Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.mft
File: 2dybKOREONnQi9VZl59J47v6Yiw.mft (raw, json)
Hash identifier: RSLoR/ktMXOxisKYvLaSrynUjQ5LzDzjBszNWAi8s40=
Subject key identifier: 0B:04:A1:12:44:6B:03:80:09:9C:1C:D9:33:93:FD:BD:A7:5C:0B:B0
Authority key identifier: D9:DC:9B:28:E4:44:38:D9:D0:8B:D5:59:97:9F:49:E3:BB:FA:62:2C
Certificate issuer: /CN=d9dc9b28e44438d9d08bd559979f49e3bbfa622c
Certificate serial: 0195C650A84C83FDE8EE58A786D948C93F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dybKOREONnQi9VZl59J47v6Yiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.mft
Manifest number: 04F2
Signing time: Mon 24 Mar 2025 04:02:09 +0000
Manifest this update: Mon 24 Mar 2025 04:02:09 +0000
Manifest next update: Tue 25 Mar 2025 04:02:09 +0000
Files and hashes: 1: 2dybKOREONnQi9VZl59J47v6Yiw.crl (hash: xiOpLrV6G+jd04E+zRexY7GM5/Y63KHxw4nXAq+/mxk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c6:50:a8:4c:83:fd:e8:ee:58:a7:86:d9:48:c9:3f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9dc9b28e44438d9d08bd559979f49e3bbfa622c
Validity
Not Before: Mar 24 04:02:09 2025 GMT
Not After : Mar 25 04:02:09 2025 GMT
Subject: CN=0b04a112446b0380099c1cd93393fdbda75c0bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7c:99:94:45:0f:b0:2b:30:77:79:c6:5a:04:
47:8b:b6:fe:7b:3b:8e:95:b5:e4:d1:9a:db:df:5a:
45:2d:7a:20:13:5c:e0:4a:54:a5:0e:d0:11:ae:be:
f1:cd:45:f7:3b:3a:52:b4:0d:4d:1d:45:2a:6a:16:
8d:37:89:8a:12:c1:3b:ac:10:d3:ba:9e:8c:56:d3:
45:4d:07:a1:6d:2d:85:e5:6f:b1:76:4c:2d:00:db:
8f:15:46:7f:4c:fc:dc:a6:7a:c3:1b:60:86:27:79:
74:17:e7:db:82:b8:52:88:81:40:8d:b1:bc:32:55:
74:92:34:9b:12:a3:ba:5b:aa:64:e3:0d:76:a5:f4:
a5:0e:36:d3:65:54:b4:8a:73:13:fb:47:67:c9:7a:
15:1b:ee:fc:14:23:6b:6c:b6:e4:ca:3e:f7:c2:c5:
4a:cd:fd:ee:b4:19:4a:e1:58:8b:ce:9a:36:7d:32:
8b:0c:0d:0b:89:bb:4c:fe:26:49:67:55:fe:35:cd:
73:7a:98:6e:b1:94:5c:a1:4a:fa:75:dd:77:0b:90:
26:c9:0d:73:f2:e2:a4:3f:0a:0a:32:f3:30:e5:e2:
8e:0c:46:18:fd:bb:cb:5e:cb:eb:5a:ee:05:11:82:
f5:31:5a:bd:12:f5:75:0e:70:63:f2:ce:51:f5:76:
c1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:04:A1:12:44:6B:03:80:09:9C:1C:D9:33:93:FD:BD:A7:5C:0B:B0
X509v3 Authority Key Identifier:
keyid:D9:DC:9B:28:E4:44:38:D9:D0:8B:D5:59:97:9F:49:E3:BB:FA:62:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dybKOREONnQi9VZl59J47v6Yiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:36:e7:b5:1c:15:9e:93:8c:3b:41:ba:8c:96:6a:60:2a:a4:
24:2c:5f:41:2e:fc:df:f1:5d:1a:bc:4a:27:58:d0:0b:7e:f5:
4b:3a:08:66:6b:de:55:1d:8e:77:19:d1:c1:ac:4a:9d:0b:2a:
a8:b2:03:26:f1:17:89:a8:ea:bd:51:b8:1b:db:a4:9d:24:41:
fc:c0:1d:83:5e:e9:2a:3c:b0:83:fb:ac:1b:44:95:9a:08:9b:
d5:ec:ab:87:2e:a5:72:3d:74:9a:43:2a:af:be:5f:48:a4:fb:
c9:c6:da:9d:29:ab:eb:b2:8e:f4:d7:37:1c:f8:90:aa:7a:d9:
cf:34:75:80:ef:9b:e7:1c:3b:68:f3:5c:db:81:db:37:73:b7:
cf:86:d6:4c:76:bd:90:d1:e7:9f:9e:75:1d:a2:e5:7f:47:2f:
80:5a:b8:55:f2:13:1e:d0:e9:c6:07:fb:3c:2c:52:f9:0d:ac:
c1:ab:1a:e5:1f:95:8a:ae:ba:6f:a4:ad:49:62:cd:dc:9d:9f:
c1:05:33:b6:b2:4f:9b:40:15:ed:9a:db:a0:c1:fb:bb:62:88:
e5:07:81:4f:d9:35:d5:de:e2:7f:1b:67:11:9a:c1:58:28:43:
e9:83:b1:fa:e3:53:1b:e1:88:aa:b5:de:f3:87:57:12:de:10:
84:9f:bd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:36:09 2025 by rpki-client