Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/IVjM8mdFXssJ7oTJrZrrAH3R6ps.mft
File: IVjM8mdFXssJ7oTJrZrrAH3R6ps.mft (raw, json)
Hash identifier: 49v/00dsnRRaLdRknGDBKvQL+QmSlIh99G8fWUho5OM=
Subject key identifier: 29:B9:AD:C2:C5:0D:74:14:36:C6:F5:BC:08:BC:DC:3C:26:F9:7B:D2
Authority key identifier: 21:58:CC:F2:67:45:5E:CB:09:EE:84:C9:AD:9A:EB:00:7D:D1:EA:9B
Certificate issuer: /CN=2158ccf267455ecb09ee84c9ad9aeb007dd1ea9b
Certificate serial: 01951323062FA6A3EE9EB6ECA574522D6966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVjM8mdFXssJ7oTJrZrrAH3R6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/IVjM8mdFXssJ7oTJrZrrAH3R6ps.mft
Manifest number: 0BA5
Signing time: Mon 17 Feb 2025 09:00:17 +0000
Manifest this update: Mon 17 Feb 2025 09:00:17 +0000
Manifest next update: Tue 18 Feb 2025 09:00:17 +0000
Files and hashes: 1: IVjM8mdFXssJ7oTJrZrrAH3R6ps.crl (hash: 0wJYetQz07RFQ2YZkmINW1o9L3WMx9h2nvGPSFLphM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:23:06:2f:a6:a3:ee:9e:b6:ec:a5:74:52:2d:69:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2158ccf267455ecb09ee84c9ad9aeb007dd1ea9b
Validity
Not Before: Feb 17 09:00:17 2025 GMT
Not After : Feb 18 09:00:17 2025 GMT
Subject: CN=29b9adc2c50d741436c6f5bc08bcdc3c26f97bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:23:93:d2:99:e6:cd:ed:81:5d:0d:26:a3:
59:8a:60:cc:18:ba:6d:9d:07:37:37:fb:0f:cc:d5:
1b:07:2f:e3:c0:0b:69:a2:39:48:7d:6d:df:84:9d:
d1:f4:23:1f:4c:f5:44:2a:a9:67:67:82:c1:67:fc:
39:b3:9d:da:7d:e2:9e:96:b2:12:15:22:b7:99:e0:
81:e1:42:59:53:a7:00:16:7a:2f:2f:13:7c:6d:b6:
c3:2d:61:79:3f:b3:a7:31:e3:ae:19:92:3b:ac:f2:
68:6d:b1:4f:41:81:93:53:31:cb:1d:e2:f1:62:9e:
63:71:ff:25:ac:40:c4:9a:19:1d:fa:3e:21:94:4d:
57:98:d8:ce:18:46:a2:88:c1:88:51:93:c0:fd:39:
ad:bf:fc:01:cc:67:61:78:f9:b2:b3:53:4a:9c:e3:
8c:6e:28:41:2b:4a:a5:3d:aa:ed:45:b0:8a:6a:dc:
18:72:9f:ca:a7:4c:7e:5a:ea:d8:85:7f:b0:13:1e:
68:56:8d:ae:d9:f1:bf:16:99:9e:d6:dc:cc:b5:a3:
48:38:44:63:c8:93:ea:60:3e:d1:5a:d6:18:43:47:
f6:eb:7b:57:d4:0f:4a:c1:56:c9:bf:22:3b:26:06:
e1:7c:cf:58:ad:57:54:9e:22:58:96:83:20:2d:0b:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B9:AD:C2:C5:0D:74:14:36:C6:F5:BC:08:BC:DC:3C:26:F9:7B:D2
X509v3 Authority Key Identifier:
keyid:21:58:CC:F2:67:45:5E:CB:09:EE:84:C9:AD:9A:EB:00:7D:D1:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVjM8mdFXssJ7oTJrZrrAH3R6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/IVjM8mdFXssJ7oTJrZrrAH3R6ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/IVjM8mdFXssJ7oTJrZrrAH3R6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:17:77:bd:99:0b:cf:7f:57:43:09:4d:cd:52:7e:20:a1:36:
37:c0:11:aa:c8:e1:63:f7:cb:43:12:81:fc:1d:39:4e:9a:9d:
ee:f5:6f:c6:be:7d:5a:a2:87:ce:d0:11:c9:6b:fb:7b:13:c0:
0f:9e:6c:20:9d:5a:94:48:a1:0f:a0:02:8c:3a:f8:06:c1:ab:
41:d6:4c:7b:bb:02:e3:e4:39:b9:7a:3c:60:57:8b:28:c3:e8:
4e:2a:18:f4:c5:b6:bb:ae:30:1a:af:62:be:a8:77:4b:91:0d:
b2:58:4f:af:eb:50:d6:4e:f5:40:15:8b:4d:d4:7a:8d:5d:21:
e2:60:43:37:f7:aa:a1:49:5b:40:79:be:e2:39:e6:2c:02:53:
c6:49:bb:bb:f2:13:85:29:41:71:77:44:59:8a:eb:e1:fb:49:
0d:2e:9f:d2:f1:29:88:af:a2:ec:73:4d:96:8f:50:ea:14:bf:
1e:db:44:f2:db:24:ad:ed:05:a3:f6:15:a5:5b:6d:3a:42:45:
d9:c1:c9:24:c1:5d:6c:59:39:a8:66:18:8a:60:97:3c:de:7f:
6b:79:17:f0:a3:ea:e4:e0:99:e9:04:fd:ea:64:ba:8a:3b:0a:
2e:ea:45:48:4e:64:b2:58:dc:a9:f5:bf:5a:00:3a:70:99:cc:
a4:89:2a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:22:57 2025 by rpki-client