Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.mft
File: w5JjfwbbxBhtlQKakrKbMOn0lA0.mft (raw, json)
Hash identifier: c5+yLuH0FyTlCGOdGP2NtpmR1dGd6iK8gzsBqy2uer8=
Subject key identifier: C8:45:42:D2:F3:78:2D:AC:D5:34:B2:7C:05:B8:AB:92:BD:95:B5:EA
Authority key identifier: C3:92:63:7F:06:DB:C4:18:6D:95:02:9A:92:B2:9B:30:E9:F4:94:0D
Certificate issuer: /CN=c392637f06dbc4186d95029a92b29b30e9f4940d
Certificate serial: 0194BD4E43084C003FD84469F6CC24E42DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5JjfwbbxBhtlQKakrKbMOn0lA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.mft
Manifest number: 01A3
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: w5JjfwbbxBhtlQKakrKbMOn0lA0.crl (hash: xu72j0UnSVvjnQooACH8lya3W1W1+54zeB+RSlht1BY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:43:08:4c:00:3f:d8:44:69:f6:cc:24:e4:2d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c392637f06dbc4186d95029a92b29b30e9f4940d
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=c84542d2f3782dacd534b27c05b8ab92bd95b5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:66:68:01:68:16:19:01:14:f8:71:27:69:
d5:06:61:68:ba:4e:18:91:9f:27:34:59:91:94:42:
21:6c:74:60:ba:11:6f:e0:3f:32:96:a0:2f:c3:35:
94:2a:f5:0d:3a:45:e5:9d:bf:08:e7:4f:11:fc:b8:
b9:e3:eb:11:68:f0:ab:93:ca:aa:6c:1e:ad:bd:15:
2d:df:32:4e:48:44:13:91:1d:33:97:bc:4d:01:34:
05:25:7d:0c:7a:09:3c:ae:88:bd:8e:4b:bb:fa:47:
cc:98:bc:1b:2d:3d:3c:8b:ba:4a:35:f2:91:56:d1:
e8:b7:bb:86:d7:8d:84:30:c6:bd:1b:02:f1:99:15:
7d:7f:4d:a0:ef:86:ce:77:58:2d:03:d4:ef:f8:00:
0b:5e:3d:ac:03:c0:f4:5b:c7:6a:0a:7d:4b:9b:cb:
12:2b:d7:f1:88:ff:46:54:86:1e:ed:c6:67:45:95:
de:9c:84:72:98:f9:df:04:49:f8:28:2b:b5:e7:6f:
79:73:6c:d4:59:1c:2d:f5:52:3f:71:2d:18:20:1f:
b1:85:90:f1:16:14:2d:48:2b:69:e7:3f:f5:78:bb:
de:73:29:35:41:ea:07:3c:9f:92:f5:5e:ca:1a:cd:
4a:d3:ef:7d:21:48:8a:4b:56:72:f5:16:d2:7a:6e:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:45:42:D2:F3:78:2D:AC:D5:34:B2:7C:05:B8:AB:92:BD:95:B5:EA
X509v3 Authority Key Identifier:
keyid:C3:92:63:7F:06:DB:C4:18:6D:95:02:9A:92:B2:9B:30:E9:F4:94:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5JjfwbbxBhtlQKakrKbMOn0lA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:35:2f:f2:dd:66:3d:d4:7a:34:ad:9a:77:5b:89:9c:71:fa:
76:ac:1c:d6:ff:bc:25:2e:d4:5b:fb:92:f8:a6:6f:cf:c9:d5:
89:ac:1b:d7:6d:c2:f1:e5:91:a9:c4:fa:6d:57:06:7c:b2:93:
9c:98:62:0b:26:d2:d1:33:af:7d:0d:cd:a2:cd:82:65:f2:d0:
a5:a7:cf:82:02:36:bd:e1:dc:34:54:8e:1d:b7:8f:05:7d:c8:
e7:2c:7b:3f:07:76:10:cd:7c:0d:5b:be:f3:54:20:9c:38:72:
58:9a:fe:69:02:3e:d6:f2:05:5a:db:26:db:f4:43:2d:07:21:
c3:32:0c:85:10:96:a4:f2:a1:ad:1c:95:50:8b:0f:69:a6:23:
38:ca:5e:37:b2:7a:0a:ad:cc:18:ad:6b:51:ce:d9:ae:54:7e:
a2:43:36:97:2a:9e:43:3c:0d:c5:89:28:e6:82:db:e7:59:d7:
c1:b9:3a:98:ec:68:9a:ce:49:e0:9f:79:1b:e0:d5:60:32:71:
95:bb:57:49:48:a6:92:a6:b8:0c:0a:b3:2f:c6:75:04:9c:b0:
74:12:ef:19:f9:0e:5c:a0:36:17:ce:77:7d:7c:c0:0e:a3:15:
2f:a1:75:dd:0f:c4:d8:0d:6b:85:75:94:79:00:9f:72:39:19:
d9:7f:5d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:18 2025 by rpki-client