Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
File: fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft (raw, json)
Hash identifier: 1yZGbWJkFnz0L0NN5d+iQ6yaixqPCm7OypK/kY4td+c=
Subject key identifier: 36:DB:F9:E1:E8:FF:16:B9:25:22:91:A8:CE:90:55:F3:D4:84:1A:E8
Authority key identifier: 7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
Certificate issuer: /CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Certificate serial: 0194BCAA29E98053863C895A11B4C674E902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl (hash: CqQOOxFlxqnqWhEviK+lO+000kmDoJzSkU4RDywbGg8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:29:e9:80:53:86:3c:89:5a:11:b4:c6:74:e9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=36dbf9e1e8ff16b9252291a8ce9055f3d4841ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:1f:48:f1:41:bc:9b:fd:7b:95:42:64:cf:
0b:20:8c:ce:1c:40:04:30:16:26:9d:70:70:79:28:
40:80:78:c0:68:7f:7a:5c:93:86:31:66:3e:cb:f7:
51:09:e8:30:47:69:b0:d8:97:0a:71:75:60:74:30:
02:e2:ea:77:21:94:47:c3:4d:0d:82:d9:92:59:ba:
f4:54:64:b3:08:b1:99:a6:1d:19:e1:55:3c:52:1b:
76:a9:95:8b:4c:2e:70:5c:77:30:69:89:98:3d:8e:
dc:5e:d5:f1:b8:85:33:65:f2:1f:9d:23:9d:64:53:
9b:fd:06:4b:53:5b:2c:0c:30:28:b9:29:cc:93:b4:
f1:f5:f3:22:fe:ba:71:05:cd:a1:85:85:c4:45:da:
c6:eb:91:92:0f:1b:5b:15:90:8a:94:89:13:29:5d:
c2:1e:15:8b:4e:34:ff:d4:82:39:ef:83:08:87:a5:
eb:e9:00:b2:fc:5b:b2:24:b3:fa:1a:7b:e4:ce:98:
7f:51:03:b3:3f:6b:2b:69:04:88:ae:15:b1:12:a4:
b2:c7:10:72:80:cd:99:74:cb:bf:fa:c6:b3:6e:0b:
17:8c:97:30:5f:d2:ce:09:e8:ab:06:52:33:ac:2b:
85:59:b5:7d:8c:c4:e6:77:fd:7e:6e:6a:e0:7c:f6:
71:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DB:F9:E1:E8:FF:16:B9:25:22:91:A8:CE:90:55:F3:D4:84:1A:E8
X509v3 Authority Key Identifier:
keyid:7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:36:ac:06:9d:61:a4:4f:f7:3b:e2:4c:95:a3:1d:ff:81:24:
da:cb:d9:72:69:5b:f5:26:4f:fb:21:8e:43:8e:b4:a4:cd:21:
54:b5:15:aa:cb:d8:ce:c2:4a:c4:01:a2:90:8a:28:bb:d9:01:
59:3e:3d:70:fa:eb:52:fb:a3:d7:e0:1c:b8:fc:1e:da:7b:46:
83:ad:16:c9:67:11:72:4b:2b:dc:74:57:bd:54:96:1c:a1:89:
6a:d6:5c:04:05:0b:00:ce:93:49:99:3b:47:cc:34:ba:7b:5e:
50:52:c5:f8:13:f9:1b:17:17:79:5c:55:23:60:60:8d:73:dd:
97:4a:d5:8c:b5:69:66:9e:e8:6f:f3:8a:db:d7:41:d2:c3:62:
9f:e0:cf:6a:03:d0:4b:72:56:93:91:99:9e:bb:08:70:df:ed:
68:60:cb:2c:80:f0:14:87:93:61:42:c3:ad:8e:ee:43:73:1b:
2c:95:3f:68:16:ed:ad:e1:ac:a0:76:6d:07:50:04:dd:2b:19:
4c:af:9e:9d:1d:d2:10:36:30:f3:b2:94:a9:44:82:13:63:c5:
1b:c2:a1:f2:d5:78:a7:2a:53:21:ec:27:ac:63:9b:54:7f:47:
57:3f:e1:8d:8a:67:46:09:f1:8e:94:bc:96:c6:ba:a8:23:11:
42:43:19:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:20:49 2025 by rpki-client