Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
File: l1JqhRIT5aY6wpR47RNnCCn8oaU.mft (raw, json)
Hash identifier: wXKFAFKpkWQ1h9g8wvgQVcyj0s4VtQ4JP8n26YZ8yWI=
Subject key identifier: C3:A6:E7:75:68:53:E3:78:D6:1E:29:AE:04:36:0F:4E:2C:06:7F:13
Authority key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
Certificate issuer: /CN=97526a851213e5a63ac29478ed13670829fca1a5
Certificate serial: 0194BBCEECF5A3640B2AE1709C0D1D6DC997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: l1JqhRIT5aY6wpR47RNnCCn8oaU.crl (hash: 6VZCMFKI1DIioAoDlqK8oiOQ4lZtPWlDJv5MbP+qTJM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ec:f5:a3:64:0b:2a:e1:70:9c:0d:1d:6d:c9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97526a851213e5a63ac29478ed13670829fca1a5
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=c3a6e7756853e378d61e29ae04360f4e2c067f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:76:68:7f:4d:e8:03:a8:4b:9b:ad:26:58:
0d:01:a3:ce:e1:f9:f7:74:40:02:f1:6a:c9:c9:73:
3b:2d:35:72:84:5c:22:4d:c6:7b:ca:e0:b0:fd:86:
10:38:bc:a7:38:fb:db:d9:3e:10:80:3f:0b:7c:fe:
2a:12:05:3c:43:5b:e7:c1:58:b3:29:a8:4d:5a:f8:
0e:7c:d0:53:17:76:74:48:d6:a8:e1:78:3c:f2:bc:
a0:8c:20:13:b9:1e:dd:1b:0a:cb:83:1f:9b:34:b2:
86:12:c6:ce:6b:30:9c:eb:52:a1:17:55:1d:09:ae:
e0:54:6c:b1:b2:b5:2b:35:86:a6:53:9e:ee:50:25:
c0:aa:62:e3:2e:7c:7f:cb:7c:ae:65:b8:96:b0:80:
b7:21:ea:16:01:e3:f9:5b:bf:af:09:e9:10:9f:08:
31:aa:3a:aa:b0:ce:f0:c9:8a:f7:1a:de:02:d2:fd:
bb:93:a0:a7:ac:7f:c2:d6:d5:28:5e:d1:24:6a:96:
40:a3:64:a3:1d:84:66:f0:28:d4:72:ce:49:de:d2:
18:ad:da:64:6c:9e:29:ca:89:41:41:f2:cd:ad:92:
68:e6:ab:44:f0:a0:4d:de:e5:f2:69:cb:74:91:33:
09:02:ef:c6:d8:d7:3a:c3:23:bd:84:a1:17:1f:72:
68:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A6:E7:75:68:53:E3:78:D6:1E:29:AE:04:36:0F:4E:2C:06:7F:13
X509v3 Authority Key Identifier:
keyid:97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6b:54:af:40:f3:9c:47:1a:b3:5b:08:b3:f3:cd:52:3c:c2:
80:76:34:d1:3f:7a:1e:90:27:f1:73:e0:5b:76:2a:b5:41:2b:
00:e1:14:f4:18:59:56:95:97:a7:27:cb:ff:19:71:33:18:aa:
df:6c:af:78:03:ac:1e:f4:c4:fb:f9:58:64:66:12:e8:49:c0:
92:6f:d1:3e:9c:59:e0:95:77:17:06:1f:02:e6:57:81:2a:df:
f8:b8:86:87:60:75:68:b9:ee:97:1a:75:3b:3f:b5:e4:79:4a:
73:e9:b6:d8:4b:0d:c3:b9:b5:25:d2:8a:f9:7b:9b:7a:79:ff:
32:16:d9:97:d4:c0:2f:f9:04:88:8a:a7:22:90:0e:e5:aa:60:
27:4c:f3:e6:f6:ad:14:05:88:7f:37:95:f7:04:f8:9b:31:c3:
3f:49:00:58:23:80:cb:9c:3e:80:6e:38:68:d2:64:35:bb:43:
aa:76:d0:1e:9c:0d:d6:a8:72:75:0b:a1:bc:f4:95:df:29:b9:
26:b4:01:3a:6c:1c:7d:4d:11:d1:9d:0a:48:8f:40:3b:a7:13:
b0:a8:e7:91:67:b9:2b:46:7a:46:83:c3:16:9e:a7:15:62:46:
fd:30:a4:de:b7:6e:2d:f7:8d:7e:e0:f2:01:f6:6e:3a:7c:e8:
d2:8d:6c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:09 2025 by rpki-client