Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
File: ccWe2rmO-wzTdnYPQGnkxouL2iA.mft (raw, json)
Hash identifier: yIjhMSPIcqtjPgjK+8G8TL3kWGyzsvRMs4ahrO5gYm8=
Subject key identifier: 22:A4:37:71:7C:77:1E:17:D3:DC:A9:81:51:C9:45:ED:7E:9D:00:02
Authority key identifier: 71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20
Certificate issuer: /CN=71c59edab98efb0cd376760f4069e4c68b8bda20
Certificate serial: 0194BBCE372B8BF373617E10783616B47E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
Manifest number: 057A
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: ccWe2rmO-wzTdnYPQGnkxouL2iA.crl (hash: 9T2bC9a1Bqir2qKEIBoBBdFukAgMdNU0Mq3i5G3iXbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:37:2b:8b:f3:73:61:7e:10:78:36:16:b4:7e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c59edab98efb0cd376760f4069e4c68b8bda20
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=22a437717c771e17d3dca98151c945ed7e9d0002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d7:23:e9:8f:76:71:a5:c4:4d:75:8e:54:c4:
e2:52:ce:df:c9:9a:d6:c7:51:74:e7:78:e6:e6:94:
dd:71:19:58:a9:6a:79:e8:67:fb:c3:98:c1:58:7d:
9d:b3:e4:de:69:2f:84:00:40:3f:c2:71:31:73:0c:
61:ce:87:e9:fb:87:16:07:4d:a9:52:9f:c9:b9:24:
6c:d4:d3:85:a0:21:22:0f:ef:53:ae:c1:17:35:15:
56:c1:35:ef:05:f9:51:ae:51:a6:e9:4e:44:6e:e8:
07:0e:59:38:10:11:41:e6:eb:ad:57:6c:24:41:81:
de:63:06:f4:8a:c5:3f:d5:fc:1e:26:1c:eb:cb:dc:
00:b2:2c:c0:07:13:e9:7a:b7:a1:e1:4e:4e:37:77:
94:a2:5d:25:40:97:ac:3f:10:7d:07:b4:e0:b2:d3:
36:df:5d:ad:89:ea:ad:c0:6a:43:a4:c3:cc:4b:30:
4e:69:ed:41:ed:9b:bb:d2:69:38:5f:67:a1:cc:c4:
00:fb:c6:a4:67:14:eb:b5:5a:ea:a4:35:58:f4:93:
94:1b:77:5e:56:b0:d1:83:eb:98:94:99:96:b7:21:
f2:f5:4d:ba:62:7e:08:62:df:f5:e4:f3:91:5e:f2:
e0:ec:cc:70:71:2f:6f:32:94:0f:b0:82:f6:5e:84:
42:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A4:37:71:7C:77:1E:17:D3:DC:A9:81:51:C9:45:ED:7E:9D:00:02
X509v3 Authority Key Identifier:
keyid:71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:dc:a0:66:2a:bc:d2:2b:4b:c5:68:23:56:f8:71:7e:bb:21:
01:5f:07:9a:13:34:aa:5f:47:8c:bc:bd:a7:3c:6b:58:f1:af:
45:c7:a8:24:84:7a:37:c4:ba:db:c7:61:ba:c3:28:f2:74:8d:
c0:09:72:52:2b:7a:fb:00:ac:3c:78:9e:f0:4a:9e:ad:5c:0e:
98:f2:cf:6a:0f:ec:48:b0:0a:56:bc:3b:03:77:47:89:b8:cf:
5f:6e:30:c8:64:6b:ef:ce:ed:cc:d6:ee:78:cc:7a:7f:61:16:
0c:ff:29:87:54:c0:c6:ff:de:0a:67:06:cf:56:d5:14:62:cb:
78:76:e7:ba:33:16:9b:1b:3d:8c:fa:f6:d3:98:e2:17:51:59:
63:51:76:b1:64:06:4c:f0:9f:f6:43:ad:de:11:8a:b5:24:2f:
f0:f6:86:6e:37:b0:f5:d5:22:11:1f:08:e4:34:ea:d9:54:1d:
d9:d2:89:90:39:61:bd:ed:94:51:38:aa:62:a0:96:dd:92:0d:
a5:0a:51:45:80:4c:6b:af:7e:06:ba:59:81:3e:1b:fd:06:48:
0d:c1:09:8f:a2:4e:fd:ee:86:df:92:0d:72:ef:3b:43:39:66:
53:1e:7d:24:3d:cf:cc:07:01:02:02:62:bb:79:44:25:b6:03:
c3:0e:b7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:43 2025 by rpki-client