Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File: d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier: 3GInkFJWAPZXWF/UTyyHoA3lJot1yTbhl9aYiaeNbjc=
Subject key identifier: 39:76:EF:B8:53:4A:60:B7:17:2E:C1:CE:9E:FF:8E:30:DA:40:92:8D
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer: /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial: 0194BBCE441F5DBB6190ED857BD88A74AA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number: 08B8
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: YDSyYZkr4qUNiB10BObECqPwHSXF52HI61fNB+tafS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:44:1f:5d:bb:61:90:ed:85:7b:d8:8a:74:aa:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=3976efb8534a60b7172ec1ce9eff8e30da40928d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:65:77:96:18:41:bd:93:6c:c3:93:d7:1d:
38:35:6b:38:71:91:d5:d3:ce:c9:70:6f:36:1c:4b:
eb:53:2d:35:74:1d:64:ab:e8:eb:18:3d:12:7e:3a:
47:9e:42:7f:5b:8b:9b:46:f6:94:42:29:03:e3:87:
cd:e3:53:8a:ae:53:80:8f:9d:24:a6:65:5f:1e:35:
51:72:6d:89:e6:7a:7c:68:41:61:ca:43:65:94:f2:
fb:94:ab:4b:b9:f8:a8:97:19:c1:f8:c9:97:3c:d7:
67:06:cb:1d:c2:f2:02:a8:42:e4:3d:22:17:d5:4a:
29:cc:fe:4b:23:41:c3:37:bb:0d:72:de:00:5c:62:
ef:38:af:9d:57:10:c2:7e:63:d0:b5:c9:8a:a7:69:
20:11:36:f6:5f:2b:87:4f:12:93:ef:c7:75:3b:4c:
36:47:1f:63:e9:2c:04:b4:38:5b:0d:2e:86:66:4a:
26:14:3f:7b:68:1e:0c:52:4a:78:43:9b:62:24:59:
6a:32:f4:f4:bb:de:18:12:a0:f4:70:16:85:c1:46:
8d:80:8f:59:d2:8c:1f:db:85:fe:3e:3d:06:88:05:
e0:07:5e:1b:02:96:13:2c:92:63:06:60:cc:76:fd:
59:a6:b9:52:d6:21:02:9b:5a:25:ad:1b:54:25:4b:
c0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:76:EF:B8:53:4A:60:B7:17:2E:C1:CE:9E:FF:8E:30:DA:40:92:8D
X509v3 Authority Key Identifier:
keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:61:cb:28:f8:35:85:be:ee:74:46:16:c8:3d:55:89:25:de:
00:bf:37:04:e4:af:8a:5d:99:d5:25:da:68:9a:91:6a:68:7f:
57:db:cb:23:5e:f3:cc:58:3c:04:10:06:f4:95:73:44:6c:1c:
d0:90:0d:c1:ef:ea:bc:a0:14:87:69:4b:45:b5:d8:9d:03:8d:
79:68:1a:0e:a1:98:75:99:23:f4:31:e6:19:6c:61:1b:bd:79:
9d:27:5f:a8:ee:4d:71:10:f1:7e:fb:4b:ba:aa:73:63:b1:60:
8f:03:79:d5:e0:df:02:d7:33:57:a1:e2:4c:6a:48:47:ba:81:
9f:63:c4:b5:3a:51:11:a5:6a:5f:0a:ae:d0:3f:21:a3:47:1d:
9b:ed:37:4f:b2:ef:30:08:7e:43:de:31:0e:26:97:11:53:6c:
d0:18:77:9d:84:33:d2:e9:45:6a:90:c3:22:a9:23:da:1f:3e:
d5:6d:82:69:ef:86:83:f2:2f:86:e5:70:6e:95:70:2c:af:ff:
17:c4:34:57:8b:2a:b8:69:aa:e4:c0:10:18:cc:81:3d:cb:aa:
b0:09:94:f9:11:0c:b3:82:f0:64:08:de:56:f4:5c:9d:93:ff:
31:84:0d:34:89:ef:a1:0e:10:08:6f:25:30:ab:2d:db:a5:82:
96:f0:45:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:53 2025 by rpki-client