Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cf70-cb63-4515-ba8a-1e09c869df91/1/9xG7hGwbBDRifP3JOsxUdiwr_1Q.mft
File: 9xG7hGwbBDRifP3JOsxUdiwr_1Q.mft (raw, json)
Hash identifier: P59/DcUuAYKlSEA6STv7mVntB0ntpi5rEP8MhSwQcYc=
Subject key identifier: B4:AC:EF:EB:7A:19:75:1D:81:53:28:2A:47:A0:A4:5F:83:9D:F6:B9
Authority key identifier: F7:11:BB:84:6C:1B:04:34:62:7C:FD:C9:3A:CC:54:76:2C:2B:FF:54
Certificate issuer: /CN=f711bb846c1b0434627cfdc93acc54762c2bff54
Certificate serial: 018B219DAF8EE75978474017CE6CFFEE8DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xG7hGwbBDRifP3JOsxUdiwr_1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cf70-cb63-4515-ba8a-1e09c869df91/1/9xG7hGwbBDRifP3JOsxUdiwr_1Q.mft
Manifest number: 0437
Signing time: Thu 12 Oct 2023 02:01:04 +0000
Manifest this update: Thu 12 Oct 2023 02:01:04 +0000
Manifest next update: Fri 13 Oct 2023 02:01:04 +0000
Files and hashes: 1: 9xG7hGwbBDRifP3JOsxUdiwr_1Q.crl (hash: pdvliZCGcpTGwgL7lk14OvABxzwgm1X2D32ZbNA1Itc=)
2: yuZ1ceW7PBVe9yOi3EYUgxAWAR8.roa (hash: UFD1AaBC0dsyH+XA7dLG6x7Y5gw/BcUxK+MwriVgS5k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:21:9d:af:8e:e7:59:78:47:40:17:ce:6c:ff:ee:8d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f711bb846c1b0434627cfdc93acc54762c2bff54
Validity
Not Before: Oct 12 02:01:04 2023 GMT
Not After : Oct 13 02:01:04 2023 GMT
Subject: CN=b4acefeb7a19751d8153282a47a0a45f839df6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f8:60:d0:a5:8c:55:7c:3b:a3:54:c8:ec:d5:
af:78:37:17:da:3b:9b:ef:4f:f9:8c:5e:d3:e4:6c:
d0:f8:9c:b2:f6:f4:49:f8:58:3c:69:09:b4:83:07:
c1:12:9a:de:06:cb:c0:59:be:46:5a:7f:dd:c9:4e:
18:22:69:a6:df:7a:94:5d:34:c6:c9:86:01:1d:38:
32:b6:7a:9a:3a:a0:cd:84:bc:7a:32:68:10:61:4f:
d8:ac:77:1b:dc:21:a0:95:eb:95:bd:3f:e4:3d:9b:
70:c1:de:6f:fe:7b:46:91:7b:cd:86:04:a9:fa:d5:
ae:30:00:93:e9:89:95:3b:fe:74:a1:fb:fc:e1:08:
e7:81:b7:34:41:76:fa:7b:ac:9d:86:67:2c:e0:9f:
61:b8:cc:5a:d9:14:72:4b:a1:03:41:a9:77:10:36:
33:5c:e7:fe:35:86:45:c4:e9:3a:bf:c5:e9:bf:2a:
4b:b0:60:c1:ec:06:20:0d:be:86:0b:06:ba:0c:0f:
e4:cb:72:db:d5:05:fa:f1:f2:6f:fc:c9:d2:77:68:
3d:fa:a1:07:db:83:23:df:df:67:11:b7:80:1a:0c:
fe:90:7c:c7:16:77:7d:b6:f7:3f:69:68:b2:48:42:
6c:21:0e:16:a5:b7:b4:ce:94:e6:a9:13:6a:3e:c8:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AC:EF:EB:7A:19:75:1D:81:53:28:2A:47:A0:A4:5F:83:9D:F6:B9
X509v3 Authority Key Identifier:
keyid:F7:11:BB:84:6C:1B:04:34:62:7C:FD:C9:3A:CC:54:76:2C:2B:FF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xG7hGwbBDRifP3JOsxUdiwr_1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cf70-cb63-4515-ba8a-1e09c869df91/1/9xG7hGwbBDRifP3JOsxUdiwr_1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cf70-cb63-4515-ba8a-1e09c869df91/1/9xG7hGwbBDRifP3JOsxUdiwr_1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f3:0e:a5:c7:49:a3:6b:d5:ce:87:59:21:79:33:3d:9d:44:
15:c6:3b:fc:9a:48:9a:fc:dd:3b:af:19:cb:f8:06:db:e8:fc:
c1:18:3d:fc:a4:16:97:9d:94:56:9f:a5:a4:30:15:63:06:c5:
fe:de:0d:d7:f6:5f:3d:0e:02:e7:c1:04:c3:57:47:ff:a2:e7:
36:ef:28:87:af:97:17:4f:0e:52:91:2d:30:a5:0e:77:cd:de:
13:57:ce:39:6a:2e:4b:de:56:cf:1f:16:0e:39:ce:93:ad:00:
56:e1:a3:9b:0e:5d:73:17:89:92:3a:11:bc:87:5e:a5:71:3c:
b3:4c:33:f6:e2:b8:a4:3b:29:a1:7b:cf:02:d2:e0:d1:4a:6e:
83:6d:8b:90:3f:d5:5e:2b:43:96:2b:27:53:fe:d3:20:91:9b:
ee:a8:20:f1:ec:40:1a:3c:eb:94:89:6f:2e:a5:d4:22:83:b8:
66:a9:99:dd:4e:b2:3d:f2:32:10:f7:50:2e:37:68:12:0f:f7:
4c:d2:d1:df:6c:c5:d3:d2:a5:3e:36:87:ac:5c:21:fc:37:00:
96:6d:1c:50:bc:38:2b:9a:3e:43:b3:72:9b:ec:e7:76:cf:fd:
df:b9:ed:f6:b9:02:8e:6d:c5:a2:38:37:7e:5f:ce:b4:9c:a8:
d6:4a:61:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:17 2025 by rpki-client