Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3d556b-0e57-4ac3-a899-6050da000727/1/aF9PBdnrLDMH7AIGvK7_L81fPdo.mft
File: aF9PBdnrLDMH7AIGvK7_L81fPdo.mft (raw, json)
Hash identifier: XUuRjwXDWLG8yJKYKeaTqyAkfHJqd9kOwtouKcizNW0=
Subject key identifier: B7:29:A6:85:5D:8D:8F:03:5D:05:4D:A6:75:9E:B2:8F:06:DA:80:6B
Authority key identifier: 68:5F:4F:05:D9:EB:2C:33:07:EC:02:06:BC:AE:FF:2F:CD:5F:3D:DA
Certificate issuer: /CN=685f4f05d9eb2c3307ec0206bcaeff2fcd5f3dda
Certificate serial: 0192B3AC417733BE5F98F1D788161FD93400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aF9PBdnrLDMH7AIGvK7_L81fPdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3d556b-0e57-4ac3-a899-6050da000727/1/aF9PBdnrLDMH7AIGvK7_L81fPdo.mft
Manifest number: B4
Signing time: Tue 22 Oct 2024 10:01:03 +0000
Manifest this update: Tue 22 Oct 2024 10:01:03 +0000
Manifest next update: Wed 23 Oct 2024 10:01:03 +0000
Files and hashes: 1: aF9PBdnrLDMH7AIGvK7_L81fPdo.crl (hash: ACWj2x3853J/MW54wRo+5CnHUg4vP9K4aJQO6JCAfco=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:ac:41:77:33:be:5f:98:f1:d7:88:16:1f:d9:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=685f4f05d9eb2c3307ec0206bcaeff2fcd5f3dda
Validity
Not Before: Oct 22 10:01:03 2024 GMT
Not After : Oct 23 10:01:03 2024 GMT
Subject: CN=b729a6855d8d8f035d054da6759eb28f06da806b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:b2:94:87:b2:d0:39:60:6e:3a:a9:65:0e:
e8:12:d8:12:d4:dc:09:16:3b:74:b3:18:90:7f:99:
d1:b8:f5:dc:19:c0:44:be:fe:81:cb:93:01:f7:8d:
e7:1f:f2:d0:99:71:83:92:1c:61:14:53:41:79:bf:
84:7a:8c:62:01:06:49:05:5e:db:5b:6c:ad:ed:34:
10:d6:2f:c0:32:92:23:db:58:ef:0a:20:c5:4b:22:
fd:1b:c6:6c:35:bb:a6:37:86:fd:6f:8d:4a:b2:25:
82:bf:f5:a8:b0:a6:57:e1:f4:76:9a:53:82:6a:c9:
ea:f5:01:9e:3b:24:b6:a7:06:56:55:a3:89:1c:ab:
e3:bc:9e:d7:dd:5e:36:1e:c9:11:24:c8:ac:43:72:
ec:01:78:b0:bb:6a:f8:ef:6b:e1:de:50:ac:59:62:
b3:81:87:9e:ed:15:0a:6b:7c:71:fc:2d:91:4d:6a:
7b:39:9a:96:96:6b:d1:53:8a:88:f6:26:bf:5a:68:
58:6b:7d:34:73:f2:ed:6f:f8:8d:22:cb:62:c3:97:
51:e5:ed:76:f5:91:81:bb:2c:c3:10:06:de:8b:fb:
7b:15:7a:42:99:f7:dc:69:0a:b8:cd:c6:cc:0c:1f:
36:64:b8:0e:75:cd:8d:03:ee:7d:5a:18:6a:b9:28:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:29:A6:85:5D:8D:8F:03:5D:05:4D:A6:75:9E:B2:8F:06:DA:80:6B
X509v3 Authority Key Identifier:
keyid:68:5F:4F:05:D9:EB:2C:33:07:EC:02:06:BC:AE:FF:2F:CD:5F:3D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aF9PBdnrLDMH7AIGvK7_L81fPdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3d556b-0e57-4ac3-a899-6050da000727/1/aF9PBdnrLDMH7AIGvK7_L81fPdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3d556b-0e57-4ac3-a899-6050da000727/1/aF9PBdnrLDMH7AIGvK7_L81fPdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:01:d0:6a:cd:37:d2:7f:aa:c2:fe:5e:7a:85:8f:20:c2:94:
17:39:6d:fb:b1:32:b6:95:9c:03:85:d1:40:fd:f9:be:4a:bc:
d6:28:82:f7:1b:16:af:79:b8:f9:a6:c5:ee:57:dd:3f:02:f9:
3e:f0:f7:4f:ad:cd:65:8b:08:57:82:07:e5:d2:30:97:af:12:
f0:15:a0:d7:67:35:61:58:8d:bd:27:2b:82:95:1b:a0:a2:c0:
87:44:d3:64:bc:09:cf:99:23:f4:f2:eb:bd:14:18:f9:c8:c4:
6c:d4:60:6d:5f:78:a0:55:19:30:1a:07:19:6e:86:84:70:0b:
ed:0c:b5:a2:04:6f:0c:86:f4:20:ef:62:ba:a8:9e:95:b4:d5:
6c:39:16:8e:c9:4e:70:22:fd:5b:b5:aa:c1:2d:8c:b4:93:9b:
92:b7:43:bd:5a:b0:d3:02:21:68:94:de:b0:9c:79:2d:44:0c:
41:35:94:b4:9b:4a:ec:9d:30:8c:a6:a1:68:f1:69:9c:0f:72:
1d:01:7c:5d:85:79:bd:c7:f2:aa:f6:9d:30:55:b2:3d:5e:8a:
73:6b:68:3f:2a:dc:6f:4b:f8:e0:eb:d3:3a:78:bc:68:72:e8:
94:95:d3:7b:7f:63:64:f7:06:ed:56:63:a0:d9:1c:5a:f0:e7:
55:28:e8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:16 2025 by rpki-client