Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/0176fe-866f-4232-bf15-cabb7034c511/1/9K-Uz7VDDmbylCo7vUWBCNvierQ.mft
File: 9K-Uz7VDDmbylCo7vUWBCNvierQ.mft (raw, json)
Hash identifier: OUt0IdNKbNcK+EyhDwccYLo/xU2rh3V9NKR5ubis2JU=
Subject key identifier: 70:A6:1D:2A:4E:19:9E:C0:2E:4D:3C:03:17:0D:8C:BE:F5:75:10:C0
Authority key identifier: F4:AF:94:CF:B5:43:0E:66:F2:94:2A:3B:BD:45:81:08:DB:E2:7A:B4
Certificate issuer: /CN=f4af94cfb5430e66f2942a3bbd458108dbe27ab4
Certificate serial: 0196D25082BB0A05EB03EC3B82564E04B922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9K-Uz7VDDmbylCo7vUWBCNvierQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/0176fe-866f-4232-bf15-cabb7034c511/1/9K-Uz7VDDmbylCo7vUWBCNvierQ.mft
Manifest number: 0404
Signing time: Thu 15 May 2025 05:00:13 +0000
Manifest this update: Thu 15 May 2025 05:00:13 +0000
Manifest next update: Fri 16 May 2025 05:00:13 +0000
Files and hashes: 1: 9K-Uz7VDDmbylCo7vUWBCNvierQ.crl (hash: Ix/QZr1nZ5WU3sDgeMgzgbh5xoOomzYlSLOfpv0VfXo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:50:82:bb:0a:05:eb:03:ec:3b:82:56:4e:04:b9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4af94cfb5430e66f2942a3bbd458108dbe27ab4
Validity
Not Before: May 15 05:00:13 2025 GMT
Not After : May 16 05:00:13 2025 GMT
Subject: CN=70a61d2a4e199ec02e4d3c03170d8cbef57510c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:96:50:bf:d3:88:e5:6a:02:1f:db:9c:43:
ab:be:6b:ef:39:5f:c9:b9:59:98:86:a9:89:6b:cc:
c7:e4:64:4d:ff:8b:d3:9d:fe:7c:14:46:e5:c4:37:
98:db:de:8b:45:d8:94:6f:03:13:9a:cd:09:03:42:
2d:ef:b5:c1:c1:79:d8:af:4a:6f:6d:0e:b1:d2:4f:
6b:90:2c:9b:45:04:3d:56:c7:f3:59:b7:91:00:7c:
6b:96:89:e1:6a:7a:7b:86:df:e6:55:d1:37:e1:0f:
43:48:0e:f1:11:86:83:80:b2:c4:ae:06:97:3b:76:
6e:4c:02:ff:d2:0c:16:74:8a:07:7b:e4:83:3b:3f:
a4:de:ea:5f:30:0d:31:2c:89:fa:ec:87:2a:77:ce:
bf:ab:30:65:e1:6c:a2:38:b5:ab:35:a1:ec:7d:25:
65:1a:41:46:23:89:8e:49:59:94:8f:28:9c:b2:17:
11:ad:9a:43:ac:2a:8d:d7:81:98:90:7e:6b:cb:47:
b9:b8:18:33:96:ee:8a:21:e2:eb:54:08:47:d6:2d:
b3:04:ef:1c:4c:3d:d8:73:02:6d:3e:22:c0:6e:06:
cc:34:92:24:df:51:c8:ea:c5:bc:d5:be:ef:a1:46:
69:7f:89:5b:b5:2f:19:c4:51:5e:85:a5:9f:0d:74:
9f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A6:1D:2A:4E:19:9E:C0:2E:4D:3C:03:17:0D:8C:BE:F5:75:10:C0
X509v3 Authority Key Identifier:
keyid:F4:AF:94:CF:B5:43:0E:66:F2:94:2A:3B:BD:45:81:08:DB:E2:7A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9K-Uz7VDDmbylCo7vUWBCNvierQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/0176fe-866f-4232-bf15-cabb7034c511/1/9K-Uz7VDDmbylCo7vUWBCNvierQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/0176fe-866f-4232-bf15-cabb7034c511/1/9K-Uz7VDDmbylCo7vUWBCNvierQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:72:8e:f0:6b:20:60:63:fc:4e:8b:d3:71:87:97:25:4d:9c:
81:56:5b:41:cd:df:29:a7:9f:d2:3a:62:10:1a:9c:c3:60:0b:
76:a4:33:00:f8:2e:00:ac:46:65:00:9b:5a:f0:53:ef:25:e7:
dc:c5:54:f8:66:ab:ac:b5:84:a5:83:63:9c:1a:c8:bd:46:fc:
e7:92:51:f5:ad:8c:ba:56:81:ee:a9:a7:ba:dc:9d:af:d5:30:
4a:10:f9:f8:c0:22:02:df:c9:ea:0a:38:f3:14:e6:41:5b:0e:
c7:7e:0a:c9:98:a2:39:8d:a6:15:1c:ff:21:03:cf:28:76:89:
b9:3a:d2:6b:7a:b9:85:f5:5f:34:21:fe:82:4a:d2:b4:aa:bc:
f8:c6:8f:c6:39:04:49:eb:23:aa:4b:4c:c0:25:f7:82:39:da:
4d:cf:85:34:ce:e0:dd:49:e8:a5:16:7d:d5:b3:d5:fa:07:de:
2d:0d:5a:82:0b:10:ab:67:86:cf:fe:94:a7:28:72:dd:2f:55:
29:38:24:9b:aa:40:63:66:5a:84:a6:c0:ae:82:c7:d1:dc:0d:
f7:66:df:72:ae:2e:05:cc:f2:a0:c6:6e:99:91:c8:62:80:51:
5f:f8:1f:fc:f7:6d:72:51:ad:2b:f8:0b:b2:e2:e3:47:fd:dc:
8a:14:41:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:45:51 2025 by rpki-client