Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c82620-c176-44a5-8f07-5906cadf653c/1/01tMezFSfoecI9BBBZtymGhrSG4.mft
File: 01tMezFSfoecI9BBBZtymGhrSG4.mft (raw, json)
Hash identifier: 2DbyOVS30FnxsF5VTTmx3vbmolTXp7SRS5T91bs+hYI=
Subject key identifier: 46:36:BF:72:F3:C2:3E:2A:FE:85:73:04:8D:3B:08:B1:BA:48:99:B8
Authority key identifier: D3:5B:4C:7B:31:52:7E:87:9C:23:D0:41:05:9B:72:98:68:6B:48:6E
Certificate issuer: /CN=d35b4c7b31527e879c23d041059b7298686b486e
Certificate serial: 0195CCBF85761BFCBDEF0BCB08246D4C01E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01tMezFSfoecI9BBBZtymGhrSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c82620-c176-44a5-8f07-5906cadf653c/1/01tMezFSfoecI9BBBZtymGhrSG4.mft
Manifest number: 050E
Signing time: Tue 25 Mar 2025 10:00:58 +0000
Manifest this update: Tue 25 Mar 2025 10:00:58 +0000
Manifest next update: Wed 26 Mar 2025 10:00:58 +0000
Files and hashes: 1: 01tMezFSfoecI9BBBZtymGhrSG4.crl (hash: UkS3KCBQQD0H8U7bMUkla2xzifPiFZfaspojkeADGJM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:bf:85:76:1b:fc:bd:ef:0b:cb:08:24:6d:4c:01:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d35b4c7b31527e879c23d041059b7298686b486e
Validity
Not Before: Mar 25 10:00:58 2025 GMT
Not After : Mar 26 10:00:58 2025 GMT
Subject: CN=4636bf72f3c23e2afe8573048d3b08b1ba4899b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:ef:3b:19:2b:a7:c3:26:5d:59:d4:1f:cb:
e4:ee:d8:b6:bf:11:70:d4:7b:f1:4d:3c:8c:ea:6b:
34:ab:c1:e8:20:83:23:15:ab:54:15:63:92:da:ad:
a8:3a:71:01:34:a1:bc:68:93:e5:19:77:06:57:b0:
fb:8e:37:e2:ee:ce:b7:85:50:dc:75:d8:96:fd:b3:
0f:59:e2:9f:f7:47:aa:cc:6a:ec:95:2a:ae:d5:67:
02:d8:12:5d:21:10:95:2e:02:5c:59:6f:16:c7:61:
3f:49:c0:c2:46:04:65:e8:c1:d0:b0:da:f6:90:e5:
5e:35:0d:35:de:2f:41:dc:44:87:8f:92:ce:08:2e:
2f:bd:86:f5:e2:6c:43:5a:6b:27:5a:cb:3b:92:06:
fa:b9:4e:82:d3:17:bd:56:b5:c9:1b:10:52:5f:0a:
0a:54:0a:6f:b4:b4:ce:c4:16:88:f7:16:dd:e9:41:
f8:30:e9:d4:ea:c4:49:12:73:37:4b:35:89:db:b8:
55:f1:37:a3:27:af:f2:00:be:dd:1f:f1:9c:39:ff:
e4:24:cd:c4:c4:b3:a3:17:e8:6e:22:ec:9d:97:8f:
43:d0:9b:6c:1e:24:2d:b7:b4:4e:f2:97:6a:49:05:
f5:e7:72:b2:d7:ea:d8:59:c3:39:28:6b:ae:35:38:
9a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:36:BF:72:F3:C2:3E:2A:FE:85:73:04:8D:3B:08:B1:BA:48:99:B8
X509v3 Authority Key Identifier:
keyid:D3:5B:4C:7B:31:52:7E:87:9C:23:D0:41:05:9B:72:98:68:6B:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01tMezFSfoecI9BBBZtymGhrSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c82620-c176-44a5-8f07-5906cadf653c/1/01tMezFSfoecI9BBBZtymGhrSG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c82620-c176-44a5-8f07-5906cadf653c/1/01tMezFSfoecI9BBBZtymGhrSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ca:53:d3:44:cf:3c:6a:78:4f:fa:f4:78:32:18:12:41:fa:
f9:51:3e:c3:87:24:fc:0f:49:18:4f:c7:00:f2:1a:87:3b:c0:
b4:bb:9f:af:4b:df:f9:66:9d:cd:0f:56:7f:06:86:61:db:48:
d3:de:58:a3:ef:19:f0:8e:6f:ab:39:4d:50:49:4e:34:eb:98:
15:ae:91:45:02:86:b2:60:36:36:84:1a:da:6a:ad:de:00:c9:
f1:8a:30:0b:57:75:35:a9:34:d6:7b:7d:da:b1:b7:04:b7:22:
95:aa:d6:d5:42:84:98:ce:4d:6d:c0:9a:a3:7d:3b:9b:85:43:
da:c4:32:0f:16:2a:9d:51:eb:0d:7f:0d:33:1d:ec:c0:ed:07:
2a:4b:48:49:63:fc:b2:e5:bc:10:b0:97:4e:58:d3:82:cb:c7:
f4:8c:36:fc:53:32:93:3c:30:a6:f5:8d:6f:36:0f:08:67:ae:
8c:8a:bd:9b:b0:f7:94:a5:e8:60:45:4c:68:71:6c:04:ef:1e:
d8:93:63:54:f1:4e:da:82:f6:2e:00:7b:68:2f:e3:13:d4:7f:
e9:48:5c:80:7b:a3:e7:1f:86:47:6e:99:a0:b0:da:e2:16:96:
a3:0c:3c:ab:c6:e3:a9:e7:c8:0b:fa:cc:9a:f2:c7:2e:11:f5:
96:07:03:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:25:36 2025 by rpki-client