subject key identifier: EC:BA:40:22:F7:3C:3B:F4:86:69:72:D6:4F:49:16:65:6F:A5:16:2E
Authority key identifier: B0:29:C7:27:C6:E2:2E:ED:8F:BC:D1:E8:B7:69:39:57:8D:0D:CA:0A
Certificate issuer: /CN=b029c727c6e22eed8fbcd1e8b76939578d0dca0a
Certificate serial: 0194BBCE64A109908E3E71FB1836FE549395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCnHJ8biLu2PvNHot2k5V40Nygo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4615a1-9052-40c6-a18d-a0d79924db6c/1/sCnHJ8biLu2PvNHot2k5V40Nygo.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: sCnHJ8biLu2PvNHot2k5V40Nygo.crl (hash: 0/WVytaT9EhmrV9eNNC9d3fUjx5jd4+OcMxqpodMMyo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:64:a1:09:90:8e:3e:71:fb:18:36:fe:54:93:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b029c727c6e22eed8fbcd1e8b76939578d0dca0a
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=ecba4022f73c3bf4866972d64f4916656fa5162e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:23:13:25:3c:23:47:51:79:74:0b:9e:95:
cc:7d:1b:49:37:6e:c0:53:c0:0c:c3:93:15:6d:f8:
7f:ce:01:11:30:83:ca:9c:7a:be:49:ba:cb:db:72:
d5:33:f1:96:17:66:96:df:d1:aa:ec:57:08:61:64:
58:0f:f9:97:39:68:7e:c0:ec:9d:9b:d4:5f:6a:f6:
b2:28:61:7c:34:8a:f6:de:4e:24:83:b4:8b:69:06:
b7:3b:fe:53:54:f5:40:b6:c5:52:ea:5e:ec:ea:e2:
be:7d:20:db:30:67:d6:17:c5:c5:b4:81:40:c4:9b:
63:d9:a3:13:14:48:d5:d8:c8:d4:13:ce:4a:6c:60:
a3:c1:dd:04:37:32:e0:98:92:0f:41:d2:a3:a3:67:
e2:29:61:10:2e:2f:17:95:24:ae:7d:b3:e5:51:99:
3f:13:99:14:2f:66:04:78:03:21:3c:4e:d6:92:cd:
36:6a:34:b7:33:89:40:81:04:1a:4c:d4:09:4c:e3:
a8:ef:88:cc:ab:58:f2:55:54:75:a9:7c:60:7d:01:
6f:05:29:c1:67:20:3d:d2:43:1f:b7:d6:51:f0:01:
f5:00:be:a4:4f:c0:f1:3f:ed:1a:7b:5e:63:5c:9b:
46:e9:9a:f0:e4:4a:02:0a:83:55:94:8b:62:43:30:
26:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BA:40:22:F7:3C:3B:F4:86:69:72:D6:4F:49:16:65:6F:A5:16:2E
X509v3 Authority Key Identifier:
keyid:B0:29:C7:27:C6:E2:2E:ED:8F:BC:D1:E8:B7:69:39:57:8D:0D:CA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCnHJ8biLu2PvNHot2k5V40Nygo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4615a1-9052-40c6-a18d-a0d79924db6c/1/sCnHJ8biLu2PvNHot2k5V40Nygo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4615a1-9052-40c6-a18d-a0d79924db6c/1/sCnHJ8biLu2PvNHot2k5V40Nygo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a2:ab:42:63:80:f6:88:aa:5d:76:03:c7:92:3d:b2:3b:26:
0d:93:c4:b2:19:84:05:5f:85:88:99:d7:e0:f4:90:2f:20:d5:
5a:80:94:21:7b:fc:b2:4b:da:3d:47:29:ca:30:4e:4d:61:47:
db:d5:4d:98:24:6e:d2:d6:65:47:dc:91:04:39:ee:da:f5:30:
5c:77:17:c1:be:41:47:44:f4:10:9e:ad:9a:68:e7:70:4f:fa:
6a:a3:f7:23:85:63:a2:39:ab:c2:a5:e7:2f:cc:31:db:09:46:
c0:dc:60:23:1d:08:9d:29:52:2d:c0:2a:9b:13:d1:c8:81:d9:
6d:db:3d:55:19:46:af:eb:23:c1:95:67:0f:5a:5f:31:23:c1:
87:19:72:32:e6:21:09:92:30:de:c6:c2:79:ed:91:14:f0:88:
0d:d0:00:7a:4a:12:8f:8b:53:f9:75:dd:52:4b:bd:5d:e6:94:
dd:10:5b:c8:df:4e:8b:12:5a:fa:1d:6c:65:41:35:7d:61:b0:
84:fb:36:a1:d8:56:de:5e:57:c0:aa:c6:02:9e:87:a3:89:15:
7d:46:4c:65:55:6b:46:29:6f:a4:3e:d7:86:ac:5b:74:16:41:
6b:39:0e:48:0f:79:85:ed:79:8d:b3:28:e9:fb:9d:58:4b:8b:
af:53:e9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:19 2025 by rpki-client