Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/1jnNdVO9fqPNiOrAJgXqpDBtjyc.mft
File: 1jnNdVO9fqPNiOrAJgXqpDBtjyc.mft (raw, json)
Hash identifier: 5D16veJhi5O5eYAYrnA6dgKy0kQzZk22VS24172Oyng=
Subject key identifier: D5:7C:F6:30:0D:BB:38:B0:2D:0A:5E:01:B8:F7:AC:24:39:9A:E2:60
Authority key identifier: D6:39:CD:75:53:BD:7E:A3:CD:88:EA:C0:26:05:EA:A4:30:6D:8F:27
Certificate issuer: /CN=d639cd7553bd7ea3cd88eac02605eaa4306d8f27
Certificate serial: 0195DFD8A711D946DCAEB208CA7FF66D6F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jnNdVO9fqPNiOrAJgXqpDBtjyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/1jnNdVO9fqPNiOrAJgXqpDBtjyc.mft
Manifest number: 06C4
Signing time: Sat 29 Mar 2025 03:01:12 +0000
Manifest this update: Sat 29 Mar 2025 03:01:12 +0000
Manifest next update: Sun 30 Mar 2025 03:01:12 +0000
Files and hashes: 1: 1jnNdVO9fqPNiOrAJgXqpDBtjyc.crl (hash: R1BtUo0IRpwUw9NTr33r1nr5QWOmx0pZhbyx2zw7/H4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:a7:11:d9:46:dc:ae:b2:08:ca:7f:f6:6d:6f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d639cd7553bd7ea3cd88eac02605eaa4306d8f27
Validity
Not Before: Mar 29 03:01:12 2025 GMT
Not After : Mar 30 03:01:12 2025 GMT
Subject: CN=d57cf6300dbb38b02d0a5e01b8f7ac24399ae260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:96:b9:6f:37:1b:44:53:94:8a:5d:ad:62:70:
2a:45:2e:19:0f:a0:1f:3a:00:c8:75:48:3b:d5:ab:
78:e6:ed:f2:43:1f:7e:52:74:a8:98:2d:0b:83:27:
68:9a:1f:93:65:9b:ed:97:54:d6:c3:5c:33:8d:8e:
5c:5d:1b:55:22:9b:cc:0d:2c:c1:1e:24:f3:f5:5d:
21:16:3c:77:b4:22:82:cb:02:34:a4:45:8c:f7:6f:
8a:45:cb:35:54:2a:e9:f8:09:0a:d5:b0:39:5b:57:
c8:a6:0f:be:80:3c:e2:c3:42:16:1d:dc:12:fc:c1:
a4:bf:e9:e0:4b:54:ac:a0:ba:e9:c8:87:9f:f3:4f:
dc:f7:cd:61:98:84:99:89:ba:30:a2:05:4c:8d:17:
84:25:dd:1d:5e:a5:3e:06:ba:ad:b1:ee:30:e0:83:
f5:be:f6:e6:af:8e:f9:49:5c:cb:c8:ad:1d:f6:bc:
ca:92:05:52:6a:02:24:fc:88:1b:c4:32:1b:1d:9b:
fd:0f:c5:67:ef:15:61:08:c1:bb:19:a3:23:ec:7f:
0c:e4:3d:ce:d3:c8:ef:10:99:26:73:e9:1d:40:ed:
ed:3e:cc:8b:74:78:d6:0e:55:be:80:67:bf:95:e1:
52:8b:98:1d:bb:ca:8c:8f:e3:b6:41:d3:5e:07:e0:
1d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7C:F6:30:0D:BB:38:B0:2D:0A:5E:01:B8:F7:AC:24:39:9A:E2:60
X509v3 Authority Key Identifier:
keyid:D6:39:CD:75:53:BD:7E:A3:CD:88:EA:C0:26:05:EA:A4:30:6D:8F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jnNdVO9fqPNiOrAJgXqpDBtjyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/1jnNdVO9fqPNiOrAJgXqpDBtjyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/1jnNdVO9fqPNiOrAJgXqpDBtjyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d4:4a:10:58:ff:4a:a3:a9:22:88:f2:00:5f:8a:3b:91:3d:
00:d1:69:41:6c:8d:be:e1:7c:ac:bf:05:79:26:a7:8d:25:35:
36:6b:2d:3a:31:bf:41:ec:bc:f1:7a:c2:66:0d:d3:2e:a4:31:
48:b8:d1:2f:a6:37:83:1b:4d:a7:c1:2a:34:3f:03:b2:53:24:
f6:3a:b4:53:03:f5:3e:ad:e8:c0:76:4e:5a:4b:f3:8d:79:28:
e3:40:60:f9:0f:0b:bd:b6:5c:4e:1f:ed:ca:35:87:e4:b2:6f:
1b:db:ce:26:52:08:e2:d3:5a:56:28:31:47:90:3a:24:5b:d1:
2b:6c:04:e4:f1:51:0e:be:8a:d0:c5:bb:f0:9a:e1:e9:a2:a2:
58:52:df:43:13:e9:fe:4b:bf:a9:84:2d:cc:dd:3d:c2:d4:39:
59:1f:2d:4d:bb:83:d1:20:e0:75:84:b8:18:00:86:e4:d0:c2:
f9:40:15:e9:b9:ff:71:18:32:7a:d3:49:df:39:58:b8:0b:3c:
f9:78:a6:83:5c:ed:6b:6c:24:9d:04:6e:62:14:1c:12:92:a4:
53:ad:a6:7c:82:f1:8d:42:10:7a:56:1c:0f:16:bc:84:ac:bd:
f0:69:0a:44:63:2b:40:7d:e1:07:ec:67:91:6c:bd:a4:ed:62:
18:1e:71:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:27:32 2025 by rpki-client