Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
File: f35evW-kacXjcL_BBsTUqtHh25Q.mft (raw, json)
Hash identifier: YAvLVuTMo2MWarAhq80F1vMGGiAG2CU+mpL1s46aYyk=
Subject key identifier: 30:80:B3:B1:F6:D8:42:E5:E0:4E:FF:13:BD:82:8D:74:69:84:5D:52
Authority key identifier: 7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
Certificate issuer: /CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
Certificate serial: 0194BC3CB5041DFCCC8BE1D7D8EF1DCE811E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
Manifest number: 0C92
Signing time: Fri 31 Jan 2025 12:01:22 +0000
Manifest this update: Fri 31 Jan 2025 12:01:22 +0000
Manifest next update: Sat 01 Feb 2025 12:01:22 +0000
Files and hashes: 1: f35evW-kacXjcL_BBsTUqtHh25Q.crl (hash: UCzUiufB3K/GjN2KveKMfPEJL5fsdsvPgrdWws4T1Iw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b5:04:1d:fc:cc:8b:e1:d7:d8:ef:1d:ce:81:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
Validity
Not Before: Jan 31 12:01:22 2025 GMT
Not After : Feb 1 12:01:22 2025 GMT
Subject: CN=3080b3b1f6d842e5e04eff13bd828d7469845d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ac:31:4c:a4:33:ed:82:5c:68:f8:f0:e6:cd:
a4:8a:34:92:2e:8c:69:65:54:91:57:f3:05:28:7b:
5b:18:fe:3c:78:78:c1:b8:29:ca:a6:6e:0c:8f:a0:
fa:b9:5a:34:01:1e:5f:1f:e1:fc:86:05:32:ba:3e:
cf:64:4c:e0:74:2c:97:94:5d:e7:9d:5a:9a:20:54:
11:7a:fe:5a:10:ec:5c:cc:4f:30:05:d1:03:a3:5e:
b4:ef:c1:00:e4:dc:5f:3b:57:11:a5:80:69:15:96:
8f:d2:92:bc:e2:ce:60:34:a4:75:e3:6c:c9:c5:a6:
73:20:42:03:de:92:79:05:e7:c1:63:7f:dc:e1:63:
db:78:c2:92:cb:44:2b:1e:c9:4a:6b:d6:81:a5:e5:
df:f9:fd:b8:9b:1d:c1:01:dc:e5:c3:29:84:2b:99:
a0:3a:af:c8:4b:ca:09:b9:16:35:3e:81:a7:ff:50:
40:39:81:f8:7f:2b:62:2c:ff:f0:79:16:8f:e4:e9:
23:62:03:9e:a6:ef:1b:4e:b9:2d:da:d1:ca:56:82:
12:5a:d8:ce:bc:3b:c7:f8:f3:d1:da:c2:95:fa:82:
68:0e:62:af:2b:c9:c3:82:fd:ed:73:54:6f:04:0b:
04:39:ea:62:2a:0b:9d:28:c5:34:43:9b:07:48:51:
ad:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:80:B3:B1:F6:D8:42:E5:E0:4E:FF:13:BD:82:8D:74:69:84:5D:52
X509v3 Authority Key Identifier:
keyid:7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:35:b2:74:dc:1e:22:09:ac:b4:23:40:bc:16:82:93:26:ab:
d1:ed:54:92:85:8e:ef:e3:05:f7:ba:74:63:9d:b6:85:85:b7:
ee:9d:e4:29:82:5b:88:c3:b1:df:c1:5f:0b:e3:87:e6:12:36:
42:ad:5c:0f:39:ce:30:66:f1:b3:9d:e5:22:4b:95:c8:66:bb:
4a:a8:16:89:80:86:03:ac:65:c9:70:de:ab:d0:59:28:86:45:
74:4d:30:73:21:21:05:cf:14:73:b1:82:30:f2:6b:30:fb:5f:
d2:f5:93:49:48:b3:88:28:3a:ca:f7:ec:41:73:23:c3:b3:9d:
5c:b8:a1:6b:cf:00:4e:5f:d0:f6:d4:da:23:d0:2d:85:91:b7:
c5:08:52:88:53:9f:dd:b1:4f:fc:5c:6f:57:3f:1a:b8:69:5e:
a5:bb:8a:69:95:da:cb:5d:3b:ef:cd:c8:fc:d4:38:c5:4b:ba:
9e:a6:e3:af:7d:a8:e5:fd:40:fe:71:c8:38:0a:fc:cd:f4:5a:
05:d0:21:37:9c:d0:c0:4d:61:5a:49:f8:66:3a:4d:c3:6c:8f:
46:ba:ab:f0:81:fc:1a:7a:41:05:61:27:69:eb:be:b4:d1:6c:
38:e9:2e:17:71:b5:2d:be:d9:c3:2d:30:0d:85:dd:da:90:46:
2f:fd:6d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:04:32 2025 by rpki-client