Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
File: Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft (raw, json)
Hash identifier: z2G448AH0dtfygDPl7Fqxq65Cf0+BOD9TK6UM+wmo7E=
Subject key identifier: 2D:00:FF:FD:9C:F0:3C:94:8B:19:A7:A3:8D:A7:B4:B8:64:18:89:D8
Authority key identifier: 16:86:F7:BE:9B:A1:71:C3:27:46:AB:4E:D2:0B:E8:82:BD:30:43:56
Certificate issuer: /CN=1686f7be9ba171c32746ab4ed20be882bd304356
Certificate serial: 0194BD17E00973CEFB0EF0B2EF8EC1E940EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
Manifest number: 01BA
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: Fob3vpuhccMnRqtO0gvogr0wQ1Y.crl (hash: zMte4Q42esfqmwU/H79BmoV9cbEFhVmi25pBw9hZcMs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e0:09:73:ce:fb:0e:f0:b2:ef:8e:c1:e9:40:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1686f7be9ba171c32746ab4ed20be882bd304356
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=2d00fffd9cf03c948b19a7a38da7b4b8641889d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:3f:e7:28:69:0d:a0:1e:10:a4:fa:a8:d7:
a2:ef:d2:f1:c6:10:c4:e7:6a:15:be:42:4e:13:63:
f9:3b:a6:3c:02:f0:a1:10:ee:a4:ef:1c:f5:20:e3:
45:ba:ba:b4:ec:6d:dc:9f:38:f8:b3:cf:cf:e5:7f:
f8:74:86:ca:1e:19:09:ef:82:10:b6:aa:5b:9d:20:
6f:c2:ab:a7:25:11:6c:5c:60:0a:6b:d1:be:a3:91:
5c:b3:9a:12:b4:ba:e0:89:c1:98:c0:68:86:48:5f:
fb:af:d5:22:0f:71:af:d3:3e:e6:7f:33:36:56:a5:
50:43:56:d8:cf:e9:a6:46:ab:b7:59:85:10:04:ef:
99:19:06:2d:f3:2d:54:9f:a2:d4:a0:5e:89:36:77:
1d:c0:f9:22:42:a2:04:38:e0:2c:e1:fe:89:70:fe:
5c:47:8c:24:96:da:7b:8c:14:d4:00:a6:ee:ea:68:
96:0c:72:ab:62:c2:5d:14:18:9b:51:ea:b7:d7:39:
c3:37:a6:a5:b4:78:c8:14:df:e8:a5:a6:98:39:f3:
69:b8:76:50:2c:0d:63:8a:ec:dc:c3:ad:2f:a9:a7:
a8:51:12:bc:65:16:6f:e1:58:dd:35:01:01:4b:a8:
ab:ed:87:58:ea:6a:04:a6:b1:72:13:6d:bd:4f:f1:
0e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:00:FF:FD:9C:F0:3C:94:8B:19:A7:A3:8D:A7:B4:B8:64:18:89:D8
X509v3 Authority Key Identifier:
keyid:16:86:F7:BE:9B:A1:71:C3:27:46:AB:4E:D2:0B:E8:82:BD:30:43:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3d:92:44:ce:bd:2c:75:c6:ab:a5:af:e7:40:cd:14:3b:17:
08:0e:c5:5c:f4:84:86:90:6a:31:23:dc:27:c8:e2:6e:45:d9:
53:e8:5d:c2:ce:1b:76:9f:06:1b:be:db:d0:66:b8:08:91:34:
3c:43:60:51:c1:ee:12:a2:ce:cc:86:e5:0d:71:59:48:80:fa:
c3:b4:f8:9b:02:ce:4f:d1:88:6b:5a:97:d0:0f:2d:9b:33:f2:
70:bc:67:53:ac:cd:00:08:ed:ae:8d:6a:4c:de:15:92:ee:46:
c8:8b:83:34:02:b7:13:ab:2f:16:da:5f:c4:26:84:c2:40:c6:
62:3f:83:97:28:1e:57:30:fb:46:df:1e:1b:d4:06:e0:0b:b4:
b5:1b:9d:61:12:d2:52:60:b0:cc:81:97:a4:91:8f:0d:15:24:
c2:e6:a3:c0:e9:40:7b:67:3a:1e:b9:ef:02:e2:6a:e2:9e:e2:
f2:97:1c:bc:5c:94:0f:3b:42:7c:da:87:37:22:e5:08:3f:78:
18:48:99:39:23:45:50:d9:50:b3:63:ca:34:00:aa:7d:2b:b5:
de:1d:a9:7f:66:55:78:b0:54:e7:4f:28:a5:fb:5f:e2:52:c3:
cc:33:c7:08:cd:ef:50:89:02:39:25:9a:dd:68:37:5a:c6:4b:
92:e6:d8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:29 2025 by rpki-client