Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
File: SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft (raw, json)
Hash identifier: IY+OCBNi+RxudoLRQ9KCs46hbYATidA/uYNNI2q8w4M=
Subject key identifier: DF:4A:8D:6D:76:05:E7:F4:7B:D5:70:39:17:9D:A1:22:A6:1D:70:88
Authority key identifier: 49:11:E4:1F:8B:BE:E8:0C:65:5C:15:3F:28:A8:19:D0:16:C8:27:1B
Certificate issuer: /CN=4911e41f8bbee80c655c153f28a819d016c8271b
Certificate serial: 0195EBA620F871EF84B6F6DED8DB73E6CFFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
Manifest number: 0951
Signing time: Mon 31 Mar 2025 10:01:27 +0000
Manifest this update: Mon 31 Mar 2025 10:01:27 +0000
Manifest next update: Tue 01 Apr 2025 10:01:27 +0000
Files and hashes: 1: SRHkH4u-6AxlXBU_KKgZ0BbIJxs.crl (hash: EaBWftEDtf6JexucSOjGAe0gFN3kGxe6y5AwfEWHvO8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:a6:20:f8:71:ef:84:b6:f6:de:d8:db:73:e6:cf:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911e41f8bbee80c655c153f28a819d016c8271b
Validity
Not Before: Mar 31 10:01:27 2025 GMT
Not After : Apr 1 10:01:27 2025 GMT
Subject: CN=df4a8d6d7605e7f47bd57039179da122a61d7088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:5a:15:76:d0:4a:7f:76:6c:93:63:1e:38:
98:3a:10:18:c7:7b:9e:6b:28:ce:af:ff:ed:98:9b:
04:c8:ad:9f:44:10:20:28:fa:84:5b:01:ae:81:9a:
73:1c:a3:ad:29:be:17:c0:61:c7:48:c0:8b:5f:ce:
c9:12:fb:63:47:48:9d:4c:d6:1d:90:42:6e:a9:6a:
a2:43:e6:db:9e:07:63:78:4e:4d:22:b6:bc:3c:8f:
56:9c:25:21:bb:67:c1:24:c7:53:76:22:66:70:7c:
61:53:f5:4d:91:41:6e:0b:ee:a0:e6:48:30:d1:21:
68:1a:15:08:45:6b:4f:7b:2f:26:4f:29:3a:84:bd:
aa:0b:32:fd:fe:bb:d0:46:59:69:5e:ac:44:f6:be:
e3:89:39:b8:a4:06:51:aa:89:27:89:6c:2f:4a:68:
c1:9b:22:51:29:b8:42:3b:95:a9:7f:07:75:3b:3c:
d9:c7:66:34:b6:91:d0:16:36:85:8e:eb:69:e0:16:
dd:02:67:d9:d1:34:86:a1:bc:a9:2a:28:e6:e2:da:
8d:08:1c:1d:f3:b2:c3:96:78:57:c7:d3:51:d6:83:
7a:fb:0a:5e:62:15:c8:74:5f:80:98:07:32:69:34:
c9:02:43:f8:ba:fd:90:58:7b:d0:8e:3a:3c:5e:47:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4A:8D:6D:76:05:E7:F4:7B:D5:70:39:17:9D:A1:22:A6:1D:70:88
X509v3 Authority Key Identifier:
keyid:49:11:E4:1F:8B:BE:E8:0C:65:5C:15:3F:28:A8:19:D0:16:C8:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8e:df:71:52:26:ce:84:b8:fd:a2:13:db:f7:4e:c2:ae:0a:
d0:0a:8c:a6:54:65:36:8f:b8:c8:2f:9c:65:59:e0:71:88:60:
cd:c4:8e:b5:f7:14:42:a3:1a:9b:25:73:40:dd:a7:5b:8f:44:
b7:23:7b:a4:25:df:01:b7:9b:40:7d:b0:5f:d2:bc:e9:ad:bc:
b5:22:8a:45:db:3a:aa:35:22:39:03:16:0a:d3:d1:e5:61:59:
a2:79:87:0b:38:86:9b:4a:a6:15:ea:65:ac:16:7b:d3:8d:58:
21:b2:2d:d6:6b:88:63:bf:c7:5a:32:a0:3e:e7:e6:7f:21:fb:
92:9e:ba:bf:36:bb:35:50:ce:1b:57:85:77:e2:45:84:07:2a:
b3:c1:62:cf:07:b3:46:a1:d1:b2:30:ac:a9:57:a7:c1:56:12:
2c:11:83:51:40:13:6e:d5:3d:53:7b:76:28:62:3d:2a:3f:f8:
9d:a2:f0:fe:d8:38:40:6d:0e:5e:f2:f9:45:d1:83:f7:df:99:
0d:92:24:64:78:2a:e0:5e:58:3a:b4:23:8b:09:c6:53:1d:76:
a0:f8:47:8e:57:7a:48:4b:79:b5:c2:a2:53:37:0e:36:75:31:
06:9e:26:68:6e:09:7a:21:8b:8e:6c:28:a2:68:26:1c:bd:3d:
f1:5e:a0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:48:04 2025 by rpki-client