Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
File: soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft (raw, json)
Hash identifier: MLcM76LYN5kF2gpTjmMV1OlwmugcNm305MoQUo7ZAZ0=
Subject key identifier: FC:60:87:9A:93:3E:20:22:D6:07:79:01:7B:AE:C7:90:39:06:AA:1A
Authority key identifier: B2:84:CD:F0:50:74:43:E1:6E:50:9D:57:A2:29:E9:14:F7:35:66:A4
Certificate issuer: /CN=b284cdf0507443e16e509d57a229e914f73566a4
Certificate serial: 0194BD17F7B1431CE8822CEA3CF4FC15419F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
Manifest number: 12D1
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl (hash: DCKH1IM95GRBTSgM+6jppJV4bNAAxbpancIlLW2u8FU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f7:b1:43:1c:e8:82:2c:ea:3c:f4:fc:15:41:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b284cdf0507443e16e509d57a229e914f73566a4
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=fc60879a933e2022d60779017baec7903906aa1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:64:20:88:8e:a8:2f:1e:ef:ba:8c:fb:cd:
70:a6:6f:a4:4f:71:85:86:ce:34:54:a3:ae:7a:69:
0f:07:73:0f:40:49:26:02:76:0f:79:a8:ff:8b:96:
ad:ea:3c:7a:c9:52:db:00:f7:10:ac:d7:a8:04:d2:
a8:9e:68:0a:f6:48:92:47:f5:d3:f6:24:5d:a2:75:
85:a7:04:33:94:7d:cc:0b:8f:b4:b1:32:17:3f:e6:
f3:f9:a4:b5:ff:6e:2b:97:c6:c1:55:71:0e:7d:a7:
25:91:eb:e1:ea:46:03:8d:69:1d:19:4b:00:bf:44:
c6:52:88:73:b2:94:5b:7d:00:f0:47:d5:31:c8:5e:
65:12:9e:e8:53:c6:e2:d4:96:c6:1b:10:64:12:de:
78:d0:11:40:08:1d:bb:77:c1:df:e1:b2:09:70:9a:
d3:15:2f:91:c3:6b:ba:5e:b5:f2:4c:6d:00:91:53:
ab:3a:eb:c1:6f:53:d5:c3:88:eb:cd:17:ff:3b:bc:
2d:2c:8a:15:d5:87:cb:dc:ce:4c:29:2e:d4:6e:77:
5b:13:18:0d:b0:d1:a7:77:b1:c6:bf:8a:ee:a0:c4:
5c:43:f2:bd:c6:5c:33:b9:3a:0e:4c:fa:2d:0d:2f:
6b:12:e0:90:11:6d:2a:ae:65:c5:bc:cd:4b:5d:a6:
06:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:60:87:9A:93:3E:20:22:D6:07:79:01:7B:AE:C7:90:39:06:AA:1A
X509v3 Authority Key Identifier:
keyid:B2:84:CD:F0:50:74:43:E1:6E:50:9D:57:A2:29:E9:14:F7:35:66:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:84:a1:fc:13:8b:e5:be:da:2f:c7:8b:50:ae:63:26:70:dc:
90:3a:2f:13:23:48:b4:89:9d:79:fc:69:24:39:50:95:3e:a5:
57:b4:2c:0b:aa:85:dd:f7:86:13:a6:f7:77:08:3d:5b:eb:ed:
d8:69:e4:01:30:37:37:03:e5:38:ab:3d:4b:68:48:a4:5b:ed:
a8:ca:fb:b2:6d:08:c3:29:1b:8f:cd:91:65:4e:70:d8:c0:30:
9c:54:b4:05:e9:7e:2a:a9:bb:0f:e4:80:d8:7c:67:9f:60:2f:
d3:3a:ba:5d:cd:f7:8b:c5:02:ad:6a:f2:c7:35:3a:e5:1c:50:
44:9c:60:0d:8f:93:ae:71:c5:ff:2d:93:c2:cb:ab:11:14:72:
af:c7:43:78:2b:bf:c7:43:f8:59:dd:5b:c6:d1:18:76:85:cb:
08:b3:62:ed:58:32:3f:d7:3c:93:d0:10:ef:cb:6c:3f:d0:3e:
ff:9c:e7:39:1d:86:66:3f:76:be:03:43:88:8a:22:5e:d5:97:
34:6c:f6:e2:a6:9d:49:fd:e5:f7:49:32:c3:42:c9:f3:df:5e:
85:77:75:d0:27:9a:7e:9d:a1:33:ff:de:e5:58:e1:9b:a2:5f:
f5:e4:6f:1f:10:fc:f6:46:a2:76:65:90:43:dc:8d:4b:b8:25:
43:70:20:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:19 2025 by rpki-client