Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af92a9-2601-4833-bf3e-2e5488d7e17f/1/g4BmIWYWy4nGshn6YYAvQWklBCs.mft
File: g4BmIWYWy4nGshn6YYAvQWklBCs.mft (raw, json)
Hash identifier: HUyVlLfxpeoL7pRUAPSJBBUowzxCCwEpie9lmv9fu6M=
Subject key identifier: 8A:7B:18:3C:91:AB:0A:FA:8B:F2:33:40:3C:DD:21:57:68:C1:D0:48
Authority key identifier: 83:80:66:21:66:16:CB:89:C6:B2:19:FA:61:80:2F:41:69:25:04:2B
Certificate issuer: /CN=838066216616cb89c6b219fa61802f416925042b
Certificate serial: 0193F1759F781086824C5A8BF89AE765F89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4BmIWYWy4nGshn6YYAvQWklBCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af92a9-2601-4833-bf3e-2e5488d7e17f/1/g4BmIWYWy4nGshn6YYAvQWklBCs.mft
Manifest number: 13BE
Signing time: Mon 23 Dec 2024 03:00:37 +0000
Manifest this update: Mon 23 Dec 2024 03:00:37 +0000
Manifest next update: Tue 24 Dec 2024 03:00:37 +0000
Files and hashes: 1: g4BmIWYWy4nGshn6YYAvQWklBCs.crl (hash: W1QwkK848133hAIILcL8XDP6He1tNdPjywD/KzCAXn8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f1:75:9f:78:10:86:82:4c:5a:8b:f8:9a:e7:65:f8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838066216616cb89c6b219fa61802f416925042b
Validity
Not Before: Dec 23 03:00:37 2024 GMT
Not After : Dec 24 03:00:37 2024 GMT
Subject: CN=8a7b183c91ab0afa8bf233403cdd215768c1d048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cd:73:2a:96:9c:e6:4f:72:ce:a7:53:a3:04:
e7:a9:7a:17:f5:43:e2:4b:0f:59:14:f0:7d:2c:f2:
66:78:98:9d:1b:04:5b:ab:54:06:5f:4e:b3:8c:8a:
c6:4d:ca:63:93:21:54:a1:48:29:aa:f1:d2:08:f4:
af:0e:c4:d6:7f:ff:b7:f1:81:81:47:92:47:a4:ef:
6f:2f:6f:88:22:ce:fe:c7:26:51:d1:ee:9a:4c:47:
c7:b7:ad:fb:90:28:ab:10:57:22:d8:97:11:90:a1:
29:b9:4d:58:86:74:76:53:c1:07:82:05:c2:8f:d8:
49:22:b4:ef:30:f2:27:f7:e6:4f:19:cd:fd:4f:72:
21:43:22:d6:cd:8d:08:76:fb:98:10:9c:b6:e1:4d:
fb:0a:8e:0f:68:c1:34:db:ff:40:d0:81:ca:10:e3:
1e:b2:62:e9:1f:4b:5a:d3:81:1d:ef:42:9e:52:8c:
aa:c1:e2:99:43:4b:d0:90:7b:10:1a:73:1c:b7:97:
ce:bd:09:1d:e5:d9:97:cd:f7:32:9f:39:0f:59:4b:
75:af:11:a4:a5:0d:0d:bc:a8:ca:ca:1d:98:ac:3a:
d1:da:c9:58:e6:18:f8:81:8d:c8:3d:71:c2:72:ff:
7f:37:80:98:4e:ef:30:45:eb:de:ff:d0:04:ba:4c:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7B:18:3C:91:AB:0A:FA:8B:F2:33:40:3C:DD:21:57:68:C1:D0:48
X509v3 Authority Key Identifier:
keyid:83:80:66:21:66:16:CB:89:C6:B2:19:FA:61:80:2F:41:69:25:04:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4BmIWYWy4nGshn6YYAvQWklBCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af92a9-2601-4833-bf3e-2e5488d7e17f/1/g4BmIWYWy4nGshn6YYAvQWklBCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af92a9-2601-4833-bf3e-2e5488d7e17f/1/g4BmIWYWy4nGshn6YYAvQWklBCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:21:17:31:06:0a:d2:c5:48:56:8d:b7:3a:0b:46:45:23:2c:
1a:72:9d:3e:4c:29:8f:52:9b:a6:4c:b4:96:c6:7e:72:40:09:
19:55:0b:c7:9f:f0:b5:93:fd:e7:b0:4b:df:00:d4:ab:12:41:
c7:a7:16:08:94:53:51:8e:99:65:e3:90:13:e9:2f:f5:2e:a5:
fc:19:68:16:c7:0d:d7:1d:2a:8a:b5:bb:d1:73:1c:09:64:4a:
c2:48:35:56:26:db:f4:83:3f:41:05:cc:2a:b1:75:0e:81:7a:
c1:11:91:13:c0:9c:67:8c:66:de:9d:fd:5a:a0:25:a4:8b:df:
a0:88:e7:23:e0:e0:c4:97:51:5e:5e:cd:24:f3:8d:57:33:a2:
b6:71:db:93:8f:2d:27:16:7e:32:c7:88:7a:eb:86:25:62:ee:
6b:7f:78:c1:f9:a7:f1:bf:75:4b:1a:4d:36:76:18:cb:50:72:
b7:6d:39:b1:b5:21:0e:1e:1f:ce:5f:9c:c2:83:ab:a2:09:04:
c6:e5:b2:43:11:f6:43:b0:7c:a1:eb:fa:31:d4:d6:56:92:ce:
51:39:70:43:16:2b:73:9d:a0:ed:41:57:7d:18:57:d2:a9:c8:
aa:06:ef:d6:e3:66:18:62:26:40:cc:93:35:2c:f8:3e:da:90:
72:b0:b5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:36 2025 by rpki-client