Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
File: 3plxFn-T_DSzvEebsh_2LTvzyYQ.mft (raw, json)
Hash identifier: 3GB9K7ivnclkU05hrfoYtUAXjy5YC77/0Sl9brQHZ3A=
Subject key identifier: 50:C5:96:AF:2F:E6:BF:0C:8A:9A:42:00:B0:5C:2F:91:A2:A5:53:8B
Authority key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
Certificate issuer: /CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Certificate serial: 0194BD1790D87ABC6ABBB1DA52FBDE1AACF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
Manifest number: 2C
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: 3plxFn-T_DSzvEebsh_2LTvzyYQ.crl (hash: aHjLakMjKHK8pWwUb+CDQ8mei8HI0JY0tfwKsHpqbZo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:90:d8:7a:bc:6a:bb:b1:da:52:fb:de:1a:ac:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=50c596af2fe6bf0c8a9a4200b05c2f91a2a5538b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:b0:74:87:b4:b4:32:e0:61:96:cd:43:81:
e8:cb:46:2f:56:8b:f6:3b:bb:29:22:cb:6c:04:3a:
78:79:a0:89:e9:bb:aa:c0:fc:a7:ed:b4:5f:4a:56:
2e:21:14:69:3a:33:a8:49:8b:5b:0f:fa:ed:e3:bc:
c5:47:9c:c3:29:78:09:25:dd:9b:6c:43:bc:7a:c9:
01:21:33:75:ab:d6:02:35:3a:04:c6:0e:08:fe:ea:
60:b0:67:0b:e4:3c:a6:a4:c6:aa:ed:10:a0:1e:f8:
6c:0a:9f:fe:8f:6b:3a:83:9a:fc:08:36:82:fd:06:
15:8b:a8:2b:69:7d:89:85:46:96:d5:15:a5:d9:87:
17:9f:63:9d:5c:fb:0f:d3:3c:be:fe:2c:f5:5c:71:
1f:5d:c7:aa:02:fe:d9:68:c1:32:8d:5f:ee:35:ae:
35:0d:68:49:3f:ba:fe:14:74:d6:de:fb:10:68:c8:
fd:ea:2b:c4:33:0d:3b:49:a4:47:6f:56:a4:f1:59:
be:92:13:3a:de:49:53:fe:a3:a8:4a:43:b9:bf:28:
84:d1:96:b8:e2:3f:9b:dc:c9:85:b4:bb:83:79:b5:
c6:07:fd:41:65:7b:f8:e1:c6:db:df:79:b1:8a:5b:
1a:31:20:c4:31:07:92:16:0d:e6:d6:8c:73:4f:ed:
1b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C5:96:AF:2F:E6:BF:0C:8A:9A:42:00:B0:5C:2F:91:A2:A5:53:8B
X509v3 Authority Key Identifier:
keyid:DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:84:4f:1b:f5:f2:06:fa:02:ee:1f:ce:02:64:21:f3:59:b3:
34:7d:02:64:0b:c4:4c:b3:43:32:2f:cc:6e:d8:c5:83:62:7c:
0e:4d:c2:b4:8a:80:14:91:e9:22:df:1c:51:42:46:71:85:e5:
c6:81:dc:6f:f1:36:02:52:a7:b9:b9:19:37:4a:6d:55:04:28:
d3:45:8d:a3:ad:c1:9e:08:f8:7c:52:07:a2:2a:2a:ee:42:46:
24:c1:08:4f:88:54:c0:a2:16:a1:29:f1:45:e5:07:b7:c6:c2:
9b:fe:44:41:cb:16:d9:ee:b0:54:22:c4:4e:f6:39:f6:0f:a5:
c9:d2:ad:e0:29:17:c3:84:b9:2e:68:d5:79:bd:ea:09:1c:e9:
b2:b0:dc:e9:08:c5:02:03:1c:49:f6:a3:54:00:4d:a5:5f:13:
35:bc:ae:65:36:db:81:4c:5d:3d:f4:98:47:9f:10:12:93:80:
54:61:8b:a1:14:ab:f8:d5:29:1e:a5:04:6e:ba:da:db:c4:37:
6c:c7:e4:95:b3:41:9a:d9:62:97:34:b2:30:99:7d:0f:b4:dc:
2d:ac:25:47:4a:31:ef:90:23:3b:6f:3e:fb:e5:50:1f:c0:95:
f2:15:19:7d:29:2a:4d:3c:8b:e8:7b:72:0a:fb:fb:f6:ab:94:
ca:3e:ca:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:46 2025 by rpki-client