Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
File: 8QMX8k1xpRbXUEO-kPWr4_ocklk.mft (raw, json)
Hash identifier: 7XGDxNT3mKUq9JZkWEhEG2RW9P2VGcpvVxaKo9Y0ttA=
Subject key identifier: B3:82:07:33:AF:46:C1:5B:60:72:FA:A6:E8:6F:AD:D2:C0:6E:3A:3C
Authority key identifier: F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
Certificate issuer: /CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Certificate serial: 0194BC3C5A93CC6E0C7BF5E2C378D183C910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
Manifest number: 0FDE
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: 8QMX8k1xpRbXUEO-kPWr4_ocklk.crl (hash: nM8t90P//ldRpzBtnkKOdLgO8FcJFgVJbKNw6i5BVdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5a:93:cc:6e:0c:7b:f5:e2:c3:78:d1:83:c9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=b3820733af46c15b6072faa6e86fadd2c06e3a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:99:4e:7b:70:55:4e:d0:0a:56:46:52:3c:ee:
a7:7e:c9:76:56:65:32:24:45:8b:21:0d:9c:51:64:
42:48:5e:1b:17:97:99:26:cb:d9:f1:d1:38:63:9f:
52:7f:cf:2a:5f:72:2e:fe:98:24:27:0c:34:e0:c5:
e9:ef:8d:c0:f6:87:3f:ea:f8:1e:32:5c:ba:6c:4e:
02:8d:01:43:26:58:f7:5c:80:4a:3f:40:ff:4a:3f:
8b:29:44:d5:c5:9c:e6:c4:bd:14:7e:d1:04:f5:95:
d7:8e:a5:13:d9:90:4d:96:0c:44:0e:24:b4:1f:83:
37:39:13:e2:d9:31:57:fa:bb:a5:6a:85:1a:97:7f:
1a:8d:28:7d:14:66:dc:d4:07:c4:22:6f:af:20:20:
f3:ad:41:e9:be:10:cd:98:d0:11:48:58:ad:c2:ea:
80:c9:6a:e4:a7:37:6d:ba:c2:1e:b9:d5:0a:34:96:
a4:68:d5:37:b0:d9:91:06:d1:0a:95:06:ae:e3:f6:
c0:5c:bd:f3:d6:ff:b9:0a:2d:55:6b:fa:f8:f8:53:
71:5d:66:16:e6:2b:e7:a2:5d:e9:0f:ef:92:6a:14:
20:92:59:c3:fb:9e:4a:e9:5c:be:31:4e:d0:9a:55:
34:42:ed:05:57:3c:9c:19:73:8e:4c:a8:68:66:ea:
20:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:82:07:33:AF:46:C1:5B:60:72:FA:A6:E8:6F:AD:D2:C0:6E:3A:3C
X509v3 Authority Key Identifier:
keyid:F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9d:9f:3e:6d:72:2a:af:a7:c4:9b:a6:f8:d2:fb:5a:f0:e1:
8b:18:eb:a0:91:62:a3:e0:da:49:08:63:e8:1b:49:ab:ba:49:
cb:e3:96:69:42:30:9c:b6:37:7f:cc:83:69:d3:e0:e8:2a:a6:
5e:3d:5f:b0:6d:5f:02:4b:e0:da:29:a1:09:e0:7a:0e:52:1d:
32:da:e6:60:be:95:d5:16:92:7d:2d:b9:63:31:57:c2:ac:61:
04:56:f3:77:53:5a:99:fb:b8:e2:f3:c7:19:51:d2:23:68:9c:
a1:4a:b3:9d:5b:d9:5d:5c:c3:ac:c4:cc:aa:0a:1c:1c:56:ab:
38:f3:71:1d:6f:95:78:b7:ab:83:d8:2c:b7:5d:17:11:bb:68:
17:d5:39:19:9c:bf:48:48:f4:2c:cb:f0:ff:92:52:82:40:ca:
5d:71:a1:c5:8a:4d:bf:12:be:a7:fa:a3:f9:af:90:a7:04:5c:
8d:e4:44:72:4a:00:df:21:ef:3c:b7:44:cb:ba:ce:65:99:a3:
99:68:bf:ab:9c:09:9d:49:56:56:b2:75:46:48:c9:85:63:9e:
27:d4:4a:41:32:1c:15:31:14:4b:3f:64:42:5b:c1:cb:98:cf:
b9:9a:59:cd:b6:0e:c9:c9:30:84:d1:56:fd:6d:b9:a9:20:1c:
14:70:6f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:27 2025 by rpki-client