Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df2a45-83d3-4503-aef6-9da9e7ed3236/1/rmVFghpphUC8UCXwPnSG80o4yYM.mft
File: rmVFghpphUC8UCXwPnSG80o4yYM.mft (raw, json)
Hash identifier: HsnpHk1kqOo1D0QH+QN3BEKmFG689OsCrm4Sovq2jo8=
Subject key identifier: D6:2F:EB:00:56:27:96:0E:D6:DE:8D:11:E9:79:40:05:5A:EE:E2:C7
Authority key identifier: AE:65:45:82:1A:69:85:40:BC:50:25:F0:3E:74:86:F3:4A:38:C9:83
Certificate issuer: /CN=ae6545821a698540bc5025f03e7486f34a38c983
Certificate serial: 0195699D996507ECE369548AF1F0F0C74D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmVFghpphUC8UCXwPnSG80o4yYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df2a45-83d3-4503-aef6-9da9e7ed3236/1/rmVFghpphUC8UCXwPnSG80o4yYM.mft
Manifest number: 1481
Signing time: Thu 06 Mar 2025 04:01:30 +0000
Manifest this update: Thu 06 Mar 2025 04:01:30 +0000
Manifest next update: Fri 07 Mar 2025 04:01:30 +0000
Files and hashes: 1: rmVFghpphUC8UCXwPnSG80o4yYM.crl (hash: sOwzVVcn69n1QQPjHCPVVk4pFB0eWVklERx2tC7IYT8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:69:9d:99:65:07:ec:e3:69:54:8a:f1:f0:f0:c7:4d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6545821a698540bc5025f03e7486f34a38c983
Validity
Not Before: Mar 6 04:01:30 2025 GMT
Not After : Mar 7 04:01:30 2025 GMT
Subject: CN=d62feb005627960ed6de8d11e97940055aeee2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ad:c4:49:b4:2e:35:c5:85:36:03:46:b6:ed:
05:e3:41:cd:5e:d9:fb:d2:1c:4f:91:93:38:41:50:
a9:9e:7f:86:65:f2:41:10:9e:13:f7:d9:07:b3:bc:
de:10:01:6a:83:31:11:6d:77:45:96:d0:a3:db:c7:
f1:aa:d9:cd:8a:8c:d4:86:ca:4b:8b:45:a8:fb:3c:
38:26:28:15:eb:93:f1:55:e1:a9:a7:1c:ca:99:1a:
0e:97:82:a4:73:df:ba:a3:b2:ed:a2:83:df:8c:70:
d9:b7:cd:40:68:6a:3d:63:7a:5a:5d:31:b4:5b:f7:
c3:8c:59:46:0a:3d:a3:61:18:2b:4d:2a:33:05:ae:
ef:8b:4f:15:74:b0:e4:d1:60:48:94:3c:27:42:e3:
a3:ca:93:45:ac:1a:c8:de:62:06:d0:47:bc:9f:91:
17:84:fb:e1:f2:71:09:37:db:68:69:f3:cd:65:73:
a3:9d:16:74:d7:d8:e4:89:0b:9f:ba:69:b1:47:94:
16:9f:34:e9:8f:18:23:91:9a:18:e4:70:6c:e4:e4:
d9:1f:34:ae:31:4b:73:5e:df:0e:5a:d8:8a:93:b0:
c3:99:cd:c7:df:fa:c5:72:01:be:e2:ac:93:f1:74:
36:2e:1b:6b:99:6b:20:d4:0c:08:e5:e2:a9:97:ee:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2F:EB:00:56:27:96:0E:D6:DE:8D:11:E9:79:40:05:5A:EE:E2:C7
X509v3 Authority Key Identifier:
keyid:AE:65:45:82:1A:69:85:40:BC:50:25:F0:3E:74:86:F3:4A:38:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmVFghpphUC8UCXwPnSG80o4yYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df2a45-83d3-4503-aef6-9da9e7ed3236/1/rmVFghpphUC8UCXwPnSG80o4yYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df2a45-83d3-4503-aef6-9da9e7ed3236/1/rmVFghpphUC8UCXwPnSG80o4yYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c2:a6:5e:89:a0:b3:89:3c:22:17:f9:c1:14:c2:54:94:38:
20:90:77:26:b0:cf:83:42:66:ba:5c:c7:94:41:bd:78:48:64:
1d:79:3e:dc:ff:b0:60:5d:ba:db:47:65:94:b3:03:a2:b0:4f:
42:48:19:38:02:20:83:44:8c:f6:8c:9f:d1:38:54:ff:14:c7:
98:d4:98:cb:78:41:d3:51:9b:2e:ef:02:5a:90:36:fa:58:1e:
a7:85:19:82:a1:62:1d:d5:a4:ff:ed:47:92:a6:59:97:d5:e7:
e8:d5:67:a3:11:fa:4a:c6:c0:13:b1:27:88:d6:04:ec:4f:de:
0c:4e:a7:7d:e4:84:c9:bd:76:83:3e:6b:3b:1f:89:8e:7c:bc:
1b:3f:94:21:92:78:dc:58:49:78:ca:20:e5:37:4a:b3:d4:e8:
a6:d0:16:24:1c:c8:0a:c6:4a:02:2f:08:2f:bf:e5:30:b4:47:
ad:f0:8c:1a:bd:23:86:27:c2:1c:1d:15:b4:92:ec:56:bb:d4:
ba:99:0d:8d:ed:a7:ec:9e:6f:ac:05:ac:0e:df:ac:b7:dc:0a:
29:0a:30:fe:21:52:b2:01:f8:7d:a4:c2:f5:aa:50:c9:2b:00:
28:91:cc:08:36:b6:5f:84:36:1b:cd:d1:fe:e5:5b:65:20:d9:
c3:c3:c0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:07 2025 by rpki-client